Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
File:                     erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json)
Hash identifier:          Xa5VnWwEu7XXvDDPAzzD2KfimMlglD2DvK3HxVa/QCw=
Subject key identifier:   37:DF:14:96:7D:9F:D2:D1:98:C2:5D:BF:92:21:DB:BF:3A:92:66:C3
Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9
Certificate issuer:       /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
Certificate serial:       0D6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
Manifest number:          0D54
Signing time:             Tue 06 Oct 2026 18:11:28 +0000
Manifest this update:     Tue 06 Oct 2026 18:11:28 +0000
Manifest next update:     Tue 13 Oct 2026 18:11:28 +0000
Files and hashes:         1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: gDKkQzfD7w9wOfaUoGR3ZFyP4wu3NTRJX+UaEfPpfaw=)
                          2: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: PoBDNCZFrGQzQ7+3sGgDnm+Nft1wV7A+I3RbGRaDZks=)
                          3: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: 36cWWUlsjm/g+gszjb3Mn/XvCTbSn8VYsKkqBFvVpdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl
                          rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3436 (0xd6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9
        Validity
            Not Before: Oct  6 18:11:28 2026 GMT
            Not After : Oct 13 18:11:28 2026 GMT
        Subject: CN=6ac539d0-b256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:c9:e1:2d:cb:a9:9d:52:d6:70:da:ae:8b:
                    0c:68:8d:0b:d9:6c:5b:a8:4c:d1:ea:2a:fe:f9:89:
                    cf:b0:30:01:03:7f:fd:6b:e9:fd:1f:61:59:98:ed:
                    50:cb:04:9b:23:84:11:5d:40:37:1d:09:9d:47:b0:
                    e6:cd:64:31:ee:bb:b3:bb:15:72:91:2c:8e:09:b0:
                    d4:e0:ad:c0:0c:88:17:32:5c:70:d7:7c:72:b5:66:
                    8e:32:c3:a3:22:38:2d:71:6a:73:cf:95:86:51:1f:
                    aa:b9:b0:7f:b2:ac:cb:99:11:ae:80:40:eb:fc:a7:
                    86:16:d5:49:de:ba:0c:2f:ca:d3:c5:bb:33:50:56:
                    f9:f7:8d:6a:5e:f7:07:a8:45:16:0f:cd:5a:d5:5e:
                    96:42:6f:0e:6b:43:9f:a9:38:3a:c0:1d:fe:f0:4c:
                    f3:43:80:30:6c:02:8e:f8:32:86:c3:b5:75:1f:b9:
                    99:e9:a2:01:17:6f:40:f6:a8:20:99:d3:2a:6b:35:
                    81:e3:bd:a2:9a:c9:6d:23:ac:8b:e9:94:09:eb:f3:
                    33:84:21:d8:c4:21:86:90:e8:a8:c3:88:1e:37:5b:
                    9a:97:91:9d:17:08:16:13:22:d7:21:af:53:2a:2d:
                    a4:5f:af:ee:33:6a:7a:40:0a:a7:0a:b9:14:99:67:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DF:14:96:7D:9F:D2:D1:98:C2:5D:BF:92:21:DB:BF:3A:92:66:C3
            X509v3 Authority Key Identifier:
                keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9f:42:45:ab:cd:c5:1b:6a:57:5d:f2:28:c9:a5:0a:c8:93:
         4c:af:75:70:c4:ee:ed:c3:67:d5:47:d6:4c:ae:82:f3:21:6a:
         b1:8a:2b:a2:05:0a:14:db:10:68:30:1c:40:3d:1e:73:e3:1e:
         1f:7f:04:ce:bd:ac:bd:83:59:39:15:71:c2:fe:9f:a9:bd:77:
         42:a6:db:af:0f:db:9e:a3:60:d9:ec:2b:62:1a:c1:d2:de:8c:
         53:07:b7:e9:65:9b:bb:80:13:2e:d2:25:a8:fb:a6:c6:41:f2:
         82:da:f4:98:58:9d:a7:2a:e6:e8:ed:4f:bf:c6:6e:a2:a0:b4:
         74:ee:33:55:1b:8d:54:5d:ac:71:8c:9a:88:fe:0d:a4:c2:ef:
         c0:ef:01:6d:6b:ff:8a:a7:9c:9b:16:c5:f2:d5:19:3b:c6:bf:
         80:49:0a:fd:cf:9c:4c:89:5f:17:a1:f7:1f:ca:be:85:e8:f6:
         0d:86:83:d6:1f:ad:7f:61:f3:e5:1c:1c:02:d2:ad:69:20:b0:
         1a:73:60:e9:62:fa:3f:28:42:4e:7a:ab:94:b1:ee:3e:d6:fc:
         87:ba:51:cc:24:e3:f2:fa:60:40:fd:cd:c2:b8:da:5b:45:24:
         cb:9c:f6:e4:de:ed:02:1e:cb:03:83:1d:da:b8:04:bd:e4:1b:
         72:c1:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:24:56 2026 by rpki-client