Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
File:                     p_mvKNJKQySTtLK6m1Vym8CXfMg.mft (raw, json)
Hash identifier:          V2wKPOx3zvDS8+XHSpBpucZymCUuKRim8h0k10n0jis=
Subject key identifier:   4A:62:B8:D5:A4:01:F5:38:5C:5B:A3:35:D7:0B:EB:02:D5:01:AD:03
Authority key identifier: A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8
Certificate issuer:       /CN=A91AF9A1/serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
Certificate serial:       0E5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
Manifest number:          0E4B
Signing time:             Thu 08 Oct 2026 17:51:45 +0000
Manifest this update:     Thu 08 Oct 2026 17:51:45 +0000
Manifest next update:     Thu 15 Oct 2026 17:51:45 +0000
Files and hashes:         1: p_mvKNJKQySTtLK6m1Vym8CXfMg.crl (hash: KxOt/ptFJrq0sJlwpqQBk4tm68gY7AOua3XB84PxL1Y=)
                          2: 6DDABFB26CD511ED9EC9CF83C4F9AE02.roa (hash: 3dUCIeGW9ZSEXPUxbipGG/ek5tGQ+5C3cytMAnP5RWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl
                          rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3676 (0xe5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF9A1, serialNumber=A7F9AF28D24A432493B4B2BA9B55729BC0977CC8
        Validity
            Not Before: Oct  8 17:51:45 2026 GMT
            Not After : Oct 15 17:51:45 2026 GMT
        Subject: CN=6ac7d831-1f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:98:5f:f1:4b:7c:25:51:e0:42:ff:0f:62:e1:
                    31:36:b4:48:6d:0e:49:69:1f:df:a3:63:bc:6f:3d:
                    ff:3f:68:0e:bc:35:ac:7b:c9:da:9d:c8:cb:7b:22:
                    ad:c7:ff:53:d6:54:8d:ba:9f:d9:b1:0f:cb:1c:d8:
                    67:85:7b:af:45:10:b5:d6:ec:50:8b:12:e2:cf:1e:
                    db:ed:af:6f:9d:ea:68:97:b5:e5:70:ee:ac:f5:11:
                    42:b8:8a:ff:82:99:a5:a5:36:4f:91:75:84:86:58:
                    d1:0a:38:b7:e8:81:14:ea:64:a5:6d:45:ce:4b:47:
                    c6:9e:44:87:68:91:20:c7:24:f9:dc:3f:56:d7:42:
                    70:5c:62:55:83:8a:f7:bb:b2:da:93:0f:bd:3c:8d:
                    36:70:19:e7:b8:54:24:63:be:c3:49:7d:e1:15:fc:
                    3a:a1:73:ee:8c:ea:05:cd:15:83:40:ff:19:a6:9e:
                    4a:1d:94:90:9a:df:0d:41:1f:32:a9:b2:15:d8:5f:
                    ef:66:57:19:f3:ba:1f:31:c5:5b:79:68:fe:8e:f6:
                    dd:02:1d:a4:74:c9:2a:04:0b:80:1b:3e:65:79:cc:
                    fd:3e:82:6f:01:6e:0a:de:84:c3:51:6a:3c:de:03:
                    1e:22:5f:be:80:bc:af:ec:95:59:f1:8d:af:e2:94:
                    3f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:62:B8:D5:A4:01:F5:38:5C:5B:A3:35:D7:0B:EB:02:D5:01:AD:03
            X509v3 Authority Key Identifier:
                keyid:A7:F9:AF:28:D2:4A:43:24:93:B4:B2:BA:9B:55:72:9B:C0:97:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_mvKNJKQySTtLK6m1Vym8CXfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF9A1/D26015CAD37E11E98A196B67C4F9AE02/p_mvKNJKQySTtLK6m1Vym8CXfMg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:e8:16:13:7f:c5:9a:d3:6e:14:e1:8e:3c:6b:a1:2d:32:
         f4:f2:51:4c:e7:3e:e5:0d:3e:a1:c6:92:09:da:4d:5f:1d:3c:
         63:7b:48:80:24:24:14:d6:ed:d3:d3:cf:8e:bd:70:f8:d8:fa:
         4e:9f:11:88:37:8d:dd:65:b4:9d:76:44:08:40:82:5c:3c:e8:
         56:a3:25:73:54:32:1a:74:a9:90:d8:0a:06:f3:0f:9d:bc:4f:
         51:03:dd:da:2e:90:f5:41:6e:67:52:33:3a:ec:c9:45:c5:7c:
         51:c8:7e:22:84:1f:61:a6:83:b7:ce:c7:15:59:38:c6:26:18:
         05:6a:9f:2b:e6:16:2a:db:68:b7:a3:d7:ad:a1:e6:8d:43:36:
         1a:83:70:a0:ae:10:32:39:26:f2:85:a4:2b:f7:51:55:b5:93:
         7b:b5:6e:f4:fc:af:9b:21:f0:a8:f1:67:6b:7e:79:b1:d8:f3:
         58:49:a6:63:4d:8f:db:1d:b0:5c:ae:8b:13:c8:c4:49:3a:5c:
         ce:b6:6c:8d:af:b1:70:64:52:34:29:db:74:6b:b3:d6:8e:70:
         d4:84:ac:f7:73:8f:00:da:d9:96:68:d5:25:8f:7c:87:50:6f:
         23:4b:d0:fb:cd:2e:81:0a:0e:2c:db:7d:c4:d4:90:15:42:4b:
         e4:03:86:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:56:27 2026 by rpki-client