Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
File:                     8iz473at_fLPnv7b7BITSIY1b00.mft (raw, json)
Hash identifier:          K52M+b5jkpKdLn47zqwr3UeCdwsJZGWQHaZl5rhBzlk=
Subject key identifier:   C5:6F:B2:76:BE:BD:2D:C2:8B:5B:14:82:B5:AE:A8:79:35:11:D6:32
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Certificate issuer:       /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial:       01B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
Manifest number:          01AB
Signing time:             Fri 09 Oct 2026 04:42:47 +0000
Manifest this update:     Fri 09 Oct 2026 04:42:46 +0000
Manifest next update:     Fri 16 Oct 2026 04:42:46 +0000
Files and hashes:         1: 8iz473at_fLPnv7b7BITSIY1b00.crl (hash: m+D+AoNDprKax2zDtjc+lE9CFKL/bPZ9P/iHV60+QkA=)
                          2: E36214403D0011EFAD623342C4F9AE02.roa (hash: 8MuuN2f/dvQUl/EAeCIlck+3ljnjnHw7GSO4P2gdCpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
                          rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
        Validity
            Not Before: Oct  9 04:42:46 2026 GMT
            Not After : Oct 16 04:42:46 2026 GMT
        Subject: CN=6ac870c6-6569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:62:ad:b6:e6:92:04:61:e7:9a:4a:23:49:
                    53:9e:35:24:82:56:43:7f:40:b7:f3:3f:83:54:1e:
                    69:04:28:55:52:22:3f:fa:08:08:e3:73:90:6c:7a:
                    3f:1d:07:e0:46:b4:e7:3a:be:9a:50:54:07:dc:9b:
                    d8:37:19:52:42:6b:b0:d4:d6:a8:48:69:a7:0d:0d:
                    83:f8:6e:d7:8d:ed:6d:36:93:8a:eb:37:7d:10:9f:
                    d8:49:fb:67:2f:5d:18:5c:a8:ec:b1:be:29:9f:43:
                    c9:1c:8d:ca:4f:f4:ba:51:84:1b:7f:e1:43:24:94:
                    72:8e:d0:72:68:99:09:82:26:58:51:1e:74:38:10:
                    b4:01:84:22:bc:cf:e8:7b:a6:5f:70:45:b5:ca:07:
                    26:f0:34:86:dd:05:47:90:f8:7b:07:c0:5e:b9:69:
                    33:1d:c8:86:0d:fe:19:8c:6f:4f:04:18:c5:eb:8f:
                    62:28:64:ec:dc:d2:61:ab:27:d4:ea:8c:e8:23:49:
                    9f:62:7f:06:f8:53:be:47:72:2d:69:c3:bf:02:70:
                    01:aa:7f:3e:e9:30:2e:52:11:68:4b:92:ea:d0:c7:
                    bb:c3:6a:85:10:d1:58:ac:71:17:82:bd:52:48:ef:
                    34:c0:4d:06:bc:86:53:dd:fa:4f:3e:46:bd:df:f9:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6F:B2:76:BE:BD:2D:C2:8B:5B:14:82:B5:AE:A8:79:35:11:D6:32
            X509v3 Authority Key Identifier:
                keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:84:28:dd:6b:42:ca:02:07:41:0c:5c:de:ae:40:4d:28:c3:
         d9:b1:ca:fd:7a:a6:2a:96:8e:a6:85:3f:6a:61:32:7f:a4:78:
         8c:5d:26:1f:34:b9:85:ff:c3:b5:d0:70:c5:89:98:4f:16:86:
         c5:f1:df:19:aa:9e:8c:ab:de:a7:4b:5c:b1:1c:38:b1:6a:17:
         d7:6c:a9:5f:2b:b2:60:a0:4a:1a:22:1a:5d:f6:c6:4c:62:74:
         41:16:d8:7d:b5:00:9a:bf:e5:ff:7c:0a:be:8e:96:37:bf:f6:
         1e:ce:96:24:15:1b:64:93:83:6e:45:34:9b:92:9c:bd:50:4a:
         83:d2:c1:ed:ff:8e:be:ab:f4:cf:4f:8b:87:f6:f0:70:bf:9a:
         89:ac:a3:e2:f7:b6:4a:2c:7c:86:2f:23:db:93:1c:a8:8c:ca:
         42:c7:d3:bc:6a:fc:4b:34:d2:0b:66:28:51:96:37:93:e7:c9:
         70:24:b0:ab:dd:36:0b:5a:f9:c8:26:88:32:43:01:e1:36:41:
         37:58:da:20:1e:fa:f3:b4:ca:09:1e:4a:00:e3:30:d7:76:92:
         83:0f:c9:8e:c6:f1:ca:40:84:b1:39:d7:c2:15:c5:77:e0:14:
         78:e1:8e:f6:19:c6:27:f3:e3:b3:31:9b:e2:8a:5e:ec:2a:38:
         2a:b0:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:24:02 2026 by rpki-client