Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
File:                     Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft (raw, json)
Hash identifier:          awnSwDoZgd50bYMXMs5eG1bOYhsFySTWq/3gzmv/HNE=
Subject key identifier:   AB:2A:2D:E2:5C:29:77:83:A8:49:FA:F5:D6:BD:46:8D:F4:DE:DC:52
Authority key identifier: 43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04
Certificate issuer:       /CN=A91B0E2D/serialNumber=43B463066F5BA166BE023AF7FA58B4212A427304
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
Manifest number:          1C
Signing time:             Wed 07 Oct 2026 09:34:19 +0000
Manifest this update:     Wed 07 Oct 2026 09:34:18 +0000
Manifest next update:     Wed 14 Oct 2026 09:34:18 +0000
Files and hashes:         1: Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl (hash: V8ICRVWbHz9vXl/SFyM7jQAWjL0Spe4iskW3moixGKY=)
                          2: 831A285A99F811F1BFBF2EA14911F970.roa (hash: rZLgkUIG2I9KynMnivKmBbNyGpXP6BLLyC4/f2vDTdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0E2D, serialNumber=43B463066F5BA166BE023AF7FA58B4212A427304
        Validity
            Not Before: Oct  7 09:34:18 2026 GMT
            Not After : Oct 14 09:34:18 2026 GMT
        Subject: CN=6ac6121b-00f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:4f:f1:ab:65:66:2e:17:4d:6f:a1:8b:7b:
                    8d:ad:d3:a1:5e:0d:fd:9e:58:7b:36:9e:75:fa:ff:
                    3d:e8:20:2d:cc:b7:aa:40:0b:3c:8f:a9:ef:d3:0c:
                    d6:f6:f6:ed:45:35:dc:bc:f0:7d:23:d5:65:fb:09:
                    a0:8f:d9:8d:7c:26:71:86:eb:e0:89:cf:86:ec:9c:
                    93:4d:07:2c:83:8d:da:ec:2d:50:69:84:aa:d8:30:
                    56:91:ca:c5:ec:f8:8a:a3:0f:a2:06:25:57:46:28:
                    00:38:03:bc:49:ae:b8:6e:0c:14:b9:1d:e6:68:34:
                    1f:8e:cc:87:73:2b:5d:02:33:ce:9b:df:63:48:e3:
                    08:00:78:b5:23:8c:99:88:5c:5e:a6:0a:ac:cd:07:
                    c3:72:b4:a9:50:86:09:96:4f:5e:84:27:1c:f3:ad:
                    cf:88:b6:72:2a:b2:10:02:31:ae:5c:19:eb:97:c3:
                    2f:3b:7e:e3:76:3a:96:95:e9:fb:b7:b5:f7:f3:ef:
                    84:c1:d7:2e:e8:1f:16:f9:a3:23:76:26:90:69:96:
                    0e:98:0c:42:a8:7f:1b:7b:61:ce:f8:76:bc:6f:b7:
                    3d:eb:88:f2:3f:c1:20:89:24:a2:85:7d:45:66:5b:
                    9f:16:1e:47:f3:3e:d7:91:dc:91:d7:30:fb:00:ca:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:2D:E2:5C:29:77:83:A8:49:FA:F5:D6:BD:46:8D:F4:DE:DC:52
            X509v3 Authority Key Identifier:
                keyid:43:B4:63:06:6F:5B:A1:66:BE:02:3A:F7:FA:58:B4:21:2A:42:73:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E2D/DE08E61899F611F18466B77C4911F970/Q7RjBm9boWa-Ajr3-li0ISpCcwQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a7:6d:67:fd:c2:4d:ed:ec:33:09:ad:2b:00:71:25:62:d3:
         53:61:a3:cc:1f:52:b2:e8:24:22:c6:04:c1:13:fd:79:83:6e:
         b9:98:74:0a:8e:88:30:7a:1e:3c:09:f5:e4:38:a8:65:21:2e:
         74:ec:28:d0:f0:35:8b:48:b4:af:07:61:db:22:26:83:94:45:
         e8:5f:25:2a:47:3e:08:d0:8c:3a:89:21:93:f4:ea:61:ac:a8:
         1c:70:cf:85:ef:0a:b3:97:ee:91:9b:9a:73:f4:97:43:0f:f5:
         f5:a8:ce:3e:6f:60:10:84:29:bb:c5:17:b9:2e:ee:38:09:dc:
         d3:01:f2:0d:3f:22:00:9d:1c:4f:41:fa:58:d4:02:f4:93:26:
         62:e1:fa:03:4d:3a:3d:19:91:00:53:9e:e1:3c:66:e3:25:0d:
         6d:76:c6:8a:3c:df:01:d3:8d:d0:f1:ea:cd:15:da:91:54:20:
         70:40:39:6b:90:b8:69:e0:66:7d:81:c5:6f:b6:00:81:07:30:
         16:8b:13:97:a4:4d:5a:ef:fe:65:df:ab:97:35:10:b9:5e:42:
         1a:fa:87:60:f3:45:a5:01:85:77:42:de:e4:f9:54:23:d9:2b:
         42:8d:0c:29:fe:7a:9b:8f:e1:d7:d5:80:26:47:f2:a4:fd:51:
         47:e7:86:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:34:59 2026 by rpki-client