Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
File:                     b9CIejkD49bhe7nP2O8mknC6ywc.mft (raw, json)
Hash identifier:          Jf4tPEEfhfa9/Me8o8gzqpMjpuNOiaB8dcd4BAhYuss=
Subject key identifier:   9E:CF:D1:F0:72:A5:7A:9B:BE:16:01:4A:3E:DC:9A:1E:E0:BA:CF:12
Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07
Certificate issuer:       /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
Manifest number:          0162
Signing time:             Sun 25 Oct 2026 05:32:24 +0000
Manifest this update:     Sun 25 Oct 2026 05:32:23 +0000
Manifest next update:     Sun 01 Nov 2026 05:32:23 +0000
Files and hashes:         1: b9CIejkD49bhe7nP2O8mknC6ywc.crl (hash: u+7CkGuFRCvt3aCcKAI5tFmdXgoD+nSj9mTB0DAK/P8=)
                          2: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (hash: 7y7RETYbuZ100fvQ4OZzDzZF974c+TgTdz2U9WNxBsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl
                          rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 05:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07
        Validity
            Not Before: Oct 25 05:32:23 2026 GMT
            Not After : Nov  1 05:32:23 2026 GMT
        Subject: CN=6add9468-d0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:05:0b:46:93:ed:e7:c9:30:f5:97:d6:23:
                    84:37:6e:89:ca:64:a7:a4:70:c1:9d:9c:4b:6b:89:
                    8b:4d:09:97:09:98:63:36:a3:ec:8b:f6:d6:6b:82:
                    82:93:d0:cb:96:77:a1:12:79:cb:34:12:36:ca:24:
                    b6:9f:ce:53:05:51:34:cd:b7:12:b7:7e:d0:f4:b4:
                    92:36:2f:f3:17:9e:82:bc:2d:a7:d0:99:74:70:a8:
                    dc:f9:ea:54:c9:29:07:f4:1d:da:b6:05:f1:b5:c1:
                    3f:4e:ad:3f:95:45:d6:e3:a0:8c:f0:67:4e:f2:89:
                    e9:11:e8:4e:4f:32:d8:a8:0d:8f:dd:5f:78:3e:e2:
                    4c:55:89:ac:cc:61:fe:70:05:3c:6c:fe:5e:af:ed:
                    03:60:f5:fc:a9:d2:a2:1a:13:d7:f9:4e:37:6b:ce:
                    88:8a:06:2d:1c:94:c3:de:b9:84:f4:bf:4e:f6:26:
                    49:dd:42:ab:5d:de:7a:c0:25:d1:b6:96:b6:ac:62:
                    86:34:b0:36:74:b0:2f:e1:2d:b1:10:c7:6b:38:39:
                    5e:f8:48:c2:45:8e:e7:fb:e5:af:3a:7c:74:74:b6:
                    32:0a:3d:8c:09:bc:46:4d:14:04:17:3c:0c:69:b3:
                    dd:47:4c:11:8f:88:c9:97:2b:e6:42:c5:a0:1c:e4:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CF:D1:F0:72:A5:7A:9B:BE:16:01:4A:3E:DC:9A:1E:E0:BA:CF:12
            X509v3 Authority Key Identifier:
                keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:27:4c:f2:19:90:f3:b9:13:02:36:bf:45:e8:e1:a3:6f:
         9c:55:d3:d4:f1:9a:c9:0d:58:35:1f:e4:af:64:3b:ad:01:e9:
         40:59:4e:03:a4:b7:81:25:7c:c8:bb:a9:6e:e9:17:c7:45:76:
         b3:05:39:69:06:13:82:58:52:a6:22:5a:ec:ae:3e:55:78:ab:
         6e:7c:67:07:31:66:42:d2:bc:5b:d6:6c:89:43:a5:4a:d0:e2:
         d7:b6:32:d8:c1:7c:9a:36:09:45:34:b0:cf:a5:a4:3c:85:8c:
         6e:d8:3a:19:83:30:f5:cc:a1:09:4a:83:16:4b:f0:ca:9a:23:
         db:c2:ab:23:c8:3f:fd:49:eb:dd:90:db:69:3b:6a:f1:81:69:
         76:b4:e0:f2:f2:56:ab:59:8a:ea:23:f9:01:ef:6a:c3:2e:c5:
         54:2f:f9:85:ed:97:14:ff:9e:ef:f9:56:66:e0:66:91:cb:32:
         83:9a:fa:82:83:02:b5:0b:a4:82:8e:e7:39:ed:46:23:42:80:
         1c:fb:9f:8c:7f:f8:01:84:8d:2c:e5:58:81:85:85:7f:6c:4e:
         b5:24:f7:35:28:3f:2d:23:ed:58:d9:5e:cf:a3:b0:28:25:23:
         81:ac:0a:57:96:a2:ad:0d:1b:0b:09:69:58:7b:2a:b9:c3:30:
         44:48:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:20:50 2026 by rpki-client