Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File:                     JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier:          mf4SdO1OF/1HtfrwBeboNsnXJSEF5y7Sv6z0jNpf9cc=
Subject key identifier:   70:C0:18:9B:7E:F0:43:19:5A:2F:33:FE:59:B1:CE:E5:CF:34:93:31
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number:          0258
Signing time:             Sat 31 Oct 2026 02:44:17 +0000
Manifest this update:     Sat 31 Oct 2026 02:44:16 +0000
Manifest next update:     Sat 07 Nov 2026 02:44:16 +0000
Files and hashes:         1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: iqsrqkazUSShimq0RL2laONJ2msuZnhabd19CXpNlXw=)
                          2: 26925A20AC1411F1B5E0CE217111F970.roa (hash: z3iFymkxPG1qE7D8b7qi/84RqpzxTtWddWroC+WpMBc=)
                          3: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: cj04D5TFFsw18/RIkG4j75yIN0cec3Y+qkgv9xjLhic=)
                          4: 03E47340AAE411F1907AB5A24C11F970.roa (hash: HpRt0vzil1Vu87MMyiV/ZYFFIZltZpvK50E0vihNkcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 02:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Oct 31 02:44:16 2026 GMT
            Not After : Nov  7 02:44:16 2026 GMT
        Subject: CN=6ae55600-36e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:43:2c:a7:06:ab:05:11:d1:1d:bc:7b:1a:ac:
                    c1:e9:e8:c5:39:65:a1:f6:d1:45:9b:c9:9a:50:e9:
                    f1:ab:02:64:eb:ce:52:db:5c:f5:bb:19:53:76:c4:
                    6b:f6:a7:6a:c4:63:c2:f3:3c:8d:ea:19:e0:2d:cf:
                    84:68:f7:d3:2b:f5:74:8c:e6:53:30:d4:a8:29:32:
                    62:e9:5d:41:3b:b6:81:35:25:ec:6b:26:7d:83:40:
                    be:14:ef:5e:13:4e:3c:11:3e:0b:46:b2:43:96:e1:
                    76:2a:f2:fc:06:e4:32:7a:44:5f:ea:4d:9c:ea:6f:
                    93:cd:d7:0e:89:77:01:3b:6b:8a:23:40:f6:ad:f2:
                    0a:2e:43:67:13:33:70:f1:8b:69:63:91:63:64:20:
                    c6:93:81:77:b0:a5:a7:8e:09:65:ce:cd:a1:d7:b0:
                    0e:7a:82:8a:9e:b8:f3:98:d9:86:fe:53:0b:57:36:
                    10:cf:2c:17:77:f3:0c:a0:fa:d0:ea:24:b1:2c:ee:
                    27:14:9b:3c:a5:fd:3e:dd:03:04:37:6b:10:c7:03:
                    f6:de:0f:84:e0:93:44:70:f7:26:3c:0e:ab:aa:54:
                    6f:55:e9:aa:f9:c3:a7:cc:92:75:8b:61:66:4e:fc:
                    b0:75:41:9f:b1:9a:7d:55:61:24:79:cb:69:f4:2c:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C0:18:9B:7E:F0:43:19:5A:2F:33:FE:59:B1:CE:E5:CF:34:93:31
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:02:2f:87:78:1e:87:fa:f2:b4:52:79:73:cd:19:0a:81:60:
         a4:c6:85:02:5a:17:8f:72:71:a4:a8:39:a8:e8:54:7c:da:3d:
         ed:7e:91:9e:2c:8d:8e:c7:ea:46:19:f7:c0:50:1c:50:f2:46:
         b2:14:10:76:ea:a8:e1:a5:cb:81:92:fe:b8:72:4e:f0:fe:e3:
         b9:c2:12:57:12:a7:76:77:7f:5b:b7:13:2e:9e:ab:6c:b7:e1:
         1d:13:44:99:07:dd:5e:f8:3d:88:3c:f4:67:0e:5e:5b:60:d6:
         61:0a:d7:a8:b9:5d:02:a4:99:df:8d:51:ff:85:b5:0d:36:35:
         0e:ac:e5:61:ff:31:4a:32:dd:7a:e2:a4:47:84:09:49:0d:a9:
         cb:4a:6f:82:6f:7d:94:c0:3f:b2:19:2f:f3:6c:dd:95:a2:96:
         d0:ee:be:0f:f7:2b:ab:08:d5:42:01:e8:33:26:ea:71:61:d0:
         3a:b5:4e:42:d6:47:6f:4d:97:eb:08:ce:0c:78:69:38:ce:0e:
         95:06:91:44:e5:6d:b3:99:8c:5c:78:b7:b7:e5:96:c1:6a:e6:
         7b:10:35:ad:c8:31:1b:1d:0a:f1:e4:a0:4e:fd:69:b8:3f:68:
         3e:ed:de:db:37:a2:28:34:30:8d:d7:51:b2:8b:f7:20:3e:81:
         c1:25:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:56:37 2026 by rpki-client