Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
File:                     -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json)
Hash identifier:          Pr4OqI/nhRrA7ZIGCWASUm0hk5yB5X15ZaRnpdcQVxs=
Subject key identifier:   9F:16:EC:4F:6A:7E:53:C2:5F:62:52:69:C2:50:06:B5:13:33:02:CE
Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
Certificate issuer:       /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Certificate serial:       0D42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
Manifest number:          0D29
Signing time:             Tue 06 Oct 2026 18:22:24 +0000
Manifest this update:     Tue 06 Oct 2026 18:22:24 +0000
Manifest next update:     Tue 13 Oct 2026 18:22:24 +0000
Files and hashes:         1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: FyGr9jsGpOxVijQjSgMMaNxBvUMC11A8qzv2xlYWPq4=)
                          2: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=)
                          3: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: JgU3uHMLD1/j7W/OT0+XPxyyEVVhRjsVefR9u0vp7DA=)
                          4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: APn+F9xRovOSeD45jGA8svXtlMxctUkywPcao3lKdl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
                          rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3394 (0xd42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
        Validity
            Not Before: Oct  6 18:22:24 2026 GMT
            Not After : Oct 13 18:22:24 2026 GMT
        Subject: CN=6ac53c60-7c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:f3:02:5a:24:7a:c9:38:5c:b1:24:06:db:
                    b4:31:86:26:24:e2:3d:f3:f8:ce:c7:51:b2:d6:13:
                    59:19:e0:ec:2a:61:06:c0:c5:2c:02:24:b5:bb:25:
                    e5:c4:2f:b2:a7:57:0f:95:9b:f0:8c:6c:97:27:3b:
                    36:72:93:23:a9:9f:b7:7c:bb:cd:34:a5:a6:15:97:
                    39:a3:33:e0:ac:8c:4d:7c:e5:f2:e8:61:57:73:2f:
                    a4:08:a6:de:b8:80:3b:21:31:33:c8:da:28:6e:15:
                    77:16:89:41:06:6d:e5:f5:60:74:73:5c:d3:15:6d:
                    a8:87:27:a4:7d:6a:0c:1b:ed:51:a0:de:dc:26:ba:
                    40:ee:28:a2:fc:2a:cd:c4:14:4a:0e:1c:d6:6e:ae:
                    4d:61:e4:b7:cc:ae:98:18:f0:0a:23:fb:ec:76:a7:
                    6f:2b:39:c1:2a:a9:57:97:2d:dc:09:61:7c:af:bf:
                    5a:09:48:e9:5d:db:99:c6:55:23:ee:b9:96:2a:80:
                    7a:0a:79:72:ff:b5:65:34:e1:ed:49:a7:63:56:41:
                    ab:0c:93:cb:e2:03:ce:8c:28:90:5b:66:5d:a8:e0:
                    29:c6:1e:80:20:ad:42:69:72:b3:4d:a1:64:5a:42:
                    85:71:9c:be:86:5d:7c:55:f1:4b:47:ad:96:d2:14:
                    4c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:EC:4F:6A:7E:53:C2:5F:62:52:69:C2:50:06:B5:13:33:02:CE
            X509v3 Authority Key Identifier:
                keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:a3:01:eb:7b:d6:11:97:5b:03:3a:4a:d8:6a:b0:d1:82:
         47:55:aa:88:6b:2e:de:bf:50:20:8b:48:06:23:2f:46:ef:18:
         ef:d0:5a:11:5b:eb:7e:04:be:fb:0d:b6:73:03:1f:c6:c3:40:
         09:98:11:57:9e:72:f6:e0:87:6c:47:6f:73:c3:61:94:3f:93:
         ef:cb:59:72:ef:59:b8:34:e2:55:8e:54:c3:a2:44:6c:dd:7a:
         60:3a:fb:e5:70:b5:10:6c:51:f7:53:9d:61:dd:a5:90:02:c8:
         73:eb:37:5d:e2:91:70:ec:ac:07:7e:c0:db:03:33:95:47:a7:
         29:08:da:a1:3a:73:41:04:10:80:e8:ff:8c:c4:b5:4a:28:a8:
         ee:37:a1:7f:81:07:ff:a0:76:2f:c5:4e:e8:f8:83:7e:56:6b:
         8c:42:4f:ba:d6:35:95:12:33:32:8e:7c:f9:fc:b9:21:0c:b3:
         22:6a:f1:5f:e6:19:bf:61:0f:c6:a6:36:e9:7b:af:31:3a:6b:
         cc:8b:a3:ba:ff:b0:59:14:04:ee:09:19:76:10:45:58:70:20:
         c2:1e:2a:20:44:70:80:84:e6:dc:6f:aa:03:37:65:36:ec:5b:
         90:be:82:2c:95:93:db:8e:59:0c:de:2b:96:f2:21:01:9d:d6:
         ce:88:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:41:20 2026 by rpki-client