Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
File:                     bCaeUzC71Mculn7D40rmph7kR_Y.mft (raw, json)
Hash identifier:          lbqTi18O4MekGFWFDSYxqpPGdw4+H9tPhhh+BYzFtcg=
Subject key identifier:   02:4A:37:C5:0B:F1:19:1D:A6:70:50:EC:59:00:E7:65:4B:2D:F8:ED
Authority key identifier: 6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6
Certificate issuer:       /CN=A91FAB2C/serialNumber=6C269E5330BBD4C72E967EC3E34AE6A61EE447F6
Certificate serial:       1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
Manifest number:          19
Signing time:             Tue 29 Sep 2026 09:39:13 +0000
Manifest this update:     Tue 29 Sep 2026 09:39:13 +0000
Manifest next update:     Tue 06 Oct 2026 09:39:13 +0000
Files and hashes:         1: bCaeUzC71Mculn7D40rmph7kR_Y.crl (hash: ExNZSMKzuX6HgJoUqMFYDpePe4vwje2kYZyP6qNuUCw=)
                          2: j3bbIV2LwQIIAV2cBaTJoUMwJQ0.asa (hash: UDvm2B9kpdtbUUsMkxX9LmulUfS/+9q42P8eoBdZzoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 09:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB2C, serialNumber=6C269E5330BBD4C72E967EC3E34AE6A61EE447F6
        Validity
            Not Before: Sep 29 09:39:13 2026 GMT
            Not After : Oct  6 09:39:13 2026 GMT
        Subject: CN=6abb8741-5863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:0e:c0:52:5b:d7:4e:fa:1b:67:33:02:0a:
                    9b:46:92:95:09:17:01:51:a6:87:40:c9:8c:94:9b:
                    5f:50:ce:94:84:9f:fb:45:ee:07:13:07:77:7e:bd:
                    35:59:9e:ee:04:92:1e:5a:b3:4c:a6:c0:fa:7a:b2:
                    15:b5:f4:0e:d4:fe:e2:b4:4a:24:f4:7b:30:87:2e:
                    38:64:ca:20:e9:5d:3c:a1:83:4c:ee:9a:b3:4e:16:
                    0e:4a:60:56:53:eb:b4:aa:05:e3:c9:38:9c:ab:34:
                    42:b7:a0:9b:f5:c7:61:a9:76:12:65:ef:c8:60:68:
                    16:71:c4:b0:a1:dd:92:61:d1:a3:09:18:a0:6b:22:
                    21:da:84:b2:bb:97:50:b8:ab:dd:76:21:0f:d2:74:
                    dd:a7:53:fc:c6:2d:c8:09:18:ef:56:c4:cd:5e:02:
                    44:e4:1b:d3:67:4c:d0:59:2c:88:20:9c:92:9d:e1:
                    e6:7c:e6:01:13:2b:3d:79:1d:7c:f0:2c:bf:80:17:
                    cf:07:02:4c:a0:51:c8:c8:a3:71:99:4c:2c:a5:1f:
                    0b:0b:e0:15:b6:91:0d:54:3b:67:d3:13:92:d1:6c:
                    8f:77:da:ca:c1:30:2a:89:34:25:54:17:e1:91:e1:
                    d9:7a:df:ef:3f:94:7c:a3:97:b0:91:06:09:08:2e:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4A:37:C5:0B:F1:19:1D:A6:70:50:EC:59:00:E7:65:4B:2D:F8:ED
            X509v3 Authority Key Identifier:
                keyid:6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:88:b8:36:96:c3:ec:14:9a:5c:5e:86:eb:95:99:10:c8:
         cf:71:c2:2e:a1:41:3b:14:70:bb:23:54:19:42:92:b0:e8:ac:
         9e:8f:3d:5b:f2:a5:e9:f1:75:af:1d:70:68:e3:5d:71:c9:f7:
         f7:2a:81:0b:17:b4:d2:29:17:2e:01:ed:d5:34:4e:0c:29:80:
         1d:bb:0b:40:99:28:e4:36:3c:c4:19:2a:58:7e:df:4a:0d:b5:
         ac:25:12:8c:38:fb:0a:e6:a8:92:cf:1a:31:0e:f5:61:5b:67:
         86:65:87:c1:45:12:f7:1a:51:85:c9:50:df:69:8a:ed:15:5d:
         77:8f:fd:c6:7d:e4:07:ea:04:e6:3d:bf:87:6c:56:7d:f9:94:
         18:55:5a:33:7c:f5:e5:de:be:90:98:c6:d4:32:99:26:82:4a:
         9b:bf:be:b3:14:61:77:66:b6:07:87:af:7c:cc:f2:05:0a:5a:
         8c:4b:a9:aa:60:ca:68:e3:5c:2c:07:e7:a8:1d:f0:3a:70:81:
         da:68:e0:2a:c5:4e:7d:19:84:a3:d6:e7:66:52:a9:d1:c6:3e:
         32:78:f3:35:02:3e:da:f9:77:e1:23:c1:de:28:7d:37:d2:45:
         97:8d:6f:99:81:94:9d:0f:95:d2:65:1b:ba:8f:82:a8:b2:a4:
         71:37:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 01:25:22 2026 by rpki-client