Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
File:                     D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json)
Hash identifier:          i7ZcBNDt5ET3AQ3CQs5zqTcJItYdfdQga4sPnfj1VZ0=
Subject key identifier:   70:75:BC:77:4A:BB:23:20:28:93:48:47:48:D6:56:E8:A5:AF:13:8A
Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C
Certificate issuer:       /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
Manifest number:          01C1
Signing time:             Fri 09 Oct 2026 04:27:43 +0000
Manifest this update:     Fri 09 Oct 2026 04:27:43 +0000
Manifest next update:     Fri 16 Oct 2026 04:27:43 +0000
Files and hashes:         1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: 4O1cWLXmagOWnO4Ql7LcJhlFQ3rIM7j/I0N/K28BMDM=)
                          2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 0xEtLNXzgQLI5eu4N0PHbVDzi3ImrQGP3QrG+KX9gfw=)
                          3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: iX2Fa2bKeusUD7e1kk7qEOazrDitQAwWU/vzKbzi2Es=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl
                          rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C
        Validity
            Not Before: Oct  9 04:27:43 2026 GMT
            Not After : Oct 16 04:27:43 2026 GMT
        Subject: CN=6ac86d3f-682e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:41:81:b6:54:7c:6a:99:63:bb:c3:23:51:
                    02:68:8c:e5:64:89:56:b7:4d:c0:01:53:05:25:f2:
                    fa:1c:8e:48:a9:0f:51:90:0d:00:b8:bc:a5:92:5b:
                    c9:54:63:87:37:c1:45:b3:d4:10:3c:5d:1f:4b:68:
                    32:8f:6e:ad:f6:1b:d5:c5:be:5e:47:03:1b:d2:4a:
                    a9:30:98:43:b4:1e:e1:c6:ac:d3:31:79:ca:de:db:
                    9e:45:dc:5d:6f:cd:48:a5:fd:35:ce:8e:f5:18:08:
                    7b:93:c2:53:de:eb:dd:98:9d:e4:8a:06:99:87:66:
                    bc:ac:e0:b4:b6:5e:d1:22:ff:8b:5a:ee:30:1e:3b:
                    93:56:43:b1:c1:29:5d:ac:2e:9f:51:57:89:93:23:
                    21:2d:03:45:a6:3c:8c:ff:b2:ec:26:8d:61:bd:17:
                    c1:39:c4:25:59:44:ab:c3:e0:fd:fa:19:5f:ea:7b:
                    8c:45:53:fc:6e:f5:50:af:b5:cb:19:e5:9d:d7:ce:
                    b5:f4:54:06:db:db:fe:8c:2c:b9:65:8f:f4:a8:29:
                    43:1f:cb:d3:ce:3d:58:5d:c2:30:e9:df:73:9b:a0:
                    29:3e:b5:d3:13:c5:a6:3b:c7:b3:28:1c:81:fe:65:
                    19:90:3e:b5:e0:83:66:6f:88:a5:eb:f1:70:ee:cd:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:75:BC:77:4A:BB:23:20:28:93:48:47:48:D6:56:E8:A5:AF:13:8A
            X509v3 Authority Key Identifier:
                keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:7c:97:61:a6:50:35:b5:2e:62:a2:ee:61:fa:bf:07:17:
         34:ca:d8:4a:95:e6:3f:a5:89:54:42:a0:57:4b:ad:8c:d6:39:
         bc:1e:2e:6b:8e:fa:bf:71:24:86:63:3b:2f:ed:e3:8e:7c:6e:
         2c:76:68:2a:0c:0c:d4:d1:0e:06:65:36:26:ef:85:f2:69:cc:
         32:70:50:17:a2:fe:c5:ae:e8:49:fc:86:fd:90:04:d3:c4:70:
         92:9b:be:96:f2:47:8e:a3:06:ec:b8:37:fc:b0:ce:b4:cd:26:
         fe:77:a0:91:3e:67:d1:09:e8:50:77:c5:16:50:5d:53:63:07:
         85:c3:1d:2e:51:bc:ed:a9:aa:a3:37:12:45:52:3a:60:50:55:
         d2:73:61:cc:80:a4:c0:dd:ca:8d:9d:d8:44:9c:a0:87:90:c2:
         71:99:22:87:4c:fc:45:d5:8a:46:95:ba:0e:c8:6d:cb:fe:96:
         f7:69:11:10:e4:d9:7c:55:29:88:b5:e8:61:37:d1:fd:b4:c5:
         ad:55:41:74:10:4e:fb:b6:da:a7:36:7f:c0:16:f9:79:3c:57:
         e7:b8:e8:78:3f:f4:87:23:1c:d6:3d:ab:92:13:1d:04:5a:5f:
         56:02:28:d6:79:0b:2f:2c:54:93:55:b7:1c:f7:e0:8f:9a:e0:
         68:be:b9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:23:33 2026 by rpki-client