Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
File:                     U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft (raw, json)
Hash identifier:          ormkisFk72m/TxaTrN/YBfNw7O8/Q9Xr36QlRRUyR8s=
Subject key identifier:   60:D1:86:B7:B2:52:96:EF:AA:79:45:11:DF:DD:8F:59:39:D8:52:43
Authority key identifier: 53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4
Certificate issuer:       /CN=A91BA251/serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
Certificate serial:       0649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
Manifest number:          0639
Signing time:             Sun 04 Oct 2026 22:45:15 +0000
Manifest this update:     Sun 04 Oct 2026 22:45:14 +0000
Manifest next update:     Sun 11 Oct 2026 22:45:14 +0000
Files and hashes:         1: U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl (hash: PryFhmVQeVYMQPHJnHAybjBpln9aEpijBUFkX91bFXE=)
                          2: 567C8DB8354111ECBCC05B63C4F9AE02.roa (hash: D1zfHUB1LWQ341UcdC/TPCPRcXgSjIBADJbdxAB0gsQ=)
                          3: DEA2CCF8050511EEB4D8141FC4F9AE02.roa (hash: zYCoiToL+tyHYrArPulDS1EFhOBSHqWiPD13BOonOMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 22:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA251, serialNumber=53D5DB870E5CCD48E98D73560DBD5E65946C2DD4
        Validity
            Not Before: Oct  4 22:45:14 2026 GMT
            Not After : Oct 11 22:45:14 2026 GMT
        Subject: CN=6ac2d6fb-940a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:39:8f:b6:e2:09:bb:d2:20:c7:36:21:49:
                    07:84:5e:d8:6d:c2:6f:77:bd:76:61:c1:58:d9:28:
                    89:2c:ab:4b:33:64:6a:03:28:63:e0:60:6b:5c:17:
                    f9:65:86:0c:e5:26:58:e9:72:11:33:1d:d7:30:99:
                    6f:46:df:13:c9:32:ba:a2:4b:6f:87:27:b2:f1:10:
                    16:68:96:13:63:aa:9d:7b:16:f7:14:98:64:21:0e:
                    be:ab:08:1e:70:8b:87:a5:50:b0:43:4a:63:95:db:
                    1d:f9:64:94:ea:79:1b:2a:d5:76:ca:6c:e8:66:93:
                    b9:d3:53:f3:14:05:8e:8c:c4:3f:6c:f7:9d:f8:6d:
                    20:16:ce:0e:a3:88:44:0b:ab:5f:7d:db:4f:18:58:
                    2c:e8:7c:f8:a0:6b:5c:44:4a:69:c5:8d:76:c8:24:
                    36:b9:75:3a:62:16:d4:a3:76:fa:ec:86:0f:f4:0a:
                    13:56:2c:d6:37:dc:79:c5:45:9d:68:4a:e9:f2:60:
                    c9:d1:4c:a8:59:77:c1:06:2a:84:43:a0:a9:d0:54:
                    c0:5b:7f:d9:08:d1:94:fb:85:a9:21:19:22:40:ee:
                    70:16:87:f3:a4:1c:08:d8:1e:dd:6c:c1:25:34:d4:
                    8d:52:96:b3:1d:02:e7:b9:f3:ea:18:ef:7d:ad:19:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D1:86:B7:B2:52:96:EF:AA:79:45:11:DF:DD:8F:59:39:D8:52:43
            X509v3 Authority Key Identifier:
                keyid:53:D5:DB:87:0E:5C:CD:48:E9:8D:73:56:0D:BD:5E:65:94:6C:2D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA251/D93D7960F74811EBA75FCC13C4F9AE02/U9Xbhw5czUjpjXNWDb1eZZRsLdQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2e:50:af:ef:92:8b:1b:04:88:96:76:12:ac:03:cf:b4:ca:
         09:16:ed:19:30:98:84:14:c8:05:3e:94:30:60:d8:af:44:d5:
         89:22:e1:0a:d7:31:51:b6:2c:fd:89:40:82:af:cc:7d:25:fa:
         63:ff:a3:5c:c5:d9:55:4d:90:11:e8:a3:65:55:9a:9f:88:a3:
         84:2b:62:3a:7d:f3:4c:29:e6:19:9f:cb:82:df:cd:2b:b0:cc:
         53:d5:f5:5c:bf:bb:cf:87:40:5a:96:0b:48:51:8b:dd:e2:16:
         3e:d0:22:0a:79:2d:49:6e:9c:00:f8:41:76:ba:52:39:0f:c0:
         a1:e5:c1:ba:1b:59:c3:87:35:72:d2:9f:92:f9:b2:15:5c:2d:
         53:bd:38:f7:31:02:d9:ab:f8:5c:eb:14:f7:43:0a:32:57:e3:
         70:13:f5:79:dc:54:bf:fb:a8:ae:8a:37:49:41:e2:24:87:ad:
         fd:ac:c8:b7:33:62:84:a2:73:fa:c2:02:f8:27:91:a0:6e:dd:
         c7:c2:f6:04:17:ad:ab:1c:4e:a3:b3:40:07:0f:a5:b1:81:8d:
         54:37:43:e8:3f:30:dd:4f:6c:6e:cf:57:9e:3e:9c:4d:e8:b7:
         a8:c5:a7:45:bb:77:6f:b7:99:36:91:21:b8:46:02:86:88:27:
         f1:22:43:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:30:30 2026 by rpki-client