Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
File:                     xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json)
Hash identifier:          XN2fZdEI5KDde11SJa19J6xE2jckTrryk1omWSK8+dE=
Subject key identifier:   67:B2:01:E6:D1:2B:9D:3B:D0:7F:FE:B6:6F:68:44:83:45:B9:FA:5B
Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C
Certificate issuer:       /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C
Certificate serial:       02CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
Manifest number:          02C0
Signing time:             Mon 05 Oct 2026 01:36:07 +0000
Manifest this update:     Mon 05 Oct 2026 01:36:07 +0000
Manifest next update:     Mon 12 Oct 2026 01:36:07 +0000
Files and hashes:         1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: 92jd+OblegRuRLVXVYo2ODARBxWV00UrJqkuzlJ7UB0=)
                          2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: caBGpQ3sxKtg4mxskMeTrM5eCKMi3Wf+XfGL8QuMB48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl
                          rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 01:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C
        Validity
            Not Before: Oct  5 01:36:07 2026 GMT
            Not After : Oct 12 01:36:07 2026 GMT
        Subject: CN=6ac2ff07-551d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:7f:71:e0:3f:fc:f0:d4:58:10:16:32:76:
                    b4:6b:4c:a9:5c:54:97:61:69:e5:ab:f4:8a:3d:42:
                    21:c4:e3:54:1b:a9:2f:85:79:e7:9d:2c:2b:35:9f:
                    b0:42:32:7f:f1:83:ea:ac:06:79:b8:10:8a:ff:a5:
                    73:aa:5d:7a:83:b3:a3:59:9a:99:7b:b5:15:d9:64:
                    ff:33:c9:09:7d:ae:61:fa:17:51:6f:37:ac:5c:d3:
                    09:9b:05:57:7b:a0:ee:06:ac:ed:74:c1:a3:c8:d3:
                    c2:95:5b:10:55:32:cc:95:ff:84:ec:98:e1:cf:e2:
                    9d:f1:ba:d3:96:cf:8b:65:16:f4:d5:e8:0c:43:d8:
                    11:f6:5d:ac:85:0a:7d:82:df:e9:e3:33:9d:19:be:
                    d2:8b:5c:33:f7:f8:b1:c8:17:42:91:1c:5e:25:e4:
                    36:54:43:62:d9:94:30:dd:63:b9:a4:88:d7:f6:8b:
                    2d:a9:3a:2c:95:1c:1d:de:02:e9:a1:62:49:43:dd:
                    93:ef:61:d8:8a:81:eb:dc:31:1a:fb:93:06:3f:a9:
                    6d:f1:3a:7f:94:a5:0d:ea:b9:42:b2:60:c6:4f:ba:
                    05:96:b3:63:fc:15:5a:29:39:a0:ec:f0:1e:f9:17:
                    b8:ea:93:18:a2:ff:bf:f1:83:ae:db:71:8d:a7:06:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B2:01:E6:D1:2B:9D:3B:D0:7F:FE:B6:6F:68:44:83:45:B9:FA:5B
            X509v3 Authority Key Identifier:
                keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:fa:89:e1:92:18:2f:cd:34:d6:2a:17:9e:1d:55:bd:24:02:
         99:d6:bb:38:cf:a6:84:07:c5:8f:cd:96:aa:c7:21:a3:17:ee:
         33:da:a1:1d:6f:a5:fd:2d:96:59:8d:6e:a5:af:c2:7e:81:3f:
         40:37:0e:2c:86:6f:5d:b3:d5:42:7f:84:6b:55:6d:a3:36:5d:
         a7:ae:45:05:ee:a7:39:d4:ea:fc:7e:c9:88:93:c7:26:10:47:
         0d:a2:e3:90:01:a2:1a:47:1a:27:c0:88:83:6e:b6:76:bf:0d:
         08:32:4c:6e:fe:36:6d:aa:e2:c1:5f:fd:98:ef:eb:10:ea:48:
         cb:11:fa:f4:0d:f2:ee:ca:11:45:35:05:87:5d:05:94:26:b9:
         8c:c1:50:30:9a:01:1f:40:ba:07:08:ef:11:68:0a:29:1b:5c:
         a0:06:f2:e1:71:ac:90:af:4a:ff:8e:cf:2e:be:60:5b:9b:97:
         ed:31:0c:c2:bd:bd:41:a3:84:6b:54:7d:1d:64:0c:c9:d1:46:
         0c:a6:d7:15:6b:b3:3a:f6:c9:50:4d:29:cc:a5:11:55:7c:d7:
         c3:e8:22:82:d6:68:2f:96:ac:a2:9e:b2:ae:44:14:05:eb:27:
         57:37:a0:d9:aa:76:e0:3c:03:2d:0c:48:ea:62:bf:4d:40:95:
         f7:2d:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 16:01:30 2026 by rpki-client