Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
File:                     rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json)
Hash identifier:          Cm87k0IsRFYH9ZEc3FFt/QHVH1joown1M17rd6JePHg=
Subject key identifier:   C8:EB:E4:59:C7:5F:09:4E:54:5A:06:61:D1:FD:FB:C9:20:C6:2D:BC
Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0
Certificate issuer:       /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
Manifest number:          0170
Signing time:             Sat 03 Oct 2026 05:35:07 +0000
Manifest this update:     Sat 03 Oct 2026 05:35:06 +0000
Manifest next update:     Sat 10 Oct 2026 05:35:06 +0000
Files and hashes:         1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: Ajb2RTWO/YUEWlcvvcAUEXvYH5tEXNs7vzj9VTOaCoI=)
                          2: 496B943085B811F1904E05A160A30FBC.roa (hash: kzKLI8ZxIk66mC3lTcah6XxCKgGcbN+/Y9xbXXYxul4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0
        Validity
            Not Before: Oct  3 05:35:06 2026 GMT
            Not After : Oct 10 05:35:06 2026 GMT
        Subject: CN=6ac0940b-e66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:0f:c4:1b:cf:ce:2c:f8:0d:d1:e2:60:d8:
                    b7:84:a7:57:90:12:4e:96:09:87:af:12:0b:e8:00:
                    8e:68:1b:f5:88:f2:19:49:e8:21:ca:bb:1e:ff:94:
                    c3:47:15:cb:a4:08:2c:17:d4:2c:8d:29:7e:39:9d:
                    1a:39:ac:8f:30:1c:db:94:b2:f1:e6:59:54:64:cd:
                    39:61:71:40:e6:b6:73:65:ed:93:4e:db:1f:98:7f:
                    8e:8d:cc:e6:58:fa:a9:9c:9c:a0:c6:0f:49:fd:52:
                    b6:f0:7f:b7:a6:42:86:ac:56:49:81:a9:9f:3f:23:
                    f4:30:01:bf:ec:6b:ed:3b:62:ad:29:bc:c6:e2:1a:
                    6e:f4:bb:dc:d3:15:9d:9e:73:ea:c2:9e:0c:d7:a9:
                    1b:05:7b:6c:a4:64:c3:dc:27:cc:12:eb:da:34:2e:
                    0e:52:ae:a4:78:62:c3:43:17:4f:f5:15:5d:14:85:
                    ae:d5:e5:8e:ae:47:d5:4b:a1:d0:24:f7:1e:04:d1:
                    b8:99:d2:97:55:f5:74:53:83:fa:59:d8:90:36:ba:
                    7c:0a:e6:1b:2d:76:06:b4:85:ea:a1:5e:8f:f6:ba:
                    e0:08:c9:e8:c4:14:36:6a:39:8d:58:4d:1c:38:7a:
                    e6:21:ff:43:6f:78:b2:a8:3e:45:95:77:ef:a2:fe:
                    b0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EB:E4:59:C7:5F:09:4E:54:5A:06:61:D1:FD:FB:C9:20:C6:2D:BC
            X509v3 Authority Key Identifier:
                keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:33:df:41:ec:4b:95:88:f9:85:7c:c4:87:a3:c8:2e:23:
         2b:09:52:86:69:cb:44:80:61:84:5d:1a:ad:c2:46:a5:08:95:
         af:31:91:11:66:e4:3c:38:78:62:4d:bc:73:7c:20:f4:62:a5:
         5a:47:50:6c:c0:98:4a:68:a2:d4:f9:8a:28:6c:bd:7a:30:f8:
         38:c9:40:9f:6a:5f:55:25:f9:99:6c:e9:6f:ab:aa:12:89:bf:
         e1:cb:78:8a:fa:75:59:b6:12:2c:6b:3f:a0:04:b5:b0:2d:7b:
         b4:54:2f:70:85:9a:62:23:9a:90:af:17:bb:cc:43:59:2e:6e:
         a3:36:d6:22:38:c2:f6:60:a9:7f:76:3e:dd:d2:55:30:69:ba:
         d9:ae:45:94:3f:a4:8c:05:26:70:58:da:9c:19:11:d7:16:ba:
         b1:4f:b1:d0:12:06:a3:ca:7c:d8:42:0b:4d:7d:a9:51:cb:ba:
         af:ab:3a:ea:ab:cd:87:d6:e8:58:1c:c5:f5:b9:37:d9:ad:3e:
         bf:00:2a:c0:9b:fc:fc:a2:3b:11:82:4c:11:bd:6e:9e:01:50:
         14:73:4f:66:e9:cb:1e:b7:17:55:8b:42:5c:d7:c2:89:49:75:
         28:20:e5:ac:32:48:d8:6b:96:5f:d4:49:b7:7d:fd:61:17:2e:
         5a:90:ed:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZDOTQxMTAvBgNVBAUTKEFDQjcwMjUxRUIxNUI3NUQ0MjI5QUEyMTMxRTNEOUE4
N0MyOTQ1QzAwHhcNMjYxMDAzMDUzNTA2WhcNMjYxMDEwMDUzNTA2WjAYMRYwFAYD
VQQDEw02YWMwOTQwYi1lNjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt64PxBvPziz4DdHiYNi3hKdXkBJOlgmHrxIL6ACOaBv1iPIZSeghyrse/5TD
RxXLpAgsF9QsjSl+OZ0aOayPMBzblLLx5llUZM05YXFA5rZzZe2TTtsfmH+Ojczm
WPqpnJygxg9J/VK28H+3pkKGrFZJgamfPyP0MAG/7GvtO2KtKbzG4hpu9Lvc0xWd
nnPqwp4M16kbBXtspGTD3CfMEuvaNC4OUq6keGLDQxdP9RVdFIWu1eWOrkfVS6HQ
JPceBNG4mdKXVfV0U4P6WdiQNrp8CuYbLXYGtIXqoV6P9rrgCMnoxBQ2ajmNWE0c
OHrmIf9Db3iyqD5FlXfvov6whQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjr5FnH
XwlOVFoGYdH9+8kgxi28MB8GA1UdIwQYMBaAFKy3AlHrFbddQimqITHj2ah8KUXA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9CMTQ0OUM0RTk0
REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQxMUNLYW9oTWVQWnFId3BS
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkM5NC9CMTQ0OUM0RTk0REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQx
MUNLYW9oTWVQWnFId3BSY0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW2Uz30HsS5WI+YV8xIejyC4jKwlShmnLRIBhhF0arcJGpQiVrzGREWbkPDh4
Yk28c3wg9GKlWkdQbMCYSmii1PmKKGy9ejD4OMlAn2pfVSX5mWzpb6uqEom/4ct4
ivp1WbYSLGs/oAS1sC17tFQvcIWaYiOakK8Xu8xDWS5uozbWIjjC9mCpf3Y+3dJV
MGm62a5FlD+kjAUmcFjanBkR1xa6sU+x0BIGo8p82EILTX2pUcu6r6s66qvNh9bo
WBzF9bk32a0+vwAqwJv8/KI7EYJMEb1ungFQFHNPZunLHrcXVYtCXNfCiUl1KCDl
rDJI2GuWX9RJt339YRcuWpDtvg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 11:20:42 2026 by rpki-client