Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
File:                     mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json)
Hash identifier:          nmCl4KKWdmdJIBNHZHPfDXZwa42Y/p4pdEK9pUdPwYs=
Subject key identifier:   7D:6A:9A:B1:35:D4:2B:C9:EB:2C:DC:29:6A:EA:79:A9:92:33:D1:6C
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Certificate issuer:       /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
Manifest number:          0110
Signing time:             Sat 03 Oct 2026 06:41:29 +0000
Manifest this update:     Sat 03 Oct 2026 06:41:29 +0000
Manifest next update:     Sat 10 Oct 2026 06:41:29 +0000
Files and hashes:         1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: idzZK2bjxXMgM4Pn91eQtkuvI/orSAoBpnpT5/WWqDA=)
                          2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: q15h8naITCmlNDgt0fcVFaL5Jg+soxRTIhbvGiyXn00=)
                          3: 301DED0C86F911F08DBDFA61C4F9AE02.roa (hash: nKq89mFtdPAm1UALvKV17Saig4Y05tURAwcO6cCh6zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
        Validity
            Not Before: Oct  3 06:41:29 2026 GMT
            Not After : Oct 10 06:41:29 2026 GMT
        Subject: CN=6ac0a399-af5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:32:7b:1b:d5:be:f6:b3:6f:2f:84:48:6d:
                    ec:1d:9d:da:26:57:ec:76:93:03:56:b0:9a:d2:18:
                    c0:fe:c3:35:45:85:05:9f:fa:70:b3:bb:07:88:b1:
                    ec:e8:0c:f1:8a:9d:8b:67:a8:aa:86:4d:ce:cb:24:
                    35:25:d6:05:77:fa:13:36:5b:d5:ea:51:d4:59:21:
                    e7:0d:47:29:7d:c7:14:41:be:c8:ad:3d:30:b3:09:
                    4a:43:0f:20:4e:ae:78:f3:c5:78:8a:1d:0c:1b:3e:
                    a7:04:10:1d:02:20:5f:82:86:c5:07:f2:d0:0f:fc:
                    6d:e5:fa:6f:cb:be:e8:5c:f3:13:3c:59:f8:50:00:
                    c9:2d:7c:f0:5e:57:8d:b6:5d:32:d1:ae:c7:f3:73:
                    4e:0a:dc:35:84:52:9a:49:8b:05:cb:26:19:50:05:
                    a1:f5:f9:93:4f:42:15:70:66:16:ee:20:6f:14:35:
                    57:27:00:41:b3:9a:32:80:18:e1:9d:f5:fe:70:56:
                    5c:72:55:ad:a0:7d:97:9b:55:23:d3:40:41:fe:d5:
                    5e:5a:f8:b6:74:0e:b5:9d:91:ba:db:ce:03:b9:a1:
                    65:28:3b:ff:c2:bb:4f:a3:51:22:5b:3f:1b:59:d8:
                    ae:d1:5d:10:58:9e:0f:43:de:b0:70:9f:e5:7f:a9:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6A:9A:B1:35:D4:2B:C9:EB:2C:DC:29:6A:EA:79:A9:92:33:D1:6C
            X509v3 Authority Key Identifier:
                keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:69:d8:14:df:02:8e:c4:51:29:f7:9c:ee:cc:df:42:b4:9e:
         ca:55:b2:9a:de:1f:f3:8c:cf:f8:a4:86:ef:d7:2e:45:79:b8:
         5d:78:e5:6b:c4:d8:78:54:9d:81:fd:95:31:65:a9:35:6b:a0:
         73:60:6c:7e:5c:8f:54:9d:9c:46:63:7d:03:1c:b2:29:5f:ad:
         2d:08:76:35:f8:f6:5a:f1:18:26:7b:fd:83:a3:4d:52:7c:f7:
         b2:9e:ad:cd:91:71:b6:a2:7b:54:f5:e0:47:e1:4b:6a:33:3e:
         ce:d7:70:35:d7:07:fa:ef:9f:3f:91:79:05:ca:f3:3a:a3:ad:
         67:df:51:af:ee:81:f0:da:fe:a9:0c:0d:8a:90:3a:7e:a6:2a:
         7d:a2:55:22:92:e9:7f:da:c9:98:dd:88:1e:80:69:53:05:7d:
         a3:8b:f6:55:95:79:fb:a7:1d:1a:67:c4:0d:2b:78:2c:0e:0f:
         bf:7c:18:e9:cb:bd:b1:eb:40:cb:76:52:bb:6b:7a:23:97:ef:
         0a:0d:6d:bd:33:e7:54:9f:ce:81:79:0c:a0:ce:82:2a:f1:c9:
         4f:0a:e8:17:77:97:a8:07:0f:53:cc:61:ae:0c:c1:f3:83:7d:
         9c:b6:95:8c:b9:67:28:1e:2c:dc:f5:ef:2a:c0:69:b3:89:d7:
         aa:47:66:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:04:29 2026 by rpki-client