Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
File:                     mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json)
Hash identifier:          aPt6y0Q+3nwMRrep9COlAmz268x3ZEhVDpCQB1NtzBc=
Subject key identifier:   A1:94:4C:AC:EC:1E:E6:C7:95:C1:1F:87:CD:F2:91:D1:92:51:97:BB
Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48
Certificate issuer:       /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
Manifest number:          0114
Signing time:             Wed 07 Oct 2026 06:28:11 +0000
Manifest this update:     Wed 07 Oct 2026 06:28:11 +0000
Manifest next update:     Wed 14 Oct 2026 06:28:11 +0000
Files and hashes:         1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: e/Mck50PQ71IkhujvXjmd4p6gpHcVheYOevR/CcJwFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl
                          rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
        Validity
            Not Before: Oct  7 06:28:11 2026 GMT
            Not After : Oct 14 06:28:11 2026 GMT
        Subject: CN=6ac5e67b-36e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9a:e8:94:e9:75:4b:df:0b:a2:5b:ab:67:e4:
                    27:67:b9:a1:3e:c0:f2:f7:2f:5d:9e:0a:c2:fb:99:
                    a0:12:cb:d3:d1:c2:c6:48:29:7e:ff:ae:0c:c0:a0:
                    b0:b3:78:2f:eb:6d:4b:7d:01:27:26:58:b4:e7:65:
                    bf:34:51:90:9c:b0:09:5e:b7:2f:ce:aa:91:c2:f6:
                    84:f6:f6:8f:dc:16:39:56:64:3a:cc:90:8a:0f:57:
                    c8:43:95:60:b4:bb:2e:34:46:d8:a4:9c:b5:0f:61:
                    f7:3b:85:b7:82:d5:64:57:fd:fd:e7:96:3a:15:c6:
                    99:46:27:9b:ff:d6:47:d4:3f:e2:99:87:59:ef:64:
                    fb:13:e5:21:fb:41:bc:2b:2f:47:24:86:8e:43:4e:
                    8b:de:d8:4c:38:ee:fd:dd:53:ca:8b:37:7a:88:36:
                    24:7b:20:89:28:a6:ab:14:ad:62:20:60:56:f9:bf:
                    c1:c9:57:40:d1:21:69:c1:75:fd:ef:90:5a:78:c2:
                    b3:d5:e0:98:7c:36:d1:89:bc:1d:6f:25:cc:3e:85:
                    91:a2:20:8d:ca:b2:c2:fa:93:77:72:8e:5a:67:2a:
                    cc:76:93:7d:b1:b1:3b:dd:94:81:74:5e:b2:02:c2:
                    7b:dc:b8:7d:4e:13:24:da:cb:2d:c7:7b:c5:61:45:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:94:4C:AC:EC:1E:E6:C7:95:C1:1F:87:CD:F2:91:D1:92:51:97:BB
            X509v3 Authority Key Identifier:
                keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:76:89:d0:f6:76:13:89:23:01:58:4d:6c:c9:ad:bf:32:11:
         1a:cb:32:98:e4:1f:f1:ad:a5:13:0e:d0:36:bd:5e:bc:44:e2:
         16:65:51:93:cc:6c:33:45:c9:ed:7c:4f:e0:01:0b:07:56:0e:
         b0:f4:24:2c:f4:ff:87:7f:dc:c1:2f:c0:fb:eb:2b:51:82:6a:
         c9:9c:6d:4b:85:c9:09:23:76:80:8e:92:43:53:4e:27:56:b0:
         77:35:db:b1:d5:20:94:1f:d9:fd:15:59:89:89:a4:7b:1a:27:
         5d:32:e5:0a:cf:f7:8b:62:ff:9c:aa:5e:0a:d0:80:3a:d7:8e:
         56:98:f5:d3:4c:f5:9a:f1:c4:8b:90:63:3c:49:b1:69:4d:56:
         d9:a9:33:ad:74:ba:6a:fc:bc:ac:b2:67:ef:ee:5d:8c:ca:a0:
         a8:33:30:1c:55:e2:d4:13:5f:99:a4:3b:43:37:78:3a:e4:9e:
         5b:6c:ba:01:d3:ad:cc:02:14:13:13:2d:70:fc:f6:3c:ec:f4:
         89:c4:f0:0b:f8:ce:b3:5b:b3:2b:26:9f:4b:eb:35:d4:61:d7:
         4f:38:ba:c5:da:4c:1e:80:0b:3a:7a:6b:0a:e7:98:be:39:c2:
         05:72:b0:38:ca:df:0d:58:b8:b8:07:4f:1d:c7:d4:36:3c:e8:
         69:93:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:43:41 2026 by rpki-client