Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          Any419bDN1a8b7YW3i0PXmLWpRF1t8eJov4JUuEWhWI=
Subject key identifier:   5A:7C:65:49:A7:AB:C7:22:54:73:04:3B:3C:C3:9F:8A:17:99:EA:A3
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          0145
Signing time:             Wed 21 Oct 2026 05:59:40 +0000
Manifest this update:     Wed 21 Oct 2026 05:59:40 +0000
Manifest next update:     Wed 28 Oct 2026 05:59:40 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: OYYS6BXrLFCvcC3eCtdDJqeHdmMyGA4ug36DX3USd28=)
                          2: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
                          3: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
                          4: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 05:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Oct 21 05:59:40 2026 GMT
            Not After : Oct 28 05:59:40 2026 GMT
        Subject: CN=6ad854cc-b6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:62:44:cc:c0:a8:ee:c6:8a:94:a8:ba:69:
                    07:78:89:ff:f3:3e:1e:4c:88:a4:e8:56:3a:5a:74:
                    ec:75:6f:71:a5:ab:ed:65:f1:7d:22:35:13:2c:ad:
                    fc:d3:54:77:0f:2f:35:c8:a1:3a:f6:16:91:75:49:
                    bb:91:40:d0:fd:9c:4e:0d:88:4c:4d:53:fe:a5:b0:
                    a3:e0:c0:c0:62:13:c7:d2:5d:ef:5a:3c:7d:42:6c:
                    be:ad:cb:0a:0d:08:de:a3:bc:2b:0e:5a:55:0e:14:
                    96:38:14:b0:db:d7:6f:31:9d:36:43:72:bc:75:cb:
                    f5:6c:3a:f8:b9:9f:48:2e:b8:05:92:22:24:4c:fa:
                    82:75:57:ea:d4:1b:6d:98:8f:2d:b1:30:d9:d0:95:
                    02:77:c4:58:1a:e1:e3:fd:c3:11:1f:c5:e1:a3:fc:
                    58:e2:4f:c7:0a:d1:22:56:8f:3c:d9:60:f3:d8:5c:
                    f1:a9:4c:fc:28:b2:de:fb:fc:ec:78:4d:1c:af:5f:
                    97:e8:38:46:79:a4:5e:8f:de:95:e1:5e:70:50:05:
                    e2:d6:1e:6c:2e:3e:4a:ce:0b:38:8d:f2:81:90:bd:
                    6a:a4:bd:77:4e:5b:39:08:fe:7f:66:e5:1e:9f:7c:
                    75:43:33:81:13:1b:1b:6a:0b:d3:e6:fa:f0:d7:0b:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:65:49:A7:AB:C7:22:54:73:04:3B:3C:C3:9F:8A:17:99:EA:A3
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7d:de:c5:3b:f7:4d:24:82:f3:70:44:51:38:15:c9:db:a4:
         e7:ed:fe:d4:f5:af:a7:5a:a1:e4:21:14:25:24:2e:42:f7:54:
         39:4f:81:82:69:89:20:35:0e:f8:5e:81:00:2e:e2:13:7c:51:
         fb:04:df:25:c9:6d:c3:07:fe:69:39:6a:ac:f7:5b:15:c8:f9:
         d3:90:8e:31:c2:36:58:48:54:a5:7d:96:b0:34:13:47:b2:6b:
         23:ab:2d:d1:86:51:4b:1d:a7:9c:4d:f0:9f:e5:78:66:d4:55:
         71:83:82:c6:eb:a7:fb:d2:a0:2d:67:aa:c3:76:4e:35:d6:3c:
         18:76:9c:e7:ff:62:18:f6:73:6b:0c:a7:35:df:2b:fc:8b:2a:
         ef:56:e1:71:42:e4:b3:71:e0:4c:8e:cc:11:da:e9:0b:bd:f0:
         97:43:23:27:78:fb:eb:68:af:2a:48:8b:c4:96:ec:0d:b6:71:
         f1:96:71:2e:83:8f:aa:57:a6:0e:15:d2:ee:61:be:c6:a6:8d:
         f5:f0:e8:5e:d5:2e:5d:b1:71:a1:39:fb:eb:e8:61:f8:25:e4:
         6a:4b:0a:bd:92:de:01:c7:f7:4f:89:3d:13:ca:78:dd:f2:44:
         0e:64:35:af:3f:4a:ab:3f:4b:47:00:d5:97:3f:5e:9e:03:c3:
         ae:78:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 08:46:17 2026 by rpki-client