Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
File:                     reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json)
Hash identifier:          M2idrdBRzYgaCp7IB6QDDkO4Y+64pn+g0Amy1JuJkxU=
Subject key identifier:   B6:D2:91:C8:B6:7C:3B:20:ED:D2:A6:42:9D:B6:22:63:54:C3:F9:DD
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       13A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
Manifest number:          138F
Signing time:             Thu 10 Sep 2026 16:55:46 +0000
Manifest this update:     Thu 10 Sep 2026 16:55:45 +0000
Manifest next update:     Thu 17 Sep 2026 16:55:45 +0000
Files and hashes:         1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: OcwkqtuP5a9F3XKaxO73TS2TmVSgMyaOtj0mP1Z00lw=)
                          2: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: GnlfRpN0Q2j+B4AJ/Xomgb1CKwG1WuNWYrLjmKqch0M=)
                          3: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: V5ktLH4Czw+pnIMpuCPY+6sVgXH7i4p99Or3277tWXA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 16:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5031 (0x13a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: Sep 10 16:55:45 2026 GMT
            Not After : Sep 17 16:55:45 2026 GMT
        Subject: CN=6aa2e112-362a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:b8:73:f4:37:94:67:29:3d:53:8e:59:ba:
                    72:76:52:82:49:57:c8:78:fc:4e:29:3f:3a:a6:ac:
                    25:f1:a6:76:5f:5e:14:c4:94:ea:c1:2b:08:97:14:
                    e4:5d:8b:1c:39:f4:6f:48:ac:a6:53:d3:bf:9e:4c:
                    a9:03:47:11:b4:51:56:16:de:19:ab:64:f7:20:d3:
                    35:a1:de:90:37:64:3d:3f:95:b7:c1:92:43:98:d7:
                    05:d8:2b:16:aa:4c:67:ee:d4:d5:d6:72:0a:95:22:
                    98:3b:9e:3a:bf:a1:e6:fe:2c:15:79:90:1e:ea:96:
                    96:24:a8:3d:3c:9c:36:c6:07:a0:2b:fb:5a:88:10:
                    5f:8b:1a:f8:4c:0b:35:5b:be:9b:53:8c:ac:71:aa:
                    05:9e:66:a8:95:6e:e4:06:6f:a9:d3:95:57:8e:98:
                    9c:1c:d6:4f:79:d6:ec:b9:6d:b6:63:19:bf:fb:cd:
                    af:4b:c6:7d:06:fb:76:c1:ac:0c:66:8d:79:ab:ac:
                    af:28:7a:e1:0e:84:70:b8:62:66:72:33:d1:4d:c5:
                    9a:8d:f5:f4:f8:be:5c:de:c1:79:85:da:6b:16:f1:
                    a6:80:27:cd:76:09:ab:7d:9d:ed:eb:81:d9:54:be:
                    3f:33:98:62:c7:eb:5b:c4:d5:c3:6e:eb:8a:d9:9d:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D2:91:C8:B6:7C:3B:20:ED:D2:A6:42:9D:B6:22:63:54:C3:F9:DD
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c9:21:60:6a:71:93:7e:4d:31:85:01:47:20:a7:f8:60:f2:
         23:61:87:ef:b7:36:53:a7:b8:15:8c:fc:8c:c3:ce:f4:83:aa:
         79:44:40:3f:c1:70:4e:b3:3d:ef:d0:75:75:24:25:2a:e2:38:
         96:57:77:0f:1d:ef:25:69:02:0a:15:31:7d:76:06:c4:bf:97:
         c0:7c:2e:dd:20:41:da:f3:af:57:36:27:28:7a:62:96:24:53:
         4e:1a:49:6e:e2:48:71:53:86:79:ee:2f:26:92:28:6c:15:a0:
         93:a6:c2:9a:25:9b:7b:e7:38:97:42:c9:11:28:29:19:47:74:
         51:fc:3b:af:34:c8:45:ba:38:cc:1b:ca:91:19:84:0b:34:d7:
         c6:18:f6:6f:2d:c7:06:61:36:8c:39:4b:d8:29:c9:b5:d5:53:
         c1:9e:37:92:b6:4b:b6:ed:7e:f3:f8:3b:f7:58:7e:d8:15:00:
         ea:a9:a4:40:9b:79:d1:c8:19:40:28:84:6e:d0:90:e2:0f:f4:
         a2:61:43:90:e1:f7:07:fe:cc:a3:c1:b5:9e:3a:e7:2c:e0:3d:
         d1:17:f9:a0:9c:03:c3:7d:3f:b0:1a:52:51:5c:ab:b0:6e:9a:
         df:68:46:b2:79:f9:19:14:ba:dd:60:53:2d:28:aa:e8:c1:dd:
         c4:f6:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:52:55 2026 by rpki-client