Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.mft
File:                     aBsuVM61QCyoEWA3sVQWseZe1No.mft (raw, json)
Hash identifier:          ay/iZlz7B10gWneW/yb29hOSCOF5xDPkzvt72T4tsGg=
Subject key identifier:   AB:9F:69:74:B9:10:11:D2:AA:44:B0:82:5D:E7:15:A6:DC:8B:92:29
Authority key identifier: 68:1B:2E:54:CE:B5:40:2C:A8:11:60:37:B1:54:16:B1:E6:5E:D4:DA
Certificate issuer:       /CN=A91E208A/serialNumber=681B2E54CEB5402CA8116037B15416B1E65ED4DA
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBsuVM61QCyoEWA3sVQWseZe1No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.mft
Manifest number:          31
Signing time:             Sat 03 Oct 2026 09:25:07 +0000
Manifest this update:     Sat 03 Oct 2026 09:25:06 +0000
Manifest next update:     Sat 10 Oct 2026 09:25:06 +0000
Files and hashes:         1: aBsuVM61QCyoEWA3sVQWseZe1No.crl (hash: T26LImgbybU8GTtl9IJ3jqJBpzm2et2B6GYqfmhp3BU=)
                          2: 67BED8CA760911F19399FA927BA30FBC.roa (hash: YyyALpI3Lw8dM5NZb40HSHcBSIvoWXZFh98HIuyioXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.crl
                          rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBsuVM61QCyoEWA3sVQWseZe1No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E208A, serialNumber=681B2E54CEB5402CA8116037B15416B1E65ED4DA
        Validity
            Not Before: Oct  3 09:25:06 2026 GMT
            Not After : Oct 10 09:25:06 2026 GMT
        Subject: CN=6ac0c9f3-1896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1b:fe:cf:ff:e4:e0:b4:06:44:fd:5b:06:ca:
                    7a:7f:e3:ae:50:40:35:b0:21:70:9c:4a:f3:0a:34:
                    3b:45:ff:fa:c7:e2:7e:cc:41:31:25:2f:2f:22:7c:
                    64:8e:88:f2:5d:85:ad:d6:cb:72:fc:5e:07:65:ba:
                    0d:5d:6a:69:f5:24:d1:61:e3:2c:52:92:95:5c:24:
                    75:7d:41:aa:1a:b5:2a:b2:5d:f7:27:d0:ac:a3:de:
                    e6:f0:4d:9d:c0:fa:9a:bd:45:97:01:56:2b:aa:e9:
                    89:8c:9e:ff:93:ee:98:b5:df:24:24:cb:ba:d9:7b:
                    f2:62:76:9f:82:c3:41:f7:bd:18:2d:75:21:1c:02:
                    b3:e6:69:d0:23:13:a5:50:51:03:2a:09:d0:b2:16:
                    2f:1e:71:ed:0b:0e:d0:1e:b9:bf:25:b3:c5:fd:f2:
                    a0:81:4e:bd:3c:5d:a5:9e:35:54:11:1b:04:e7:db:
                    61:78:04:4f:c6:10:8d:e2:79:32:1f:e6:48:66:12:
                    ec:35:6b:53:a7:60:f0:8e:04:92:e8:f9:f2:08:6d:
                    cb:4d:74:22:94:d4:ce:43:1e:0a:52:ee:e2:80:57:
                    e6:85:b8:5b:6d:94:a9:8c:59:3e:0a:c8:db:d8:46:
                    d9:7c:02:ec:9f:ea:98:d0:9d:f7:bf:83:df:ba:2e:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9F:69:74:B9:10:11:D2:AA:44:B0:82:5D:E7:15:A6:DC:8B:92:29
            X509v3 Authority Key Identifier:
                keyid:68:1B:2E:54:CE:B5:40:2C:A8:11:60:37:B1:54:16:B1:E6:5E:D4:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBsuVM61QCyoEWA3sVQWseZe1No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E208A/7AA2475A760511F1B63166DF79A30FBC/aBsuVM61QCyoEWA3sVQWseZe1No.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7f:25:f6:c6:e3:8e:31:81:2f:0e:c6:8b:34:03:d6:39:cf:
         e5:5e:e3:c2:b5:5b:f0:4b:60:6c:45:ef:d0:b1:e6:a8:47:94:
         94:2c:39:c6:85:da:b1:f2:45:bc:3e:9c:81:2e:37:b0:d1:0d:
         93:d9:dd:ce:09:02:ed:d6:9d:85:cd:68:41:65:85:06:f7:f8:
         15:81:76:4c:ce:7d:76:e2:2c:69:c6:db:60:90:a0:d2:82:46:
         09:1c:c7:b5:35:52:79:c4:23:0c:e9:56:37:95:2d:69:3c:25:
         24:93:85:24:5b:a1:34:e3:61:74:a5:87:a8:9a:51:eb:2c:36:
         25:bf:b4:53:46:3e:c9:b4:7d:65:5a:eb:bc:62:2f:65:bc:3a:
         ca:75:88:7c:88:2c:e0:04:66:40:d6:cb:48:21:bf:85:cd:f9:
         27:2c:61:4f:0b:37:60:0b:2e:f5:f5:b9:d5:d5:3c:90:7b:ef:
         dd:57:40:96:9b:8b:75:28:8c:55:37:61:d8:d4:08:12:b7:34:
         f3:44:1f:d1:f8:b9:8f:36:b8:33:0a:9e:c9:61:24:8c:89:aa:
         5f:63:e4:e4:7b:e3:dc:e1:2c:52:95:c6:17:a7:e3:cf:68:d2:
         ba:32:69:dc:34:01:6e:14:88:4a:76:6b:94:e2:6c:7e:24:4f:
         4a:5c:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:26 2026 by rpki-client