Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
File:                     RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json)
Hash identifier:          gk2XN5CgUq9eurgGU6h677yJgHXtC/HnhRGjJWddtgI=
Subject key identifier:   E3:A0:46:F8:76:9A:6E:E2:C8:ED:3C:47:4C:BD:F6:77:13:5A:7E:0A
Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03
Certificate issuer:       /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
Manifest number:          01D9
Signing time:             Fri 09 Oct 2026 04:09:49 +0000
Manifest this update:     Fri 09 Oct 2026 04:09:48 +0000
Manifest next update:     Fri 16 Oct 2026 04:09:48 +0000
Files and hashes:         1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: Bjwecy7WxmIIv09p8Rq90L5Bts6Vnumz41AM9bXuTw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl
                          rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203
        Validity
            Not Before: Oct  9 04:09:48 2026 GMT
            Not After : Oct 16 04:09:48 2026 GMT
        Subject: CN=6ac8690d-cea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7f:af:9e:b3:27:1f:2b:15:06:29:62:80:7d:
                    ca:c5:ad:33:40:9c:d5:87:fb:9a:25:64:59:8e:df:
                    c3:29:13:77:94:13:52:79:9b:c5:d7:62:25:af:83:
                    19:11:c3:ce:ba:9e:1c:22:f0:39:a5:9d:48:1c:3f:
                    bf:a9:a7:39:9f:51:1f:6d:1f:58:55:29:f0:5b:9c:
                    81:e0:e1:94:d2:d4:7c:87:02:64:d1:3d:fa:87:95:
                    03:1b:e1:f0:d2:01:7b:df:b2:a7:35:da:d9:77:72:
                    d9:b4:1e:40:a6:e2:d5:32:76:69:b1:77:87:2d:a6:
                    f1:07:7e:f0:8f:ca:ac:fe:17:eb:cd:6d:d2:19:dc:
                    80:07:3d:f7:d3:8a:b9:6d:90:fd:a7:10:11:68:80:
                    61:76:85:0c:e5:93:34:0b:a0:46:4c:6d:7d:e4:aa:
                    4b:2e:8a:e0:07:07:72:e4:5f:66:b7:57:b0:dd:20:
                    0f:48:94:a5:fb:0c:b0:5f:54:8a:a6:b5:a9:c5:18:
                    39:4a:cf:cc:14:a1:3f:31:6b:ac:ce:72:83:95:8e:
                    bf:6c:14:be:a7:85:c9:94:d4:9f:fc:65:e7:b7:7b:
                    2c:3e:ed:a7:5b:ce:46:f9:28:b3:4a:f4:4b:3b:30:
                    04:14:9b:95:a6:26:da:1a:a7:c3:21:14:cd:71:8f:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A0:46:F8:76:9A:6E:E2:C8:ED:3C:47:4C:BD:F6:77:13:5A:7E:0A
            X509v3 Authority Key Identifier:
                keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:b7:0f:71:c5:84:b4:08:98:ee:d0:b5:90:66:cd:3c:5d:
         d3:b6:2e:31:80:bc:09:8a:74:6f:22:77:a9:5a:93:31:b0:6c:
         17:28:aa:bc:00:ff:17:70:94:a2:f6:92:a1:be:b8:16:fa:6b:
         e2:df:5b:e6:a9:9a:f6:7f:64:96:59:1b:14:79:3e:2e:7d:be:
         1c:0f:e2:65:2b:cd:5e:3d:ff:4c:7f:c0:93:50:3e:e1:87:29:
         b5:07:6f:c1:df:97:88:b3:18:3d:06:dd:64:b6:81:b5:83:4e:
         ee:8a:c4:32:c2:44:90:bb:3b:d4:80:f7:5b:e6:2b:2f:28:d0:
         c2:5c:5a:48:96:53:48:c5:9c:78:a9:79:f2:24:f4:c2:58:c4:
         0c:2b:70:27:03:a9:e9:7e:bf:83:89:97:31:bb:55:cf:a0:d3:
         09:b2:45:7d:7d:f0:10:b0:bb:e9:a5:5e:3b:88:34:99:ab:92:
         da:7c:7d:63:03:8b:06:b1:84:4a:85:d3:5a:aa:29:bb:5a:de:
         5b:51:23:a0:88:02:2c:a7:3f:ef:ba:11:e3:9b:ae:61:bb:f8:
         2e:e1:6c:76:b6:8c:0a:16:16:25:88:bc:77:26:59:b6:e0:67:
         d9:02:ef:99:52:1f:1d:2f:5f:26:7d:0e:d5:f0:bd:9c:ac:b0:
         00:e5:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:21:14 2026 by rpki-client