Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
File:                     1h14JILiVI0iXRvIiINjk97jmBI.mft (raw, json)
Hash identifier:          vmjfLpYCcFH/Tjc0HZ8DqExI5dda/BBt8YFrDDI49T0=
Subject key identifier:   85:52:7E:60:21:8C:68:71:97:E2:85:E1:F7:D1:D9:7A:4F:67:06:FF
Authority key identifier: D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12
Certificate issuer:       /CN=A91F0A98/serialNumber=D61D782482E2548D225D1BC888836393DEE39812
Certificate serial:       0250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
Manifest number:          0250
Signing time:             Wed 07 Oct 2026 02:45:13 +0000
Manifest this update:     Wed 07 Oct 2026 02:45:12 +0000
Manifest next update:     Wed 14 Oct 2026 02:45:12 +0000
Files and hashes:         1: 1h14JILiVI0iXRvIiINjk97jmBI.crl (hash: C1qmLBh+OVfS2E2aXaLB6tpfqLTFevuybcv0g6keexU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl
                          rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0A98, serialNumber=D61D782482E2548D225D1BC888836393DEE39812
        Validity
            Not Before: Oct  7 02:45:12 2026 GMT
            Not After : Oct 14 02:45:12 2026 GMT
        Subject: CN=6ac5b238-d485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:14:ec:01:13:96:a3:8d:9b:c9:00:b1:46:
                    3f:09:dc:16:9d:8c:a4:b5:ca:62:84:2a:a5:3c:76:
                    a6:60:75:0d:7f:7d:60:ee:86:c6:68:58:be:f1:28:
                    28:d1:40:6b:48:2c:80:2b:0c:13:c7:3f:4d:4c:2b:
                    39:c0:48:18:fb:53:cb:d9:2c:8d:e7:c2:11:4e:22:
                    b5:fd:c6:45:ad:3f:eb:e8:b8:ba:fc:5d:fe:25:15:
                    a4:51:da:2d:f7:ad:20:40:8d:3d:8b:b9:b3:e9:6c:
                    66:a0:00:17:ac:2b:1a:27:74:10:12:3f:23:93:a4:
                    c5:e2:d3:e0:2b:b3:d3:21:a8:64:ca:a8:44:46:9c:
                    4b:1a:ad:50:37:5a:2d:82:03:38:6c:7f:94:80:3d:
                    dc:2b:4d:fa:ae:a6:39:c8:a0:d7:3c:46:ca:e5:f4:
                    d4:bc:5f:58:c3:20:1d:ec:28:17:d8:6b:c2:7e:18:
                    de:03:d3:33:33:a2:38:09:1e:7e:cd:09:10:b2:2f:
                    b9:18:c6:ee:4f:12:eb:57:ec:a5:ab:c6:24:fe:2d:
                    52:c2:06:c0:f2:d3:a0:ae:42:d1:a6:98:a2:b1:d2:
                    a4:b0:bc:c4:7c:12:ad:c3:5a:4b:f3:11:3f:00:23:
                    73:07:9d:d6:7f:95:82:a3:04:9c:b4:06:4a:75:08:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:52:7E:60:21:8C:68:71:97:E2:85:E1:F7:D1:D9:7A:4F:67:06:FF
            X509v3 Authority Key Identifier:
                keyid:D6:1D:78:24:82:E2:54:8D:22:5D:1B:C8:88:83:63:93:DE:E3:98:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h14JILiVI0iXRvIiINjk97jmBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0A98/8F4864EA35E011EE87C2A670C4F9AE02/1h14JILiVI0iXRvIiINjk97jmBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:2b:83:3b:28:3d:a7:2e:7d:6b:7d:1b:c6:05:c1:eb:3b:
         88:e4:b6:f8:b4:16:e4:da:b8:e1:f1:f4:67:ff:c7:88:79:31:
         92:e1:5a:a2:29:19:f6:95:34:44:3a:c8:f3:ad:c3:35:54:9e:
         5a:10:8b:db:c7:88:14:49:15:31:84:13:a0:17:55:3a:b5:ba:
         78:87:93:4b:61:15:8d:76:6b:c6:e6:e0:3d:34:a0:e6:03:0f:
         67:c9:26:af:7f:5f:7c:ac:f4:c6:48:79:0e:25:52:d2:86:39:
         5c:60:a2:de:5a:25:d6:30:96:0b:12:0d:70:94:5a:0a:b5:e6:
         44:b2:c5:22:98:5d:0d:77:f6:0d:8b:8a:fd:72:3d:6d:6f:2b:
         4d:21:06:2b:d4:b7:2e:aa:fe:da:ad:97:81:0e:07:2e:3b:cc:
         a7:e2:e8:72:e8:6b:ca:99:d5:cb:25:08:28:75:e6:57:4d:7c:
         68:2b:e0:be:f4:66:bc:12:47:d6:77:02:b9:8e:9f:ad:71:96:
         90:e7:c1:a4:a5:9a:84:2a:6d:4f:3e:3a:0b:06:b5:1f:e4:f6:
         26:01:93:76:82:d9:bf:86:26:f9:c6:6d:24:68:c5:af:1d:42:
         33:53:f1:64:7c:cd:08:ca:24:45:c0:d6:a8:eb:14:81:77:44:
         01:d2:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:52:55 2026 by rpki-client