Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
File:                     rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json)
Hash identifier:          DQ8G25XslgISMg4Qf2r+e+Nm+f/jXep4iPBLR4RP8Cg=
Subject key identifier:   F4:D6:00:67:69:7D:70:58:00:4F:43:60:BC:D6:34:E5:7A:48:0F:B3
Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
Certificate issuer:       /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Certificate serial:       05EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
Manifest number:          05DA
Signing time:             Sat 26 Sep 2026 23:05:32 +0000
Manifest this update:     Sat 26 Sep 2026 23:05:32 +0000
Manifest next update:     Sat 03 Oct 2026 23:05:32 +0000
Files and hashes:         1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: 3X1B/Tdk9EdrO/mivXb7ZgECr072PW1bbiOZBgpGXeU=)
                          2: Sfnoau1p4nQyCYhdbS1yqwztDEs.asa (hash: oeHwimBa5repKOUMjgvQtcXZEIdBswSyYd5r0iIeCns=)
                          3: sqGj_F7T0xSvuoydrD7DOYOYmL4.asa (hash: WjE8a7bssxFoeRxVqoTfMjV9rANOzfHTYw3K71/tV5E=)
                          4: E66070EE36F911F0B0111510C4F9AE02.roa (hash: KwF38ZBP8Utf4qS1kbQsJebYoDtue89xp1vHyUdKSU0=)
                          5: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: nMAueD71AbMo3NTxzg/tId7Satepp1btvdBVnm0IwvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
        Validity
            Not Before: Sep 26 23:05:32 2026 GMT
            Not After : Oct  3 23:05:32 2026 GMT
        Subject: CN=6ab84fbc-cb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:21:23:cb:9f:c1:4b:07:e0:1f:3e:d9:de:2d:
                    a7:1f:5f:b6:ce:51:40:4e:ff:9a:a2:82:62:a8:6a:
                    25:03:51:da:75:35:52:7a:cf:20:a5:7a:2e:c4:82:
                    ad:3a:77:75:a8:96:9e:e0:df:75:ba:ca:ca:f9:cd:
                    6e:24:63:f9:e5:be:43:9e:eb:cc:c9:17:3c:2c:05:
                    79:af:97:67:23:ed:21:55:58:94:a5:4a:84:1e:ed:
                    fa:70:00:39:bd:e7:9c:23:ae:77:13:f0:71:f0:77:
                    ef:c7:81:d1:7d:13:48:7d:10:b5:16:74:bf:c7:34:
                    99:e4:95:9a:64:d3:3e:26:4d:19:b7:81:ce:74:d3:
                    f5:d5:49:8c:a6:50:ab:bb:5b:cb:75:60:ce:87:15:
                    c8:95:c9:a2:1f:20:af:59:62:5d:cc:51:5a:0b:59:
                    63:44:30:f3:59:c5:b3:f9:40:ec:ac:39:07:f1:66:
                    09:e5:e5:2c:47:5a:46:57:da:d4:7a:04:61:0b:37:
                    8f:d1:52:45:04:d8:ca:33:11:8c:09:e0:64:31:32:
                    fa:06:9e:46:85:e1:4f:88:8f:7c:56:b8:ab:86:18:
                    46:7a:d8:1a:14:c6:2b:90:49:7f:15:28:90:b1:ac:
                    34:42:9a:f7:3f:2a:4d:f4:1e:52:ea:fe:03:53:32:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D6:00:67:69:7D:70:58:00:4F:43:60:BC:D6:34:E5:7A:48:0F:B3
            X509v3 Authority Key Identifier:
                keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1b:ae:bc:27:68:ea:18:70:85:62:d1:e6:49:f0:90:e1:73:
         06:2b:6b:e3:90:27:6a:bf:d2:d6:c7:75:d2:4a:d7:48:9f:6a:
         c4:ee:19:9c:1d:d9:67:04:59:1d:9e:5d:c5:03:41:c6:93:a1:
         56:0e:90:f3:b8:c4:84:b6:df:c0:f4:e6:9a:a9:58:06:d2:6c:
         b4:4a:7c:a5:01:0e:1e:87:dd:a8:d5:78:56:30:ab:37:7b:c6:
         ce:1d:a3:22:e6:74:d1:e2:77:3a:18:93:cc:12:01:a6:bc:5a:
         d1:b6:28:34:e1:ec:f2:ea:5b:6a:a2:85:a7:11:2e:37:dd:a2:
         3f:dd:94:ca:3b:a8:84:42:5f:f3:ae:3c:6a:9d:81:09:72:f8:
         bf:02:6c:4e:ff:87:d0:0e:00:83:0a:46:67:fb:e3:c0:59:af:
         59:93:b4:65:6d:a3:db:23:67:4d:a7:17:d4:9e:10:f9:e2:6b:
         68:fb:0f:36:4e:20:85:5c:dd:5e:55:18:cd:20:5b:6f:7c:e0:
         e1:0b:86:4f:93:97:f2:41:a0:64:53:22:49:0a:e3:0a:93:85:
         bb:db:f1:6c:76:a1:aa:09:fb:d5:a6:d6:66:86:01:1f:45:53:
         75:c8:2e:a1:b5:69:3d:ba:30:68:f2:8b:9c:a9:07:91:a5:d2:
         bd:17:b3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:29:04 2026 by rpki-client