Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
File:                     ClvdO0-5-Mviogt7R_zLS4UwJTc.mft (raw, json)
Hash identifier:          6WsZkCx1sGx3bYwnlmaoe3vzBeEBwGgO0ix/Tk/YnJI=
Subject key identifier:   F2:40:99:9D:DF:B5:62:D8:00:AE:88:DD:72:B1:30:8B:1D:2B:68:1B
Authority key identifier: 0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37
Certificate issuer:       /CN=A913E42C/serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
Manifest number:          85
Signing time:             Wed 23 Sep 2026 07:32:30 +0000
Manifest this update:     Wed 23 Sep 2026 07:32:29 +0000
Manifest next update:     Wed 30 Sep 2026 07:32:29 +0000
Files and hashes:         1: ClvdO0-5-Mviogt7R_zLS4UwJTc.crl (hash: K/7lqTpxvhtV/AssI+GBDxm0NBy3q08ehtwLaJWtlR0=)
                          2: CA77C1768A8011F19BC566E64611F970.roa (hash: Un9zN7NUoVkyJNJb8hIzxUZZd6XPLvkA8K83xuVn1AM=)
                          3: 4CC7C93C00F711F194E0B0C53C6F56BC.roa (hash: 7vAVjvl3vUeCtEH/2NqH9j2x3y9M77GMQ2JCNqdOMHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl
                          rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E42C, serialNumber=0A5BDD3B4FB9F8CBE2A20B7B47FCCB4B85302537
        Validity
            Not Before: Sep 23 07:32:29 2026 GMT
            Not After : Sep 30 07:32:29 2026 GMT
        Subject: CN=6ab3808e-117e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f6:5f:2e:9a:93:ae:54:fc:13:76:24:14:8b:
                    9a:53:5e:b5:3b:2d:24:83:ca:7d:10:ea:8d:fa:1c:
                    7a:41:82:6d:d5:fe:bb:8e:a1:2a:26:9b:0d:3b:26:
                    47:58:e5:1d:42:a9:34:97:c8:e3:01:74:62:99:15:
                    f5:e9:2d:f8:3c:ee:63:77:93:d5:fb:a3:69:b5:e0:
                    7c:4b:bc:4f:f4:97:6f:ac:08:ba:50:9b:9e:56:65:
                    b8:a0:80:2b:fc:92:9d:22:b3:a5:9c:b1:a1:90:94:
                    b0:8f:3d:c8:68:2a:7e:b3:e4:38:1e:83:fc:7d:ad:
                    e1:a7:f4:03:92:d4:b1:43:47:87:b1:e6:d1:ac:73:
                    7a:a5:49:32:96:a2:ec:ba:bc:ba:f7:37:b0:d4:9a:
                    4c:ed:f5:62:1f:68:99:82:26:1e:47:01:2b:8f:cb:
                    6c:a8:6d:eb:09:e5:58:17:13:fd:a8:32:1e:67:08:
                    61:ce:25:8a:13:da:2b:a4:8a:bb:3f:e8:57:b7:5a:
                    2e:97:f9:39:b7:e2:10:e9:6c:5e:0a:52:9e:71:16:
                    69:22:51:b2:d0:73:e2:63:a0:c3:0f:63:e8:d3:c6:
                    fb:cc:a2:1c:f5:ab:f1:d6:33:8d:36:2c:7a:3f:c1:
                    26:0e:d0:7b:46:9b:55:a6:51:72:f8:a5:4a:3f:77:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:40:99:9D:DF:B5:62:D8:00:AE:88:DD:72:B1:30:8B:1D:2B:68:1B
            X509v3 Authority Key Identifier:
                keyid:0A:5B:DD:3B:4F:B9:F8:CB:E2:A2:0B:7B:47:FC:CB:4B:85:30:25:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ClvdO0-5-Mviogt7R_zLS4UwJTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E42C/0F8B6ACE001111F1892C277E406F56BC/ClvdO0-5-Mviogt7R_zLS4UwJTc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:72:fb:be:b1:70:8e:39:fb:5d:5b:a2:ad:8f:e4:e5:54:29:
         56:8e:48:d6:eb:71:bc:8a:06:b7:5a:44:ba:c7:38:74:da:3d:
         79:8a:44:14:60:73:85:9e:94:06:f6:d5:28:9c:53:e0:3e:0b:
         ac:b4:74:95:c1:a6:ed:83:76:2c:5f:9d:e1:af:f6:08:4e:d8:
         f1:ef:0d:f9:01:6f:4a:06:81:d4:99:26:9f:b0:f0:32:fe:8b:
         3b:de:53:11:6d:48:e0:df:5a:2f:cd:1d:c5:3c:0c:ad:aa:23:
         bb:ad:d0:98:1a:2d:32:81:b4:cc:11:5e:11:b2:d5:2a:11:9b:
         b4:87:a5:92:05:94:f1:f7:75:b7:25:77:10:e7:d8:84:09:23:
         42:93:3f:ec:2c:00:19:cf:1d:ea:34:4b:fa:33:17:1e:7e:d5:
         ba:f7:5a:01:8c:21:31:b4:bd:d2:d7:92:14:66:fb:66:c7:e7:
         77:ec:9b:5c:12:7c:f4:66:44:70:8e:a8:0b:f3:cc:3a:39:3f:
         85:dd:0f:db:b3:e1:5d:0d:b9:1f:65:fc:81:c7:82:1e:9d:79:
         0a:c4:b2:84:de:99:aa:03:23:01:87:f7:7d:73:49:74:d5:a9:
         78:b0:86:f7:7e:c4:26:83:0a:f1:c0:26:c7:8c:28:5b:29:20:
         7f:55:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:23:23 2026 by rpki-client