Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
File:                     Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json)
Hash identifier:          8m98RGVd58A4b+AgA1qskC+a9vXhjJqYROWpLo2vpk0=
Subject key identifier:   67:37:89:6A:0D:D3:47:9C:D2:A9:97:97:F5:66:E0:01:F4:66:5D:BF
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Certificate issuer:       /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
Manifest number:          01BB
Signing time:             Fri 09 Oct 2026 04:32:51 +0000
Manifest this update:     Fri 09 Oct 2026 04:32:50 +0000
Manifest next update:     Fri 16 Oct 2026 04:32:50 +0000
Files and hashes:         1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: 8TOyDdy8GktQtRdn1vo1N9iOz5NQWtex7GmrIZN+a14=)
                          2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: +hujpBHJUbdedQIkPrbVB4NwPgQUBD595iWd0J45vYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
        Validity
            Not Before: Oct  9 04:32:50 2026 GMT
            Not After : Oct 16 04:32:50 2026 GMT
        Subject: CN=6ac86e72-3516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:30:89:c8:f2:d5:6c:7d:e8:40:bd:cf:8f:
                    14:e0:25:0f:da:71:3c:7b:21:15:32:d0:75:00:6a:
                    40:57:ef:f0:07:32:ec:0f:0f:ae:e6:b0:00:84:61:
                    55:cb:90:c8:55:5e:c9:60:d9:06:ed:b6:d8:24:53:
                    fd:94:0a:ca:b5:e4:52:29:98:91:89:74:55:1c:17:
                    dc:d0:f8:86:98:8c:95:fc:96:80:a6:67:68:f5:f5:
                    6b:f9:95:ee:a5:b3:b1:4b:9d:a6:0a:cd:d2:48:17:
                    f6:8f:ea:02:e9:11:87:73:75:3d:20:10:eb:a4:10:
                    2e:33:74:7d:6d:e3:76:1d:73:75:a2:82:da:e8:8a:
                    c4:62:41:84:17:16:cd:49:63:bf:8c:ff:05:e9:fa:
                    92:46:0c:5d:94:a8:0a:e8:59:5c:02:1c:e2:9c:08:
                    82:4a:0a:49:b2:ce:e4:76:79:b7:39:a6:ff:dd:24:
                    f7:8b:4a:72:3b:d7:2a:e8:b1:4f:0a:72:da:b5:61:
                    a8:2a:6a:95:2e:7b:e2:01:83:06:2b:bf:2c:f6:36:
                    ea:ca:1d:1c:46:85:69:f1:e8:7f:4b:41:c2:3f:12:
                    50:b9:90:4c:45:60:24:de:dc:28:1d:43:4d:f9:de:
                    1e:9a:57:73:15:da:8e:58:d5:94:96:73:f3:61:23:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:37:89:6A:0D:D3:47:9C:D2:A9:97:97:F5:66:E0:01:F4:66:5D:BF
            X509v3 Authority Key Identifier:
                keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:20:14:d4:92:1e:a3:0e:ba:65:90:89:6d:c7:1d:0e:94:47:
         e6:a4:10:66:85:64:01:98:4a:a9:20:be:73:fb:40:0f:34:f7:
         51:c1:74:00:58:6b:4a:6c:50:c6:49:d5:8f:4a:88:5f:e5:9f:
         a1:7e:14:34:7e:6c:26:d7:23:73:32:a8:69:2d:15:43:41:33:
         58:34:39:20:cb:19:a7:6b:cc:75:78:b6:72:2c:d9:7b:40:1f:
         cb:2e:89:5a:b8:90:e5:50:f6:7c:f1:e0:c1:df:a4:d8:82:bd:
         61:4d:4c:47:2a:4c:91:ba:84:7a:6c:c5:74:bd:d1:07:99:99:
         89:62:9f:01:42:5f:7a:7b:a0:80:1c:f2:48:5e:ff:18:19:c3:
         8e:e7:ca:5c:7e:cf:4e:34:0a:d2:72:e5:77:e1:00:38:53:a2:
         ae:b3:24:8d:6d:b2:7c:9d:cc:b5:d0:d8:8d:c2:b0:67:c6:5a:
         aa:e3:5b:5a:c6:03:13:ce:26:42:67:ac:bf:20:69:e2:40:31:
         bb:d9:d3:d8:dc:c9:5f:40:9d:e2:fc:94:6a:48:b2:8e:e1:62:
         da:8d:d0:24:e6:fa:b7:d0:96:ee:44:ee:a0:a2:fd:0f:cd:20:
         7a:09:d5:59:ef:ac:40:f3:6a:de:be:6e:44:64:55:3e:ee:5b:
         cc:42:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:46:32 2026 by rpki-client