Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
File:                     sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json)
Hash identifier:          upqub+ZboWBmu7zjU09SDuAup7ndbu4ll7w+g59gWmM=
Subject key identifier:   4C:9B:FE:A6:DE:86:FF:D6:F1:81:E4:D7:E1:39:3A:53:FB:78:46:E1
Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Certificate issuer:       /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Certificate serial:       06FA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
Manifest number:          06F1
Signing time:             Sun 18 Oct 2026 22:20:38 +0000
Manifest this update:     Sun 18 Oct 2026 22:20:37 +0000
Manifest next update:     Sun 25 Oct 2026 22:20:37 +0000
Files and hashes:         1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: HpMKDpCP08rSF2e9Dfgk1AR8CB98rW1fXZNi6Tw1Yig=)
                          2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: xZwoqxfOayEV992muPvVHQ2Q6o2AK6AHasTqY2PsFBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
                          rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 22:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1786 (0x6fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
        Validity
            Not Before: Oct 18 22:20:37 2026 GMT
            Not After : Oct 25 22:20:37 2026 GMT
        Subject: CN=6ad54636-af74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:84:f7:71:c9:31:27:30:b6:d0:50:94:cb:
                    42:77:bd:a4:53:75:0a:88:dc:67:0b:a5:54:c1:f5:
                    c5:14:52:4c:f9:64:ff:b7:3a:72:79:b6:98:9e:8f:
                    d7:13:06:80:e2:01:9d:7a:b9:fe:01:ae:8c:fc:b7:
                    d6:bd:83:26:ab:42:6a:2a:eb:f7:cd:e6:96:1c:f4:
                    9c:a8:f2:1f:9a:9f:6d:6e:60:59:e9:15:83:e6:77:
                    68:5b:2f:6a:4f:c2:51:5b:bb:b7:4a:d5:7a:9c:50:
                    85:a7:42:4b:19:cd:ac:93:ca:f5:2a:ed:12:08:14:
                    43:8e:ac:20:a7:ba:9d:b0:9d:22:6a:98:b0:c8:66:
                    64:20:b9:52:8d:a5:c7:ee:6f:fc:7f:2c:03:0b:6c:
                    98:5f:ae:97:24:c4:78:ad:75:15:2e:19:9b:82:b8:
                    91:10:71:2e:41:5b:27:6a:9c:71:13:8d:fe:32:14:
                    6a:72:5c:bd:37:e8:dd:d1:3b:ff:e5:d3:2e:43:a0:
                    6f:ca:48:4d:5a:e6:44:60:ff:d7:79:1d:1e:89:0c:
                    24:a7:42:2f:13:17:0e:85:14:9f:c5:eb:35:ca:b0:
                    04:62:b5:a4:5a:cc:f3:b2:ad:23:a0:7d:1a:16:8f:
                    7b:c7:83:7e:3d:ef:16:8f:61:7e:21:3b:17:f3:08:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9B:FE:A6:DE:86:FF:D6:F1:81:E4:D7:E1:39:3A:53:FB:78:46:E1
            X509v3 Authority Key Identifier:
                keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:cd:0f:e0:ff:51:95:85:4e:ae:3d:51:c6:3a:a0:5e:0c:
         1c:7e:f9:b6:f0:37:62:98:0f:f9:1c:4d:89:d0:ed:6b:80:a3:
         e8:15:58:32:f3:5d:c3:9d:45:79:1b:ed:10:1c:cc:9e:ba:45:
         a0:4c:25:f9:b3:04:9f:c2:b4:02:e7:18:70:f4:6a:6d:fd:e3:
         55:ff:4b:95:97:15:37:53:b8:a4:cf:bb:92:8e:fa:08:18:4d:
         50:ff:92:db:df:4e:83:e8:5a:0b:39:b4:c7:71:38:ab:cb:c2:
         81:b7:cb:2e:ef:aa:7f:00:65:39:2a:52:45:3d:ca:0f:30:7c:
         72:de:1d:19:63:49:2d:24:92:80:0c:68:32:5c:7c:2f:12:d7:
         d2:de:70:f4:f3:ce:7e:ba:93:68:05:0a:df:ed:25:27:17:ff:
         25:13:7c:20:f0:ff:a8:7e:2d:82:ee:60:86:5e:e8:ae:71:cc:
         5f:96:33:f0:71:40:6c:85:74:8e:05:be:87:ea:c0:b7:82:15:
         ad:4b:e9:b0:93:f5:83:e9:5a:49:b9:e1:b3:7d:5a:0b:d2:a6:
         ee:10:97:a0:9a:4d:50:c7:9d:2f:aa:18:ca:43:2e:b7:96:86:
         bd:f2:6a:b0:63:09:6a:44:fd:d2:50:e8:b3:4b:5b:c3:cc:34:
         24:5f:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:35:43 2026 by rpki-client