Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
File:                     rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft (raw, json)
Hash identifier:          LkMVUBYW753xGRnzdvFbkCaviTBfY5FuOAO2Vjk3Eno=
Subject key identifier:   7A:9D:31:8B:5C:D6:91:AF:5B:52:E2:E5:5E:D5:D5:FD:43:4A:47:AB
Authority key identifier: AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F
Certificate issuer:       /CN=A91BFD87/serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
Manifest number:          0852
Signing time:             Tue 06 Oct 2026 21:07:20 +0000
Manifest this update:     Tue 06 Oct 2026 21:07:19 +0000
Manifest next update:     Tue 13 Oct 2026 21:07:19 +0000
Files and hashes:         1: rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl (hash: 3YCTjrTodaR+jlj+JPeQFmsYg9KF8BKBfHqp867EIwA=)
                          2: 304D6C7E24C211EBAC07F90DC4F9AE02.roa (hash: jMr4N89qOZyKi9q+aLu8Ip1ELJIMw1+M2FfLhwkNI7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl
                          rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFD87, serialNumber=AC9F95B7D478E98285CF44BFC57D81595534566F
        Validity
            Not Before: Oct  6 21:07:19 2026 GMT
            Not After : Oct 13 21:07:19 2026 GMT
        Subject: CN=6ac56308-3674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:b5:f8:51:57:54:79:c4:52:a1:e5:b8:94:
                    c0:64:60:6a:49:05:c2:5a:fd:30:5c:a9:4e:42:24:
                    f5:c3:94:dd:83:41:dc:55:c0:bd:63:a5:fa:46:3d:
                    fe:f9:9d:41:29:7d:cf:a4:78:4d:2b:43:76:6d:b0:
                    6f:c0:8b:59:54:f4:cb:24:f2:a4:73:7f:85:a7:b0:
                    b3:2a:5d:79:17:f8:62:dd:bf:e8:65:09:25:55:61:
                    53:6c:29:b0:f0:01:42:f7:3a:34:22:d5:65:e2:77:
                    26:8e:3a:70:47:81:41:2c:04:26:74:62:d9:ed:61:
                    05:63:b1:6f:11:0d:39:11:29:0d:3d:4c:ee:51:68:
                    d3:ea:e1:3d:76:09:fd:2f:9d:10:49:29:06:6d:b0:
                    9a:2d:da:d3:ea:f4:d6:66:68:9b:f6:5d:01:b0:a1:
                    a9:ec:8a:4a:c2:42:e4:ce:b9:6f:13:17:1e:8d:fd:
                    31:01:fe:74:b5:e2:ae:16:a1:24:11:c2:64:16:85:
                    e7:4a:ca:57:a8:54:ea:02:a0:8d:d6:b6:29:c1:35:
                    14:84:4f:85:77:40:2f:ce:50:05:41:1a:82:a6:42:
                    b0:13:28:29:02:4f:ec:5d:cd:b1:84:1e:2b:4d:db:
                    22:07:30:1a:de:b4:43:61:7b:e2:4d:0f:fd:c6:e4:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9D:31:8B:5C:D6:91:AF:5B:52:E2:E5:5E:D5:D5:FD:43:4A:47:AB
            X509v3 Authority Key Identifier:
                keyid:AC:9F:95:B7:D4:78:E9:82:85:CF:44:BF:C5:7D:81:59:55:34:56:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD87/DDE73B2824C011EBBD47050DC4F9AE02/rJ-Vt9R46YKFz0S_xX2BWVU0Vm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:31:a5:f6:5e:de:ba:a2:db:11:09:57:6b:b1:2c:74:d1:
         2f:4f:b0:c7:4e:f2:b5:d9:c4:11:7e:e2:13:df:b6:57:bb:5a:
         74:77:30:e0:46:92:83:87:91:39:b0:21:f8:ab:1d:31:28:bb:
         2d:e3:0d:a0:4c:d8:ec:4f:a1:ff:66:42:6f:f1:58:be:1e:2a:
         b4:4c:6c:40:cf:4e:c8:e8:08:0e:4b:27:0c:b6:45:9e:57:33:
         b4:50:dc:cf:af:e0:50:91:0e:1b:2d:b5:e7:a6:59:f4:84:ab:
         a3:82:25:dc:d2:98:f0:cb:a7:aa:a3:43:09:63:9d:46:dc:28:
         4b:ff:e6:45:30:95:0b:84:c3:8a:8c:6f:69:c8:e3:61:76:7a:
         a7:45:d7:9c:eb:c9:0d:57:dd:7b:1b:d6:c3:75:df:d8:7c:0a:
         d6:4e:f3:2d:6a:04:63:6f:cb:c5:89:7d:c4:c6:e1:57:b7:2b:
         c5:a5:e9:34:d8:d8:9e:ed:1a:5d:73:ab:01:4c:b7:10:84:19:
         ae:0b:45:51:ab:0b:73:51:54:fc:b1:0e:00:8c:51:e5:65:23:
         64:a9:53:5b:16:e7:a6:08:11:62:4a:0a:fe:38:53:a7:d3:6b:
         ff:cb:0c:8a:0c:f7:16:25:97:f8:bb:8f:fb:24:17:7a:f0:d7:
         cc:cd:d3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:20:10 2026 by rpki-client