Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File:                     77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier:          CDobxp2l6AEIQaWTlqcGEokNIYc6fy7ERsTMEpITMMo=
Subject key identifier:   12:BA:A6:65:3C:18:11:78:78:FF:DF:1F:E8:15:BC:C2:73:70:41:B8
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer:       /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial:       0D20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number:          0D16
Signing time:             Sun 04 Oct 2026 18:23:26 +0000
Manifest this update:     Sun 04 Oct 2026 18:23:25 +0000
Manifest next update:     Sun 11 Oct 2026 18:23:25 +0000
Files and hashes:         1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: 3V6dD5jQa6L9G/Xl1R532ieGN/xycLvAjlAT9hV6GBE=)
                          2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: lK8WYlW/sGNnnRMcLOEhnAiWj1a7xDPNyjs1znIbG8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
                          rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3360 (0xd20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
        Validity
            Not Before: Oct  4 18:23:25 2026 GMT
            Not After : Oct 11 18:23:25 2026 GMT
        Subject: CN=6ac2999e-7b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:a7:99:5f:74:e5:3c:43:4e:27:42:ba:8e:
                    9b:ea:85:03:7e:66:23:96:29:b7:16:52:75:fa:f6:
                    d7:46:5f:5e:a6:ba:e5:cf:9d:e9:37:34:73:7a:ca:
                    30:c3:a6:d0:01:8c:de:52:f0:d9:fb:dd:7f:81:d8:
                    02:2b:a0:07:9b:14:87:a7:70:77:e4:de:c9:38:22:
                    15:fa:4a:ca:8d:d9:8c:fd:d3:e7:75:f7:9b:19:9b:
                    66:1a:94:1b:48:a4:6c:e6:01:e8:28:fb:70:58:d4:
                    3a:2b:ae:e6:0d:ab:2c:d1:1b:55:09:1e:5d:20:93:
                    76:67:a4:e6:7f:0e:3e:b6:ae:1f:25:cf:7c:fd:91:
                    32:6b:ab:ca:8c:ed:2e:4c:5c:63:f0:64:3b:8b:95:
                    48:4b:f1:86:27:ba:a6:2d:fb:3c:ff:55:8c:c1:40:
                    e7:9f:da:ff:9b:28:39:68:d0:4d:72:28:82:a3:9e:
                    ab:34:30:10:19:1a:af:0c:89:96:ef:ae:6e:85:d7:
                    8e:32:4e:48:04:30:45:c3:d0:38:10:b3:b9:7a:9e:
                    e4:f0:2a:13:61:60:1d:13:3a:4b:74:47:5c:b8:02:
                    9d:a2:e0:1d:1a:a5:86:ac:46:86:c4:07:66:d1:50:
                    80:14:2b:99:bd:47:ee:dd:7d:1d:36:45:c8:22:ce:
                    2d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BA:A6:65:3C:18:11:78:78:FF:DF:1F:E8:15:BC:C2:73:70:41:B8
            X509v3 Authority Key Identifier:
                keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:98:c3:2f:4e:47:ea:bb:5f:77:b7:90:93:78:12:e5:b3:18:
         76:ed:ef:e5:5e:3a:e7:17:e2:79:8f:a1:54:b4:97:d3:13:09:
         29:cb:b4:e0:d6:09:cb:ab:0c:2f:46:8d:f5:76:ac:4b:f7:57:
         5c:5a:df:bf:b5:96:b3:e9:53:6a:48:fd:39:41:8c:94:0e:45:
         dc:d8:13:aa:1f:1a:0d:b4:c3:81:29:66:36:7c:66:62:58:19:
         7e:1e:70:0e:9b:20:a1:ce:68:66:c5:b1:cf:7b:d0:75:9d:6b:
         09:ff:ac:a6:d8:08:13:e4:38:9c:3f:26:97:e7:04:36:36:2e:
         7b:3a:cf:98:b2:80:97:54:40:78:4d:42:4b:fc:45:24:60:88:
         8e:bd:ce:84:a9:3b:d1:0d:dd:3d:41:69:a9:23:eb:19:af:38:
         2c:58:fb:3b:e0:d0:22:7f:87:08:33:5b:46:83:93:f9:52:db:
         5a:b0:f3:cd:46:3f:24:fe:17:56:08:9a:c6:71:3a:43:fd:37:
         ff:4c:13:d0:a7:10:50:b9:89:70:4f:2e:36:29:de:63:f7:ea:
         a8:56:27:7e:90:12:f3:24:b6:f3:1a:ef:6f:12:7b:df:27:3b:
         8d:ac:05:24:b0:dc:a7:42:17:fa:27:99:c2:d3:10:40:62:97:
         6b:ac:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:16:18 2026 by rpki-client