Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
File:                     u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft (raw, json)
Hash identifier:          caXAQiRs9MFz4BJSoPIjXiPZ/lWWKKCM7+DtlQNpcoM=
Subject key identifier:   01:95:43:8A:DD:11:D1:A8:DE:33:7A:EE:63:B5:92:2F:BB:40:06:5F
Authority key identifier: BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24
Certificate issuer:       /CN=A91EDB37/serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
Certificate serial:       07D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
Manifest number:          07AD
Signing time:             Tue 20 Oct 2026 21:41:20 +0000
Manifest this update:     Tue 20 Oct 2026 21:41:20 +0000
Manifest next update:     Tue 27 Oct 2026 21:41:20 +0000
Files and hashes:         1: u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl (hash: 0Q9XxJIJvWEhsdvY3wrojo4wIjfifH8rS5VgZS4tNiQ=)
                          2: DE7B831C37DA11EDBEF9D050C4F9AE02.roa (hash: dkLPMtJ8tmcL7dR+kjEDPZv0Yw29R4zxocy9vRpdDVg=)
                          3: E00D6A56234511F19D87D3EAAA833773.roa (hash: m2Ad3hXmb6Jb8EQc6ygXGL7dAvqHRdE6xSp/glQ29Lg=)
                          4: DFBF8CDC6AF911F08AB48F35C4F9AE02.roa (hash: HqpWvOqH1rT1tI76V+VGFSF3BD9o+eyoT9fpq42OKAs=)
                          5: 6EC9CC12746911F0B5BCC83EC4F9AE02.roa (hash: +/kAkfziYTn212TfYK9V8Vaa0l9HEiaFVxFsS7+dCsI=)
                          6: E959541EB28511ED8893C51CC4F9AE02.roa (hash: /mQOlGfVWmEy30ofXyuzY6t7pmr3Lkv7EZobHw1SsQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 21:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2004 (0x7d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=BB544176DDE68E3581C5C43F4FC7CC2CF68D6924
        Validity
            Not Before: Oct 20 21:41:20 2026 GMT
            Not After : Oct 27 21:41:20 2026 GMT
        Subject: CN=6ad7e000-4817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:67:0e:63:93:54:d5:e8:22:bb:ac:53:50:
                    c3:cc:a2:63:d0:8b:86:ae:38:62:ac:ba:92:7d:10:
                    fc:2f:9d:26:5e:da:37:58:4c:5a:ba:a6:ec:f6:b0:
                    fb:5d:dc:62:fa:0a:4a:fd:4d:12:f3:cd:c1:9f:45:
                    c0:c5:12:d2:66:57:7f:a6:e1:16:d1:e8:84:39:3f:
                    bb:51:af:42:ab:3f:0b:1b:a0:5d:cb:ff:90:79:f1:
                    65:16:c2:ab:28:58:4f:c2:55:28:32:17:1d:08:54:
                    b0:81:43:13:dd:83:72:60:75:5a:ea:07:88:8e:33:
                    ae:5c:0f:70:ff:07:77:29:a3:79:fa:01:83:d4:0d:
                    59:ca:b1:57:40:1b:ff:11:2c:6e:5d:78:08:2b:3c:
                    1e:2f:43:c9:e4:6a:4d:db:5b:c0:69:0f:82:8e:12:
                    fd:34:67:e0:a3:04:8d:74:ec:b1:18:15:df:30:25:
                    09:de:96:eb:c6:aa:60:ea:2a:c5:19:45:74:ac:5c:
                    e8:2d:f8:d8:12:d2:27:45:78:13:95:23:4a:66:22:
                    63:6b:9c:e3:b7:b2:aa:a0:69:56:8c:b4:b2:2e:a9:
                    a6:46:40:87:0a:b7:cd:58:f0:6d:ad:e7:33:4d:f8:
