Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
File:                     MRUQtiC24M1CLhwrbpUrYEil8eI.mft (raw, json)
Hash identifier:          N9hFhHfSMkZSXtCQXg1ACvwCQ03ckH+G76ZvIxHpu8U=
Subject key identifier:   D2:46:6B:44:5E:FF:A8:63:00:7A:38:27:CF:B1:88:1C:FA:16:DD:29
Authority key identifier: 31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2
Certificate issuer:       /CN=A91BF979/serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2
Certificate serial:       0491
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
Manifest number:          0490
Signing time:             Mon 05 Oct 2026 00:00:18 +0000
Manifest this update:     Mon 05 Oct 2026 00:00:18 +0000
Manifest next update:     Mon 12 Oct 2026 00:00:18 +0000
Files and hashes:         1: MRUQtiC24M1CLhwrbpUrYEil8eI.crl (hash: 2M9aHBU3P0mLlxAxImVjJIbPuj5GCqhkkk6xSMkpIJ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl
                          rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF979, serialNumber=311510B620B6E0CD422E1C2B6E952B6048A5F1E2
        Validity
            Not Before: Oct  5 00:00:18 2026 GMT
            Not After : Oct 12 00:00:18 2026 GMT
        Subject: CN=6ac2e892-98f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:4e:e4:a6:be:ec:62:ce:f2:b6:e2:a8:bb:
                    70:80:86:80:7b:e7:58:ea:67:aa:39:46:cf:ea:00:
                    4d:17:6c:b5:ec:05:c8:98:91:e1:21:0c:f3:e0:ec:
                    fe:45:b3:40:c3:2f:0b:3e:8e:40:76:03:4f:e6:c8:
                    b1:63:3e:57:5f:07:4a:4b:64:44:94:09:bd:63:ac:
                    88:6c:be:66:7e:ee:55:c4:d2:a0:24:4b:03:79:93:
                    23:d2:22:20:4f:23:84:1a:81:eb:c1:50:d5:23:cc:
                    29:06:cc:77:9b:84:68:4a:e0:06:88:71:bb:cd:4e:
                    e0:3a:7e:44:54:e3:55:95:85:c9:d4:09:a5:04:39:
                    91:98:7c:4d:8f:f4:5e:6b:a7:0d:fd:97:a3:da:a3:
                    74:06:b6:21:cb:42:8e:86:a2:df:cb:d4:83:18:66:
                    25:67:5c:e6:95:f2:36:80:9c:11:c6:db:2d:f5:1d:
                    49:33:4a:30:d4:01:3a:cd:2d:c5:63:39:50:e2:a0:
                    db:5a:a1:75:fa:29:61:18:ab:01:37:eb:2c:51:06:
                    96:ef:4d:16:ba:11:f7:d3:e7:b6:b8:23:96:ec:3d:
                    48:20:9e:5d:f5:31:53:c0:52:c5:6a:71:46:1d:a7:
                    97:2d:6e:b4:02:ef:1b:fa:a4:0f:8b:16:e8:98:3d:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:46:6B:44:5E:FF:A8:63:00:7A:38:27:CF:B1:88:1C:FA:16:DD:29
            X509v3 Authority Key Identifier:
                keyid:31:15:10:B6:20:B6:E0:CD:42:2E:1C:2B:6E:95:2B:60:48:A5:F1:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MRUQtiC24M1CLhwrbpUrYEil8eI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF979/1B465AA69EED11EC9381DF0CC4F9AE02/MRUQtiC24M1CLhwrbpUrYEil8eI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:01:2b:38:06:91:ed:64:77:1a:08:d6:57:23:ba:27:95:eb:
         b0:24:ad:fb:3c:c2:96:7f:4f:8e:50:4a:07:fd:54:80:62:4f:
         dc:fd:1e:4b:6f:02:f0:d3:7e:48:08:9b:c7:4d:47:e5:22:b8:
         51:f9:66:5b:6a:12:8f:07:51:4a:ee:75:49:db:0d:37:40:28:
         82:de:25:da:a2:49:71:9b:69:a7:ae:46:3c:38:9b:b6:8b:58:
         dd:61:64:1b:52:cb:31:f2:23:bd:0b:58:47:44:d1:31:6a:6e:
         fe:e4:07:97:30:68:b5:99:17:5e:15:45:fd:87:c5:66:59:0e:
         cb:06:3e:39:71:fb:58:d1:26:df:2d:e4:e8:03:43:bc:a5:fe:
         55:d0:32:91:aa:f8:5e:b9:42:21:22:51:ef:a7:e2:86:58:f7:
         a7:ea:5f:55:d9:b2:26:c2:ad:ef:df:40:54:dd:7c:ba:7b:cd:
         5e:4b:fd:a6:eb:e1:2b:7a:b4:91:ab:a5:4d:25:2d:f1:d5:be:
         45:5d:6c:8e:1d:59:47:1f:b7:13:62:fe:0e:c1:bf:17:4e:ec:
         ad:44:6b:85:35:cd:b3:21:a8:77:78:04:4c:14:40:fa:45:6a:
         7f:f6:30:a5:73:7a:4b:36:16:a2:e1:4a:86:07:4a:91:0f:15:
         e6:14:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:58:49 2026 by rpki-client