Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
File:                     P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft (raw, json)
Hash identifier:          i0x2RLe3O50aj4sJCk2LgNVWQ+af3+/sew+6bIpDmuM=
Subject key identifier:   C0:3D:21:AA:57:F4:6D:BE:94:19:79:95:87:FB:0D:23:69:FD:B7:D7
Authority key identifier: 3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F
Certificate issuer:       /CN=A91BB100/serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
Manifest number:          0531
Signing time:             Thu 08 Oct 2026 23:44:13 +0000
Manifest this update:     Thu 08 Oct 2026 23:44:13 +0000
Manifest next update:     Thu 15 Oct 2026 23:44:13 +0000
Files and hashes:         1: P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl (hash: 84cEQpJc9MgxzIVrj/SJqxF3f8B5IDvLUVBy+gBITlI=)
                          2: FE761E84630511EC86F9726BC4F9AE02.roa (hash: rgJw06hmsB9fncZWEsFDb5n/GUpL32l6BWCvyNuaqQg=)
                          3: D94FB378415811F196DB41B8CB833773.roa (hash: gXPdtCnPPAjwnP0Rk/2BzP0izBu2JHp7rkBkmk8m4yU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 23:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB100, serialNumber=3F4864908C45B3A7158E832C06F9323D2341990F
        Validity
            Not Before: Oct  8 23:44:13 2026 GMT
            Not After : Oct 15 23:44:13 2026 GMT
        Subject: CN=6ac82acd-f63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:c3:b2:a6:90:27:d3:3c:5f:23:41:dc:5a:
                    a5:74:e5:4a:55:22:56:20:3a:fe:e7:e6:2e:25:7d:
                    b8:e1:18:8c:f2:aa:ef:d3:ae:f3:aa:26:bb:0a:7b:
                    41:31:3c:be:18:73:a4:cb:ef:87:a1:b2:92:c2:46:
                    e0:93:cf:61:ad:fd:46:dc:a3:30:13:1e:de:1e:9e:
                    ee:41:a2:c0:7c:0f:69:90:4f:e9:0b:8f:39:94:b0:
                    25:8b:36:5d:0a:08:ba:f6:bd:f3:fc:f6:72:be:ec:
                    59:c0:06:c3:1a:15:35:14:3e:5b:a8:af:7f:2c:df:
                    d2:74:44:67:b7:72:a2:02:8a:89:1c:2a:c5:87:12:
                    5e:36:a5:72:00:5d:f4:58:1d:0e:a4:3a:63:73:f9:
                    02:bd:35:ff:e1:ff:37:1c:85:3c:fd:02:76:95:c6:
                    ca:45:32:1c:52:a3:8d:d9:7f:22:49:c2:b1:74:a0:
                    f5:f2:0e:60:1d:16:d8:2e:0f:67:70:e3:63:ce:25:
                    b9:e4:b4:61:41:79:4d:03:f7:21:2c:f2:69:4e:af:
                    b1:c7:42:22:cc:10:26:b3:38:67:a5:af:ce:ea:ae:
                    0d:a2:55:ca:be:51:b0:99:8d:e0:e7:6f:3a:f7:7f:
                    1d:14:94:9a:84:16:41:fd:63:c7:ba:87:2c:ba:3b:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3D:21:AA:57:F4:6D:BE:94:19:79:95:87:FB:0D:23:69:FD:B7:D7
            X509v3 Authority Key Identifier:
                keyid:3F:48:64:90:8C:45:B3:A7:15:8E:83:2C:06:F9:32:3D:23:41:99:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB100/38256B34630211ECBA4E0767C4F9AE02/P0hkkIxFs6cVjoMsBvkyPSNBmQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:1e:a9:02:61:ec:d4:2e:9d:64:fe:b4:d5:1e:50:4d:af:26:
         32:a1:9a:66:64:70:f1:46:14:cd:9f:95:f6:e1:86:3d:d1:38:
         ce:d1:bd:2e:c7:fd:5f:61:c7:61:26:1e:a4:bf:4b:c4:03:6c:
         7f:18:59:8e:a5:c4:79:1f:04:cb:8b:fd:83:d0:57:bf:f5:3b:
         11:e4:54:c1:c6:9b:ca:38:b4:5c:fe:78:ed:91:b2:9e:9f:6f:
         a2:00:ae:c8:64:a1:da:8e:53:eb:0b:8a:4d:d3:06:5a:c9:aa:
         8a:d3:20:0d:ed:df:43:1c:be:06:87:b4:1c:3b:3c:b6:74:2b:
         90:aa:ae:95:ea:5a:f8:3c:6b:bc:6f:1c:5e:19:dc:1a:2f:f9:
         64:db:7b:6b:fc:91:54:43:3b:57:39:a0:f9:c5:fe:f4:8a:48:
         1f:58:c1:ff:cc:5a:f5:8d:bf:ed:97:3d:2f:70:bc:ac:c6:26:
         6c:dc:0e:4d:cd:cb:b7:54:a5:29:6d:24:1e:6d:7a:b9:20:30:
         b9:ef:d6:14:a6:10:81:a9:36:d8:e2:d6:15:60:34:ea:94:fb:
         5e:c0:82:e3:5e:54:d5:c7:6d:5b:44:cd:52:8c:fc:fa:9d:58:
         50:57:5e:9a:d2:c3:bc:36:75:ee:55:0e:07:68:ea:26:55:98:
         1c:0a:50:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:24:54 2026 by rpki-client