Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
File:                     kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json)
Hash identifier:          hgkMfa6Nl3xIpI1hpRoMPLU9hfpn7Rs4nkjN5IAegbI=
Subject key identifier:   43:8D:0C:85:09:DF:D5:56:32:36:FC:78:EB:56:7F:2C:C9:D0:26:6C
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Certificate issuer:       /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial:       055A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
Manifest number:          054C
Signing time:             Wed 28 Oct 2026 23:40:52 +0000
Manifest this update:     Wed 28 Oct 2026 23:40:52 +0000
Manifest next update:     Wed 04 Nov 2026 23:40:52 +0000
Files and hashes:         1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: LxkrkhOUjUF2Ep8csPp8ML8+UZbcEQAY03Tuo/xiukE=)
                          2: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=)
                          3: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
                          rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 23:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
        Validity
            Not Before: Oct 28 23:40:52 2026 GMT
            Not After : Nov  4 23:40:52 2026 GMT
        Subject: CN=6ae28804-d1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:80:8f:78:f5:f5:b8:1b:56:bf:82:10:09:28:
                    fb:fc:2f:08:c5:a0:92:10:bd:68:7f:53:59:93:c8:
                    62:db:ff:a5:3b:e0:1f:5e:ad:b9:42:a5:c0:25:94:
                    78:6c:16:14:ac:a6:9c:c6:c8:c7:2d:7b:2a:65:d2:
                    f1:0e:a0:54:62:22:9f:e9:1c:48:47:bf:6b:87:09:
                    ce:54:fd:eb:1c:3e:4c:60:41:11:30:b8:31:bd:5e:
                    89:19:f5:99:e0:c0:1e:58:7f:31:32:a1:32:f5:f5:
                    80:b3:a1:13:b6:73:9d:84:72:d8:3d:a0:e2:d2:bd:
                    ce:e2:d0:f8:be:39:d6:2f:87:ea:0c:19:45:cc:0c:
                    e7:ce:7c:7b:c4:36:e4:d3:ab:c7:fc:01:7b:46:84:
                    59:04:1d:37:82:0a:df:b2:19:75:92:f9:1d:ff:e2:
                    64:62:55:b5:35:af:3a:b3:3e:23:19:e5:92:3a:08:
                    d6:2e:37:d7:26:10:92:a5:07:aa:83:8c:89:2b:31:
                    57:32:a5:f4:55:43:e8:2f:9d:46:8c:72:9e:06:98:
                    aa:8c:7d:d7:27:2d:bc:bd:c5:8e:87:02:4e:46:7f:
                    34:c4:1d:f1:86:7e:8f:af:8e:44:05:0a:3a:33:f2:
                    f9:74:3e:17:b0:85:29:5a:0c:8b:d0:af:9c:0f:08:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8D:0C:85:09:DF:D5:56:32:36:FC:78:EB:56:7F:2C:C9:D0:26:6C
            X509v3 Authority Key Identifier:
                keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:88:bb:e8:be:7e:6a:64:5e:fb:f3:5f:35:23:88:8a:ce:a2:
         35:ad:16:36:05:f7:3c:cb:d7:f1:0c:1d:81:ea:68:e3:3c:df:
         39:62:e7:75:09:84:2a:2b:d9:46:b0:b3:f9:07:09:8e:40:f2:
         cb:75:1a:3c:e9:8f:f9:b1:0d:8c:7e:f9:a9:27:05:77:6e:ab:
         2c:d9:9a:81:05:b1:e0:0f:a8:d7:d8:73:56:4c:97:c6:32:a1:
         de:5d:21:f2:c8:0d:e7:4f:65:be:d5:6e:bc:a1:52:95:8d:dd:
         8f:fc:7c:a9:c3:36:a0:db:e5:4e:3c:af:b3:d0:ac:84:fc:53:
         8d:03:fd:21:a2:12:52:e5:de:5d:e9:6b:c5:15:f5:70:e9:f6:
         00:d2:d6:d3:8f:64:33:c2:79:77:f2:14:69:b9:70:7b:37:9f:
         9e:e7:c3:b7:8e:fd:a2:04:34:3a:a8:5a:ad:c8:5c:5d:e7:64:
         a4:be:d6:96:35:4c:f0:f6:61:96:fa:80:77:12:3c:44:88:76:
         bf:1d:e0:8c:7f:7e:9d:fd:4e:11:fa:bd:97:a2:0d:df:aa:e1:
         2b:e0:b9:b4:25:e8:a9:e5:65:a7:c1:5e:f5:c2:9d:95:1c:83:
         48:e8:b5:8a:8c:99:70:0c:d9:cb:25:f9:15:cd:01:a1:58:f1:
         b2:e7:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:00:00 2026 by rpki-client