Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
File:                     R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft (raw, json)
Hash identifier:          iVetw7FYkRwnyg6Ua3plT9Pj/qeVwFZvDIoUoNvlBxQ=
Subject key identifier:   66:90:11:91:01:DE:63:20:80:46:74:23:6A:54:6A:76:78:67:F4:88
Authority key identifier: 47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C
Certificate issuer:       /CN=A91BE8A9/serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
Manifest number:          8B
Signing time:             Wed 21 Oct 2026 08:08:56 +0000
Manifest this update:     Wed 21 Oct 2026 08:08:55 +0000
Manifest next update:     Wed 28 Oct 2026 08:08:55 +0000
Files and hashes:         1: R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl (hash: Wq1p/7ZzNIKdlk+DEVnP04MSfH2LdfmS2BB5Zy6iE4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl
                          rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE8A9, serialNumber=4763AADF0ABA78E4C0224D3EDA06C4400E97198C
        Validity
            Not Before: Oct 21 08:08:55 2026 GMT
            Not After : Oct 28 08:08:55 2026 GMT
        Subject: CN=6ad87318-e517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:20:2a:f7:e2:91:85:93:3b:b5:7e:47:45:
                    ab:f2:c5:ce:e4:88:77:61:99:a9:22:68:28:46:e0:
                    ae:98:96:33:48:28:65:fb:cb:c2:78:f7:13:d9:6e:
                    09:4b:4b:33:ea:e3:69:48:33:7a:2e:f0:a3:17:62:
                    9e:ef:72:3b:a3:88:7f:34:b9:4a:85:58:d3:62:86:
                    a5:6d:02:21:3e:31:7d:3f:ae:af:dc:5c:a0:a1:54:
                    73:ff:b2:92:1b:22:fe:ec:18:8a:b3:74:71:33:30:
                    3e:37:0b:cb:b9:6d:bd:85:c3:ee:86:83:22:46:fa:
                    66:53:fb:db:06:ee:dd:d6:18:6c:37:96:bf:a3:97:
                    1f:8b:26:d0:96:37:06:4f:26:68:40:b7:89:ba:63:
                    56:ce:28:2a:cb:9c:84:48:2c:cb:f9:be:f5:bf:87:
                    29:b6:34:40:89:cd:9a:d5:56:7d:4a:73:27:7c:a8:
                    7b:fb:63:f1:63:7c:58:9b:a3:b1:06:ad:c6:d9:28:
                    ad:0e:5f:6e:92:58:22:e9:ca:db:76:c3:10:59:79:
                    1c:7b:38:0d:46:41:1c:c5:35:14:64:48:4a:db:aa:
                    05:26:d6:c8:0e:db:35:be:90:71:bc:ee:eb:21:f4:
                    cc:98:16:c2:c8:14:e8:75:2f:38:30:e6:69:39:f0:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:90:11:91:01:DE:63:20:80:46:74:23:6A:54:6A:76:78:67:F4:88
            X509v3 Authority Key Identifier:
