Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
File:                     rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft (raw, json)
Hash identifier:          CJGfKWG2xf5DTO2yA5WMC4gP/XIs5ZagyovjwWW26eY=
Subject key identifier:   45:1A:D1:36:13:A4:47:96:2D:38:93:53:D1:D2:0A:AD:0B:DC:67:DC
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Certificate issuer:       /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
Manifest number:          86
Signing time:             Fri 25 Sep 2026 07:47:38 +0000
Manifest this update:     Fri 25 Sep 2026 07:47:38 +0000
Manifest next update:     Fri 02 Oct 2026 07:47:38 +0000
Files and hashes:         1: rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl (hash: 0iPegYi+o3qPcMwENbt4EtxwG4MUaQC2lZRlcgZ5SMQ=)
                          2: 75BC4B2A5D7611F1B2098786C1833773.roa (hash: ta8dEmU7Z8Oi4RN7K77WKBa90qpszc7XzNZIpq6JXPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
                          rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
        Validity
            Not Before: Sep 25 07:47:38 2026 GMT
            Not After : Oct  2 07:47:38 2026 GMT
        Subject: CN=6ab6271a-b501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:d2:f8:fe:ed:ff:98:9c:8a:72:1c:9a:89:
                    5f:2c:dd:1a:45:48:54:9a:0c:a2:82:e9:1a:6a:4c:
                    0b:b4:48:83:33:06:d4:e3:03:06:ee:c4:42:17:33:
                    63:77:3d:ab:a6:45:50:78:95:8e:44:4b:5b:07:19:
                    b1:32:55:82:f7:3a:28:9e:38:d0:21:9b:0d:c9:74:
                    5d:fc:a7:d4:4f:e7:c1:fd:ec:dc:fb:1c:6a:d4:07:
                    52:d2:08:2e:b7:2c:85:a0:5f:da:26:5d:46:c2:48:
                    a6:bf:a7:f7:59:cc:66:23:b1:3f:5f:ea:d5:43:40:
                    f1:1a:bd:20:3b:c5:74:02:89:2d:fb:20:00:ae:a0:
                    bf:e0:84:27:ad:3d:0d:56:92:44:56:fb:a5:d1:b0:
                    70:a0:5b:7d:e1:2c:ca:78:0f:17:a6:36:49:d4:b5:
                    ea:f5:55:ac:48:db:52:f0:61:f2:0a:bb:9d:e2:c7:
                    d2:52:20:f1:b1:a6:56:f1:fd:6f:2f:6b:c8:3d:22:
                    93:03:be:a1:2d:bb:40:8b:f8:77:65:1c:4f:a2:10:
                    ba:46:40:30:00:c6:92:71:f0:7e:4d:e3:c7:9e:f8:
                    3e:89:ad:70:2d:55:79:5b:85:1a:6c:56:c4:7c:69:
                    06:7c:e3:87:af:71:e1:8b:82:8d:10:0e:d6:e0:5a:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:D1:36:13:A4:47:96:2D:38:93:53:D1:D2:0A:AD:0B:DC:67:DC
            X509v3 Authority Key Identifier:
                keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2d:6a:fd:b6:5e:78:3f:3b:bc:5d:81:88:9c:7f:87:71:d9:
         31:0d:60:77:db:85:04:2b:86:46:7e:32:0d:27:c2:2e:a9:bf:
         30:32:d3:5a:05:e0:3a:75:3d:78:ab:a0:de:29:77:4c:f5:8a:
         7a:4e:a4:d9:24:b8:ec:a6:f1:26:ea:70:2f:62:43:cf:2d:77:
         34:b4:eb:32:c1:ee:6f:63:8c:50:df:10:60:ae:8c:03:72:4a:
         bc:65:ab:41:35:20:55:f8:21:ed:25:62:39:ad:87:df:00:16:
         74:3b:57:dc:ef:4e:88:28:35:35:68:2a:be:5d:de:80:f4:58:
         f6:a4:b3:8e:cd:0e:c1:91:b8:02:7d:76:1c:11:ba:9a:3f:67:
         2f:a5:0d:4c:9e:24:62:e3:a3:b2:97:82:9a:83:05:f0:b7:31:
         11:be:a1:b0:91:6d:48:ad:50:ca:db:75:f0:20:ee:c1:32:b6:
         65:69:b5:18:a7:de:fa:73:a3:7f:a0:bb:ee:36:9b:6a:9c:a1:
         a2:27:af:1c:70:2b:08:2f:f2:80:2c:87:90:26:db:8d:44:ad:
         ee:b6:80:99:11:31:ab:e4:45:59:7e:88:37:cc:bd:7d:2b:5a:
         2d:9c:9d:db:25:05:89:fb:5e:41:11:67:b8:ed:a0:b7:cb:1b:
         96:9a:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:07:45 2026 by rpki-client