Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
File:                     1bm7ozBeiMAA9WKTnROLpQYieyo.mft (raw, json)
Hash identifier:          mpWlb397ePb+C1pYr/E1Z2JZ9dny1W/RPlzQah7JFU8=
Subject key identifier:   6C:CD:75:EF:DF:E1:9F:DF:86:50:3F:E8:D5:F2:76:52:3C:06:1D:3A
Authority key identifier: D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
Certificate issuer:       /CN=A91EAF4B/serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Certificate serial:       0C08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
Manifest number:          0DF7
Signing time:             Sun 04 Oct 2026 19:00:07 +0000
Manifest this update:     Sun 04 Oct 2026 19:00:06 +0000
Manifest next update:     Sun 11 Oct 2026 19:00:06 +0000
Files and hashes:         1: 1bm7ozBeiMAA9WKTnROLpQYieyo.crl (hash: aL0VKB8VW0ea4kOui/0mQVVpRsMp0vrTVVBjLgL6aro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3080 (0xc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B, serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
        Validity
            Not Before: Oct  4 19:00:06 2026 GMT
            Not After : Oct 11 19:00:06 2026 GMT
        Subject: CN=6ac2a236-6b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:27:81:9b:0d:ed:82:84:93:75:d5:27:09:
                    72:6c:f5:9f:49:26:af:9b:c2:19:ac:09:bf:36:e7:
                    26:7a:a9:86:c3:f4:8c:29:6b:a8:74:5b:d1:0b:85:
                    51:65:5b:59:78:b0:62:66:be:99:a2:0d:7f:ff:a1:
                    bb:b6:4c:e3:79:95:e9:9c:e7:86:9c:ac:32:29:e1:
                    42:f8:ba:e7:c0:5b:bc:c8:06:4e:78:68:4f:51:87:
                    47:be:ba:c8:8f:db:8e:16:6b:15:82:79:e3:bb:e6:
                    1b:7a:9b:cd:fe:7c:2e:9a:fe:9c:3e:44:43:d0:04:
                    cd:d6:c1:8b:dd:43:e6:e6:70:60:49:42:7e:c8:14:
                    e9:90:53:ce:cc:50:41:0a:3b:4b:69:5e:03:04:cf:
                    6c:7f:a5:97:6a:b3:53:e5:f2:48:f4:ca:91:56:47:
                    80:1e:28:38:36:f4:b1:f7:c6:8a:4d:19:f9:18:a0:
                    c5:d1:da:b1:35:b3:f0:59:7a:af:c0:dd:16:a0:16:
                    7e:9d:e0:f4:78:11:39:c5:b6:95:a6:72:0b:ca:b3:
                    bf:48:0a:84:bb:8b:a8:14:de:f1:49:be:b7:56:b8:
                    f0:5f:a4:fb:40:10:36:d8:4b:31:3a:2a:9e:4b:0a:
                    2e:76:06:c3:12:eb:24:1c:59:0c:49:7e:d6:03:4e:
                    34:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CD:75:EF:DF:E1:9F:DF:86:50:3F:E8:D5:F2:76:52:3C:06:1D:3A
            X509v3 Authority Key Identifier:
                keyid:D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:f2:e8:8e:06:a8:19:21:2c:b0:a8:53:84:93:ca:eb:9f:
         af:96:58:89:c2:4b:35:ef:75:2a:33:65:b3:e9:e9:32:94:11:
         55:8a:5a:10:32:78:79:33:f5:65:e4:04:26:0a:d2:ff:6a:f1:
         2b:ec:b9:37:91:e5:df:e8:7a:97:bf:7f:c6:e6:3d:70:35:bf:
         b0:22:89:d8:9d:b3:66:06:64:af:de:e0:c7:70:d2:9c:a9:6d:
         6d:16:ae:0a:49:eb:26:20:b0:f1:6f:e8:88:08:ee:ec:a2:07:
         e9:d0:f3:32:cb:9b:19:c4:dc:d1:ce:c5:43:ba:49:c5:fe:e2:
         2f:a8:e8:ea:d9:7a:3f:a5:ee:f4:ff:a3:b1:e9:8b:68:fd:26:
         ab:b3:a1:a4:14:f3:d0:0e:58:b5:89:9c:1d:b7:9d:a3:32:59:
         e8:1a:cf:b5:6b:94:b1:5d:4f:bf:5b:12:87:f7:4a:b9:41:10:
         99:1a:f4:31:35:43:c4:41:ef:a9:c0:25:03:d9:df:dc:8a:9e:
         eb:f9:5e:07:7b:a6:1b:64:75:b3:4a:1d:75:d8:22:a7:fb:9e:
         e9:c9:95:d5:68:01:a8:6f:6b:c2:73:ce:17:c6:10:90:05:79:
         9d:d2:65:aa:fa:13:05:c3:15:ee:48:8e:bb:40:d8:e0:9e:91:
         81:dd:dc:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFGNEIxMTAvBgNVBAUTKEQ1QjlCQkEzMzA1RTg4QzAwMEY1NjI5MzlEMTM4QkE1
MDYyMjdCMkEwHhcNMjYxMDA0MTkwMDA2WhcNMjYxMDExMTkwMDA2WjAYMRYwFAYD
VQQDEw02YWMyYTIzNi02YjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2zUngZsN7YKEk3XVJwlybPWfSSavm8IZrAm/NucmeqmGw/SMKWuodFvRC4VR
ZVtZeLBiZr6Zog1//6G7tkzjeZXpnOeGnKwyKeFC+LrnwFu8yAZOeGhPUYdHvrrI
j9uOFmsVgnnju+YbepvN/nwumv6cPkRD0ATN1sGL3UPm5nBgSUJ+yBTpkFPOzFBB
CjtLaV4DBM9sf6WXarNT5fJI9MqRVkeAHig4NvSx98aKTRn5GKDF0dqxNbPwWXqv
wN0WoBZ+neD0eBE5xbaVpnILyrO/SAqEu4uoFN7xSb63VrjwX6T7QBA22EsxOiqe
SwoudgbDEuskHFkMSX7WA040ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGzNde/f
4Z/fhlA/6NXydlI8Bh06MB8GA1UdIwQYMBaAFNW5u6MwXojAAPVik50Ti6UGInsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3
MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi8xYm03b3pCZWlNQUE5V0tUblJPTHBRWWll
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFibTdvekJlaU1BQTlXS1RuUk9McFFZaWV5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi8xYm03b3pCZWlN
QUE5V0tUblJPTHBRWWlleW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATQry6I4GqBkhLLCoU4STyuufr5ZYicJLNe91KjNls+npMpQRVYpaEDJ4eTP1
ZeQEJgrS/2rxK+y5N5Hl3+h6l79/xuY9cDW/sCKJ2J2zZgZkr97gx3DSnKltbRau
CknrJiCw8W/oiAju7KIH6dDzMsubGcTc0c7FQ7pJxf7iL6jo6tl6P6Xu9P+jsemL
aP0mq7OhpBTz0A5YtYmcHbedozJZ6BrPtWuUsV1Pv1sSh/dKuUEQmRr0MTVDxEHv
qcAlA9nf3Iqe6/leB3umG2R1s0odddgip/ue6cmV1WgBqG9rwnPOF8YQkAV5ndJl
qvoTBcMV7kiOu0DY4J6Rgd3cvQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:46:44 2026 by rpki-client