Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File:                     S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier:          A3v6jg6qqAijoPqMTm/4GYN5yemtDLBYuUCFWskhtIk=
Subject key identifier:   19:64:48:E6:09:95:97:9E:D8:36:A1:F7:89:04:86:86:4A:51:63:AF
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer:       /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial:       02CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number:          02C4
Signing time:             Mon 05 Oct 2026 01:35:22 +0000
Manifest this update:     Mon 05 Oct 2026 01:35:21 +0000
Manifest next update:     Mon 12 Oct 2026 01:35:21 +0000
Files and hashes:         1: S630I4efFU256siNFgtOEW9mzak.crl (hash: BcpLyfu57Oxy48O/BvYFQCWV+SxJG74HXSMTUAaPLqE=)
                          2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: slVc2MAuomJ1lVCpaSZf3MYFxy+QIrbxktNgNNmSdu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
                          rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714 (0x2ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
        Validity
            Not Before: Oct  5 01:35:21 2026 GMT
            Not After : Oct 12 01:35:21 2026 GMT
        Subject: CN=6ac2feda-4eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:a0:59:43:4c:45:a1:a2:27:de:c9:96:5b:
                    a4:b7:14:86:2c:93:0c:93:c4:12:2e:02:ef:20:d6:
                    67:34:27:2c:48:ab:bb:e4:8e:13:91:6a:0a:e5:74:
                    14:5a:ad:68:6e:32:ee:57:1d:f1:df:ee:57:0d:93:
                    8f:93:bf:ad:0f:62:9d:35:19:c2:3a:8b:bd:3b:c8:
                    dc:8c:ab:bf:33:33:b0:b5:4b:7d:97:0b:a3:5c:d6:
                    0f:d9:ce:c0:d8:86:bc:23:16:54:66:a6:c8:c9:79:
                    63:fe:ea:56:62:a3:18:8d:09:bd:04:ba:37:be:86:
                    48:fb:48:aa:43:ba:94:89:e1:76:6b:cc:ed:25:87:
                    b2:ef:ef:a6:50:49:16:f0:e6:7f:23:61:a8:f5:29:
                    69:85:2d:5e:a9:38:a0:13:e3:b2:35:c4:c6:86:1c:
                    c6:d9:63:37:87:b3:8f:5c:03:92:3b:56:c7:2d:0a:
                    40:9f:5f:5d:ab:f2:71:33:1b:af:2b:34:34:83:bb:
                    84:85:99:c4:32:ef:ce:d1:98:87:da:75:9e:f3:b1:
                    ed:ec:a0:e6:a5:41:b8:7f:5f:66:02:d0:c0:b3:49:
                    de:83:5d:60:16:80:94:88:60:3e:fd:ef:b7:e5:35:
                    c4:eb:34:50:a6:c6:88:3b:28:9a:76:cb:c2:a8:ed:
                    ce:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:48:E6:09:95:97:9E:D8:36:A1:F7:89:04:86:86:4A:51:63:AF
            X509v3 Authority Key Identifier:
                keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:88:f2:77:50:bd:87:fa:f2:a6:46:93:85:b8:e6:c0:4f:98:
         5e:9b:55:a7:21:b6:06:0f:e8:dc:bc:27:ee:40:3b:69:43:27:
         e2:8f:1b:d9:4e:a1:28:02:44:13:3a:9e:f2:4a:7b:a3:5d:f7:
         e3:09:67:5b:61:ed:52:9e:65:6a:65:9c:e2:7a:df:3a:98:04:
         25:c4:5a:53:35:f2:1b:b2:7f:3a:2a:3b:ea:f9:89:76:8d:2e:
         2f:de:bf:60:a2:27:e8:0d:e2:1c:77:c4:4a:21:d1:be:fc:f1:
         33:98:89:d8:f0:ec:49:9b:98:fd:f3:d2:0d:75:1a:c1:53:4b:
         e6:bf:98:d6:be:41:11:c4:95:4e:47:e8:95:fe:1c:59:25:60:
         f3:6b:8f:0f:c7:a8:16:f4:25:47:93:e7:56:a0:19:e8:f6:68:
         a1:e7:23:46:db:0a:b0:c5:f6:8b:d0:15:f1:10:63:09:6e:68:
         5e:92:e9:6c:14:d4:77:75:94:67:ac:53:87:9c:cc:cc:fa:73:
         a4:3f:90:25:aa:d1:d7:48:99:9d:c6:80:7d:57:0d:9c:b0:51:
         0e:24:69:bc:6c:3a:5b:f0:49:a6:47:f6:91:43:4f:0f:98:c3:
         b5:39:c5:46:55:64:43:d5:7c:72:74:06:ff:c3:99:b3:25:0e:
         02:2c:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:07:52 2026 by rpki-client