Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft
File:                     5imE0s0CFCbG34LJV7TilIT_Q2I.mft (raw, json)
Hash identifier:          1MT58wxIjMb9vO1xAog2o1abNQqduwgKRbmbAvTDZBM=
Subject key identifier:   B0:AC:D3:6D:4F:1F:E6:0C:15:DD:67:01:23:68:BA:F9:DA:14:D8:62
Authority key identifier: E6:29:84:D2:CD:02:14:26:C6:DF:82:C9:57:B4:E2:94:84:FF:43:62
Certificate issuer:       /CN=A9173526/serialNumber=E62984D2CD021426C6DF82C957B4E29484FF4362
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft
Manifest number:          22
Signing time:             Sat 17 Oct 2026 09:38:12 +0000
Manifest this update:     Sat 17 Oct 2026 09:38:12 +0000
Manifest next update:     Sat 24 Oct 2026 09:38:12 +0000
Files and hashes:         1: 5imE0s0CFCbG34LJV7TilIT_Q2I.crl (hash: N/Aq4Xf3MFwClK+KlVgavLb4HkTZEHO741Ntt3Y19jw=)
                          2: 9A230CB4A1C411F18B639EF37011F970.roa (hash: jN77xCqz4BuEwPpgFbg35RBWUcfVOZyD82B73N0I+TI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.crl
                          rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 09:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173526, serialNumber=E62984D2CD021426C6DF82C957B4E29484FF4362
        Validity
            Not Before: Oct 17 09:38:12 2026 GMT
            Not After : Oct 24 09:38:12 2026 GMT
        Subject: CN=6ad34204-8fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:e3:66:da:d0:3c:25:9a:f6:0e:8e:99:33:
                    e6:51:0c:f8:d0:4b:e7:79:93:81:e7:6a:ea:a8:f4:
                    fc:6a:4f:db:1a:5e:e9:90:5e:39:a0:d5:36:31:07:
                    49:6d:12:bf:9a:65:3f:0f:11:13:4c:1b:30:f3:96:
                    8c:01:0a:cf:63:ba:81:18:0f:ac:1e:b4:cb:79:6d:
                    41:2c:fc:f5:a2:d1:ed:20:28:39:90:0e:8a:eb:8f:
                    26:fe:32:10:d2:6f:2e:83:64:9b:40:2a:d2:e2:c4:
                    98:b9:7c:96:0e:78:5a:b9:bb:e2:a4:14:6e:4b:52:
                    04:0a:6b:56:46:49:4d:f0:57:ee:e3:ce:7a:f1:fa:
                    4c:76:d3:66:25:65:e8:6f:56:65:00:72:9b:8d:44:
                    cc:13:23:1c:f7:4a:0c:b1:9e:51:26:4a:63:ff:61:
                    e5:2a:55:a1:84:87:cb:b7:80:23:fd:43:c3:dc:98:
                    38:f5:16:b0:54:44:04:49:5f:39:82:34:b5:6c:14:
                    aa:eb:e5:66:30:6b:38:4e:19:03:1c:3a:17:fe:02:
                    9c:9d:10:6f:03:8c:41:a6:0e:18:ba:32:4b:dd:bd:
                    67:69:08:e6:3f:52:ee:ac:4b:28:06:14:60:5c:91:
                    5d:ad:5a:7e:d7:c2:b5:cb:35:f2:f9:0e:9d:07:38:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:D3:6D:4F:1F:E6:0C:15:DD:67:01:23:68:BA:F9:DA:14:D8:62
            X509v3 Authority Key Identifier:
                keyid:E6:29:84:D2:CD:02:14:26:C6:DF:82:C9:57:B4:E2:94:84:FF:43:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:75:3b:e9:49:f0:cc:3e:2f:a5:0b:b9:45:c6:a9:00:de:15:
         e2:52:d8:cc:26:b9:4b:45:85:f0:b8:59:60:6a:98:87:1d:d8:
         b0:fb:35:ff:89:94:51:e6:15:43:3c:68:fe:9f:d2:dc:f4:d4:
         3b:3c:ee:ea:77:2e:3b:24:41:9e:ed:9b:1a:d7:d5:11:6b:b4:
         46:43:cd:59:5e:77:b4:d5:c0:6b:c6:4c:6c:ea:e0:ad:e6:62:
         fd:6d:7c:bd:44:e3:e2:a5:d3:b7:c5:0f:73:b2:1e:0c:ae:9c:
         45:b3:13:25:0f:81:2f:13:1f:66:66:a7:6d:0d:5c:50:85:ee:
         a3:02:e4:ad:4f:3b:ae:da:17:da:64:60:55:8a:05:00:8d:fa:
         00:b9:69:1d:32:91:6a:8c:79:e3:82:d3:67:50:4d:fe:26:fb:
         be:35:db:41:d0:1d:5b:77:b0:9c:65:25:38:0f:dd:c2:ba:53:
         d4:8c:61:e9:f3:57:08:be:26:4d:4b:75:66:eb:fc:7f:f9:42:
         96:e6:51:ff:d9:28:d3:e0:50:a4:8f:2f:5f:49:f7:28:e8:eb:
         bc:09:4a:55:63:99:95:38:70:61:de:fa:84:b8:fd:dc:c1:14:
         a4:bf:31:48:82:8c:08:b3:4c:c4:2e:48:57:d7:7e:2d:2b:28:
         7b:e7:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:12:30 2026 by rpki-client