Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
File:                     f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json)
Hash identifier:          EwcyrfcYNeJ2MtTKYTwxL2rpQvrd8X0jMceKQxQ0bys=
Subject key identifier:   9E:53:15:F7:59:A4:52:E0:68:43:0A:36:EE:7E:7F:29:45:EB:E0:8A
Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3
Certificate issuer:       /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
Certificate serial:       0A95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
Manifest number:          0A8B
Signing time:             Mon 26 Oct 2026 19:34:36 +0000
Manifest this update:     Mon 26 Oct 2026 19:34:35 +0000
Manifest next update:     Mon 02 Nov 2026 19:34:35 +0000
Files and hashes:         1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: VZ+So4BPrDyiXbjWdJRHd22xjZrzTTTwwaya2nKQYak=)
                          2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl
                          rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 19:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2709 (0xa95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3
        Validity
            Not Before: Oct 26 19:34:35 2026 GMT
            Not After : Nov  2 19:34:35 2026 GMT
        Subject: CN=6adfab4c-41e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:95:c8:c9:12:60:eb:7e:16:18:11:65:cd:
                    0b:9d:bc:16:36:c1:f6:1f:e1:34:c8:e2:0f:96:4f:
                    18:b4:e2:80:42:5b:7d:fd:05:22:c4:00:a6:99:b6:
                    d4:18:11:0d:0c:f8:3a:75:c2:b3:c9:b5:ab:a8:62:
                    0c:9d:8d:14:cc:d7:91:b1:5d:07:0f:cd:69:a8:86:
                    16:07:44:d0:3a:00:f0:b7:a2:b8:aa:8a:8b:85:cc:
                    cd:81:0b:6a:2e:7c:71:54:f1:91:4b:34:b4:9b:2e:
                    13:61:60:2e:8d:f0:8d:a9:4c:dc:fc:b4:55:47:04:
                    c1:7a:21:3d:4d:cf:ff:cb:ba:16:4e:19:2d:67:6f:
                    a1:54:bc:30:97:79:83:4d:e5:0a:61:e6:2e:70:72:
                    96:12:e3:f0:e5:ad:d4:08:52:5c:c5:8e:b6:eb:d3:
                    1b:38:d3:97:bd:77:40:3b:a6:ba:9a:47:c3:33:b1:
                    dc:0b:4a:4d:22:d7:56:f5:a8:93:30:e1:90:7a:42:
                    2e:3d:1c:d3:ed:2d:4a:07:98:d5:bf:d7:ef:21:45:
                    48:7b:71:b9:f4:d6:31:b5:7e:a0:43:7a:e9:6c:c1:
                    a4:fb:ae:d6:07:59:0f:9e:85:42:85:4c:22:32:9d:
                    ab:67:46:bd:40:7a:87:8a:84:c2:92:54:9a:3c:6d:
                    80:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:53:15:F7:59:A4:52:E0:68:43:0A:36:EE:7E:7F:29:45:EB:E0:8A
            X509v3 Authority Key Identifier:
                keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6b:8c:06:07:7b:28:8e:74:19:93:f1:f5:57:ab:fe:63:a4:
         39:11:f4:5c:09:fc:9b:30:64:e5:be:28:c9:65:bf:5e:a9:3c:
         3e:05:03:21:08:92:5a:47:42:ca:3e:03:b9:1a:51:cc:e7:f0:
         0d:dc:53:69:fc:4e:2d:93:53:63:93:e5:be:1d:30:26:4b:32:
         ee:88:8f:48:ab:d0:5a:10:47:b2:bf:e7:e3:11:ab:a5:4b:db:
         88:18:16:b6:1d:0a:98:3a:67:df:de:34:c5:e5:e2:de:36:97:
         69:7a:d9:e2:2d:5d:2a:0c:d8:05:1e:96:1f:31:84:f7:7f:22:
         c3:4a:70:83:a7:08:6c:bf:4d:69:6b:dc:00:82:c7:8c:45:ce:
         7d:cf:ef:00:d9:02:03:47:8c:a4:aa:01:89:f0:3f:1d:40:35:
         0c:76:8e:ac:d8:f7:99:0a:4a:5c:68:e8:9f:ee:b4:f7:27:f3:
         d6:55:c7:10:3c:cf:79:6e:93:45:a2:10:99:3e:89:fa:b5:8f:
         f2:ce:c6:6b:6a:ae:20:a1:cc:1d:8a:8a:c6:ad:a0:79:d5:71:
         47:c9:23:36:bd:7e:19:03:c2:ce:cb:d9:fd:8b:3e:b6:8e:ea:
         6d:a6:df:1a:35:ba:fa:d1:db:72:15:2f:a0:17:55:25:be:13:
         ff:da:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:36:41 2026 by rpki-client