Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File:                     53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier:          LDoPQ79HtLpXvL0l9vpy7PiHV2hF/745tLmmhwH3mvk=
Subject key identifier:   0C:7C:92:0D:E3:E0:19:C3:E7:B0:25:9B:05:F5:12:7A:8F:81:EC:7C
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer:       /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number:          0280
Signing time:             Wed 07 Oct 2026 02:19:19 +0000
Manifest this update:     Wed 07 Oct 2026 02:19:18 +0000
Manifest next update:     Wed 14 Oct 2026 02:19:18 +0000
Files and hashes:         1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: MyYHMx2wMJNE0Ny9Hd6jy8yWmZMf3ZSaM+KvXPfQFcg=)
                          2: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: NdG+EESk6AxDfSsv+CEMSa3ytYfunyOHRDzMUr7MG1A=)
                          3: F3210638F06D11ED9055A212C4F9AE02.roa (hash: h5xh1R0tEre7HmC/xYO8AoJTBuo2TI6B3de4UegYPas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
                          rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
        Validity
            Not Before: Oct  7 02:19:18 2026 GMT
            Not After : Oct 14 02:19:18 2026 GMT
        Subject: CN=6ac5ac27-ce39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:00:b2:00:55:8c:00:34:10:f9:a2:c3:1b:
                    eb:5e:10:4f:da:fc:e1:ac:4a:62:1c:d9:3e:1d:05:
                    ba:30:aa:52:a4:d2:62:82:67:cc:2f:00:91:d7:cb:
                    92:ba:54:dc:dc:71:f5:5d:c9:5a:9f:74:18:31:81:
                    9c:d6:50:f6:c5:d0:9c:00:b2:1d:8b:9a:db:35:4d:
                    ed:1c:e9:54:59:62:84:a2:fa:e5:fb:59:43:3b:aa:
                    22:a0:25:d7:6f:dc:e8:20:0a:ec:97:7e:19:e2:b3:
                    23:a3:aa:69:30:05:4f:b3:09:be:01:4e:5b:3a:2e:
                    53:ea:a0:4d:3a:3e:1f:f8:b7:b8:9e:5e:5e:da:e3:
                    2e:bc:0c:00:86:b3:21:6b:10:7e:91:c9:7c:c1:6d:
                    3c:76:2a:ef:35:0a:8c:f1:0b:37:5e:4f:2a:56:0c:
                    c2:d6:c2:40:a6:2b:cc:6e:02:e3:13:9b:1f:51:70:
                    49:4c:80:15:b3:0d:4d:8e:31:6a:05:07:2b:9b:b4:
                    c3:12:b7:66:62:41:04:5f:e2:50:6c:2a:b4:0c:3c:
                    6e:f3:38:bb:11:9c:1f:fa:c5:36:df:8d:2b:ce:7c:
                    b7:7c:bf:17:da:e0:a3:c0:fe:09:47:de:03:8b:50:
                    80:e4:46:f5:1b:c1:db:99:ba:23:1c:95:19:75:68:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7C:92:0D:E3:E0:19:C3:E7:B0:25:9B:05:F5:12:7A:8F:81:EC:7C
            X509v3 Authority Key Identifier:
                keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4a:c9:5a:2e:9d:e9:61:9e:ce:bd:26:a8:7c:6f:6f:15:1b:
         64:74:fe:9b:3e:2e:75:4d:86:33:38:ae:86:76:dd:90:6c:05:
         59:d3:87:49:82:5f:a7:45:4c:bd:06:c9:c9:49:75:7d:ac:c2:
         c7:7b:1a:35:da:42:da:76:ea:61:74:9c:a3:78:fb:ae:13:e8:
         74:13:95:47:78:b5:eb:46:3f:4a:8e:d5:56:c0:89:e0:3f:d5:
         23:af:bb:a2:57:b1:aa:5a:77:f8:d9:81:69:1a:1d:2d:f9:8f:
         96:22:e1:04:46:cf:23:12:4c:9b:b8:b3:55:12:fc:46:74:62:
         b7:c6:57:04:af:e7:e9:fa:07:2e:b5:ed:c9:6f:3b:4c:96:0b:
         9d:8d:91:3b:6c:15:db:f6:34:91:79:e8:3d:6a:41:f5:48:8c:
         62:6d:e0:70:af:c8:0b:1a:2d:7a:95:e3:9c:3a:33:57:90:b0:
         78:03:db:e8:c3:aa:e8:1f:ed:02:a3:11:a8:ed:63:c2:4b:86:
         65:3a:31:84:5f:4e:5b:4b:d2:99:98:18:7f:60:70:d1:53:f3:
         75:e9:ee:4d:d5:23:82:d1:4c:a6:01:c4:d1:d8:16:21:0d:29:
         d6:64:78:27:03:7c:4b:b2:56:88:09:ff:bd:1b:af:be:e9:1e:
         59:8f:d4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:55:13 2026 by rpki-client