Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File:                     5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier:          fdRmNM8jTLnOnrUABh8u9vQ/uSfG/Eq9pFDbj97HZJM=
Subject key identifier:   C5:3F:66:4B:D8:06:61:A7:BD:B0:7F:81:94:29:A5:BB:F1:E5:4A:B2
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer:       /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number:          0136
Signing time:             Sat 03 Oct 2026 06:14:26 +0000
Manifest this update:     Sat 03 Oct 2026 06:14:25 +0000
Manifest next update:     Sat 10 Oct 2026 06:14:25 +0000
Files and hashes:         1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: sWsEcFu6sfZXt0lciZ7s60+q09rfZehHr52/oCJQOBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
                          rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
        Validity
            Not Before: Oct  3 06:14:25 2026 GMT
            Not After : Oct 10 06:14:25 2026 GMT
        Subject: CN=6ac09d41-0188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:07:01:cd:bc:53:3c:b7:9b:c7:99:83:41:
                    3d:42:a8:60:50:b6:8a:11:4c:35:fd:62:b6:c5:61:
                    0b:e0:ca:b7:16:25:40:92:66:45:e5:4e:8e:a0:c0:
                    09:53:3b:bc:13:d3:a0:28:09:7d:0b:bc:27:af:4e:
                    3a:70:0e:61:53:dd:4e:4f:15:33:69:65:42:30:71:
                    02:ef:81:82:5f:25:df:fa:47:08:24:09:4a:87:d2:
                    f1:73:cd:4b:b2:ee:cb:9b:24:e6:a1:95:1c:ea:99:
                    a1:6f:f5:f9:65:1f:74:fe:12:7c:f9:df:5f:d0:a0:
                    79:42:a0:b3:47:85:3d:4b:0a:fc:bf:92:b8:87:ad:
                    38:71:55:0b:8f:a3:fb:92:14:9a:ed:35:2a:57:73:
                    33:43:2d:d4:19:63:63:9c:61:3a:9e:25:e0:7e:04:
                    21:19:a2:92:15:8c:2d:32:63:a2:6a:42:0a:93:4d:
                    14:72:e3:d5:62:a2:cb:f2:f4:a9:a6:56:10:a6:d2:
                    ff:0e:6c:c5:8e:6e:9c:5b:da:a3:40:d0:86:31:4d:
                    03:4b:96:f6:7d:80:eb:e0:03:f8:d5:0c:f0:23:c0:
                    82:bb:5e:86:7f:5f:f0:71:7f:91:62:45:8f:ff:f9:
                    ac:ca:11:86:25:b6:28:fe:d2:6f:bf:2a:69:d8:e8:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:66:4B:D8:06:61:A7:BD:B0:7F:81:94:29:A5:BB:F1:E5:4A:B2
            X509v3 Authority Key Identifier:
                keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bc:80:1d:2e:93:ce:aa:24:7f:98:08:33:6d:6f:e6:36:fa:
         88:e6:cb:4e:f8:fd:af:a4:37:1a:29:bf:5b:36:0c:5a:eb:68:
         40:b9:18:44:c8:90:90:82:be:4c:a7:d1:62:c9:9c:fa:32:46:
         a4:49:7a:a6:a3:f5:ee:2d:03:ce:67:47:21:f8:fe:6b:f1:22:
         d0:d5:40:94:d9:b8:04:b1:c7:6f:43:5b:6d:6c:75:2c:58:70:
         a3:70:16:92:a3:ee:40:e9:68:68:7f:9d:8d:7b:63:08:6c:9f:
         77:21:c8:a5:07:bc:a3:1f:ae:51:91:94:67:ff:0f:d6:d1:80:
         f8:2a:dd:01:9b:ab:ed:3f:32:9f:59:9d:8f:1f:29:83:3f:a8:
         2d:1f:78:e5:82:86:36:f8:bd:01:cf:a0:e7:71:c7:8a:88:17:
         a5:7d:02:d9:08:dd:97:d4:a1:f4:51:81:82:83:50:f2:29:10:
         61:67:ef:65:de:de:ae:54:2f:e3:1a:b1:7a:f6:4a:de:c0:48:
         81:05:c9:d4:f3:58:e3:52:dc:2a:ab:76:b8:37:15:7d:7b:84:
         32:01:67:54:2b:a6:a0:f5:03:f5:71:89:1d:4e:6b:16:4e:b2:
         52:33:87:32:44:d2:e2:91:b5:e5:f0:f2:49:cf:66:fa:5d:25:
         d4:b9:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:24 2026 by rpki-client