Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
File:                     fHiVltWjewRcnZ8TpCAMHodHf3Q.mft (raw, json)
Hash identifier:          wBgKbgU8azcno84hxSEhzofBjx0rvrAgwwIBI73PW+A=
Subject key identifier:   97:C2:D0:27:9A:46:F1:93:DC:4D:C4:66:8C:61:F3:12:B6:E4:95:01
Authority key identifier: 7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74
Certificate issuer:       /CN=A91E9CD4/serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
Manifest number:          B8
Signing time:             Sun 25 Oct 2026 07:21:24 +0000
Manifest this update:     Sun 25 Oct 2026 07:21:24 +0000
Manifest next update:     Sun 01 Nov 2026 07:21:24 +0000
Files and hashes:         1: fHiVltWjewRcnZ8TpCAMHodHf3Q.crl (hash: 43ll9Kzek1h0fzieKiT1S31tIfyn6oxORHnu33Obx1I=)
                          2: 9402F1E2B95711F0959B8139C4F9AE02.roa (hash: 02q/fl3zFJ/KDWK7HpIR1Cl5Rby/X/6GDy/HiTRSiik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 07:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9CD4, serialNumber=7C789596D5A37B045C9D9F13A4200C1E87477F74
        Validity
            Not Before: Oct 25 07:21:24 2026 GMT
            Not After : Nov  1 07:21:24 2026 GMT
        Subject: CN=6addadf4-9737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:b5:30:af:05:dd:48:a4:e3:37:ab:83:7c:
                    84:a8:65:64:03:1c:25:4e:bd:36:16:f1:8d:3c:3d:
                    6c:43:7f:38:99:42:01:80:4d:ea:38:89:ff:8c:90:
                    67:5b:0d:78:ca:da:c5:cb:a3:f7:66:f1:ac:6f:67:
                    96:25:c9:0d:5e:97:9b:f3:74:cd:80:89:c0:97:8a:
                    ed:c9:b6:8a:e1:89:d1:40:6c:09:c8:10:89:bc:5d:
                    af:1d:24:cb:60:85:c0:7b:08:df:d8:d2:a7:66:41:
                    1d:61:bd:16:32:54:b3:7d:44:85:36:78:20:3f:3f:
                    47:10:25:81:99:63:91:24:aa:5b:72:40:61:d6:2a:
                    cb:d3:73:1d:5c:cc:61:bb:84:53:b1:3e:13:a5:fc:
                    a8:d1:41:b3:12:a9:3f:30:e9:67:f6:71:dc:ef:7c:
                    0b:78:ba:39:79:d5:53:4a:e0:e3:38:08:c4:49:ec:
                    3c:ae:29:81:fa:01:57:6b:03:9e:c5:70:82:b3:c9:
                    95:55:f9:00:d0:0b:1b:cf:81:06:af:99:24:ee:a3:
                    08:a0:63:ab:7b:ec:d0:18:1c:d0:14:8b:7a:9f:16:
                    23:20:64:12:7c:5e:0a:60:a0:3c:07:14:7f:6a:f1:
                    ab:6c:1b:41:ff:97:6b:1e:a5:b1:0d:d5:54:58:f7:
                    40:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C2:D0:27:9A:46:F1:93:DC:4D:C4:66:8C:61:F3:12:B6:E4:95:01
            X509v3 Authority Key Identifier:
                keyid:7C:78:95:96:D5:A3:7B:04:5C:9D:9F:13:A4:20:0C:1E:87:47:7F:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHiVltWjewRcnZ8TpCAMHodHf3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CD4/D47F490CB95511F09A7F6D71C4F9AE02/fHiVltWjewRcnZ8TpCAMHodHf3Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:d9:9a:d6:c8:d3:f8:75:c3:6b:c4:18:91:47:89:87:27:
         e2:ec:55:e0:2e:99:b5:7e:fb:25:1f:1c:03:d6:b4:fa:d5:9f:
         1a:81:f1:e3:5c:30:48:c0:36:3c:9e:91:2c:92:b2:d5:a9:16:
         b0:6f:1a:01:fe:c5:36:22:d0:b1:04:8e:f4:68:de:47:a1:f2:
         ef:b8:2f:b0:b4:ce:0b:7b:27:62:bf:c2:08:19:de:8e:9f:a6:
         c1:3f:42:18:74:b5:10:f5:50:11:80:16:90:ec:47:7e:76:15:
         40:75:32:14:8b:c1:4e:21:53:2a:fb:c6:8b:49:cd:c4:13:6b:
         b4:d3:c1:c1:8b:57:67:51:e5:c5:c9:79:e3:0f:0a:8f:a0:5a:
         45:18:0d:2a:3e:9f:71:95:b8:7e:40:74:5e:f0:e7:08:bd:23:
         51:ee:96:96:b5:06:f5:92:6c:2e:6a:73:3d:11:10:0d:36:55:
         b0:d9:3c:09:36:7a:e8:86:52:2e:5b:96:18:a8:d1:77:61:cf:
         fd:de:ec:e5:7f:78:36:8d:a1:38:9d:75:3b:8f:8b:f6:82:4e:
         eb:97:b0:0e:09:e2:b2:93:e1:a8:6f:f5:e4:ac:7d:66:d9:9f:
         50:46:77:56:06:4b:88:d7:6f:4d:98:78:56:d1:7a:27:c4:35:
         77:41:0b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:25:49 2026 by rpki-client