Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File:                     5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier:          0QfnVDRDK8s5EPglnTrZk5Ya+58W1S7Ezsj8v/FG/OE=
Subject key identifier:   AB:22:05:35:4E:22:4E:73:3E:D9:A1:7B:08:AF:70:B0:2E:B0:F9:85
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer:       /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial:       042B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number:          03AB
Signing time:             Sun 25 Oct 2026 00:56:00 +0000
Manifest this update:     Sun 25 Oct 2026 00:56:00 +0000
Manifest next update:     Sun 01 Nov 2026 00:56:00 +0000
Files and hashes:         1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: EmQybQ0UDK1V8x4IJYiWEXdZGN2peHYqYACIhgLY+ag=)
                          2: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: ZekLkbwk4y5kRd+4yPe1K3c5jSN2HJp6NjlpAMKckXc=)
                          3: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: 4o3ddXiD0kGEF8H2vPGXgiNQ6JrBMxAlP8Wcn6GN+9Y=)
                          4: 7D96BB10A96B11F09DD07C12C4F9AE02.roa (hash: 2RTgLoy0RD3Ypi83mkCGJfdMp3piRyK+gquTLVUemeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
                          rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 00:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1067 (0x42b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
        Validity
            Not Before: Oct 25 00:56:00 2026 GMT
            Not After : Nov  1 00:56:00 2026 GMT
        Subject: CN=6add53a0-835b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:91:c8:b7:be:40:02:02:45:1a:95:8c:d9:
                    70:72:02:f8:33:ad:8a:40:b4:b6:e6:07:83:06:82:
                    14:97:b4:da:17:b0:81:9b:d1:7d:b2:cc:a7:99:57:
                    52:ed:92:6e:7b:67:4f:f6:d6:19:69:e6:6c:2f:d6:
                    85:b1:c6:4c:0e:c6:40:60:b1:d7:e6:91:f7:ba:ba:
                    a5:dc:8b:53:5e:c9:af:d0:ed:11:c4:f7:db:8a:05:
                    c3:a5:0c:be:6d:3b:19:08:36:fb:cf:6a:4d:be:7a:
                    95:e9:b1:82:10:5a:5f:46:fc:69:30:0b:24:a9:1e:
                    0a:07:f4:94:02:1c:b6:28:94:ce:08:0e:61:67:af:
                    09:c7:8a:4c:0d:0f:c8:17:1f:4d:52:d8:f5:9d:36:
                    b2:23:1b:eb:0c:8f:fe:a9:fb:ca:bf:df:f3:fc:92:
                    d0:32:66:24:0f:e9:d3:01:5b:ef:37:c5:94:22:3d:
                    bb:23:1a:06:10:d2:ec:ee:03:c3:a7:e8:6b:8d:91:
                    19:78:e1:b4:c9:a7:d8:27:5a:00:2e:4d:be:3f:5a:
                    8d:d0:86:3b:70:bb:c5:53:71:a2:e1:3b:e2:92:75:
                    0d:ac:58:d6:3f:cd:3d:fb:a6:0a:69:bc:5a:c2:c8:
                    ba:39:e2:ea:11:14:c3:45:72:6e:ef:79:98:0d:6f:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:22:05:35:4E:22:4E:73:3E:D9:A1:7B:08:AF:70:B0:2E:B0:F9:85
            X509v3 Authority Key Identifier:
                keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:59:16:18:85:d7:33:9f:22:74:42:0d:b8:6b:4a:c7:ad:fb:
         8b:1b:1f:ea:56:04:f5:bc:d9:57:3d:29:f1:3e:fb:5b:f5:f4:
         2f:a7:bb:18:ec:6d:7a:c1:b9:29:46:02:c0:d5:22:b1:02:50:
         53:55:85:de:be:4c:6c:23:de:2a:b2:06:c7:81:84:d7:e6:33:
         58:ef:96:79:68:72:48:cd:93:1e:cc:dd:94:92:41:4d:05:c6:
         4c:18:75:45:fe:ef:e3:7e:1d:e2:0e:6f:b1:9c:b4:dd:16:0b:
         1d:1d:53:e4:6f:67:cb:82:b2:b2:9e:99:fc:3d:f0:28:f2:ac:
         77:fb:9b:a5:21:bc:5c:23:08:67:e5:4d:6e:07:60:43:52:33:
         65:dd:6d:c5:ad:9b:a3:b5:17:fa:af:d2:e6:57:9a:2c:bd:de:
         88:38:7f:a5:be:ce:48:8b:8d:e5:f1:ae:fa:67:25:43:bd:fb:
         ae:1e:0b:35:b5:ec:14:ee:40:46:21:f8:90:ef:8e:65:fa:11:
         04:7b:e4:a4:45:31:f1:d9:57:73:53:f3:f6:04:da:3d:d8:85:
         ea:f7:2a:64:ea:00:40:3d:ec:0f:4a:11:9a:07:74:11:08:d4:
         d4:b0:74:7a:67:e2:5f:d2:a8:79:40:21:5e:b0:8f:5e:bf:17:
         38:45:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:17:42 2026 by rpki-client