Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
File:                     jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft (raw, json)
Hash identifier:          HVY5n3LLX6NaaxVTyQaXVJG4ROATru0+Kcdx1DcZX4s=
Subject key identifier:   CE:24:E7:57:2D:7C:FB:A0:C4:46:9D:61:4D:90:0F:95:B3:09:12:DA
Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
Certificate issuer:       /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Certificate serial:       0389
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
Manifest number:          0380
Signing time:             Thu 15 Oct 2026 01:15:01 +0000
Manifest this update:     Thu 15 Oct 2026 01:15:00 +0000
Manifest next update:     Thu 22 Oct 2026 01:15:00 +0000
Files and hashes:         1: jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl (hash: WMQ/kXE3nrq/ikfM2HTgWjoKV40lPjVRgPjnGuZNfb8=)
                          2: EEEB4CA6449011EDACC30815C4F9AE02.roa (hash: On8tjQ7d3AuBZxs94Qpd4oO41sPqzF7/cFfsHwvt2SA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
                          rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 01:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905 (0x389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
        Validity
            Not Before: Oct 15 01:15:00 2026 GMT
            Not After : Oct 22 01:15:00 2026 GMT
        Subject: CN=6ad02915-cd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:cc:e0:c1:d1:ac:5c:02:89:a2:f2:e6:af:
                    be:09:31:ab:30:76:a7:99:5a:4c:28:b5:68:d6:c7:
                    3b:60:59:26:63:12:76:a1:81:64:f3:b5:b5:f0:73:
                    8f:ab:8f:85:9c:56:5b:20:62:f1:e1:97:11:b1:d6:
                    bc:35:2a:08:ec:96:6a:e1:35:cd:6c:0c:d1:b7:fb:
                    0c:3d:09:b2:4a:31:ba:96:8e:3a:8d:49:e5:ac:20:
                    d5:58:20:cd:fd:55:29:5e:45:1c:5e:58:0c:7c:c6:
                    ee:d7:7c:73:90:f4:71:19:97:b8:60:83:fd:e9:9e:
                    03:d9:7e:34:b5:f3:ec:20:10:95:7f:b8:c2:41:9c:
                    cf:eb:19:b0:15:12:57:33:7b:5b:31:90:7e:70:e0:
                    6a:fc:24:23:e9:4b:6d:68:85:77:91:54:f8:48:10:
                    4d:fa:a4:1c:47:a3:8e:15:71:a5:03:3f:34:a5:1c:
                    ce:8d:85:d5:6f:a1:c9:da:ec:5c:5a:56:f4:4a:fd:
                    2a:41:0d:a8:61:7d:5c:fc:5f:a8:86:f9:43:80:e6:
                    a3:d6:55:68:47:43:a2:16:28:f0:f1:0d:d0:99:87:
                    40:81:09:0e:94:1a:cb:f3:83:e0:1d:77:14:1d:f0:
                    61:24:d6:3c:4f:4a:3e:9b:40:01:b5:d4:15:f9:73:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:24:E7:57:2D:7C:FB:A0:C4:46:9D:61:4D:90:0F:95:B3:09:12:DA
            X509v3 Authority Key Identifier:
                keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5c:56:12:3b:dd:71:2e:4d:79:22:b6:e5:10:c5:c5:5c:f0:
         fe:92:e0:ee:09:73:3a:4c:7a:74:04:a0:c5:de:8c:99:18:80:
         90:a9:b7:7e:f9:3c:ea:84:00:22:67:fd:91:27:ee:dd:5d:c7:
         d1:05:1d:0f:60:12:7f:f6:95:a0:70:ef:0b:53:0b:9b:4a:26:
         1d:3b:59:ff:d3:93:c1:59:a7:05:5a:ca:88:87:f9:9d:29:ff:
         3c:76:48:06:a3:3f:31:86:32:e1:11:7a:49:31:ac:95:35:8c:
         ff:50:da:6c:cc:57:15:4e:cd:28:80:33:1f:69:35:f2:ee:fa:
         c2:bd:f0:a6:c2:7b:e1:9a:a3:24:c1:b2:30:e6:70:cb:ba:2b:
         3a:d9:9b:96:2e:c8:61:82:24:c7:37:db:23:b5:35:cd:f4:28:
         a6:32:dc:d0:bc:3f:e2:7d:df:de:8b:2d:65:8f:f6:5e:99:ed:
         aa:6d:da:f5:48:cb:e4:22:db:7d:f5:77:bd:b3:93:45:9c:1f:
         a9:5e:b1:e1:7e:b7:37:e0:bb:a8:9e:e6:4b:66:1e:74:69:e2:
         52:59:6d:38:cd:24:1c:62:49:db:fc:66:5e:b8:15:79:11:3d:
         db:65:a6:ef:7f:67:9f:4c:83:17:36:ca:9c:43:3b:81:1c:23:
         0d:77:52:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:34 2026 by rpki-client