Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File:                     fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier:          A0/JQ9kljRz/brzw9FLf6r+ntF2xUF4KFEq9M74Lywc=
Subject key identifier:   80:6D:D3:5B:F7:CA:29:9B:F5:BB:CA:7A:E8:0B:09:81:35:C9:6F:31
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer:       /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number:          01FD
Signing time:             Sun 18 Oct 2026 22:51:31 +0000
Manifest this update:     Sun 18 Oct 2026 22:51:30 +0000
Manifest next update:     Sun 25 Oct 2026 22:51:30 +0000
Files and hashes:         1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: 0VXj4N3ztZW4KxURqy9OVLYsbhJNMdl6CUGFQaWK3Q0=)
                          2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: bxCZLljr+spnnN33dMd2+qlwJCFH7g3OgeoGnhL9s+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 22:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
        Validity
            Not Before: Oct 18 22:51:30 2026 GMT
            Not After : Oct 25 22:51:30 2026 GMT
        Subject: CN=6ad54d73-8d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:65:3e:05:84:a3:a5:e7:9d:79:b6:c1:7a:66:
                    aa:ec:5c:52:ad:a4:82:68:d3:ca:00:4b:b3:1b:99:
                    9e:6e:a5:71:c8:b3:a8:03:9a:2c:80:f0:cc:fc:10:
                    35:2d:3e:b2:1b:29:e8:04:8f:d1:6a:ff:a7:78:3a:
                    bd:d5:90:cd:51:4d:ab:90:9a:a0:12:9c:c4:02:d3:
                    15:f3:b2:c7:24:11:c9:04:6f:a8:cc:92:3c:66:24:
                    fa:9b:26:01:e5:47:bf:53:e2:df:24:a1:79:05:74:
                    95:97:9e:ce:51:2b:0c:cf:67:40:6a:5e:59:c6:c4:
                    b7:6c:10:31:f1:86:a2:17:ce:d4:d7:2e:f2:5a:7d:
                    21:8b:7a:46:27:67:4b:8e:eb:54:71:ee:18:9d:8c:
                    98:00:29:8f:6f:11:e2:6b:74:83:f6:96:18:79:a3:
                    69:31:e5:07:13:e7:b4:12:a1:83:b5:18:ab:31:05:
                    d7:04:a1:c7:5e:fe:9d:ee:4f:37:d1:13:ab:ab:ef:
                    6e:dd:21:04:44:79:2b:1a:b5:cf:d3:6c:d4:7d:6f:
                    9b:c6:05:fe:87:7e:ff:f6:7a:d6:11:9f:47:ce:55:
                    a8:5f:e0:7f:fa:81:fa:5a:df:0e:a9:2c:b5:16:d3:
                    04:56:4a:3b:95:75:1e:bd:26:0d:41:6a:2c:25:8e:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6D:D3:5B:F7:CA:29:9B:F5:BB:CA:7A:E8:0B:09:81:35:C9:6F:31
            X509v3 Authority Key Identifier:
                keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ed:6e:39:2d:d4:10:c0:b6:85:cc:39:cc:13:18:69:fd:e7:
         3f:4a:8c:1d:c8:eb:37:59:1e:58:db:ac:6c:b3:fd:71:7d:51:
         15:78:6d:86:29:d7:78:9f:ee:36:fb:79:4c:e8:3f:17:1b:44:
         32:a3:5b:2c:08:50:bd:36:a5:75:22:7c:bf:20:a9:78:bc:c0:
         93:dd:ab:c0:78:00:26:37:b3:eb:28:1b:8d:84:cc:42:8b:15:
         6d:ce:dd:19:15:31:f8:2c:79:f1:55:98:51:ba:b5:c0:73:ec:
         b2:b9:9d:12:5d:06:26:df:31:e5:68:c7:d0:35:23:d7:b9:0f:
         56:8b:05:11:80:47:0a:97:80:9e:19:71:e7:08:b7:94:19:1e:
         9d:ce:18:c9:58:80:34:00:97:fb:be:72:01:b6:64:8a:0e:6d:
         b1:41:0b:92:a9:90:c9:2f:3d:a1:f4:54:87:ea:80:af:0d:94:
         2f:14:de:34:8f:ca:54:2a:fa:c6:40:7e:7d:74:87:16:98:89:
         38:dc:a2:bd:fc:8b:f1:7f:c5:ed:5d:6e:dc:0d:25:35:60:01:
         06:f4:29:c9:6b:ad:e9:40:ef:0d:1e:07:fb:0b:82:a7:b1:06:
         4e:57:f1:23:d6:99:84:c9:7e:5c:7b:34:ca:c3:c5:82:71:a4:
         fe:ef:25:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz
RjA4Q0M4RTIwHhcNMjYxMDE4MjI1MTMwWhcNMjYxMDI1MjI1MTMwWjAYMRYwFAYD
VQQDEw02YWQ1NGQ3My04ZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+GU+BYSjpeedebbBemaq7FxSraSCaNPKAEuzG5mebqVxyLOoA5osgPDM/BA1
LT6yGynoBI/Rav+neDq91ZDNUU2rkJqgEpzEAtMV87LHJBHJBG+ozJI8ZiT6myYB
5Ue/U+LfJKF5BXSVl57OUSsMz2dAal5ZxsS3bBAx8YaiF87U1y7yWn0hi3pGJ2dL
jutUce4YnYyYACmPbxHia3SD9pYYeaNpMeUHE+e0EqGDtRirMQXXBKHHXv6d7k83
0ROrq+9u3SEERHkrGrXP02zUfW+bxgX+h37/9nrWEZ9HzlWoX+B/+oH6Wt8OqSy1
FtMEVko7lXUevSYNQWosJY7CVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBt01v3
yimb9bvKeugLCYE1yW8xMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3
OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN
bDI2OTdJU1QzendfQ015T0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXe1uOS3UEMC2hcw5zBMYaf3nP0qMHcjrN1keWNusbLP9cX1RFXhthinXeJ/u
Nvt5TOg/FxtEMqNbLAhQvTaldSJ8vyCpeLzAk92rwHgAJjez6ygbjYTMQosVbc7d
GRUx+Cx58VWYUbq1wHPssrmdEl0GJt8x5WjH0DUj17kPVosFEYBHCpeAnhlx5wi3
lBkenc4YyViANACX+75yAbZkig5tsUELkqmQyS89ofRUh+qArw2ULxTeNI/KVCr6
xkB+fXSHFpiJONyivfyL8X/F7V1u3A0lNWABBvQpyWut6UDvDR4H+wuCp7EGTlfx
I9aZhMl+XHs0ysPFgnGk/u8l6g==
-----END CERTIFICATE-----
Generated at Mon Oct 19 19:43:37 2026 by rpki-client