Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
File:                     eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json)
Hash identifier:          QBjtgc5wSzSK3qk7j+S1Orxc7eqLXv6YgaoP9tQL05c=
Subject key identifier:   84:8B:46:FF:D5:D4:40:C1:C2:EE:22:80:7C:22:3B:80:0E:2D:F8:62
Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29
Certificate issuer:       /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
Certificate serial:       0E83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
Manifest number:          0E42
Signing time:             Mon 26 Oct 2026 17:50:46 +0000
Manifest this update:     Mon 26 Oct 2026 17:50:46 +0000
Manifest next update:     Mon 02 Nov 2026 17:50:46 +0000
Files and hashes:         1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: deU9pzzWvAVbZsyAvHYnijRqBQVZH4MxmFPjCpcZZJw=)
                          2: DC0965247F5A11F186F9402F5DA30FBC.roa (hash: +7cgwn7hf2pYUWY8bN4oxoYjrwEAtujv7oFlabBFPdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl
                          rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3715 (0xe83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429
        Validity
            Not Before: Oct 26 17:50:46 2026 GMT
            Not After : Nov  2 17:50:46 2026 GMT
        Subject: CN=6adf92f6-4152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:3d:7b:b2:95:b9:ac:54:51:0a:fe:b9:63:
                    c3:5a:36:89:57:7e:5e:e6:60:f6:50:b7:35:5b:19:
                    5f:9c:92:bb:8d:5a:25:05:6e:41:5a:61:c8:c9:6d:
                    77:cd:79:82:a7:0a:62:3b:35:55:bb:d6:02:ad:c1:
                    81:11:0c:57:09:9e:b4:20:77:28:e7:42:ef:9f:c5:
                    62:a9:ea:4d:dc:ef:b3:4e:f1:f8:1b:92:ea:58:58:
                    b6:93:2a:06:c9:84:61:bb:18:b2:49:67:97:72:6b:
                    14:38:9b:31:01:78:dd:32:81:db:e9:78:d8:fe:86:
                    6a:ee:7d:0a:c9:59:c7:39:da:d2:32:1d:91:f7:a9:
                    5b:01:89:00:cf:02:21:d5:5d:0b:62:30:c2:0b:3e:
                    93:9e:d6:96:8d:a4:3e:cf:d6:1f:e6:35:2a:f5:46:
                    00:cf:14:4a:1f:46:ae:83:8c:5e:ec:5b:28:1e:71:
                    16:a4:1a:94:ff:4f:f1:56:32:4b:8d:66:c2:ce:3e:
                    6e:6b:11:3b:d5:db:81:9b:0e:48:7b:51:48:ee:bc:
                    76:48:5c:4b:84:c0:63:70:1f:e0:13:79:7f:f8:fe:
                    ea:b2:13:46:af:9b:98:75:b4:ce:73:f0:90:2a:3f:
                    1b:67:0e:f1:35:88:15:fa:97:90:d0:51:c8:1e:4d:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8B:46:FF:D5:D4:40:C1:C2:EE:22:80:7C:22:3B:80:0E:2D:F8:62
            X509v3 Authority Key Identifier:
                keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:01:98:d7:e2:65:37:f1:46:a1:ef:b3:8b:99:34:48:71:bc:
         80:51:52:29:94:af:d4:63:ce:08:34:99:64:05:34:a4:04:be:
         83:87:60:a0:42:87:ae:d2:47:f3:71:3b:34:24:e3:e1:fa:36:
         44:ae:d7:21:d1:3a:4d:05:1e:09:7f:a2:d7:29:a5:09:8d:3a:
         c2:1d:99:02:ac:dd:93:95:d5:a3:4c:97:0f:9d:99:ff:3b:04:
         d3:f0:02:46:7d:d3:10:51:00:5f:e2:d2:17:a2:1e:a4:d5:6a:
         45:2f:05:89:aa:fa:45:80:a4:2a:7c:8e:15:69:03:82:e1:e0:
         9a:55:04:55:19:e3:e2:e5:31:c2:32:03:9f:27:46:14:55:2a:
         3d:b5:ad:cb:27:27:e2:cf:40:56:a1:70:2f:6d:70:1e:dd:89:
         ec:2b:99:72:e2:96:8a:86:fb:90:2a:c7:33:c5:5c:64:b4:06:
         ad:eb:15:0d:d5:cc:60:33:22:a5:fd:94:54:6c:d4:e2:ce:d0:
         9a:fd:5b:56:9f:8a:3d:b9:92:45:cb:b3:8d:f1:e5:93:76:fd:
         78:55:9d:15:26:4f:dd:aa:25:35:55:2f:b1:50:a1:3e:d2:07:
         93:c9:1f:43:7d:dd:22:a3:e1:97:27:ab:b1:37:8e:c5:cc:41:
         7a:45:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:56:51 2026 by rpki-client