Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
File:                     _pmKu7E0uTwc5_hOi5--HdqbZKk.mft (raw, json)
Hash identifier:          rKHnzkJgTEFwgBaac3vLRsJs0vOVNJv+Gqw2zNtATNg=
Subject key identifier:   0A:A0:DC:C2:2A:AD:DF:C6:43:33:DB:34:A7:8B:76:DE:F8:E1:5A:92
Authority key identifier: FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9
Certificate issuer:       /CN=A911ABA2/serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
Manifest number:          96
Signing time:             Sun 27 Sep 2026 08:03:07 +0000
Manifest this update:     Sun 27 Sep 2026 08:03:06 +0000
Manifest next update:     Sun 04 Oct 2026 08:03:06 +0000
Files and hashes:         1: _pmKu7E0uTwc5_hOi5--HdqbZKk.crl (hash: wnELUj0pBf8Dni6zVzqciY39HgO2e99OX7WgRa2xEVU=)
                          2: B97CD5B84D1911F191BBC780B9833773.roa (hash: HpuWmUe+4DzlKIQ/3j2Ee6fHNR3Y+Qt0BWhQNdOZvoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl
                          rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911ABA2, serialNumber=FE998ABBB134B93C1CE7F84E8B9FBE1DDA9B64A9
        Validity
            Not Before: Sep 27 08:03:06 2026 GMT
            Not After : Oct  4 08:03:06 2026 GMT
        Subject: CN=6ab8cdbb-4cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:1e:4c:47:9d:7f:76:4b:3b:34:45:75:6e:
                    eb:78:fb:32:6a:bc:c2:fc:d1:df:ee:4d:40:99:fd:
                    5b:67:c7:a2:0a:e3:35:79:a0:6f:48:8c:6b:04:c5:
                    dc:bf:ea:e6:69:66:f8:ee:4d:c6:ab:6e:19:83:cd:
                    18:ee:9a:7e:83:f6:ae:4a:60:1f:0d:80:7d:83:27:
                    59:04:7c:5b:22:9a:06:ec:46:ab:3f:10:2f:d9:c0:
                    fd:e6:01:e1:96:9b:b7:47:a8:2c:f3:14:8a:22:b4:
                    fd:fc:26:3e:be:3d:fd:53:ee:23:f2:d5:60:8d:47:
                    fc:0a:e1:4d:3d:04:94:6b:3b:b9:14:b7:06:1a:2f:
                    6d:92:17:fa:2d:a1:75:0f:8b:01:1e:e6:b4:6e:09:
                    d6:ca:9d:0f:e1:26:de:ae:e9:39:d4:96:94:91:54:
                    05:b4:a3:f2:ba:91:63:1a:0a:cb:fc:44:1b:3a:3d:
                    97:95:a9:a5:46:2c:7a:1b:64:b8:47:3c:71:ec:76:
                    68:08:5d:5e:6a:7c:13:8d:92:4e:03:05:fb:f7:81:
                    d0:47:9d:4c:b3:6a:ad:8f:a5:36:32:c3:8b:a9:87:
                    8c:a9:c5:1e:79:93:7c:3d:c6:73:93:57:f2:4f:3b:
                    08:76:57:a9:dd:05:b2:30:41:f2:7c:51:97:e3:29:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A0:DC:C2:2A:AD:DF:C6:43:33:DB:34:A7:8B:76:DE:F8:E1:5A:92
            X509v3 Authority Key Identifier:
                keyid:FE:99:8A:BB:B1:34:B9:3C:1C:E7:F8:4E:8B:9F:BE:1D:DA:9B:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pmKu7E0uTwc5_hOi5--HdqbZKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABA2/B44360C8E17411F0A541D02D3E6F56BC/_pmKu7E0uTwc5_hOi5--HdqbZKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:8c:b1:21:09:27:5d:96:b5:a2:00:73:34:2d:6b:ba:08:
         8b:00:82:57:2e:46:4b:18:02:0e:f6:50:ed:89:81:2d:1f:4a:
         67:62:97:e4:36:cf:d4:e0:0d:0b:ca:12:dc:9f:17:0b:46:6c:
         f0:26:69:8f:b0:59:f8:2d:62:9f:3f:19:f0:e8:c1:0e:02:1b:
         f8:99:8f:21:8a:e2:5d:9d:9b:bf:02:7f:0b:66:d2:cd:ce:2a:
         1e:22:b8:fc:34:42:6b:2e:77:b8:1d:e8:8c:23:f5:3e:b9:38:
         98:42:57:87:e5:81:6a:61:56:78:74:fb:fb:72:8e:1b:8b:53:
         92:eb:32:01:bd:65:7d:17:a2:a9:0f:3f:f2:52:0c:98:9b:cb:
         b7:a3:e2:ae:b8:f5:a5:95:50:29:9a:25:ef:a5:f6:d6:2a:f8:
         fa:70:5e:89:82:f8:77:e0:35:f9:c3:69:72:45:16:9d:3e:30:
         76:b2:2b:02:02:7b:b1:a2:a2:e6:ac:3b:4c:88:01:5e:71:c4:
         a8:3a:36:db:57:ae:87:c9:77:06:d4:82:7d:08:57:b8:fe:aa:
         01:74:2b:da:d6:3d:05:88:60:69:df:4c:ad:45:90:92:6c:b2:
         88:ee:b7:86:4f:e3:10:37:3a:71:7d:cd:9f:85:10:6c:7c:8b:
         0f:c8:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:32:58 2026 by rpki-client