Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File:                     rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier:          KimOKF/Z+7p/E5V9FoZUZnHsBb5g4OZB0Uf1YW/KE7Q=
Subject key identifier:   6D:0D:AD:43:F6:E0:D6:68:C5:A0:25:36:9D:84:A1:49:43:EF:33:B4
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer:       /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number:          0E0C
Signing time:             Sat 24 Oct 2026 18:55:17 +0000
Manifest this update:     Sat 24 Oct 2026 18:55:17 +0000
Manifest next update:     Sat 31 Oct 2026 18:55:17 +0000
Files and hashes:         1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: t2ieXvBwRkI/CAqNcqiNAJ+Q0oWUb4NSsUreoe6NSnw=)
                          2: 1CD09CEA9E2C11F18953E4265611F970.roa (hash: GTgRufRrOY/9upf/2CDbblL7ACUEaUL581JiW4Jmg80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 18:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
        Validity
            Not Before: Oct 24 18:55:17 2026 GMT
            Not After : Oct 31 18:55:17 2026 GMT
        Subject: CN=6adcff15-fbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9e:0e:21:c6:45:08:f5:03:d3:99:6e:6f:e3:
                    e6:3c:83:5f:4b:d7:49:f4:96:7e:69:3d:3a:99:f2:
                    89:d1:c2:44:07:64:f0:05:72:76:17:8a:d3:2b:73:
                    ab:d1:89:05:4c:fc:13:a1:7a:08:60:3d:56:44:7f:
                    b8:95:c4:88:e9:d4:20:e0:50:cb:61:ca:3a:f8:20:
                    4e:e7:31:25:c8:c7:e6:c8:4c:ee:60:c3:7a:ea:a9:
                    9a:4b:36:72:b8:d6:f9:49:41:38:0e:94:a6:5b:5e:
                    cc:30:b7:e2:21:84:12:41:34:10:0b:51:85:f9:2a:
                    8f:0f:e7:1c:52:68:1f:73:87:26:67:a1:a5:2c:83:
                    74:e7:0f:79:12:2e:c9:3f:13:d6:7c:17:9d:f8:05:
                    b7:0d:f0:06:f6:f1:24:9d:b4:e7:e1:39:0f:b6:19:
                    1a:95:dd:0d:38:6b:ad:62:f7:62:d1:fe:cd:88:dd:
                    9f:19:39:4f:50:eb:ba:f2:e8:fc:25:cc:69:fc:c4:
                    05:e6:73:0e:54:b3:0a:ca:f9:c6:86:51:55:31:1b:
                    45:c6:3f:4b:75:2a:2a:ab:07:79:f4:b3:4e:85:65:
                    dc:83:68:53:80:f6:15:25:5e:8d:47:6f:1d:3c:d4:
                    78:26:f5:c3:32:72:df:f0:d2:72:2c:6b:5a:59:1e:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0D:AD:43:F6:E0:D6:68:C5:A0:25:36:9D:84:A1:49:43:EF:33:B4
            X509v3 Authority Key Identifier:
                keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:2c:be:a0:45:8e:6a:e7:fd:7d:21:9a:30:08:52:1f:a2:
         c9:b2:a3:a6:47:a2:84:88:69:16:2d:62:3f:b0:90:0e:06:a1:
         15:c5:68:4e:d1:15:d4:11:2f:9b:ac:c2:51:bd:f7:78:57:c5:
         67:3d:78:69:56:c3:2d:6a:e6:7d:62:5a:98:4b:da:4b:14:e3:
         73:1e:24:c3:34:ac:9f:44:56:65:d8:97:90:33:56:b7:0a:fd:
         1d:01:b9:ca:9c:66:ef:99:82:e5:cb:cb:b6:5c:20:9b:67:a3:
         d5:c7:f1:e1:bc:6c:3b:19:10:8f:7f:ba:bd:2e:4b:92:e8:a9:
         fc:8f:8b:0e:ea:84:12:4f:5c:9e:b5:30:4f:53:97:f9:b0:63:
         b6:7e:da:5e:35:4f:9a:76:2d:9f:ee:21:cb:47:71:c6:d4:db:
         a7:ed:a4:ac:71:31:12:18:2c:cc:c8:e3:28:f5:bf:2f:f1:02:
         34:48:69:57:2f:e0:f4:a6:2f:fa:4b:3b:32:33:be:94:ad:64:
         40:db:a8:b6:a6:26:2e:94:b8:21:7c:30:ad:8e:99:34:03:21:
         c5:59:43:f7:8c:b5:f3:45:4b:de:ac:f9:98:10:32:e5:b6:ff:
         b3:ba:f8:b0:81:f6:d9:30:ab:bc:b5:18:db:13:da:6c:71:e4:
         8b:00:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:43 2026 by rpki-client