Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft
File:                     oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft (raw, json)
Hash identifier:          2KDrZidfybdEW/5RtCqoWVVqUCqhvWmZ92Xg4fCMRIo=
Subject key identifier:   80:B4:23:6C:C6:6E:58:C3:81:0A:7D:5C:F3:A6:6E:D5:65:20:3B:34
Authority key identifier: A2:2F:17:6C:76:3B:4D:DE:D9:26:55:F1:76:3C:11:76:3C:62:C2:15
Certificate issuer:       /CN=A91AB26A/serialNumber=A22F176C763B4DDED92655F1763C11763C62C215
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft
Manifest number:          69
Signing time:             Wed 07 Oct 2026 08:32:56 +0000
Manifest this update:     Wed 07 Oct 2026 08:32:56 +0000
Manifest next update:     Wed 14 Oct 2026 08:32:56 +0000
Files and hashes:         1: oi8XbHY7Td7ZJlXxdjwRdjxiwhU.crl (hash: zYAR2SZXNLcja8PpvTbvJ71fmdQvfI3PkyWR0GvmeRo=)
                          2: 138DFCCA233B11F1B97BCD11A8833773.roa (hash: m0UKXn0kIhDGQtzGm8h525ANZur9fKF0yfVFZjn0f38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB26A, serialNumber=A22F176C763B4DDED92655F1763C11763C62C215
        Validity
            Not Before: Oct  7 08:32:56 2026 GMT
            Not After : Oct 14 08:32:56 2026 GMT
        Subject: CN=6ac603b8-dbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:a4:02:a9:04:7a:c9:21:45:4a:3d:8c:da:
                    7d:1d:dd:42:6e:a2:b4:35:ad:7b:55:70:91:5a:91:
                    4e:08:97:98:00:8c:87:33:34:25:d3:c5:cf:59:ab:
                    5d:08:7f:2b:b0:13:09:06:26:42:bc:97:73:c9:6f:
                    54:21:35:8e:68:08:29:b5:d9:f7:9f:fe:cb:fe:10:
                    1d:68:62:ca:7d:03:6c:68:e1:67:02:52:b5:f4:33:
                    21:2a:19:07:55:90:33:d2:c5:08:d2:e3:81:09:69:
                    5b:24:3e:e6:6c:1a:09:e4:96:01:fe:8d:42:0c:f7:
                    61:d8:e7:72:6c:56:89:d5:0b:5b:61:17:52:bc:ba:
                    78:74:7a:1e:de:2c:35:06:60:48:e6:0a:81:c8:cb:
                    aa:e7:ba:5a:ed:ca:ee:4e:a6:2f:9f:ac:f6:f2:b8:
                    ca:50:6f:79:15:d5:f6:9c:99:23:bf:db:0c:22:ba:
                    83:8a:12:77:ba:ca:91:57:42:4a:cd:aa:f9:d8:e5:
                    5a:cb:13:9c:86:4e:c2:16:f7:f9:e2:ec:b4:b9:c3:
                    3e:90:52:e3:bb:6c:78:7b:a0:9d:7c:c8:4c:16:16:
                    ab:f3:f2:07:57:61:ec:db:fa:ec:ef:17:5e:1a:55:
                    e3:8c:b7:c6:48:10:d7:a0:6e:bc:84:5f:cb:a7:8d:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B4:23:6C:C6:6E:58:C3:81:0A:7D:5C:F3:A6:6E:D5:65:20:3B:34
            X509v3 Authority Key Identifier:
                keyid:A2:2F:17:6C:76:3B:4D:DE:D9:26:55:F1:76:3C:11:76:3C:62:C2:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB26A/64173DDA232E11F18537A780A3833773/oi8XbHY7Td7ZJlXxdjwRdjxiwhU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d8:c2:cb:dd:0e:c6:d3:6c:78:e3:6d:3f:e1:25:38:1c:8e:
         74:86:f6:01:da:a9:c0:96:06:fd:22:ab:61:2d:37:93:05:18:
         bc:ef:da:f9:e5:92:ef:05:38:99:d4:db:f3:32:e1:cc:9f:09:
         47:52:14:1d:9b:40:f8:f7:ee:80:df:bd:f5:cf:f6:d9:7a:b4:
         c9:35:de:64:28:ab:01:69:d4:5e:80:f0:9a:ac:84:1b:d4:79:
         b7:ec:55:70:f7:05:2e:40:91:49:d5:fa:ec:a3:27:a0:36:58:
         d1:09:00:5a:37:b6:43:be:86:94:c7:39:94:7e:da:cb:67:e5:
         52:e6:e2:76:44:c2:af:54:80:bd:64:e6:e5:f7:15:d2:90:72:
         39:ed:65:a0:b4:d1:98:78:70:2f:4f:69:7f:f2:df:15:dc:dd:
         30:ee:ae:7e:db:db:0a:ae:c2:8b:d4:e9:97:3d:06:6f:9c:af:
         20:8f:81:a0:13:06:3f:de:40:b1:cb:e4:a9:51:38:51:23:6c:
         d4:1d:40:fc:79:7c:09:a8:4c:5d:ab:0b:d6:a7:03:7c:72:f2:
         c0:b6:c8:14:53:04:91:c8:a2:c7:af:26:86:50:5f:71:96:0f:
         f1:28:7d:d6:b6:89:1c:50:d5:6d:b5:ce:6f:ce:9a:5f:5f:47:
         f2:90:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:38:02 2026 by rpki-client