Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
File:                     7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json)
Hash identifier:          p01SgQWuITWNYzfRq7sO1GIdUEvPBh3Bcq7tQ/4v13I=
Subject key identifier:   AF:BE:71:5D:B3:BC:BB:77:97:5E:27:E6:75:AE:33:02:46:F6:99:A3
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Certificate issuer:       /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
Manifest number:          0295
Signing time:             Fri 23 Oct 2026 02:20:33 +0000
Manifest this update:     Fri 23 Oct 2026 02:20:32 +0000
Manifest next update:     Fri 30 Oct 2026 02:20:32 +0000
Files and hashes:         1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: qV+nNev9J4yjn7P4EtYZxer4MvXAayHACcR3XybV6zE=)
                          2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: V6SrxQGUuxMhaHjz0uz3/Z2ziHbiF2Bwsg8Gikl9lKg=)
                          3: bWGJXuuqJMcQM-lFvXq-3Lg6wr8.asa (hash: RfLYtZj4X5BF1ZyAY4I1p9QAM2RVSMuSfbxQ5HpibCY=)
                          4: C5AFD098167311F0916F5435C4F9AE02.roa (hash: oXr+vmkmATSoU0utBEAVuOzrUcdZ9gNuCzhDxhz21iY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
                          rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 02:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
        Validity
            Not Before: Oct 23 02:20:32 2026 GMT
            Not After : Oct 30 02:20:32 2026 GMT
        Subject: CN=6adac470-6894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9e:83:a4:2f:d6:ac:13:33:ca:66:3f:61:0b:
                    63:16:01:19:47:d7:71:a2:99:11:98:3d:b1:a4:59:
                    ed:00:af:2c:37:da:42:c7:43:e8:18:e2:68:2c:40:
                    b3:15:e0:9c:73:36:3d:97:fd:5d:e5:0f:23:7b:94:
                    2a:eb:20:7b:60:43:b4:49:db:c4:10:ad:98:dc:29:
                    73:07:4e:35:68:b0:23:14:87:77:74:21:7b:83:ad:
                    90:35:f6:9a:d5:df:9d:d0:42:9c:06:3b:6c:5c:d7:
                    b6:ca:97:a0:cd:4f:ba:34:7b:cc:41:a6:93:69:c4:
                    cb:d9:10:9e:9c:34:48:a0:6b:34:3a:48:ef:b8:34:
                    dd:cc:18:9f:0a:47:44:b5:12:23:f8:85:d6:37:de:
                    28:d4:f9:0b:f8:c2:ca:46:43:41:78:31:91:cd:7c:
                    d7:4e:d0:e7:d9:91:25:aa:87:66:7b:70:6d:81:5e:
                    bc:b6:b1:b3:0d:e6:b5:88:c6:db:3a:60:98:1e:e4:
                    65:ce:7b:2a:50:c0:8c:a7:d2:8d:ee:f7:8c:7c:eb:
                    20:52:ff:3b:fe:38:6b:78:61:c8:09:93:bc:c9:13:
                    0b:1a:ad:d2:73:e3:19:88:bf:61:60:41:60:0a:60:
                    bc:f9:21:77:2c:a9:81:3f:b4:4b:bf:c5:5c:c2:93:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BE:71:5D:B3:BC:BB:77:97:5E:27:E6:75:AE:33:02:46:F6:99:A3
            X509v3 Authority Key Identifier:
                keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4e:f6:dc:38:e5:cc:80:75:47:da:e4:0f:ee:70:de:d7:f3:
         81:6f:83:84:9b:44:84:5e:92:2a:75:ee:37:69:b9:b4:60:59:
         0b:76:60:52:7d:8f:09:c2:e7:b1:98:28:54:e4:fe:65:bb:6a:
         05:c4:6f:e4:75:84:d2:d6:97:a9:36:10:17:24:42:77:c9:78:
         d9:d4:ef:2e:59:5f:72:99:2a:3c:2a:cf:59:58:a9:52:20:a4:
         5c:4b:39:82:07:d4:e6:6a:62:82:7c:9d:d9:a1:0e:bf:ce:7e:
         45:cc:d3:35:9a:80:75:1f:e5:35:0d:8b:61:7b:f7:ee:27:bb:
         6a:c9:c7:6f:ee:71:55:3d:3e:3d:fa:ee:f2:d5:7d:62:f3:79:
         c6:85:b9:62:25:39:87:74:17:cf:14:2f:2a:4e:78:b3:ea:f4:
         0c:3a:32:c6:a6:b0:e6:25:42:d6:b4:5c:ea:2b:de:30:69:8d:
         5b:af:61:45:2f:16:7f:8f:bb:08:7f:35:ab:06:82:90:f2:31:
         5f:53:1b:e0:10:c7:9c:30:3e:a6:b2:53:9d:72:2e:f3:64:ae:
         77:f3:09:f8:e4:1c:f0:87:ad:51:4b:1f:cc:3f:7e:76:89:c7:
         6a:06:2f:6f:9f:cd:b5:e2:81:ae:60:d7:ac:d4:3d:dd:b7:e9:
         48:3c:9b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:53:09 2026 by rpki-client