Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
File:                     T8X9jSdo5Al3QhkY-xOcM12_g4A.mft (raw, json)
Hash identifier:          c514EHO3iRUeSYRVLBF9x94ADEZoFwfBiqwme968JOc=
Subject key identifier:   C2:5F:39:6E:26:B5:CB:08:6B:C1:E1:CF:8B:DD:93:F2:BB:9A:50:15
Authority key identifier: 4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80
Certificate issuer:       /CN=A91B539C/serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
Manifest number:          45
Signing time:             Tue 27 Oct 2026 08:43:00 +0000
Manifest this update:     Tue 27 Oct 2026 08:42:59 +0000
Manifest next update:     Tue 03 Nov 2026 08:42:59 +0000
Files and hashes:         1: T8X9jSdo5Al3QhkY-xOcM12_g4A.crl (hash: PBSYgxFvdKz57vRixg88jj0DaWawQcQ3+R461RemzIo=)
                          2: DB14F0D8688611F19B84FAD56C47A888.roa (hash: 74bk58//l9arlYq1z7u+T+hfveHOzEv+5Ygge/tEw9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl
                          rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B539C, serialNumber=4FC5FD8D2768E40977421918FB139C335DBF8380
        Validity
            Not Before: Oct 27 08:42:59 2026 GMT
            Not After : Nov  3 08:42:59 2026 GMT
        Subject: CN=6ae06414-7cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:de:a8:e5:38:a8:bb:d0:1a:0e:b1:5a:e4:
                    35:a7:63:c4:fb:b8:cd:a3:62:a4:ec:25:58:75:74:
                    89:d3:df:cb:c0:f3:a3:2e:20:01:01:34:e3:e3:14:
                    47:19:f7:88:d4:d8:3b:c0:e0:1b:64:c6:59:a0:7b:
                    84:ac:26:1d:a6:f9:ac:d6:12:56:84:d7:32:04:f3:
                    13:ef:e7:2e:25:4f:bd:8c:ad:aa:d0:c1:95:7a:53:
                    d9:67:73:56:a0:aa:c5:d3:3a:42:53:93:27:60:fb:
                    e0:f6:fc:3b:f0:1c:2f:51:0e:44:09:14:a6:b5:25:
                    06:0f:ec:55:ac:f1:2e:98:11:99:05:62:6d:84:0a:
                    23:96:bf:c0:4e:1a:33:5f:fd:5b:53:02:a2:4c:cc:
                    d5:ff:03:ae:50:a1:20:14:e3:ef:6f:2f:9b:82:3a:
                    f8:94:ab:9c:4a:6e:5b:32:1b:ff:e9:04:76:b0:3b:
                    eb:71:12:c7:59:fd:1f:33:18:db:b9:76:f7:21:85:
                    04:48:fb:16:84:89:26:d1:fa:b6:bc:30:6f:76:2a:
                    38:d3:08:93:21:05:c3:c3:ab:c1:06:0b:9d:69:b2:
                    ac:6a:f8:a3:a7:53:01:1f:5c:81:a5:05:d2:eb:fb:
                    6e:b2:98:11:ff:1e:81:a8:af:0b:8a:16:46:c3:e9:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5F:39:6E:26:B5:CB:08:6B:C1:E1:CF:8B:DD:93:F2:BB:9A:50:15
            X509v3 Authority Key Identifier:
                keyid:4F:C5:FD:8D:27:68:E4:09:77:42:19:18:FB:13:9C:33:5D:BF:83:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8X9jSdo5Al3QhkY-xOcM12_g4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/63C8E552688611F1A9DD30CE6C47A888/T8X9jSdo5Al3QhkY-xOcM12_g4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:82:01:a5:b4:c6:10:22:cc:cd:5b:a1:8b:6a:99:07:b5:5f:
         80:e9:da:61:92:6f:2b:7a:69:da:16:d6:b7:6f:c6:a6:bc:d4:
         7b:6b:6d:b8:02:7d:cb:45:aa:a4:70:b7:53:33:e8:0a:8c:7e:
         3e:45:30:dc:d1:68:f5:48:bb:1e:51:89:98:78:f1:7e:5b:e9:
         3b:02:c9:26:6d:23:2d:44:1f:20:2f:9b:31:23:1d:93:b0:30:
         f8:77:19:15:bc:26:bc:90:ee:33:d7:fb:e5:b0:54:cc:46:81:
         00:4c:52:b8:36:1f:86:a4:ac:f9:65:b5:70:48:eb:59:a3:87:
         e6:9a:fe:2a:b2:c9:21:cc:0c:2f:2b:7a:32:c5:41:0f:c7:aa:
         33:4d:93:78:c6:b7:b9:85:0f:f2:5a:65:a5:32:6f:49:5c:a6:
         c3:fb:cb:cc:2b:0c:a4:f8:4b:db:15:39:d9:1d:f7:10:e8:6d:
         84:f0:cb:6c:00:48:74:b9:6b:75:00:f3:82:9b:98:47:44:33:
         dc:d1:ee:e0:f2:87:be:0c:d8:85:2a:fe:14:33:fe:07:02:af:
         3f:a6:01:c1:fd:50:7b:fe:d4:ee:f9:b8:08:51:e3:ca:4d:6b:
         28:5d:9b:95:7c:36:1e:81:66:86:eb:d2:b4:c2:dc:00:95:a9:
         9e:f9:7e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:39:38 2026 by rpki-client