Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File:                     RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier:          CaUA8nfI3D3aokaubs7k2AsqpY5AGkBf3PBLO3oGTH0=
Subject key identifier:   A5:BF:0B:2D:27:0C:21:32:E0:49:97:82:4C:8D:DC:85:07:CF:28:DB
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer:       /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial:       02E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number:          02CA
Signing time:             Thu 29 Oct 2026 01:50:15 +0000
Manifest this update:     Thu 29 Oct 2026 01:50:15 +0000
Manifest next update:     Thu 05 Nov 2026 01:50:15 +0000
Files and hashes:         1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: bhZGvDLByzMysGl5ohV4xeZJ5ya9kIZQAsTKuu0Cb3A=)
                          2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: 4uTpTxxOKcFpix9VMs0QMyQDPqJHXQEnQ2Lc7hCfmwQ=)
                          3: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: HMh0PudeObId9zudYejPSA5f+N2qiPXxo4G9qeOgkD8=)
                          4: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: Yq+XkZnFsUBeEQv24fQGoEmIq0pC6YGTxLPonEh4+Us=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 01:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
        Validity
            Not Before: Oct 29 01:50:15 2026 GMT
            Not After : Nov  5 01:50:15 2026 GMT
        Subject: CN=6ae2a657-36d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:04:fe:20:9f:27:50:a5:80:03:51:c4:57:
                    f3:5e:a7:f6:9d:28:f1:f5:fb:b9:53:86:48:c6:33:
                    b3:0c:d3:ee:3c:c8:e7:ee:52:6d:80:08:13:ed:24:
                    6a:6e:7c:a4:23:15:42:d1:e9:f9:29:e7:c7:89:9f:
                    3c:3c:af:9b:80:20:62:c6:e5:c4:d8:7b:d6:46:10:
                    d1:2f:ec:91:1e:92:8e:54:62:f7:d6:9b:dd:d3:b1:
                    93:20:13:7f:b8:52:9f:00:5f:68:5c:63:94:81:96:
                    6b:d8:f5:82:a5:84:9c:a5:81:1a:8a:7f:74:62:fa:
                    f2:2d:61:68:ff:84:60:4c:f7:53:5c:ba:2f:09:da:
                    ec:8f:21:4b:c5:b7:90:f7:26:bb:fd:64:bc:7c:d1:
                    37:ac:b0:25:a2:0b:01:e6:0f:61:04:1d:a7:70:c9:
                    f7:5e:09:8e:f2:73:cf:4e:3d:a5:09:fa:26:61:46:
                    d2:67:3b:1a:03:66:b4:1c:ec:36:14:cb:a2:a6:80:
                    65:b6:a3:ac:c4:3e:84:97:fb:e3:cf:ea:08:d4:63:
                    fa:07:25:28:a4:cb:a5:8d:63:a1:70:43:0a:db:52:
                    de:ed:0e:be:c1:de:75:f4:08:75:84:7a:cb:bc:24:
                    67:89:02:2e:bc:b8:e0:a3:46:d8:71:c5:32:81:25:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:0B:2D:27:0C:21:32:E0:49:97:82:4C:8D:DC:85:07:CF:28:DB
            X509v3 Authority Key Identifier:
                keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:46:ff:3c:a4:76:5d:35:85:49:65:c6:05:32:29:07:2d:2f:
         3e:da:d0:54:0d:c5:6d:71:0d:89:d2:c7:26:35:3c:69:55:2a:
         f3:ca:47:db:6a:fe:98:35:5e:81:1d:81:75:77:35:71:7e:0f:
         cf:27:96:bc:f2:9d:fc:52:bb:d3:8b:48:67:41:ae:26:fc:44:
         14:98:69:79:bd:70:38:72:b6:f5:d0:33:3c:91:81:42:f6:3f:
         2f:e1:d0:60:cb:74:19:bd:1b:c6:2d:30:08:b9:29:34:21:1d:
         76:7f:a8:65:7f:33:1b:eb:1f:36:5a:0b:43:37:9e:36:9d:7b:
         48:11:f9:7b:f5:83:b1:73:ef:c8:f7:6e:bb:f5:79:76:e9:70:
         2f:8a:03:9f:88:28:bf:2b:8a:87:ab:61:b8:99:88:f9:b2:df:
         86:eb:d4:ee:03:c9:80:63:d2:35:21:05:0b:28:a6:73:e6:3c:
         91:19:9c:42:ab:30:a6:dc:a1:f1:d5:bb:84:49:72:48:35:0e:
         05:ec:db:02:a7:07:73:f4:8d:6e:c7:8b:64:9e:03:6c:78:1d:
         5f:9e:b0:0c:e8:9b:bf:bd:66:24:f5:6a:36:23:e9:32:b3:23:
         cf:a9:24:27:ad:5b:88:73:11:28:5c:ea:f6:00:9f:f8:50:23:
         c6:28:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 17:16:18 2026 by rpki-client