Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File:                     9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier:          X4xgZNkEbUttGds4KlGlNL5rHFYRaPRGaO3ocWwUeI8=
Subject key identifier:   F3:0B:83:76:D3:04:CF:21:DC:A6:BE:87:88:D3:45:E3:99:4C:71:6D
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer:       /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial:       0D55
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number:          0D43
Signing time:             Tue 20 Oct 2026 18:19:59 +0000
Manifest this update:     Tue 20 Oct 2026 18:19:58 +0000
Manifest next update:     Tue 27 Oct 2026 18:19:58 +0000
Files and hashes:         1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: h5QeGn6WV3qO1rsaRrqSvXxzPuWYKdBKhNJZxTRiW/Y=)
                          2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: B+4ghGog0RYB7I4E9J/Za4OLQ8QEJpi5G6sC5f+vbXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 18:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3413 (0xd55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
        Validity
            Not Before: Oct 20 18:19:58 2026 GMT
            Not After : Oct 27 18:19:58 2026 GMT
        Subject: CN=6ad7b0cf-dbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:31:ee:e8:25:27:6d:21:4f:39:fd:ac:e4:
                    c5:07:26:9a:c2:d0:42:21:ad:31:a5:e3:63:8c:fa:
                    3f:a4:f2:ef:3a:9a:03:51:8f:8a:63:a6:53:bf:a0:
                    56:b1:b0:d5:c7:de:e8:7a:ea:e6:c5:2e:b9:06:88:
                    c4:ef:ab:b6:68:dd:ab:cc:44:5c:83:3f:d1:aa:1f:
                    da:61:43:9e:10:9e:00:1e:a1:c9:a8:f3:06:ef:75:
                    73:6e:6d:ea:5d:fd:f9:6f:89:dc:81:75:2d:33:b6:
                    fa:b3:58:b5:16:fa:5a:07:eb:9c:f8:b2:a7:92:d8:
                    23:38:07:c8:98:77:36:38:04:73:41:e8:1d:d2:ac:
                    7f:fd:45:fe:97:8d:80:0b:b9:04:48:2a:95:ed:6c:
                    04:c8:88:5e:6f:8b:98:e9:97:e0:12:e3:84:b2:81:
                    7f:b9:2f:0a:73:a4:4b:61:ea:33:90:81:43:e8:22:
                    ea:f0:be:36:a4:80:80:71:5a:46:7a:ad:51:d4:13:
                    60:c9:20:ea:19:31:d6:67:c7:86:1d:62:12:a2:6d:
                    4f:ae:40:b1:6c:7f:d4:c7:da:ba:42:b6:a8:be:58:
                    be:2c:cf:38:49:18:f4:b0:c4:56:f8:05:50:ed:3d:
                    b3:56:a7:bb:06:22:12:f7:d6:d2:af:c6:4d:17:35:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0B:83:76:D3:04:CF:21:DC:A6:BE:87:88:D3:45:E3:99:4C:71:6D
            X509v3 Authority Key Identifier:
                keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:11:c7:17:70:2b:da:3c:90:6a:61:0e:43:6f:b8:65:e2:
         62:f3:58:64:f9:64:2e:a1:15:c4:c1:29:12:22:1e:a3:31:9b:
         05:2d:6d:f0:c1:96:f2:d1:c7:57:dd:1c:13:dd:7e:74:27:02:
         37:fd:af:08:be:75:0f:76:1b:5b:7a:2c:f9:63:b3:58:e1:38:
         c9:95:d8:9b:8f:bb:f2:8f:98:5c:3b:d9:2c:61:dd:b0:54:77:
         32:62:4a:45:5c:f3:4f:db:5e:24:ed:61:84:ff:4e:40:e8:41:
         5c:fc:5b:31:e0:cd:38:2c:68:82:6a:03:b8:58:d5:9d:4f:90:
         58:56:24:8f:7f:ba:15:74:c4:d4:36:ea:54:dc:b8:7a:c3:54:
         f1:91:88:20:92:30:a1:67:6f:17:0b:87:75:cb:d0:6a:10:b0:
         14:28:9b:06:76:f5:f6:81:fd:ca:52:94:01:60:c4:57:5f:21:
         1a:9c:ad:a0:cb:88:ae:07:bc:8d:8c:fe:b6:31:70:9d:d7:5c:
         92:5f:00:70:60:56:06:bc:22:d1:fd:db:c4:e1:79:56:c3:b7:
         ca:41:16:ec:62:14:ff:d8:62:30:d7:67:41:3e:dd:ff:36:0d:
         31:43:d0:3e:c9:11:d1:0d:9f:a5:68:cd:b5:5e:66:1d:a6:c3:
         47:7c:97:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:15:46 2026 by rpki-client