                keyid:47:63:AA:DF:0A:BA:78:E4:C0:22:4D:3E:DA:06:C4:40:0E:97:19:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8A9/CEDFF516FBF711F08DC1D818716F56BC/R2Oq3wq6eOTAIk0-2gbEQA6XGYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:39:49:6b:3f:3c:5f:b4:4d:bb:58:8f:d6:92:1b:d9:e3:ea:
         ca:fe:9a:93:46:36:35:95:48:12:fb:a4:bb:93:39:f2:c0:33:
         24:e1:24:81:84:7f:2d:3b:c9:7a:05:1e:ff:e2:f2:08:03:4c:
         a7:87:49:34:ef:06:60:99:25:14:88:b8:ce:36:28:93:bd:56:
         48:6b:0d:bb:d0:7c:d4:e9:76:e5:05:57:05:23:13:1c:c0:43:
         4b:ea:b4:0b:dc:76:43:fc:cf:03:75:82:08:9a:37:4f:4e:9c:
         38:c1:e9:4a:d8:39:99:e0:37:3b:b1:82:d1:c2:7c:f7:bc:74:
         5a:de:0a:55:69:ba:99:5a:b5:52:c4:e5:9a:8a:e8:75:c2:cf:
         9f:06:a4:8a:ed:51:eb:61:9b:44:36:74:5a:ff:9e:4b:60:b8:
         74:26:e0:4f:4f:83:50:ac:f5:b1:e4:1e:8e:ab:0c:14:9e:74:
         0d:70:26:89:cf:06:79:43:70:ef:9f:2a:6e:89:eb:0d:4b:34:
         2a:e2:20:a0:52:b0:ee:42:f5:f7:cd:78:93:90:72:e8:29:03:
         0c:8d:05:3f:3c:b6:3f:dc:aa:d5:2e:67:fc:a1:3f:9c:58:15:
         72:23:55:cf:ab:ac:19:52:35:c5:a9:53:1b:8a:4b:67:f8:31:
         ab:10:78:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkU4QTkxMTAvBgNVBAUTKDQ3NjNBQURGMEFCQTc4RTRDMDIyNEQzRURBMDZDNDQw
MEU5NzE5OEMwHhcNMjYxMDIxMDgwODU1WhcNMjYxMDI4MDgwODU1WjAYMRYwFAYD
VQQDEw02YWQ4NzMxOC1lNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzYcgKvfikYWTO7V+R0Wr8sXO5Ih3YZmpImgoRuCumJYzSChl+8vCePcT2W4J
S0sz6uNpSDN6LvCjF2Ke73I7o4h/NLlKhVjTYoalbQIhPjF9P66v3FygoVRz/7KS
GyL+7BiKs3RxMzA+NwvLuW29hcPuhoMiRvpmU/vbBu7d1hhsN5a/o5cfiybQljcG
TyZoQLeJumNWzigqy5yESCzL+b71v4cptjRAic2a1VZ9SnMnfKh7+2PxY3xYm6Ox
Bq3G2SitDl9uklgi6crbdsMQWXkcezgNRkEcxTUUZEhK26oFJtbIDts1vpBxvO7r
IfTMmBbCyBTodS84MOZpOfDAIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaQEZEB
3mMggEZ0I2pUanZ4Z/SIMB8GA1UdIwQYMBaAFEdjqt8KunjkwCJNPtoGxEAOlxmM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThBOS9DRURGRjUxNkZC
RjcxMUYwOERDMUQ4MTg3MTZGNTZCQy9SMk9xM3dxNmVPVEFJazAtMmdiRVFBNlhH
WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1IyT3Ezd3E2ZU9UQUlrMC0yZ2JFUUE2WEdZdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RThBOS9DRURGRjUxNkZCRjcxMUYwOERDMUQ4MTg3MTZGNTZCQy9SMk9xM3dxNmVP
VEFJazAtMmdiRVFBNlhHWXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmDlJaz88X7RNu1iP1pIb2ePqyv6ak0Y2NZVIEvuku5M58sAzJOEkgYR/LTvJ
egUe/+LyCANMp4dJNO8GYJklFIi4zjYok71WSGsNu9B81Ol25QVXBSMTHMBDS+q0
C9x2Q/zPA3WCCJo3T06cOMHpStg5meA3O7GC0cJ897x0Wt4KVWm6mVq1UsTlmoro
dcLPnwakiu1R62GbRDZ0Wv+eS2C4dCbgT0+DUKz1seQejqsMFJ50DXAmic8GeUNw
758qbonrDUs0KuIgoFKw7kL19814k5By6CkDDI0FPzy2P9yq1S5n/KE/nFgVciNV
z6usGVI1xalTG4pLZ/gxqxB4qw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 16:09:28 2026 by rpki-client