Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
File:                     9rFFECBSR85YMyWRuaKXoV0q6j8.mft (raw, json)
Hash identifier:          /K/R3DQC8WES7Jd34d+YLPKrww9UUxOAs9bY3NlpNhI=
Subject key identifier:   6F:8C:D4:F8:2B:14:88:1B:97:EE:5B:CD:FC:C9:BC:0E:CA:BA:3E:67
Authority key identifier: F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F
Certificate issuer:       /CN=A91E4FB7/serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
Manifest number:          D1
Signing time:             Tue 03 Nov 2026 07:43:07 +0000
Manifest this update:     Tue 03 Nov 2026 07:43:07 +0000
Manifest next update:     Tue 10 Nov 2026 07:43:07 +0000
Files and hashes:         1: 9rFFECBSR85YMyWRuaKXoV0q6j8.crl (hash: N763mAFuJuJTS5EwWa794bzODxIhGbGr1pp7CI4n+T4=)
                          2: 581240AAA04511F0BECA9449C4F9AE02.roa (hash: +oOWaz5+puMsV9knRaxvNPItkQ6Wk8WkynSxoQb5q8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl
                          rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 07:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4FB7, serialNumber=F6B14510205247CE58332591B9A297A15D2AEA3F
        Validity
            Not Before: Nov  3 07:43:07 2026 GMT
            Not After : Nov 10 07:43:07 2026 GMT
        Subject: CN=6ae9908b-92b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:9c:32:9c:2f:54:30:1b:c0:ab:7b:8d:94:
                    a2:f8:c8:ec:0a:47:07:99:89:28:e5:49:9a:c9:6f:
                    60:e3:f9:24:4d:02:c2:c2:f1:cc:21:3c:16:5a:ac:
                    08:68:fb:ff:ee:1a:44:b9:b0:3a:0a:d1:c9:5e:8d:
                    b1:b5:2d:06:7a:d3:dc:6f:bc:82:61:29:ea:01:d4:
                    05:48:0e:d3:8c:8c:d7:6a:8e:b6:0b:67:64:73:cb:
                    76:b7:72:89:27:32:36:7e:f3:64:03:cd:fb:ee:c5:
                    a6:4a:24:9f:3c:2c:84:d2:e8:04:45:9a:ff:58:f4:
                    d7:f5:f2:97:40:fc:f3:92:a6:00:6d:32:28:9e:26:
                    e5:63:ae:9d:ad:db:98:9d:6f:80:aa:39:d9:80:a6:
                    2f:a1:0f:8a:fa:4c:93:0b:60:d6:93:72:14:e3:40:
                    40:e5:4d:0f:04:84:f3:49:90:db:c1:8e:df:9f:0f:
                    ea:59:3c:63:cb:7f:a2:7c:d0:2d:ea:b8:72:4d:14:
                    d8:a5:c6:c4:77:f8:16:8d:9d:c7:0b:ac:3a:39:a7:
                    80:1f:82:28:9a:48:60:7a:68:a3:54:6c:c7:9a:3c:
                    87:be:ab:ba:92:2f:2f:87:ad:89:1e:64:35:b4:6e:
                    41:8b:bc:50:72:df:8b:c3:0a:9b:3c:3c:dd:bb:0f:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8C:D4:F8:2B:14:88:1B:97:EE:5B:CD:FC:C9:BC:0E:CA:BA:3E:67
            X509v3 Authority Key Identifier:
                keyid:F6:B1:45:10:20:52:47:CE:58:33:25:91:B9:A2:97:A1:5D:2A:EA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rFFECBSR85YMyWRuaKXoV0q6j8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4FB7/7EC661C8A04411F0BC5CF947C4F9AE02/9rFFECBSR85YMyWRuaKXoV0q6j8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:ed:33:f0:35:30:88:21:2e:ad:6f:ee:cf:fb:4d:4a:02:
         b8:03:16:6e:34:a4:59:c2:e2:43:d3:6d:c7:11:dc:94:6b:53:
         66:0d:b9:b1:ee:07:97:54:2d:d5:e0:47:b6:08:3d:e1:2f:41:
         c9:3b:e8:e3:7b:e1:7c:68:00:c9:24:2f:35:de:64:a1:68:5c:
         d7:cd:a9:81:92:e9:ef:83:5c:20:8d:13:cc:b2:a4:96:c2:1b:
         d5:b4:3a:0e:a3:19:85:83:1a:9a:3a:28:4b:9c:5d:9e:05:48:
         e7:c8:7c:2c:58:e5:fa:48:c1:22:5c:25:00:ff:e4:db:d2:20:
         e8:d3:04:d7:bc:43:6f:a6:06:c3:e5:72:0b:c4:4f:41:02:ca:
         7c:0a:11:fb:44:17:76:a1:65:78:ea:ed:6a:00:33:9b:ca:5f:
         e0:ab:52:4e:4b:67:14:8b:1f:1f:98:d2:d3:f0:e5:d5:8d:47:
         cb:26:2a:15:b1:9f:03:6f:eb:e2:ab:11:f6:1c:d2:c6:e4:43:
         ac:e5:c9:be:0d:a9:b6:77:21:b4:bb:fa:3c:f2:1c:83:0a:f9:
         6e:30:7b:d6:30:4a:d7:83:7f:6a:bc:18:fd:ca:46:89:91:78:
         a2:74:75:fc:47:82:f8:32:4e:49:de:ca:29:ac:c6:2f:a8:56:
         d7:86:e3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:40:40 2026 by rpki-client