Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File:                     tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier:          xpeaGKE6xGhdGAkYcXNwH64n0rcz1oQgM6qI/bM/ERY=
Subject key identifier:   D4:A3:C0:68:87:83:AF:D7:A7:4A:7C:AD:8A:56:93:00:CA:C3:88:F3
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer:       /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number:          01DA
Signing time:             Tue 27 Oct 2026 03:53:21 +0000
Manifest this update:     Tue 27 Oct 2026 03:53:20 +0000
Manifest next update:     Tue 03 Nov 2026 03:53:20 +0000
Files and hashes:         1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 129Uq9zZMeoR50kUdCiQKhleW7gSZfC1CC+tcWjpJ8w=)
                          2: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: SsVxQtDk/Oa1shqSFxMi2LpzccLXqJhR2Mhs5lXheR4=)
                          3: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: +2GaHe5cWbVmXD0EaHkbTYfFj1TTwinsmIfZx+qjcRc=)
                          4: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: vRQ6HdkSj/Wf7+vduG5A9cFn7YJoyEBj6p0aYIaPJ/w=)
                          5: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: 5D/Ry/8ZP2E54WupdxSy/KsQmqjx8wwM6c9M/jH7pYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 03:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
        Validity
            Not Before: Oct 27 03:53:20 2026 GMT
            Not After : Nov  3 03:53:20 2026 GMT
        Subject: CN=6ae02031-5325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:b6:97:c8:31:36:0d:87:6e:d8:8b:35:11:
                    00:70:c5:f0:b1:db:ce:a8:fe:11:27:2f:a6:4f:4f:
                    5b:c6:a6:6e:3e:b0:40:a2:b5:13:97:fb:da:e1:01:
                    bf:1d:46:fa:e8:4e:de:22:00:1d:e9:95:be:1b:a8:
                    08:3a:62:c4:7a:86:54:81:af:60:2e:ad:b0:37:7d:
                    a2:ab:33:44:19:4b:f6:a7:5f:a5:41:86:7c:c9:08:
                    63:72:e6:09:c6:43:cd:7c:4b:55:4d:bb:9e:b2:2d:
                    4c:c6:10:fa:ca:06:ba:6e:36:c4:34:cf:1f:3d:4b:
                    65:39:03:f8:bc:92:04:b5:63:04:67:b0:65:ef:1d:
                    71:8b:5c:ca:a3:01:56:2f:45:79:e0:de:3c:1a:53:
                    6b:b9:d4:ef:b1:f1:09:b4:f4:e5:26:f6:68:78:fe:
                    c2:ad:0a:db:84:54:55:60:bd:1d:01:7a:7c:6c:27:
                    e6:e5:b5:5c:6a:a5:3b:73:a8:d3:af:a0:d2:72:be:
                    32:f6:48:d7:d3:bc:41:49:1a:bf:56:49:80:f8:7c:
                    38:e7:a5:16:6b:f3:0e:9c:89:56:cb:d7:6f:57:10:
                    e4:df:90:07:8f:7c:9b:fb:e8:d1:10:50:2c:d3:a5:
                    37:9f:de:1d:d6:0b:18:cc:e5:77:7c:87:cb:b6:4e:
                    ef:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A3:C0:68:87:83:AF:D7:A7:4A:7C:AD:8A:56:93:00:CA:C3:88:F3
            X509v3 Authority Key Identifier:
                keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:1f:e4:bc:41:f3:b1:45:08:c8:40:00:84:ba:27:74:b3:
         7f:e3:3b:ce:63:3f:9c:09:64:e5:0d:e4:88:50:9a:1d:f3:86:
         d4:b3:f7:41:18:39:8d:39:1d:9e:6c:ae:9b:cb:e7:fc:f3:de:
         7e:85:88:62:27:a9:35:e8:b6:38:02:42:a7:ee:5a:a4:03:48:
         40:b7:c4:60:52:65:07:0b:70:0d:ed:fb:d2:54:05:6a:48:89:
         a3:53:dc:25:ba:ef:b7:8b:4c:75:c5:44:81:f8:bd:3c:2f:3f:
         bd:04:e5:58:ff:0f:22:2f:05:51:f4:a2:db:fb:43:29:0e:2a:
         cb:27:76:0d:15:a2:a1:12:43:6b:bc:09:fc:0b:19:30:82:a9:
         1c:0c:3f:bf:a4:48:9f:c2:5d:53:75:20:1c:2c:df:39:4c:d6:
         9a:f2:d1:cc:bc:6f:a2:fe:cf:93:a5:b2:7a:3a:0b:74:39:4f:
         96:6a:5e:23:38:d0:46:6b:80:1e:de:64:32:58:e1:6e:81:40:
         f2:95:16:bf:66:3a:e0:a9:6e:dc:0f:70:a8:fc:82:79:54:21:
         93:aa:2d:9f:e8:d7:4b:10:b2:e8:73:9b:a7:0c:44:78:72:f9:
         3f:bb:ac:5d:b6:01:43:00:f5:29:72:a5:9e:23:10:83:6f:d0:
         85:71:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:25 2026 by rpki-client