                    d4:2f:9f:5b:66:45:35:7c:17:ed:32:40:57:07:c4:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:95:43:8A:DD:11:D1:A8:DE:33:7A:EE:63:B5:92:2F:BB:40:06:5F
            X509v3 Authority Key Identifier:
                keyid:BB:54:41:76:DD:E6:8E:35:81:C5:C4:3F:4F:C7:CC:2C:F6:8D:69:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/5764737A78A011EB950D3175C4F9AE02/u1RBdt3mjjWBxcQ_T8fMLPaNaSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:69:09:dd:f1:11:19:ed:ba:4d:a3:a8:0b:96:b9:d9:2e:d4:
         ed:2d:10:a5:db:87:03:c6:25:fb:0d:42:0b:87:1e:50:a3:08:
         a8:7f:f9:5f:f2:73:87:93:05:95:a0:e9:f8:e0:8f:70:41:af:
         64:a1:9f:89:ab:cb:e7:7f:40:d0:14:1c:15:d9:1c:19:5e:af:
         dc:78:c6:0d:11:b9:ed:83:a2:61:63:e6:f7:45:ce:bb:95:7f:
         7e:a3:25:82:a5:a1:4f:9c:30:33:ec:25:4c:9b:c5:28:a3:87:
         57:0a:e0:d4:72:76:f5:0b:d0:80:a9:50:35:de:5a:ac:79:5c:
         f8:e0:9c:63:51:0b:4a:c1:7c:5f:b8:cb:90:99:fd:78:78:14:
         b0:b9:36:88:b7:71:53:16:76:2c:86:a6:fc:8e:95:f9:01:4d:
         22:c3:c6:80:63:07:45:74:38:f7:51:fe:f6:ca:9f:49:10:04:
         cb:2d:3a:ca:0c:96:95:9d:ac:60:d4:c5:21:43:be:fd:b2:94:
         3a:3b:fb:4a:d6:d2:f0:8b:52:31:d3:d1:ac:2b:88:b0:42:01:
         21:cf:cd:ec:7b:e1:81:7e:7a:b4:09:74:ce:6d:11:c6:26:e6:
         ce:ae:e5:af:b0:44:09:12:1d:2e:ee:51:22:53:09:33:26:80:
         6e:5d:90:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURCMzcxMTAvBgNVBAUTKEJCNTQ0MTc2RERFNjhFMzU4MUM1QzQzRjRGQzdDQzJD
RjY4RDY5MjQwHhcNMjYxMDIwMjE0MTIwWhcNMjYxMDI3MjE0MTIwWjAYMRYwFAYD
VQQDEw02YWQ3ZTAwMC00ODE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr7RnDmOTVNXoIrusU1DDzKJj0IuGrjhirLqSfRD8L50mXto3WExauqbs9rD7
Xdxi+gpK/U0S883Bn0XAxRLSZld/puEW0eiEOT+7Ua9Cqz8LG6Bdy/+QefFlFsKr
KFhPwlUoMhcdCFSwgUMT3YNyYHVa6geIjjOuXA9w/wd3KaN5+gGD1A1ZyrFXQBv/
ESxuXXgIKzweL0PJ5GpN21vAaQ+CjhL9NGfgowSNdOyxGBXfMCUJ3pbrxqpg6irF
GUV0rFzoLfjYEtInRXgTlSNKZiJja5zjt7KqoGlWjLSyLqmmRkCHCrfNWPBtrecz
TfjUL59bZkU1fBftMkBXB8RkrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAGVQ4rd
EdGo3jN67mO1ki+7QAZfMB8GA1UdIwQYMBaAFLtUQXbd5o41gcXEP0/HzCz2jWkk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy81NzY0NzM3QTc4
QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpqV0J4Y1FfVDhmTUxQYU5h
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxUkJkdDNtampXQnhjUV9UOGZNTFBhTmFTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REIzNy81NzY0NzM3QTc4QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi91MVJCZHQzbWpq
V0J4Y1FfVDhmTUxQYU5hU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABmkJ3fERGe26TaOoC5a52S7U7S0QpduHA8Yl+w1CC4ceUKMIqH/5X/Jzh5MF
laDp+OCPcEGvZKGfiavL539A0BQcFdkcGV6v3HjGDRG57YOiYWPm90XOu5V/fqMl
gqWhT5wwM+wlTJvFKKOHVwrg1HJ29QvQgKlQNd5arHlc+OCcY1ELSsF8X7jLkJn9
eHgUsLk2iLdxUxZ2LIam/I6V+QFNIsPGgGMHRXQ491H+9sqfSRAEyy06ygyWlZ2s
YNTFIUO+/bKUOjv7StbS8ItSMdPRrCuIsEIBIc/N7HvhgX56tAl0zm0Rxibmzq7l
r7BECRIdLu5RIlMJMyaAbl2Qyg==
-----END CERTIFICATE-----
Generated at Thu Oct 22 18:14:11 2026 by rpki-client