Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
File:                     83YJDdec9qJZrioXAgNy6eYWC7Y.mft (raw, json)
Hash identifier:          3Pp0pxMoE94UE5U+8qJsjWP2ApQQ+flyseYtN1Jh5Qw=
Subject key identifier:   98:8F:20:22:FF:CE:44:D0:C2:BD:4F:AE:9C:FF:23:6B:FB:A9:A4:BA
Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6
Certificate issuer:       /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
Certificate serial:       0A97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
Manifest number:          0A8A
Signing time:             Fri 30 Oct 2026 19:38:56 +0000
Manifest this update:     Fri 30 Oct 2026 19:38:56 +0000
Manifest next update:     Fri 06 Nov 2026 19:38:56 +0000
Files and hashes:         1: 83YJDdec9qJZrioXAgNy6eYWC7Y.crl (hash: kTk2X4GG4+B5moQcap96RqyjR9jNeYKJSnkvY1JSC4k=)
                          2: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (hash: mWvNJP1eSQ34N4CIw2VQC1OTbBmCJG8Y4DvDTUqNRXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 17:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711 (0xa97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6
        Validity
            Not Before: Oct 30 19:38:56 2026 GMT
            Not After : Nov  6 19:38:56 2026 GMT
        Subject: CN=6ae4f250-15de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:b7:2e:d4:60:6a:5f:01:e7:88:5a:b0:1c:
                    91:9f:7c:81:b3:ae:5d:ee:13:93:03:93:07:fb:a9:
                    c8:be:84:53:5f:f1:41:4d:be:f8:db:ab:93:b1:4f:
                    2c:88:7d:a3:9e:91:41:3f:e2:48:cf:11:da:31:39:
                    66:2c:11:3e:97:b0:68:e3:93:b5:ae:1a:45:7a:2d:
                    14:1c:02:6e:4a:6c:f1:46:21:a3:90:6a:1c:b3:25:
                    4e:b8:1a:d4:33:e5:d3:6a:82:47:0c:67:49:75:ec:
                    92:86:80:03:59:51:19:6f:81:c0:be:32:13:27:4c:
                    a9:ae:5b:a2:44:05:42:68:ac:6e:9f:f7:0f:57:0b:
                    4c:4b:5d:54:a2:6c:d0:9c:72:37:fa:e8:31:3e:f1:
                    bb:cb:6e:0c:d6:37:00:8e:67:63:b2:82:c6:af:9e:
                    a8:a6:c7:d1:9d:26:3f:6a:da:1b:b8:0d:72:38:92:
                    56:ac:07:4e:42:eb:c7:a9:09:b8:c5:6f:e8:14:98:
                    8e:f2:c8:99:9b:23:06:e1:f8:e4:31:ca:9b:df:95:
                    4d:93:9b:64:61:f3:a2:db:8f:b0:c3:2d:4e:fd:2e:
                    50:88:02:38:09:41:e7:74:9b:39:47:e8:56:bb:c4:
                    8b:41:95:73:d3:38:d1:ce:4a:ef:44:78:d4:4a:db:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8F:20:22:FF:CE:44:D0:C2:BD:4F:AE:9C:FF:23:6B:FB:A9:A4:BA
            X509v3 Authority Key Identifier:
                keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5c:be:7b:8b:00:8f:f1:1f:73:7a:01:04:a9:39:38:a1:40:
         86:8f:37:2c:66:ed:35:2f:c9:3a:e1:d6:75:1e:ad:a0:c8:05:
         27:a3:57:b9:f0:96:a3:be:59:ff:d6:43:ff:3f:f3:1d:6c:1c:
         49:79:0a:4e:7e:73:3e:86:ed:76:74:e4:de:2d:44:16:6a:e7:
         8f:11:a1:1e:02:39:ca:48:0d:6f:9f:12:dc:69:3a:b9:62:75:
         17:05:56:db:01:99:3f:10:eb:0c:4d:4b:7a:f0:72:c3:83:34:
         dd:95:6e:d1:31:18:f4:c0:b4:23:5b:be:be:d1:43:25:c6:00:
         5b:2e:1b:ef:9e:77:e5:5c:fb:2d:8e:60:03:51:7d:51:42:5d:
         b5:59:55:8c:e4:18:b0:6b:b9:71:a1:bc:81:95:2b:86:f0:4d:
         70:c1:01:de:1e:5c:c3:f7:23:fe:6f:1a:7e:77:27:37:4d:52:
         75:8f:b0:7b:d7:db:09:03:b9:e1:6e:15:f0:63:60:6f:5b:bd:
         8e:31:ba:c7:8a:24:9d:4a:e9:d9:44:bb:c4:0a:d2:a5:91:2f:
         1e:8c:2c:1b:92:8d:32:de:1e:e5:83:77:4c:ad:3e:e2:17:f0:
         50:bf:44:c3:12:6d:ac:e9:d3:91:fa:30:cb:c4:3f:4d:03:8e:
         f6:95:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:19:33 2026 by rpki-client