Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
File:                     PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json)
Hash identifier:          Y8KG00qn7aIVgedpUJ2jQqVMWroVmpj2lZYyL9IsZRo=
Subject key identifier:   DD:FE:9E:13:AB:D8:04:4B:FE:FA:F6:BC:56:71:AE:3B:94:49:9F:B9
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Certificate issuer:       /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial:       0D05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
Manifest number:          0CF9
Signing time:             Tue 06 Oct 2026 18:31:23 +0000
Manifest this update:     Tue 06 Oct 2026 18:31:23 +0000
Manifest next update:     Tue 13 Oct 2026 18:31:23 +0000
Files and hashes:         1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: p+Yftue0bUal8oe80H0NKcu+s4ulHF2GDXjSz9LD3RY=)
                          2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: 5LQSvZiQRtcpiVGRvUHsnqIGsr4GbY3WPSSrXUw5HV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3333 (0xd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
        Validity
            Not Before: Oct  6 18:31:23 2026 GMT
            Not After : Oct 13 18:31:23 2026 GMT
        Subject: CN=6ac53e7b-2454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:8e:74:42:df:6a:24:6f:de:8b:9c:60:45:
                    e7:76:de:41:52:4e:65:b9:1d:dc:56:b3:54:25:4b:
                    90:a3:c2:df:c4:4a:dd:08:e3:2c:29:e1:6b:6a:f0:
                    0a:56:e5:b0:d5:cd:b9:5e:8b:4f:8b:3c:e8:f0:51:
                    ad:64:d4:77:b9:ba:8f:16:48:66:6d:4a:ea:f2:5a:
                    d6:0d:2a:4f:c7:92:6b:54:25:f9:e0:27:7a:a9:be:
                    dc:78:33:35:86:62:c3:02:9c:4b:e8:0c:30:03:19:
                    e6:c0:96:9c:5d:dc:87:80:76:5c:d1:ca:11:73:8f:
                    78:a2:ce:6d:97:7e:f2:35:95:9e:d9:08:12:eb:bf:
                    f6:9c:99:e3:d0:e0:27:54:ed:ca:31:38:8e:9b:15:
                    db:85:d6:53:93:41:ad:df:9b:cf:81:ae:fc:20:57:
                    7c:dc:c5:8b:b5:11:06:9f:8c:d2:7d:8a:7e:78:8e:
                    20:db:5a:d1:e3:25:1b:f0:0d:aa:2e:e1:8f:a9:f4:
                    15:b4:6c:b9:87:bb:32:e9:95:9d:6d:d9:d5:a2:72:
                    bf:6a:ec:a7:da:6c:3e:b1:37:59:ec:d1:7e:03:f8:
                    4e:4f:8f:03:92:83:30:1d:8b:d6:92:cc:6d:78:47:
                    0b:44:40:c4:f5:63:ba:97:e7:8b:ff:d1:28:67:ed:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FE:9E:13:AB:D8:04:4B:FE:FA:F6:BC:56:71:AE:3B:94:49:9F:B9
            X509v3 Authority Key Identifier:
                keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:31:6b:53:69:2b:52:e2:54:60:74:34:f1:55:ff:77:b7:9f:
         25:7b:ca:46:11:5f:8b:bc:b5:c1:a8:09:1c:21:c7:5c:0b:fb:
         46:36:c0:c3:b6:28:86:0f:30:c6:e4:96:99:db:fa:8c:01:64:
         89:8c:56:eb:5a:33:9a:f8:93:18:1f:c6:a2:cc:46:0c:6d:c6:
         1c:9c:d4:1d:2a:7e:69:ad:5e:a9:a4:8b:7e:43:df:86:da:4c:
         2e:9f:d8:f6:02:bf:b2:0c:72:fe:d7:8c:c8:a0:73:f0:ce:4a:
         3d:de:79:cc:0b:89:49:ee:72:52:fd:f0:bc:a0:da:72:74:ee:
         f3:b0:b6:d8:51:5b:e5:98:32:52:44:46:f9:c0:65:88:78:a4:
         3b:38:ef:f3:b7:e6:db:24:88:35:06:d9:6c:c3:c7:11:f4:da:
         2f:4c:7a:fb:d4:92:bb:c6:dd:07:e2:29:74:b3:60:bf:b8:05:
         7c:71:39:84:28:10:43:0b:c4:10:57:e3:66:b6:06:f7:a3:38:
         f4:60:13:35:4c:d3:4b:a8:04:fa:af:db:3e:3f:a5:18:f7:54:
         17:ca:70:f8:30:c9:9d:36:55:d7:3e:92:80:fe:54:22:67:d8:
         c0:aa:0d:ec:3a:f6:6a:f7:b6:76:b5:f5:3e:a2:14:cd:ab:45:
         a8:27:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:55:08 2026 by rpki-client