Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
File:                     _5Lsi9gN-r3TbmPJr0ynqG3ealc.mft (raw, json)
Hash identifier:          uKXthEn8Y4hilGA6kc8Bz0yu4RFZmQ4/N4dH0zhbEQs=
Subject key identifier:   2F:17:26:16:47:D6:3E:D5:DC:13:B3:09:C6:01:91:DD:7A:4D:2B:88
Authority key identifier: FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57
Certificate issuer:       /CN=A917D82E/serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
Manifest number:          82
Signing time:             Mon 05 Oct 2026 08:14:44 +0000
Manifest this update:     Mon 05 Oct 2026 08:14:44 +0000
Manifest next update:     Mon 12 Oct 2026 08:14:44 +0000
Files and hashes:         1: _5Lsi9gN-r3TbmPJr0ynqG3ealc.crl (hash: 1uTITmL3e/F9eIOPClZa6F/JNtAuwFhqvfe4Xh6vV70=)
                          2: F98F88FA7B4D11F1B405B1A597A30FBC.roa (hash: BpqLsVApY9HvMtOZTXGvPmVaZLx/kdyWheeXJkSjNHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl
                          rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D82E, serialNumber=FF92EC8BD80DFABDD36E63C9AF4CA7A86DDE6A57
        Validity
            Not Before: Oct  5 08:14:44 2026 GMT
            Not After : Oct 12 08:14:44 2026 GMT
        Subject: CN=6ac35c74-ea96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:a3:84:4e:21:b5:6b:dd:5d:f8:24:a5:cd:
                    47:ed:00:99:fd:80:da:91:32:c0:c1:d3:6d:65:7b:
                    e7:34:7e:04:de:e1:58:59:a8:36:f7:5b:f0:3e:55:
                    58:23:07:7a:14:ba:1f:1f:f7:fc:fc:dd:4b:04:58:
                    9e:da:c5:04:5b:1f:1d:28:58:fb:51:0c:0f:23:36:
                    8b:f2:2b:ca:7b:51:81:f8:e5:d6:22:7d:fe:20:79:
                    04:c4:ee:61:eb:ae:a9:e4:e8:03:0c:91:a3:33:3e:
                    e7:8f:35:65:71:b2:d2:23:e6:5a:b0:1f:70:1d:ea:
                    cf:99:53:f5:04:73:4b:17:85:59:fd:24:a9:68:58:
                    0e:5d:c3:fe:ba:c4:97:60:df:f9:3d:7b:5a:c7:97:
                    d5:c7:ab:c4:00:c7:64:66:b6:ab:0e:a9:fc:22:90:
                    e4:e8:6b:42:90:f6:7e:8e:8b:aa:80:1f:60:28:c8:
                    6f:ad:05:65:32:da:42:d5:72:1a:8e:53:8d:3f:be:
                    95:46:11:3b:10:fd:3b:33:42:0c:cc:28:26:c4:21:
                    14:8f:36:de:a2:00:76:2f:ac:27:8e:e1:10:b7:84:
                    54:e3:92:7d:a3:f2:bf:f7:68:6c:ac:0a:f2:25:4c:
                    c3:8e:47:54:53:a3:ec:60:eb:a4:50:61:c3:83:78:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:26:16:47:D6:3E:D5:DC:13:B3:09:C6:01:91:DD:7A:4D:2B:88
            X509v3 Authority Key Identifier:
                keyid:FF:92:EC:8B:D8:0D:FA:BD:D3:6E:63:C9:AF:4C:A7:A8:6D:DE:6A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5Lsi9gN-r3TbmPJr0ynqG3ealc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D82E/E73132280B2011F1A2EFC93F3E3D8C67/_5Lsi9gN-r3TbmPJr0ynqG3ealc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:27:f9:cd:7f:39:cb:cc:16:16:60:23:ae:82:91:bc:03:
         41:84:bc:a9:db:70:39:b1:bf:49:ec:a8:7e:7e:d5:16:13:f7:
         f1:79:18:b4:c5:e3:ce:13:26:f6:06:ef:f5:90:4d:20:fe:09:
         fc:a8:2c:b0:c6:93:ef:26:35:f9:67:ca:5a:6d:ff:70:1e:c8:
         c7:ad:2d:ac:31:1c:55:3d:e2:6b:ce:d4:8a:4e:31:c6:07:3c:
         ba:d2:6b:f9:1c:3c:46:f1:d5:e4:70:2f:fe:c9:87:e0:00:61:
         83:4c:fe:15:3f:23:a9:89:11:60:06:46:ce:99:0c:15:52:30:
         ef:a2:2d:26:5c:14:c9:44:20:d5:61:39:3d:21:ce:5d:86:e5:
         a6:36:ce:a3:ab:6d:23:32:a1:2f:e7:64:3f:0d:b5:f6:4b:bd:
         6a:8b:4e:f8:19:47:7b:ba:80:55:7b:01:1c:85:84:61:30:83:
         c1:6d:9b:19:f2:24:5d:fc:35:6d:bf:6c:1e:a2:63:e7:ad:50:
         2c:55:44:30:0f:9f:9b:1d:7e:39:29:0b:0d:28:7f:54:69:d9:
         d1:d3:9f:2b:ca:53:79:25:48:50:50:ad:31:73:c4:1c:c5:2d:
         a2:fc:50:14:ef:b0:93:46:42:73:82:c8:c4:44:f6:e4:b8:fb:
         21:d0:57:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:05:59 2026 by rpki-client