Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
File:                     k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft (raw, json)
Hash identifier:          NsgFOanGAhn7/11aBVOpFPPDFnFvksvom8BAB9HbS6s=
Subject key identifier:   B3:63:88:10:87:D1:9C:73:AE:C9:7A:B2:33:A2:49:15:84:DF:84:71
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Certificate issuer:       /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
Manifest number:          01FA
Signing time:             Mon 19 Oct 2026 04:01:15 +0000
Manifest this update:     Mon 19 Oct 2026 04:01:14 +0000
Manifest next update:     Mon 26 Oct 2026 04:01:14 +0000
Files and hashes:         1: k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl (hash: T6Kr2v1JD3ANW8fShxclrspelmN8tUJJF4UJCurh+jU=)
                          2: 69299E5E451A11F1923B844B97833773.roa (hash: 6yTtk6GVQ3Q+uX3huIXknhgsTRlkg8J79fIZJaNP+EQ=)
                          3: CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (hash: T+9eZucYuIbcTkKwIw8LA6osZSTEz7bmZE02liyk2E0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
                          rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
        Validity
            Not Before: Oct 19 04:01:14 2026 GMT
            Not After : Oct 26 04:01:14 2026 GMT
        Subject: CN=6ad5960b-6c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:03:fa:94:1a:50:25:36:a2:dc:ce:de:8d:0b:
                    dd:74:83:32:74:e7:6f:8b:b3:b3:b4:10:51:ed:84:
                    21:cf:29:02:94:e2:c9:7b:4a:01:6d:e5:f2:b7:b1:
                    a3:f1:45:5c:60:b0:88:47:24:5b:cf:e0:f6:31:8c:
                    b6:75:fd:93:83:6e:f1:ab:40:1a:4b:d8:3c:2f:5c:
                    99:5c:65:7e:b5:db:28:4c:86:d6:63:a8:be:c9:01:
                    8a:c1:db:8a:b4:7e:7a:18:8d:24:d3:29:7a:24:c9:
                    eb:92:b1:d1:ae:e7:81:54:44:c4:2b:11:b5:33:31:
                    80:5d:57:23:19:ea:7a:b8:5a:e5:77:41:a1:ab:85:
                    d2:4e:0e:38:09:7f:35:75:8a:d9:55:36:56:71:71:
                    c4:60:ca:38:b6:c5:55:5f:c4:3b:dd:31:53:bc:91:
                    80:70:50:fd:d6:31:67:74:24:23:c2:19:d5:a1:63:
                    a0:87:04:d7:63:e6:d1:ec:d6:3e:8d:87:53:1e:a1:
                    cd:50:41:f4:9b:44:c2:cf:a4:e5:17:81:6c:7d:a0:
                    9d:ab:bf:f7:5f:33:88:6a:04:ff:8b:d9:fa:09:3a:
                    c8:8d:5f:1c:5b:aa:34:7a:2f:f0:aa:5c:d9:f9:04:
                    32:96:1b:64:8d:39:42:4a:12:36:25:55:aa:91:f1:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:63:88:10:87:D1:9C:73:AE:C9:7A:B2:33:A2:49:15:84:DF:84:71
            X509v3 Authority Key Identifier:
                keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:4a:54:70:95:fe:2d:7c:59:fe:95:6c:3f:37:d4:90:76:
         99:e6:28:5e:b8:69:d7:e3:dd:12:d1:5c:1a:92:49:c5:a2:c4:
         b5:15:39:83:61:cf:f3:3e:50:86:17:db:22:a3:fb:69:d6:77:
         f0:96:1f:66:db:06:ef:2b:42:6b:b2:c3:69:34:4a:9c:3b:f7:
         51:11:27:e3:3d:0f:14:60:8f:b5:31:b7:b7:30:f7:17:9b:c8:
         42:2d:c6:30:34:a3:9c:aa:8f:5d:75:5d:75:76:66:c7:be:8d:
         06:15:d3:fa:d1:bb:4d:aa:2f:97:e8:f7:7f:8b:ab:6c:c3:f4:
         32:a6:cb:e5:d1:81:f2:58:e0:1d:84:e2:cc:0d:86:45:d6:b6:
         9d:4a:21:68:9d:aa:4d:e5:b3:05:02:11:52:e9:32:12:ba:3e:
         f9:00:6a:73:97:2c:0d:b5:fc:51:e1:f5:43:d1:ba:e6:c4:2d:
         80:7d:e1:d2:96:a3:69:ce:e6:f6:f5:87:b7:a9:8b:70:34:7a:
         bb:19:71:2a:e6:da:e8:dc:f8:c0:2c:a5:ad:59:b2:d6:b7:fd:
         c1:57:c7:c5:bb:55:cb:35:79:88:db:3b:e4:5f:92:a0:49:6a:
         64:0d:5b:21:a0:08:77:0a:81:f5:c3:1b:39:8a:74:cc:2e:fa:
         85:9c:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:59:24 2026 by rpki-client