Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
File:                     509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json)
Hash identifier:          75em1YUc0d7mTDLJeExFQnAYCyKDgO7K1QDv+kFPa5U=
Subject key identifier:   CD:BC:56:9D:6C:46:7D:9D:F4:02:BE:01:29:45:6F:73:AF:72:75:F8
Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47
Certificate issuer:       /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
Certificate serial:       0C40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
Manifest number:          0C2D
Signing time:             Mon 26 Oct 2026 18:49:00 +0000
Manifest this update:     Mon 26 Oct 2026 18:48:59 +0000
Manifest next update:     Mon 02 Nov 2026 18:48:59 +0000
Files and hashes:         1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: oVjZHHNeHM0MzVl58U+F2Q65ftE0hn0mngMuyeDwvTg=)
                          2: D40428EC3D5511F18320D810A8833773.roa (hash: GiqC1fPItzwUUjM6WaOHq6c0vxZNE0S017OV+sd3TxQ=)
                          3: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: Nnnq4X2pr12xKRIifzfba52zTnL3E4FSIZx5q2aHomI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl
                          rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3136 (0xc40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47
        Validity
            Not Before: Oct 26 18:48:59 2026 GMT
            Not After : Nov  2 18:48:59 2026 GMT
        Subject: CN=6adfa09c-0b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:e3:b9:64:9a:5d:d3:fc:ba:8f:37:70:65:
                    19:c1:20:5e:3e:b7:40:75:a7:77:e6:51:08:44:6d:
                    d5:c3:6a:62:d3:c1:f5:b7:06:69:c4:9a:90:98:5a:
                    5c:6a:fd:a2:5c:43:b1:11:41:17:a8:29:e6:2a:3b:
                    b0:84:17:07:c4:a3:aa:7f:cf:53:a5:7b:7e:28:0e:
                    10:8f:ca:c3:72:03:6e:4e:22:50:23:79:d4:a8:cd:
                    fb:2e:b4:21:19:25:eb:82:85:9f:f5:9d:3a:30:47:
                    0c:cd:81:82:e2:dc:13:a6:d3:c6:d2:43:ee:02:5d:
                    f8:87:9b:da:be:66:3a:43:89:6b:9e:e8:7d:a9:73:
                    31:94:0a:71:32:74:7e:d7:bf:6e:a6:45:0f:27:4f:
                    fc:0a:f5:bc:35:f2:ad:e6:de:a1:4b:58:ad:9a:50:
                    44:32:92:fb:df:e2:99:7e:c9:73:97:13:b5:2e:94:
                    a0:b4:93:32:12:92:cc:51:3e:20:01:38:89:78:59:
                    d6:d3:9e:0e:fe:27:61:23:30:39:a5:e8:15:91:e6:
                    85:65:8a:dc:f5:30:7b:1e:35:fe:b0:79:3f:6c:f9:
                    f1:4b:d7:b8:79:72:f9:f8:fb:dc:5a:c5:78:09:77:
                    af:4d:cb:05:00:49:c8:3e:70:61:17:81:5e:be:78:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BC:56:9D:6C:46:7D:9D:F4:02:BE:01:29:45:6F:73:AF:72:75:F8
            X509v3 Authority Key Identifier:
                keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:17:52:d6:db:d9:88:47:a8:90:21:27:40:98:28:90:83:45:
         82:56:e9:31:38:5f:3a:24:8f:de:55:6d:bf:b5:cd:40:a2:08:
         83:57:4d:a8:7f:86:5d:3e:6b:2d:f7:de:21:a7:e8:f3:25:39:
         c8:4b:e2:22:ac:67:6a:9f:5a:6f:05:ce:02:86:fc:9d:c6:15:
         0b:40:6a:26:62:2b:45:c5:b5:42:9a:f8:37:86:9b:84:4d:30:
         61:fe:c3:f2:48:d7:e6:3d:7e:2d:a8:f5:77:af:0e:dd:50:f2:
         6b:a2:c2:bf:13:e7:18:36:f5:f2:35:fa:a9:d4:ed:2a:9a:47:
         37:08:eb:d0:8e:ca:b3:60:87:31:17:89:d2:4e:41:4a:1b:44:
         20:5a:a3:5a:2d:00:1d:d5:86:90:13:07:79:4c:3a:10:f9:f9:
         73:e4:16:fb:8a:dc:68:d7:00:db:8a:e0:ae:38:f3:cf:11:84:
         cb:9a:d3:ee:96:b6:a9:da:15:d3:63:9a:56:91:29:8b:9d:23:
         8d:2d:a3:4a:6a:c3:f2:d1:0b:87:1f:9d:7d:a8:e9:83:cc:b5:
         53:1a:09:7c:fe:7a:e8:c0:63:9f:4c:7a:a1:20:44:a9:5e:2f:
         2b:7f:2c:f2:7d:1f:db:48:29:6a:c7:09:82:b5:2a:f4:2e:45:
         02:ce:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:06:22 2026 by rpki-client