Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
File:                     suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json)
Hash identifier:          886zRBVi33pKUMTJDZFXHV1+M0jvC5r84kKo64aY2eU=
Subject key identifier:   5E:1F:F8:DE:69:88:D9:33:A0:D8:AC:29:A0:EB:2C:22:9B:F1:6F:8A
Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
Certificate issuer:       /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Certificate serial:       01B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
Manifest number:          01B2
Signing time:             Sat 17 Oct 2026 04:38:12 +0000
Manifest this update:     Sat 17 Oct 2026 04:38:11 +0000
Manifest next update:     Sat 24 Oct 2026 04:38:11 +0000
Files and hashes:         1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: VHTdyy66UxtAyIzWuEdMOhYCdslYLXyuRg9+YcBA8As=)
                          2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: dMfHfrbTyibI/vfMvch+qwnCQAs6chEo73/KA4HRzas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 04:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
        Validity
            Not Before: Oct 17 04:38:11 2026 GMT
            Not After : Oct 24 04:38:11 2026 GMT
        Subject: CN=6ad2fbb4-3a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:f3:a9:cd:0d:67:e1:5d:d6:95:f5:d2:10:
                    32:15:40:ea:d8:31:3c:6b:40:11:77:94:4e:6b:f4:
                    0e:27:53:30:4e:05:3f:9d:67:ed:44:5d:dd:b1:c6:
                    84:3d:0a:ff:9a:94:9d:0c:c0:94:44:b9:8d:b4:e2:
                    14:e6:a3:d3:f2:3a:a6:d6:8c:55:49:c8:15:4e:ec:
                    a9:15:22:a1:78:4f:ec:c5:32:7a:61:42:bc:80:7d:
                    c8:4a:0f:b1:e2:a6:19:c0:1a:05:21:2d:44:f4:f3:
                    4a:12:83:0f:71:56:e6:95:53:90:44:13:19:4d:65:
                    01:0b:4e:4e:78:31:ef:9b:5b:2f:fd:ad:08:9b:d5:
                    a6:d1:2d:ae:b7:50:09:44:59:a2:18:6f:42:6e:42:
                    aa:cd:b2:2d:ea:84:e5:22:a7:aa:5c:66:9b:e5:d4:
                    66:50:8e:27:44:87:18:2c:16:53:57:95:08:98:5a:
                    2b:92:25:57:9a:57:b3:86:a9:24:bf:08:a6:7c:0e:
                    c9:cb:65:d6:57:f9:f8:c7:c8:97:c7:28:8e:66:18:
                    20:7c:3f:a6:a0:71:37:80:db:28:26:28:aa:db:84:
                    24:9d:3f:21:75:0b:fa:15:e0:07:71:66:f2:e0:c5:
                    75:ac:b0:64:06:90:1d:72:15:45:a2:0c:93:e9:1f:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:F8:DE:69:88:D9:33:A0:D8:AC:29:A0:EB:2C:22:9B:F1:6F:8A
            X509v3 Authority Key Identifier:
                keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:11:d5:a5:03:17:70:35:b4:79:1b:d8:60:d3:fb:25:c8:61:
         ce:60:b6:15:ca:39:6f:f4:ce:eb:f5:cf:a0:81:e0:d5:3b:25:
         2a:94:ec:ac:17:4a:64:4c:b4:a2:43:c6:35:ef:6e:46:fa:d3:
         c8:42:c5:a5:d9:9d:a5:fe:e3:e1:12:d1:b8:d3:fa:58:d2:3b:
         d8:49:91:1a:fb:2c:77:84:22:ba:8d:8d:98:0f:56:9b:92:5c:
         ea:24:af:6b:f3:d6:f2:b7:bb:26:d7:2a:b6:19:3e:0a:70:e4:
         a4:3b:a3:7a:bc:bb:e7:6f:dd:c4:ee:70:26:d7:60:b7:51:03:
         f5:2e:92:c4:31:c3:5c:0b:f7:58:14:3e:a6:61:45:e7:7a:07:
         a5:45:95:09:fb:13:5a:7b:94:69:17:b0:78:55:4b:84:10:26:
         dc:1a:22:22:b0:27:00:0f:d0:22:a5:52:96:b7:67:41:87:5a:
         bc:30:5d:5a:07:bc:b9:b7:5c:db:2b:97:c1:48:d2:b4:7c:7a:
         0b:0a:89:ef:87:11:b2:5c:fe:00:2e:f7:42:ac:79:c2:1a:00:
         d7:01:9d:50:e9:e3:d7:0a:5c:04:6b:0f:4c:29:e9:c8:53:f3:
         bf:4e:b2:e9:5d:3f:6c:d9:d3:62:7d:08:16:97:67:93:c6:b4:
         0c:1d:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:36:07 2026 by rpki-client