Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
File:                     sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json)
Hash identifier:          E0Jv0UtLqpoDtFlxrEEE4pHe8bP/XWCexIOXmbQMZvQ=
Subject key identifier:   80:EA:A5:E4:E6:3F:6B:E4:65:63:B2:D3:16:82:6D:E8:35:2A:75:96
Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2
Certificate issuer:       /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
Certificate serial:       0973
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
Manifest number:          0968
Signing time:             Fri 02 Oct 2026 20:22:13 +0000
Manifest this update:     Fri 02 Oct 2026 20:22:13 +0000
Manifest next update:     Fri 09 Oct 2026 20:22:13 +0000
Files and hashes:         1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: 74NQWe1rB9yJMeqE4VigHPFbPLwGmPdva2wHocroRK8=)
                          2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: myPqUDNWdaCgUms1NDW6cgdVK5APz5PqgTj/yOUElVw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl
                          rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419 (0x973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2
        Validity
            Not Before: Oct  2 20:22:13 2026 GMT
            Not After : Oct  9 20:22:13 2026 GMT
        Subject: CN=6ac01275-ddd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:12:1c:bb:ad:74:36:83:d3:72:f5:0d:a6:
                    cd:5e:64:5e:cb:ba:e6:25:94:b7:24:f6:35:2b:83:
                    4d:7c:31:53:47:bf:bf:11:ce:df:21:09:50:aa:2c:
                    a2:13:1c:d1:28:5f:d4:aa:18:24:62:70:ff:63:8d:
                    69:08:fd:58:7b:1f:fd:40:56:5c:22:3c:79:2e:52:
                    1f:09:15:ae:c7:53:9b:e2:fd:c7:66:0c:db:91:12:
                    33:41:1a:29:71:d8:c0:1f:a8:63:ea:e7:a0:9a:2a:
                    6a:84:be:f0:f5:9c:a0:d0:f4:54:19:f3:cd:6c:ba:
                    e3:88:93:4f:73:03:4d:1a:a2:9b:8c:0c:68:a3:6b:
                    7c:ee:a9:38:8d:07:a3:10:5f:5c:39:39:02:33:26:
                    d8:b4:34:4d:33:5e:40:18:84:d5:df:c6:87:7c:21:
                    c7:7f:66:86:05:eb:7c:c4:c5:c8:c7:bb:3c:49:ba:
                    fb:88:6d:84:c9:84:e6:58:38:f9:f7:8b:fb:3b:11:
                    77:26:1d:40:08:8f:4d:c8:e5:d4:71:90:6e:04:7d:
                    1e:57:dc:03:8b:bd:0e:d2:f4:c1:fa:e1:2b:09:47:
                    ec:9b:fa:83:f1:93:21:25:ef:7d:b8:f1:bc:a9:e8:
                    36:38:db:b9:48:16:21:0a:37:b8:6d:3e:44:a1:d5:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EA:A5:E4:E6:3F:6B:E4:65:63:B2:D3:16:82:6D:E8:35:2A:75:96
            X509v3 Authority Key Identifier:
                keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6d:2b:29:6e:ce:ad:2d:4e:67:43:d8:a3:8b:fa:05:fb:c0:
         70:fd:24:0b:3c:12:01:84:12:00:97:73:5c:f9:cd:d8:8f:07:
         6d:ef:f4:4c:45:34:7d:c9:0b:d1:58:e9:d2:45:2f:bd:5e:18:
         94:98:e8:7e:86:26:a9:4b:ca:52:41:89:ad:d5:75:27:09:2d:
         de:a3:0a:2f:c8:3b:44:54:ad:57:fe:7a:bc:6e:d5:a1:7d:9c:
         da:39:46:c3:e0:9a:65:ba:33:12:7e:20:42:dc:a6:a8:90:79:
         b6:2b:24:93:6a:d3:30:bd:4a:8a:80:c7:42:28:b7:23:4f:36:
         81:a5:f7:33:66:c9:e2:d8:6b:0c:34:67:8b:48:70:de:15:c7:
         88:c7:49:5d:6b:15:96:26:44:54:3c:39:f6:85:47:7d:66:03:
         9d:11:a0:00:3d:0a:c2:b6:e9:10:32:28:41:ff:cd:e2:44:89:
         71:05:9f:3a:c0:34:ab:80:80:76:d3:fd:09:67:03:f0:1d:b4:
         5a:25:e4:66:0e:36:72:67:88:e9:cc:10:70:f4:87:b6:76:ec:
         1f:9c:12:9e:d6:56:4b:50:bd:03:8c:20:a0:bc:23:ae:ca:6c:
         c2:e1:d7:db:aa:0e:1e:12:57:27:1c:ab:b9:02:22:68:e3:27:
         15:e1:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:54:25 2026 by rpki-client