Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
File:                     r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json)
Hash identifier:          tdeRxTRoInoP32gpki0cySHUjkgWdFR9/Wit2E/cEKA=
Subject key identifier:   2A:B0:3A:14:6B:4A:89:48:8B:82:59:05:0E:9D:68:21:AE:EC:B2:BB
Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02
Certificate issuer:       /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
Certificate serial:       0930
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
Manifest number:          091A
Signing time:             Sat 31 Oct 2026 20:38:39 +0000
Manifest this update:     Sat 31 Oct 2026 20:38:39 +0000
Manifest next update:     Sat 07 Nov 2026 20:38:39 +0000
Files and hashes:         1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: gltq/IdHIzcubkP7FPK/HBhFmKMZD5+B4DGhEkDsug8=)
                          2: F814843E7B5D11F18BA834705CA30FBC.roa (hash: YKYj7wLn5ST2bK9JB1OFZ+eb8Le+YG1gZrjLaku7EPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl
                          rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 20:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2352 (0x930)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502
        Validity
            Not Before: Oct 31 20:38:39 2026 GMT
            Not After : Nov  7 20:38:39 2026 GMT
        Subject: CN=6ae651cf-9436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:4f:c2:5e:62:63:23:70:f1:6d:db:e2:46:
                    f8:a2:ce:51:73:ea:00:00:e3:fe:85:e7:78:ef:f4:
                    65:58:f2:b4:68:59:7c:09:6b:d3:7b:21:90:2d:33:
                    22:77:df:8b:68:8d:85:0a:bb:7c:f7:28:30:9f:65:
                    e9:ed:27:da:67:20:ef:e2:47:05:5f:74:d4:c7:4a:
                    49:04:04:b5:59:33:e2:38:33:30:c0:c2:fa:70:af:
                    69:19:a8:86:30:a4:5b:5a:da:26:23:d2:7a:22:7a:
                    cb:b7:14:da:ed:f1:36:07:33:03:3d:bb:d7:7a:b8:
                    b3:7d:7e:e5:06:1e:b1:88:5e:96:9e:fa:00:e0:72:
                    85:31:c8:0a:d5:d0:eb:56:43:31:c3:40:77:5a:87:
                    f9:20:81:df:e3:f8:97:ca:57:cf:5c:e7:09:f3:17:
                    ec:33:33:f5:2e:07:f0:22:ab:04:13:94:fd:d5:84:
                    70:ca:4e:5d:ab:77:ba:fb:17:d6:24:ab:dd:d5:e7:
                    cc:f3:ee:05:f8:dd:a9:3d:14:ba:9e:76:21:6c:48:
                    7d:26:07:76:5a:9c:63:19:5b:d6:d2:f3:f4:a3:bb:
                    85:0a:a2:6f:64:01:6a:90:4e:3c:9c:c0:12:e2:74:
                    e5:e8:d8:b3:47:ff:2d:7e:ba:f1:82:5f:af:a1:56:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B0:3A:14:6B:4A:89:48:8B:82:59:05:0E:9D:68:21:AE:EC:B2:BB
            X509v3 Authority Key Identifier:
                keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:ca:a5:0c:1d:5c:c2:05:9f:ad:fb:6a:65:19:e6:d8:36:
         2b:d4:96:a2:16:95:a5:f3:24:ad:65:1d:b4:ed:b9:cb:a2:ac:
         90:35:85:4d:3a:7a:ae:6e:2d:01:5e:03:1a:81:ea:56:24:9e:
         a3:2d:11:18:2b:90:97:f8:1d:b7:54:c6:df:73:04:99:60:9a:
         cf:dd:e4:70:70:e4:5c:28:8a:b4:2a:78:d5:0b:8a:12:bb:6e:
         ee:9a:67:84:c9:4b:30:01:5a:36:18:46:b5:97:a9:df:bd:a8:
         dd:6f:7c:b3:84:0b:4d:a9:ad:c5:72:c5:f3:21:ff:a6:e1:ab:
         86:e4:37:10:c1:0a:83:6c:22:04:1d:39:04:89:f2:33:6a:a8:
         de:ac:a3:75:79:96:18:54:d0:2f:fe:17:3a:19:ca:e7:1c:03:
         26:98:44:b9:6e:ad:99:79:30:c3:c3:0e:87:ec:77:2e:81:15:
         ae:33:0d:f2:48:f8:5f:0b:06:7a:86:57:9f:56:28:d3:fc:7c:
         a6:0d:1b:7d:89:d6:3b:8d:69:d7:3b:27:5f:c1:f0:b5:56:96:
         bd:89:20:28:65:bb:0d:04:fa:47:99:18:37:34:53:c1:0b:cc:
         39:78:f6:72:f8:da:80:e9:ef:49:c5:74:49:19:22:72:5c:dc:
         a3:74:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:43:37 2026 by rpki-client