Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
File:                     -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json)
Hash identifier:          wS1xH0nfXgW6NwRYdR6ONTiS/hhi7pzpqVLQENFiBGA=
Subject key identifier:   93:D9:78:4E:42:F1:2D:FA:0D:91:09:2E:E9:2A:C3:20:CC:2A:75:7A
Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F
Certificate issuer:       /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F
Certificate serial:       0194
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
Manifest number:          0189
Signing time:             Sun 11 Oct 2026 05:09:57 +0000
Manifest this update:     Sun 11 Oct 2026 05:09:57 +0000
Manifest next update:     Sun 18 Oct 2026 05:09:57 +0000
Files and hashes:         1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: 0iwZql2zfa2XAvxPc3pWRuli/obPW6ozMMMm+YC4bhg=)
                          2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: wzQJnvt0AEjDkV/+kjbEm9UTwhZssgF2gbMzBNoM7Ng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl
                          rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 05:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F515, serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F
        Validity
            Not Before: Oct 11 05:09:57 2026 GMT
            Not After : Oct 18 05:09:57 2026 GMT
        Subject: CN=6acb1a25-8ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:1f:48:d1:bf:19:12:d8:53:63:45:8d:fe:
                    1c:5d:76:2c:86:78:54:c4:20:03:30:a8:87:f1:d4:
                    aa:80:d4:9a:8c:a4:5f:d9:f3:a6:dc:87:23:73:22:
                    c3:dd:38:39:1d:c6:1d:8e:bb:27:57:77:82:ff:90:
                    36:7c:2b:95:21:f4:bb:23:6d:95:21:23:60:63:e4:
                    89:b1:3b:1a:ab:c5:0a:75:53:62:d5:99:35:d6:8f:
                    91:fb:17:f6:d7:9d:e8:34:7f:08:20:79:07:54:5b:
                    a3:4b:87:1b:75:73:5b:af:5b:5b:bf:af:ef:98:ed:
                    97:4e:50:08:14:16:e6:de:5f:25:1e:7a:6f:55:e9:
                    39:02:19:ec:b0:9a:6c:8e:5a:a2:6e:1b:4d:79:a8:
                    d4:e4:96:f2:c0:b7:24:8e:c5:cd:d8:4a:af:2e:d3:
                    e4:c0:df:52:51:7f:df:ab:68:3a:7e:13:e9:95:63:
                    46:0e:01:e5:9f:1d:84:8c:62:fa:c2:0c:62:f2:6f:
                    39:a6:dd:9a:c8:50:59:52:14:4c:09:91:98:c9:5f:
                    de:f1:5b:cf:b2:19:c1:fd:2e:86:b8:0c:bc:b5:86:
                    3e:fa:ff:99:68:64:71:e9:1a:71:58:02:f3:6b:af:
                    da:73:50:0a:b8:32:0f:bb:40:04:0c:fb:8e:58:56:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D9:78:4E:42:F1:2D:FA:0D:91:09:2E:E9:2A:C3:20:CC:2A:75:7A
            X509v3 Authority Key Identifier:
                keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:0c:31:86:c0:61:df:4d:0a:5a:25:9e:e8:e2:28:fa:69:
         3f:a8:b2:62:ab:d4:97:f7:e1:8e:09:d4:b2:3f:02:b1:ed:49:
         51:ec:cc:4d:16:bd:07:6e:dd:18:38:8d:55:8b:5f:e5:c6:55:
         e7:e0:bb:f6:a8:ef:c2:3f:59:0a:da:db:e8:cd:ce:5e:3f:1f:
         f6:55:43:4a:e7:ac:29:f2:60:bc:14:c0:e6:04:7f:e7:e9:a6:
         46:56:23:1b:d4:42:6a:ba:c4:5b:75:fb:60:b6:1f:8f:6d:29:
         8e:e8:e4:0a:7b:4f:21:07:67:4f:91:40:fc:1a:a1:da:4c:3b:
         36:b1:4c:f4:e3:33:f4:86:88:af:83:16:8c:27:75:0e:33:8c:
         33:22:3c:ab:b5:49:7e:26:0f:63:3f:59:ec:76:1f:06:89:56:
         fa:e1:39:29:d2:83:f8:e6:40:a0:d6:3c:73:80:57:5e:28:07:
         35:a1:93:d7:40:f9:2a:34:a6:fa:2e:96:2f:b7:61:20:4c:fd:
         c4:d7:fd:57:30:97:b2:2d:7a:5f:37:7c:60:c4:55:b4:e8:90:
         70:e4:88:42:ef:45:a5:b0:ad:45:75:99:26:c8:de:44:68:1c:
         9c:18:4f:f9:9e:c8:16:59:32:f7:7b:8e:69:4b:8f:10:9a:31:
         23:75:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:22:08 2026 by rpki-client