Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
File:                     kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft (raw, json)
Hash identifier:          evmwH3PzNprO1IvZnxaQhBfCTHH4pTrIAlo73PHxccs=
Subject key identifier:   99:8A:81:CD:2A:B9:57:92:68:2C:65:7E:B6:E5:DF:99:B6:3B:79:D5
Authority key identifier: 93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA
Certificate issuer:       /CN=A91D6503/serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
Certificate serial:       08F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
Manifest number:          08E7
Signing time:             Sat 24 Oct 2026 20:22:41 +0000
Manifest this update:     Sat 24 Oct 2026 20:22:40 +0000
Manifest next update:     Sat 31 Oct 2026 20:22:40 +0000
Files and hashes:         1: kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl (hash: kIzEz3WQTsb7aIaj0NrqVXTj/My40DC+yaH3AGL1+YU=)
                          2: 457AD2DC859F11F1866C76AF58A30FBC.roa (hash: hdiH3Ng418UR8Y5S4DTPE17fqg+/kjt/gSWS+XCABwo=)
                          3: 3CC77D02EE8811EA9225690DC4F9AE02.roa (hash: 4OazGtQqbgceBbYfw7Gcl1IvavtUHdxh8gNlc8eWJ8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl
                          rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6503, serialNumber=933EF72606D9D5B29FE3A41F20C52B20CAF555BA
        Validity
            Not Before: Oct 24 20:22:40 2026 GMT
            Not After : Oct 31 20:22:40 2026 GMT
        Subject: CN=6add1390-da41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:14:da:8d:44:07:ad:75:08:80:9f:8f:00:
                    34:97:c1:84:8e:7d:09:3e:5f:14:51:88:0c:25:ca:
                    e6:29:65:dd:bc:4a:e1:b6:e1:fb:f0:a0:db:cc:2a:
                    58:5c:bd:06:3e:d0:dd:ee:27:4d:62:63:31:0a:3b:
                    78:33:c3:84:0e:1b:e3:5d:95:55:41:09:93:33:7f:
                    13:fe:8e:99:96:03:69:15:d5:a7:28:9c:e4:b7:94:
                    71:2a:7b:67:30:02:55:2b:dd:61:8d:43:61:f0:a4:
                    c1:31:10:b6:e9:89:29:9d:ec:8f:72:63:1e:ff:92:
                    54:51:74:af:3a:72:69:6f:ce:cb:c9:49:01:cd:87:
                    e9:60:a5:94:f7:f8:cd:7d:5c:25:55:1a:c8:0c:8b:
                    70:d2:62:ee:fc:65:7b:ef:2d:f0:2a:ef:40:0e:e4:
                    9b:63:7c:9e:0c:44:77:7f:e7:d8:fe:24:26:1a:b0:
                    b5:ac:b8:1a:cd:8c:f7:46:10:5a:ee:8a:ff:ba:aa:
                    75:bb:de:4b:06:88:12:d7:4c:b0:0b:7d:1d:8d:52:
                    2e:ba:e9:c6:e1:4c:7d:1d:80:ea:9a:21:b7:0c:bd:
                    77:5e:22:3e:6d:f6:eb:30:94:e4:a9:ab:1b:72:ba:
                    76:d0:51:8e:3e:f5:30:6c:4b:76:d2:42:2a:3c:de:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8A:81:CD:2A:B9:57:92:68:2C:65:7E:B6:E5:DF:99:B6:3B:79:D5
            X509v3 Authority Key Identifier:
                keyid:93:3E:F7:26:06:D9:D5:B2:9F:E3:A4:1F:20:C5:2B:20:CA:F5:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kz73JgbZ1bKf46QfIMUrIMr1Vbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6503/0154B4B6EE8711EAB52A5C09C4F9AE02/kz73JgbZ1bKf46QfIMUrIMr1Vbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:c7:b6:63:de:23:84:4b:64:1c:af:e9:19:16:aa:dc:b9:1d:
         25:22:d0:f6:3b:ec:1e:b0:b0:cb:88:77:d0:c6:9f:89:30:c5:
         c8:66:6c:fd:f8:24:31:a2:b4:d7:ca:d9:10:ec:b8:99:b2:e6:
         56:4f:2e:7c:58:e8:5d:51:db:66:45:dc:9d:58:8e:63:51:23:
         db:2e:fb:00:24:e8:d5:94:48:16:f2:b7:3d:a1:be:22:2b:d1:
         3c:21:43:ab:8a:0d:3d:91:01:dc:74:8d:fe:9e:b9:0b:f7:3d:
         e0:7f:65:4e:89:d6:74:99:ca:e6:96:07:5c:f7:79:2f:30:99:
         ec:19:8d:89:15:36:98:03:64:9f:54:1d:00:9e:f1:85:b7:54:
         84:bf:e4:ab:6c:21:64:ac:a7:d5:25:ea:d5:4b:c2:a3:9f:2f:
         e5:61:70:86:3b:d1:4b:dd:dc:5b:8f:e4:ed:29:53:ae:1c:08:
         59:f9:23:86:39:cc:50:e3:2b:72:bb:5d:52:93:de:40:65:66:
         7d:18:03:57:4d:6c:eb:2f:b6:e3:93:4e:f2:ce:26:1c:a9:4c:
         e6:27:35:4e:cd:5f:89:7e:79:b0:53:5d:b0:00:23:db:46:5f:
         5b:8c:b7:a1:42:f9:41:2b:b9:1c:43:57:7f:43:c2:bd:b2:98:
         49:81:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:57:55 2026 by rpki-client