Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
File:                     4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json)
Hash identifier:          3TqCgNQbDHxwMeeiGBhJUFowZo+tRPxVnRIghm+aDnI=
Subject key identifier:   47:F9:01:F5:DF:FE:C9:C4:B3:DA:4D:1B:B8:CA:CF:CA:88:61:2A:E2
Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2
Certificate issuer:       /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
Certificate serial:       08B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
Manifest number:          08A9
Signing time:             Fri 02 Oct 2026 20:55:20 +0000
Manifest this update:     Fri 02 Oct 2026 20:55:20 +0000
Manifest next update:     Fri 09 Oct 2026 20:55:20 +0000
Files and hashes:         1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: oFRqfUbi7ogGzjct5AkMaArmabl2/NPoCTIy4zUP3lg=)
                          2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: 8zfgdLC6VsDkgcK1mHGF+FaKm382kRVtAP3ox2ZhRI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231 (0x8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C53, serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
        Validity
            Not Before: Oct  2 20:55:20 2026 GMT
            Not After : Oct  9 20:55:20 2026 GMT
        Subject: CN=6ac01a38-823c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:cd:6f:ae:9d:23:d3:e7:a9:09:f6:df:0b:
                    eb:7a:70:84:4a:b6:91:81:69:49:c5:7c:ef:bf:3e:
                    48:05:a7:05:ed:e5:57:5c:b8:f7:3d:e8:8c:ea:77:
                    a2:ef:17:f0:cb:e3:3b:f3:6f:29:e5:f1:14:98:8f:
                    18:cb:e0:94:c9:c7:23:6f:83:5d:c0:16:33:c9:af:
                    e6:01:e6:a5:e5:34:90:39:1d:d1:6a:60:15:99:c3:
                    2f:ce:42:ef:3f:06:1d:04:81:f9:d3:59:b9:70:fc:
                    cd:93:92:fc:8f:57:a7:c7:6b:58:e8:68:4d:84:dd:
                    24:d2:8a:e4:ec:98:fe:6d:c5:39:94:5e:cd:76:b2:
                    c3:47:7f:84:47:65:d0:79:d8:a4:88:67:01:f5:98:
                    fc:e8:2b:21:39:56:a0:f2:d4:b9:28:be:d9:87:fb:
                    3f:99:aa:76:fc:08:be:d2:5b:1c:46:15:2f:b4:30:
                    1b:20:fc:94:1a:2f:4f:61:95:84:cc:8d:88:f9:4e:
                    c7:03:a0:1b:b7:5c:cf:be:63:94:1f:d7:79:83:90:
                    f5:45:5d:f8:d6:d9:77:e3:82:8f:73:5e:85:5c:27:
                    9d:02:b4:c7:63:ea:49:b6:2a:7f:84:89:af:40:a8:
                    23:6d:f1:56:87:6f:6e:95:51:d8:7f:79:0a:ca:08:
                    29:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F9:01:F5:DF:FE:C9:C4:B3:DA:4D:1B:B8:CA:CF:CA:88:61:2A:E2
            X509v3 Authority Key Identifier:
                keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:eb:6a:eb:02:1a:74:c4:4f:75:87:73:99:1d:69:83:77:be:
         0a:12:da:0e:6e:e2:06:26:1d:d2:d9:f5:f7:2f:13:02:7f:73:
         c1:eb:85:f0:18:3d:fc:96:3b:f1:e4:f3:5f:1e:17:0a:eb:79:
         d8:28:8f:55:ac:d3:10:33:c1:ee:c1:b6:8c:fd:a0:1b:f6:c4:
         23:fc:2e:63:95:5c:c1:55:6d:90:df:c4:83:88:25:92:8e:c7:
         d6:4d:78:bb:4a:95:c1:5c:fe:df:ee:3b:c5:00:da:12:c1:42:
         9b:77:44:a2:da:41:1d:65:4f:12:3f:4d:16:8f:c8:8d:ce:87:
         1a:af:99:b6:01:d5:7c:a5:e9:ac:67:19:47:9b:3c:72:cd:84:
         2d:a2:7c:ff:63:8d:e2:ba:ec:57:37:29:fc:09:b7:b4:22:7d:
         94:3a:76:d3:46:1f:c8:c6:fd:33:47:94:6e:3f:d6:0b:2c:82:
         ca:0d:52:8d:47:a4:ea:d2:b8:f9:75:09:11:a3:c5:cf:82:94:
         e7:66:c0:00:23:6b:8b:3a:dc:6c:5a:a3:4f:79:f7:ff:f3:46:
         ab:b0:70:d7:68:6d:e2:ca:c1:8b:3d:22:8e:01:7f:72:c9:a0:
         8d:4b:77:73:55:0b:a4:ac:74:b9:fb:f0:4a:e9:17:5d:1a:87:
         e2:f4:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:46:18 2026 by rpki-client