Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File:                     pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier:          W3ewPAoisIHB9MJ5hhq4fodUdGvPHKWD4VwX4g05npw=
Subject key identifier:   B9:E9:4F:71:4B:A6:55:B1:B3:63:A0:04:99:9F:AC:E5:CB:8B:05:DB
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer:       /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial:       0912
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number:          2CBA
Signing time:             Tue 06 Oct 2026 16:54:23 +0000
Manifest this update:     Tue 06 Oct 2026 16:54:22 +0000
Manifest next update:     Tue 13 Oct 2026 16:54:22 +0000
Files and hashes:         1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: CJIj2VD3OfkdZ6W/3WrIDIqu+v6DjdIrcJk3EG2m1Ps=)
                          2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: FvhwMvR06aM4Tlm3TgPmCHPZIgvzx9nHmKWhqmd0G8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322 (0x912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
        Validity
            Not Before: Oct  6 16:54:22 2026 GMT
            Not After : Oct 13 16:54:22 2026 GMT
        Subject: CN=6ac527bf-27a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:60:01:b8:61:cb:82:ee:6a:c5:ed:9b:01:
                    8c:94:21:2f:52:d3:ba:a4:ff:12:70:cb:aa:66:97:
                    a6:2a:76:eb:1d:03:ae:0a:c4:fb:89:4b:2f:10:60:
                    af:07:1f:66:97:b2:13:84:53:5f:77:e0:a1:7e:e3:
                    e2:9f:20:7b:c4:00:a9:a7:3a:43:3c:a1:71:3a:d5:
                    4e:c5:08:b8:51:e5:6b:d4:3c:7c:7e:06:38:36:ad:
                    89:55:18:9a:fe:dc:36:b5:7b:1f:d9:1b:2f:79:de:
                    25:dd:9b:b9:dd:c4:a0:08:e7:6e:91:90:a9:8d:27:
                    4d:44:b6:15:96:95:3d:6d:3d:27:c9:5f:61:5a:66:
                    1f:92:8f:9b:40:72:c5:0c:e2:c6:a9:b6:45:10:25:
                    f5:77:9a:f4:3f:76:00:27:16:cc:18:c4:fa:53:ce:
                    5c:57:97:f8:54:a2:36:7e:24:a5:b9:6b:a6:0a:92:
                    4a:5a:32:26:af:a3:10:be:14:78:06:66:80:20:ee:
                    52:11:3c:5b:4f:c5:74:7e:6a:13:34:59:e4:52:c0:
                    a3:e3:82:df:b6:c2:4d:6a:97:0c:75:3a:0f:32:1e:
                    6f:ab:0a:99:f7:5b:41:53:d3:24:3a:a8:cf:eb:46:
                    47:a6:e2:ec:6e:d0:c4:d2:4e:36:81:f8:a5:78:ff:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E9:4F:71:4B:A6:55:B1:B3:63:A0:04:99:9F:AC:E5:CB:8B:05:DB
            X509v3 Authority Key Identifier:
                keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:bb:e6:89:0a:0e:83:f9:d5:3a:ac:71:3c:c5:41:83:10:51:
         9e:53:79:6c:73:7c:bf:80:88:53:c9:62:3e:41:af:15:b4:a3:
         f2:17:44:58:60:a7:a8:ab:3b:e6:a4:4e:23:0f:56:a6:d2:34:
         e7:b1:f5:49:b2:4f:a0:02:24:79:dd:4a:c6:4e:9d:e4:0e:7b:
         f0:2c:01:3d:12:60:a1:1e:ed:b4:a3:28:5b:c5:a0:b2:33:27:
         bf:7f:58:41:33:b4:3d:cb:ea:8f:ff:1f:04:50:62:22:ae:51:
         4d:7b:ee:ac:9d:b4:d3:3a:57:84:92:ad:d0:76:ee:08:f3:23:
         f8:ca:cc:d7:ae:1d:fd:2e:0a:44:d1:ee:d5:00:6e:da:fa:25:
         68:44:84:7b:1c:5f:8a:2b:74:0d:6f:68:2c:53:d9:8b:12:bb:
         78:63:16:46:3e:07:c7:f9:2f:fa:1a:b4:d6:d7:f0:d2:65:bd:
         a7:51:0b:53:ea:48:59:64:b0:23:b9:7c:74:f6:7a:35:ab:1f:
         f0:fd:54:4b:81:8c:f6:43:01:66:37:19:d3:6b:66:65:a2:bb:
         51:30:c3:d7:1a:a8:77:24:45:36:3d:1c:a7:37:bd:8e:f1:87:
         ec:1b:39:86:83:cb:01:c9:18:e7:08:22:86:e4:3a:dc:8b:ff:
         51:df:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:41:26 2026 by rpki-client