Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
File:                     9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json)
Hash identifier:          J5OWzK4kZzfxvE1aCKnhSsA4NwE8TdK9sGnzqp66hsQ=
Subject key identifier:   5D:5F:AA:5F:46:5E:45:F2:76:3A:16:77:F5:25:E7:40:09:FE:72:A9
Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5
Certificate issuer:       /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
Certificate serial:       0403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
Manifest number:          0403
Signing time:             Fri 09 Oct 2026 00:33:23 +0000
Manifest this update:     Fri 09 Oct 2026 00:33:22 +0000
Manifest next update:     Fri 16 Oct 2026 00:33:22 +0000
Files and hashes:         1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: Yr151aB+HNhb38fwFg0gioetgH/8HnMClEd/KydRJIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl
                          rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 00:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
        Validity
            Not Before: Oct  9 00:33:22 2026 GMT
            Not After : Oct 16 00:33:22 2026 GMT
        Subject: CN=6ac83653-41c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:3d:36:31:ba:db:26:65:9d:6d:79:7e:b0:
                    a7:e5:48:56:a5:5a:6d:0a:b1:5a:b2:b1:e2:bf:ed:
                    31:46:cf:dc:48:90:af:f0:01:e0:8b:e7:e0:2f:11:
                    9e:c8:f4:d3:ec:6a:01:04:5e:52:84:f3:28:86:40:
                    77:ee:e9:4e:03:26:1a:ce:9e:72:4b:32:b5:b5:0c:
                    6c:aa:d4:23:f0:db:d2:58:f2:fe:b8:15:7f:ab:ea:
                    13:4d:25:b0:b1:e1:e2:25:f7:7b:0b:6c:a0:d8:50:
                    76:66:d2:1c:a9:eb:95:55:90:c6:97:47:3c:b2:56:
                    39:4e:19:a3:7f:e1:e2:0f:8c:27:af:1d:8e:77:d1:
                    ed:64:9f:5a:d4:55:b5:4d:d7:77:09:a3:c7:79:1d:
                    36:37:2f:10:13:b4:a3:e2:c4:50:09:1f:07:38:9e:
                    5b:0f:28:52:b8:d8:37:46:72:05:99:36:3c:83:4e:
                    b2:e5:01:14:d4:d1:ce:d3:91:9a:24:95:a1:2b:4b:
                    74:f7:ad:bd:cb:33:c2:29:16:aa:8b:2d:ee:15:02:
                    fb:81:ca:27:3d:33:3c:33:eb:c5:8b:45:74:e9:43:
                    3e:6a:cf:f9:78:63:66:a0:3f:f0:07:21:45:95:5b:
                    99:76:18:7a:3e:21:c7:98:96:29:ac:37:b7:d8:98:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5F:AA:5F:46:5E:45:F2:76:3A:16:77:F5:25:E7:40:09:FE:72:A9
            X509v3 Authority Key Identifier:
                keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b0:89:9a:e7:d8:3e:d7:79:61:17:4c:68:55:82:10:10:2c:
         3e:fe:38:5c:b4:91:9d:37:0b:6c:ff:05:97:34:a3:95:7f:4b:
         c1:5f:9c:6a:dc:6b:79:b4:37:0e:ca:e6:43:27:e4:aa:da:b0:
         d7:a1:a6:43:7e:c7:cd:f9:d6:f3:fc:81:56:89:a5:6b:d2:ba:
         b7:5b:da:c2:97:5a:8d:8a:ef:35:c0:f1:4d:a2:da:8b:a5:4e:
         57:50:34:e6:51:b4:44:e2:f3:e2:19:82:49:9e:eb:7b:e3:90:
         48:1d:f5:4f:89:36:13:f9:37:3d:29:58:95:df:bd:6f:97:df:
         81:eb:f1:f0:4f:f7:6f:27:37:57:cb:78:78:59:03:8d:75:41:
         45:c3:c7:3d:18:09:2c:40:c8:a6:05:b8:af:d2:8a:38:69:e6:
         e2:4c:50:29:77:07:8a:31:f7:d8:2c:77:3b:ef:49:9d:5e:42:
         de:cf:59:4d:b2:64:0b:05:6a:8a:f5:2a:fd:1e:07:3f:8e:c2:
         28:d2:7d:cc:57:af:ae:4d:cf:45:64:31:e7:00:56:e4:db:d6:
         ca:19:97:19:57:34:bb:07:bd:ad:4e:ea:d9:b3:6f:36:09:58:
         40:b4:45:09:32:57:91:15:ca:8a:7c:25:f3:af:b3:2b:96:d4:
         93:e9:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:53:05 2026 by rpki-client