Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
File:                     80gH4oZFUlDDf1PcB78ego0Zpi0.mft (raw, json)
Hash identifier:          2hiEGqmd7/z8EzewOkgwkAzeqKERjjdz8pNeiioQVX0=
Subject key identifier:   3E:F7:A8:4C:2C:B6:49:68:24:BB:FF:73:E8:C1:6D:26:62:F1:3F:68
Authority key identifier: F3:48:07:E2:86:45:52:50:C3:7F:53:DC:07:BF:1E:82:8D:19:A6:2D
Certificate issuer:       /CN=A91AE317/serialNumber=F34807E286455250C37F53DC07BF1E828D19A62D
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
Manifest number:          68
Signing time:             Tue 27 Oct 2026 08:17:58 +0000
Manifest this update:     Tue 27 Oct 2026 08:17:57 +0000
Manifest next update:     Tue 03 Nov 2026 08:17:57 +0000
Files and hashes:         1: 80gH4oZFUlDDf1PcB78ego0Zpi0.crl (hash: lsyb8TbT13Emcj55Gf255FyHkIWD6CVKAa1UhxqZ1SI=)
                          2: 6AD7B83833F111F1BEF90B0CBC833773.roa (hash: 8WPkjnCq5gWzPkDaukbewo2KFmM/DSl1x5vnl/o5OAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.crl
                          rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE317, serialNumber=F34807E286455250C37F53DC07BF1E828D19A62D
        Validity
            Not Before: Oct 27 08:17:57 2026 GMT
            Not After : Nov  3 08:17:57 2026 GMT
        Subject: CN=6ae05e36-09fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:86:16:02:e1:1f:7c:26:23:47:b3:d8:f5:
                    39:d2:d4:4a:c3:d9:99:e2:cf:8f:66:c9:cc:e2:bc:
                    02:6d:39:f0:2f:51:49:1b:a7:db:0d:77:d6:50:71:
                    ec:7f:65:da:3f:63:71:93:39:d9:34:f2:da:ef:49:
                    28:64:68:9d:2e:23:8f:8f:26:05:11:00:26:43:ec:
                    42:3e:75:6d:30:6c:c0:d8:10:a4:db:7c:3a:8d:32:
                    62:f0:4a:08:7f:3f:51:72:be:61:8c:f2:84:91:8f:
                    06:fb:91:a4:7c:57:b1:7f:ba:bd:df:bd:bd:6c:db:
                    71:d2:91:25:44:a0:ed:43:60:8d:af:ec:1e:f8:98:
                    1c:02:57:f0:9d:07:cd:bc:f5:cc:bc:89:59:6e:36:
                    fe:9b:5b:96:3f:48:98:18:25:4d:1c:52:07:db:14:
                    8f:d3:03:e1:e1:94:3e:7b:94:2a:2b:6f:d9:80:2f:
                    a8:53:04:22:8e:36:00:4f:2e:01:f8:22:48:54:c9:
                    d9:66:f4:ec:e4:ca:99:7c:ec:65:f5:5f:54:08:ae:
                    a6:69:a4:a4:8e:c0:4c:16:c6:a5:b6:ab:57:ae:89:
                    b7:ee:79:30:91:99:30:6c:e9:3e:de:99:d5:02:84:
                    f7:cd:31:cb:e0:b4:27:1a:51:ac:88:9f:71:b9:c0:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F7:A8:4C:2C:B6:49:68:24:BB:FF:73:E8:C1:6D:26:62:F1:3F:68
            X509v3 Authority Key Identifier:
                keyid:F3:48:07:E2:86:45:52:50:C3:7F:53:DC:07:BF:1E:82:8D:19:A6:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80gH4oZFUlDDf1PcB78ego0Zpi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE317/E8E6BA2C33F011F1AAB58800BC833773/80gH4oZFUlDDf1PcB78ego0Zpi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:62:3a:80:b1:8a:db:ed:23:ce:d2:70:c7:f9:42:f2:3f:
         a0:ab:af:72:74:1b:64:e1:fe:23:bb:e2:1e:45:f0:09:5c:6f:
         27:ce:b2:92:02:b0:48:3c:aa:db:d4:8a:ea:6a:0a:ce:b8:a9:
         23:0e:a6:a8:fd:1f:a0:ff:b3:2f:eb:36:5f:90:de:ca:67:35:
         d5:4e:3d:da:be:10:35:78:da:9a:a7:87:ee:f6:0f:81:97:21:
         58:99:d6:a5:81:e4:17:9c:39:ca:16:bc:fc:d8:a7:1e:75:21:
         f4:76:c3:51:65:09:53:bf:68:56:0a:5a:43:3d:b5:6b:1a:e2:
         94:28:5a:4b:3a:ed:95:93:f3:a1:46:c5:02:d1:25:1b:ef:76:
         39:53:d1:8b:e2:c6:d4:bd:06:01:31:f7:2e:a6:a1:d1:83:bd:
         8e:6b:17:42:b6:23:fb:55:2e:44:99:e3:ec:eb:e4:77:9b:b7:
         37:88:56:4d:a4:cb:8f:ce:a5:28:78:1d:7a:1f:28:25:1b:10:
         b2:e8:fa:d6:63:c7:b9:74:a5:e7:18:1e:e7:16:42:ff:70:fc:
         26:2a:59:36:1d:0e:ba:87:fd:d2:4b:b8:1c:87:b3:c9:a1:18:
         41:89:0e:53:7f:92:e3:44:79:64:e9:a7:14:1d:e9:10:ba:54:
         3f:c4:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:27:54 2026 by rpki-client