Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
File:                     c5C6Rl4CIu4xQH5VCebenj-pENs.mft (raw, json)
Hash identifier:          re75IOsehQwwIKe6RkDkP163qLqiuQHVDkhsT196hrU=
Subject key identifier:   71:99:D2:9A:E4:08:CF:DB:CA:B7:C5:29:3F:B7:7B:BD:B0:2F:73:01
Authority key identifier: 73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB
Certificate issuer:       /CN=A91CA6E6/serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
Manifest number:          043F
Signing time:             Tue 29 Sep 2026 02:21:13 +0000
Manifest this update:     Tue 29 Sep 2026 02:21:12 +0000
Manifest next update:     Tue 06 Oct 2026 02:21:12 +0000
Files and hashes:         1: c5C6Rl4CIu4xQH5VCebenj-pENs.crl (hash: Q6C5maceYpzCCOddGJL9eXvRqXqIVbiYzXI+mATqQJM=)
                          2: 48AA7CB08BD911F195480F4B3311F970.roa (hash: w3rYfTj+ciOe8jD0NvAZ3oFMxg/ZdSfRsmtQ+S2odpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl
                          rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 02:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA6E6, serialNumber=7390BA465E0222EE31407E5509E6DE9E3FA910DB
        Validity
            Not Before: Sep 29 02:21:12 2026 GMT
            Not After : Oct  6 02:21:12 2026 GMT
        Subject: CN=6abb2098-06a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:73:e6:fe:c9:9c:d5:bf:a2:2c:cc:e6:7d:
                    26:08:6a:98:da:56:81:13:c5:aa:6c:4d:98:12:a5:
                    11:6e:36:7d:1a:eb:5a:31:5d:5a:a2:d3:2b:13:95:
                    ee:a3:51:85:c2:35:6a:08:71:af:29:2d:f0:07:e0:
                    12:1e:fc:c4:af:1b:b7:fa:fb:0c:37:3f:89:04:95:
                    56:77:85:9b:cb:29:06:b7:55:90:f6:80:59:c0:42:
                    5e:40:65:2d:04:19:c6:66:e2:30:02:b7:82:e4:74:
                    b9:8d:23:19:25:41:bb:54:8e:88:5f:2e:27:82:5d:
                    85:4e:28:52:46:2d:0a:bd:a1:26:49:13:8d:78:c1:
                    80:e5:25:96:73:0f:df:84:96:94:d7:a7:e3:7f:76:
                    64:89:ec:bc:39:27:aa:30:96:65:21:1e:ba:ee:85:
                    74:db:1d:f8:b5:1a:23:41:6b:b2:5f:1e:fa:d2:7b:
                    b6:71:cb:35:de:af:45:b8:3a:f1:2b:1d:f4:c6:66:
                    ee:3d:b1:03:d8:6c:be:73:82:f9:1d:62:16:66:15:
                    d9:f8:8c:47:ea:03:2b:43:8b:72:96:94:b3:18:66:
                    f8:99:3d:4c:a3:63:84:99:f7:dd:63:96:33:91:6c:
                    98:e6:86:a9:32:2f:e4:6b:e4:29:67:51:a3:06:34:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:99:D2:9A:E4:08:CF:DB:CA:B7:C5:29:3F:B7:7B:BD:B0:2F:73:01
            X509v3 Authority Key Identifier:
                keyid:73:90:BA:46:5E:02:22:EE:31:40:7E:55:09:E6:DE:9E:3F:A9:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5C6Rl4CIu4xQH5VCebenj-pENs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA6E6/3B83AFE0F0D011ED8050766AC4F9AE02/c5C6Rl4CIu4xQH5VCebenj-pENs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:af:cd:50:4c:c9:ea:dc:ee:aa:b5:82:f4:93:84:ae:aa:b5:
         61:01:9a:9f:df:5e:37:ef:2e:54:ed:8f:b7:74:10:33:0a:84:
         c6:ae:60:4a:0d:11:a8:55:1b:d4:e4:c7:0b:1c:fa:74:8a:e1:
         87:e5:d7:2f:8f:e9:7c:b4:95:1e:39:8e:0c:b5:75:88:ab:96:
         02:da:cd:e5:2c:c5:54:94:3a:f4:90:bb:6d:e2:9c:c8:1f:f6:
         25:77:81:c4:ba:8a:e5:03:9f:00:55:a1:65:bc:21:73:1f:c7:
         67:19:e4:fd:d2:b6:c8:95:fb:81:26:e7:42:f4:5c:98:b3:f2:
         68:35:73:a8:d7:f7:47:b6:28:0e:27:0f:bb:52:39:aa:7c:65:
         d3:4a:97:44:0f:f7:6d:8d:db:48:36:9f:3b:7b:08:cf:f2:63:
         bd:54:fb:e4:07:79:d1:6b:b0:01:9e:27:43:77:9f:0e:d2:ec:
         66:d8:ba:6c:75:76:fe:c5:68:d1:6d:bf:5e:c5:f2:39:c4:cb:
         d5:b2:ff:77:55:27:ef:cd:cb:8f:79:0a:e2:5f:42:1d:24:48:
         aa:29:71:c5:4f:d2:57:4c:25:4b:df:00:02:67:26:9d:6e:e9:
         ab:5b:36:24:a9:f7:13:41:0a:f9:f8:03:4a:e5:3d:69:09:e8:
         1f:6f:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:47:07 2026 by rpki-client