Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
File:                     -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json)
Hash identifier:          /Eruk8H0n6IkyJxNRMBO+fHquqe1yHWDwsysIdkSzYc=
Subject key identifier:   75:32:C4:F2:2C:5A:32:12:D7:A9:B1:46:63:DA:ED:5B:9B:CA:3A:C2
Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50
Certificate issuer:       /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
Certificate serial:       1197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
Manifest number:          1B49
Signing time:             Sun 04 Oct 2026 17:14:13 +0000
Manifest this update:     Sun 04 Oct 2026 17:14:13 +0000
Manifest next update:     Sun 11 Oct 2026 17:14:13 +0000
Files and hashes:         1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: v2e7tuTei9Mhwi/6stRdohZb/+qdxzR00AvpuFYKMRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4503 (0x1197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50
        Validity
            Not Before: Oct  4 17:14:13 2026 GMT
            Not After : Oct 11 17:14:13 2026 GMT
        Subject: CN=6ac28965-8538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f2:6b:46:87:63:df:fc:33:dd:f1:93:86:9a:
                    55:b5:86:8a:86:d4:62:c7:3d:25:db:c8:f9:98:93:
                    83:99:8e:ee:55:25:2d:85:e2:09:60:ea:1c:74:b9:
                    dc:3d:e1:6f:88:6e:d1:ed:c1:ee:67:db:50:95:2c:
                    02:0c:93:f8:b4:40:50:3f:06:72:f5:3c:44:e2:69:
                    c1:6a:a2:f7:f6:29:eb:71:03:da:9d:7e:01:50:49:
                    3f:48:fe:d7:a7:e2:d1:3e:da:51:df:f9:02:1d:eb:
                    71:7d:91:41:5a:f1:bc:22:4c:de:00:02:df:dd:f5:
                    3a:8c:d1:51:bb:64:1c:1a:0b:68:88:6e:82:92:7c:
                    39:4a:56:d5:e9:e6:54:3e:46:33:e4:01:e3:43:5a:
                    49:04:e9:6f:3b:0c:72:61:e5:1c:7d:8d:1e:7a:46:
                    bc:a7:69:2c:29:24:e3:b9:0b:97:a9:17:c1:58:f5:
                    da:d9:a2:e9:5e:04:17:ed:8b:d3:d7:bb:17:4b:35:
                    6d:0b:e5:1f:b3:fb:f4:39:9e:0c:2d:51:b9:95:c5:
                    e6:b9:1d:2c:61:29:91:61:61:7d:2e:d4:0a:2f:80:
                    21:6c:86:ce:e9:b6:36:7c:f6:fa:90:8a:e4:26:a7:
                    7a:d6:73:45:8a:3b:22:8d:df:00:ea:0e:ba:6b:a0:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:C4:F2:2C:5A:32:12:D7:A9:B1:46:63:DA:ED:5B:9B:CA:3A:C2
            X509v3 Authority Key Identifier:
                keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:d1:2e:80:3b:88:e3:e0:31:dc:0f:ef:94:f7:e7:66:17:
         3b:d0:54:86:20:bf:64:b8:5c:9d:e1:18:f0:95:86:ff:bf:4e:
         e4:64:f6:05:12:6c:59:5a:e5:b5:8b:97:73:74:f4:6c:e0:13:
         36:ba:c0:bb:ab:36:48:e5:32:be:30:de:be:73:17:ec:61:d7:
         f9:bd:8a:2b:8c:c1:2b:c3:7d:02:44:47:15:a8:26:6f:bd:f0:
         dd:fc:28:79:40:c3:ea:51:e8:81:07:64:db:6f:7f:c9:73:5c:
         e6:e8:60:b2:95:7f:cc:53:57:3e:a8:4e:f5:03:40:3f:8a:3a:
         ab:3e:52:2e:5c:c3:3d:1b:a7:9c:d1:4f:b6:c0:fb:6d:a7:ca:
         10:15:3b:cc:ca:a3:37:4f:f1:80:08:b3:54:76:bb:f2:ea:cf:
         6c:2a:6b:b3:f8:38:53:42:fd:59:a6:3d:c0:5d:e0:af:cc:e0:
         ac:d1:17:12:7d:3a:1d:8c:81:e2:89:83:72:36:78:7f:4e:b4:
         49:37:e4:f4:3a:ca:2e:84:8b:82:a9:cb:97:b7:b1:bf:cb:91:
         5c:52:42:40:f5:34:18:9f:00:33:0f:d3:20:a7:90:2d:f6:43:
         3b:7d:33:ba:a6:24:fd:e6:5a:7d:68:e4:8c:e7:c3:07:91:2e:
         4f:81:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:09 2026 by rpki-client