Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft
File:                     05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json)
Hash identifier:          0WIBTND1vL0IUpX7KhOEnCoYgkTolFO/nPwov+o4ZdM=
Subject key identifier:   17:A7:F3:CF:60:83:FB:FA:2C:1A:10:D8:B4:0F:4F:71:A1:36:1B:8E
Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF
Certificate issuer:       /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF
Certificate serial:       03C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft
Manifest number:          03BA
Signing time:             Fri 09 Oct 2026 00:44:54 +0000
Manifest this update:     Fri 09 Oct 2026 00:44:54 +0000
Manifest next update:     Fri 16 Oct 2026 00:44:54 +0000
Files and hashes:         1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: BD33mRiY9B7Fps08NTP5iNxdqlI6lT/ijYb8ID5vNjY=)
                          2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: al8fBj0l9FNorWDDEmWTxJIA8uTe/zODnox5rpi44HU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl
                          rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 00:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961 (0x3c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF
        Validity
            Not Before: Oct  9 00:44:54 2026 GMT
            Not After : Oct 16 00:44:54 2026 GMT
        Subject: CN=6ac83906-c42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:b6:63:24:58:8f:a9:ab:7a:db:a1:23:bc:
                    2f:d7:c7:24:6f:78:41:e4:5e:24:d8:1d:66:27:b3:
                    9d:07:0c:86:ca:0a:96:48:ef:16:4e:17:2c:e6:3e:
                    c5:33:2c:91:34:b1:bf:55:a1:fa:18:c9:c6:3d:ec:
                    cc:53:3a:3c:34:60:3d:10:34:87:c9:ad:06:60:7b:
                    48:b0:13:36:f3:a8:d4:71:a4:05:32:15:df:67:66:
                    d4:74:d3:11:e4:ba:f1:f6:28:9a:2f:fc:9b:62:26:
                    85:e8:04:70:ad:fe:df:8b:9e:4c:c4:e8:87:27:a5:
                    e3:fc:c2:d0:e5:1c:17:27:b6:c8:b6:6a:23:92:6e:
                    aa:99:8f:a2:50:3f:73:50:e6:2f:5d:d6:7c:d6:bc:
                    33:36:ff:3e:5e:b0:3f:e4:36:88:4c:01:2d:c7:e2:
                    9b:c9:e9:ff:78:60:3d:87:28:63:2a:c9:27:72:1b:
                    b1:14:36:78:37:44:6f:73:d5:05:91:95:ef:e2:3d:
                    69:f7:8e:d1:40:fc:12:7e:9e:6d:ba:64:f4:94:d4:
                    c8:6b:d0:53:d7:74:d6:42:a2:c5:ab:dc:b5:fa:c0:
                    ff:db:a9:ad:77:f0:d2:bc:2d:a5:60:ba:4c:9c:e6:
                    29:d3:b6:07:cc:45:51:7f:5b:77:e3:04:9a:25:f3:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A7:F3:CF:60:83:FB:FA:2C:1A:10:D8:B4:0F:4F:71:A1:36:1B:8E
            X509v3 Authority Key Identifier:
                keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:13:99:59:f6:d0:af:fb:e6:89:0b:3b:af:71:e1:f1:6f:4c:
         74:f4:e1:72:0f:bf:fe:23:aa:a4:94:0a:1d:54:c9:4f:be:dc:
         ad:f4:84:67:58:0f:f9:7c:40:db:6b:ac:80:fe:8d:45:f8:eb:
         5a:6e:73:80:45:12:54:6d:1c:19:ef:44:5f:8c:f9:c3:a5:01:
         ea:3d:6b:c6:ba:7c:80:8a:ca:f6:38:e3:ec:09:bb:4b:42:5c:
         23:2e:2e:7c:e8:bf:78:b3:62:3d:02:b2:7f:48:b0:86:2c:c3:
         e4:e9:6e:3b:a5:14:2d:29:df:16:75:c4:b1:5a:5b:61:44:f3:
         ab:6a:06:23:10:31:40:d4:5a:ce:e5:93:79:23:0a:ed:0d:fe:
         0b:4f:39:e6:a3:15:78:8d:ba:d3:d5:ef:bc:23:62:6f:a9:5e:
         e0:c5:79:4c:fb:6a:a8:97:01:84:7e:9a:c3:b9:fc:bb:30:3d:
         dc:e5:70:1c:ef:f6:0c:71:93:5e:eb:cb:17:f2:36:a9:fa:b7:
         77:6b:71:dc:c3:3d:13:a0:3e:1f:b7:a6:80:7e:6b:2e:2e:73:
         4a:d4:36:14:71:ee:b4:56:37:12:7d:55:25:ce:f8:bb:2e:78:
         cc:b2:1a:39:79:7f:ca:cb:62:09:16:f6:68:4e:58:52:fb:67:
         13:b6:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:57 2026 by rpki-client