Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
File:                     k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json)
Hash identifier:          /gy48vMHfHa98Ze8Ohn+CKJZw/bsAxRZEJ2dXqWbIEc=
Subject key identifier:   7E:E9:3B:7C:FA:8F:43:6E:AC:EA:C5:7B:B4:50:D7:06:30:28:B1:78
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Certificate issuer:       /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial:       19F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
Manifest number:          19BB
Signing time:             Sun 04 Oct 2026 16:24:49 +0000
Manifest this update:     Sun 04 Oct 2026 16:24:48 +0000
Manifest next update:     Sun 11 Oct 2026 16:24:48 +0000
Files and hashes:         1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: qWxh1I8SeKUJaaTP/SmDa8KAl6gkuB1CU0+bxdjynB4=)
                          2: A6ACA298858911E88026B416C4F9AE02.roa (hash: 1Ux45iFOSsVdyrWsddCQuy1njUNs718cJ5bX5Y5qjgs=)
                          3: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: JVIeHYPCr0TnL02+iuXYWHTREzRvYtoHSIE96h/KtgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
                          rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6643 (0x19f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
        Validity
            Not Before: Oct  4 16:24:48 2026 GMT
            Not After : Oct 11 16:24:48 2026 GMT
        Subject: CN=6ac27dd1-ac07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:ff:ed:88:c0:58:df:72:e5:20:02:34:96:
                    b8:3d:d6:45:ee:70:00:e6:d8:4b:d5:e1:1a:86:dc:
                    d2:e7:df:29:7d:1f:f8:e7:bf:54:3e:26:4c:3d:2c:
                    71:e7:04:e3:0c:6e:81:cd:ee:dd:9d:3a:46:ed:79:
                    6b:8b:33:a1:84:01:99:01:6e:c9:fe:5b:fa:dd:ea:
                    8f:46:d3:c2:3d:f6:2f:b1:3e:23:1f:5d:61:53:31:
                    fa:4a:1b:b2:ec:58:b7:7c:5c:d5:09:fb:e4:42:0f:
                    ad:90:46:d1:99:26:74:15:c4:1c:cc:65:1a:63:2c:
                    8b:ed:a8:80:80:2a:f1:66:47:49:af:4f:47:81:78:
                    5d:8a:2f:9e:57:79:7f:57:35:b0:01:7d:06:c3:5d:
                    ad:51:5d:dd:09:cd:9b:39:65:5e:58:f1:59:d1:b5:
                    16:05:2f:ac:42:54:1f:34:81:29:ca:09:4f:17:ee:
                    16:44:72:87:e4:ad:41:b2:c1:9b:c7:c2:73:f8:0a:
                    3f:93:96:08:12:85:d6:11:23:d8:f5:bb:b2:fc:fa:
                    35:05:ca:55:d6:b3:a2:2b:6d:7a:0b:ea:00:4a:01:
                    41:1f:b9:19:ee:81:e0:94:60:39:7d:d0:cf:68:53:
                    2f:43:23:ce:3c:03:4e:74:f4:cb:7b:b5:87:0b:87:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E9:3B:7C:FA:8F:43:6E:AC:EA:C5:7B:B4:50:D7:06:30:28:B1:78
            X509v3 Authority Key Identifier:
                keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3c:d0:9c:61:aa:d0:42:e3:09:0c:97:eb:90:38:a8:47:c0:
         14:b5:a2:bb:87:9a:c9:c3:f4:16:23:69:41:9b:a7:b1:78:21:
         54:a1:9b:73:da:0d:34:5e:5b:34:a6:2e:b6:87:d5:f6:53:34:
         8a:d0:91:83:ad:8e:05:8c:15:e6:ca:c3:b3:04:17:a8:0f:a1:
         7e:4d:90:91:b0:5a:04:5c:d9:6d:dd:5f:2e:e8:11:85:bc:c5:
         12:d0:cc:72:1b:31:04:58:5a:2a:c6:2d:bf:6e:a4:64:0b:cf:
         d3:19:f3:e4:d1:f7:00:0d:b2:7a:79:16:92:49:fa:9d:a6:66:
         97:74:22:8b:0a:f7:f2:8c:3a:16:d9:78:7d:0f:32:71:d9:28:
         4c:1e:04:d8:52:0a:46:a9:17:f3:dc:52:ed:87:ed:01:1a:39:
         9d:bb:5f:14:3a:77:be:cf:fc:cb:1a:4f:93:60:90:1b:c0:7d:
         d6:61:4a:63:60:ca:27:32:e4:c5:1f:4d:53:5d:ae:8b:f1:91:
         f8:04:94:70:80:ab:1d:3f:0e:0e:8b:9e:ee:63:86:7c:43:49:
         e7:89:93:a9:f3:83:f6:7d:4c:b7:c6:b4:97:db:0e:20:84:14:
         ac:0e:3e:8d:72:c6:66:ee:8c:6d:5e:16:f6:11:6a:99:38:7a:
         4a:c7:87:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:45 2026 by rpki-client