Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
File:                     065iZEnDqd0Od5i86Ly7OWYqJ_8.mft (raw, json)
Hash identifier:          Csi02j2jMlmyzIgsjgC8GvtQU4I09Zya4cA6Gha2LGY=
Subject key identifier:   5B:A3:C8:DD:0B:39:0B:EE:EC:6E:16:75:61:E6:12:02:0F:4B:3F:5F
Authority key identifier: D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF
Certificate issuer:       /CN=A9163B62/serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
Certificate serial:       028D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
Manifest number:          0282
Signing time:             Mon 05 Oct 2026 02:16:30 +0000
Manifest this update:     Mon 05 Oct 2026 02:16:30 +0000
Manifest next update:     Mon 12 Oct 2026 02:16:30 +0000
Files and hashes:         1: 065iZEnDqd0Od5i86Ly7OWYqJ_8.crl (hash: /TJ5UhrhvoCrsGe3VGegd1kMJiZmf/7BKU/HGKsdP5k=)
                          2: D91C7DD6B7BF11F18286FEA15E11F970.roa (hash: +1VV6DN4ESBcwJus+3vUWYfHCZpEb8gf7Dch8Lwy0U0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl
                          rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163B62, serialNumber=D3AE626449C3A9DD0E7798BCE8BCBB39662A27FF
        Validity
            Not Before: Oct  5 02:16:30 2026 GMT
            Not After : Oct 12 02:16:30 2026 GMT
        Subject: CN=6ac3087e-8576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:fa:8a:fe:96:2a:e9:28:c2:43:05:c7:d7:
                    3f:55:2b:06:f8:6c:c0:c9:cb:55:06:d9:90:97:fb:
                    38:98:ef:f4:43:2c:4c:2c:33:40:90:88:6c:bf:e9:
                    fe:bf:2f:33:be:3f:72:e8:ca:52:00:5c:e5:65:c3:
                    f7:eb:fc:a0:82:82:84:b7:5f:8b:84:f7:21:43:24:
                    0b:f3:c4:de:ef:1b:f4:0e:36:b6:39:45:82:14:5c:
                    a1:d8:4a:8e:c4:5a:fd:5f:fb:75:0c:5a:7f:64:37:
                    bc:b1:0a:df:20:3b:f7:57:61:19:4c:4a:c3:d7:9b:
                    4c:8e:28:38:de:3a:39:fe:ae:43:ef:83:96:7f:fb:
                    7e:bc:82:50:90:b9:00:81:5d:5a:ec:dd:69:1d:21:
                    c4:f5:8d:bf:dc:25:8b:2a:7d:6e:c8:6d:2c:89:d1:
                    af:50:2a:c1:73:f5:2c:31:0e:0d:1e:05:fc:ef:16:
                    b8:4a:9d:e5:13:bc:17:43:4c:e1:d8:fd:46:bb:42:
                    60:83:04:8c:88:cf:6e:00:7e:15:97:67:fd:ab:f5:
                    9f:fd:cf:51:4e:9f:bc:a5:c9:34:96:fe:36:1c:99:
                    40:92:1c:36:9d:d6:54:0e:cb:2b:a5:48:4c:2a:d9:
                    88:e2:46:b6:03:60:72:0a:97:dd:92:f9:28:90:73:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:C8:DD:0B:39:0B:EE:EC:6E:16:75:61:E6:12:02:0F:4B:3F:5F
            X509v3 Authority Key Identifier:
                keyid:D3:AE:62:64:49:C3:A9:DD:0E:77:98:BC:E8:BC:BB:39:66:2A:27:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/065iZEnDqd0Od5i86Ly7OWYqJ_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163B62/4E9B76D2FBD211EDA0864345C4F9AE02/065iZEnDqd0Od5i86Ly7OWYqJ_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:ad:27:97:3d:a7:d6:eb:6f:9a:5e:e0:3a:2b:df:f0:2f:
         47:17:c3:e5:96:cc:e9:86:0f:e9:20:cb:5d:7a:15:a4:9d:f7:
         02:94:77:5a:7c:36:6e:04:21:ec:b5:f5:a1:52:41:b5:6a:8f:
         27:18:be:43:b4:74:97:dd:24:ad:97:c4:0b:33:bf:7c:1a:97:
         57:1e:c7:b7:7a:2e:17:90:2a:4c:d3:64:cd:be:d9:90:62:00:
         e2:50:71:e6:53:be:c2:03:88:42:98:74:93:c5:41:84:75:86:
         39:92:8c:e5:c1:af:c4:33:1c:e4:e5:9b:9e:5e:e0:4d:6a:45:
         7d:2d:5b:19:f2:9b:44:c0:d2:f4:ba:71:af:c6:60:79:4d:10:
         62:9c:5c:4a:d5:27:05:ea:e3:6c:04:87:ac:23:be:34:af:c7:
         d1:cf:b3:e8:57:8e:69:10:09:03:c8:da:d8:08:5c:58:d8:b6:
         3d:86:45:14:2f:70:0c:d4:10:7f:03:d7:13:c6:5c:93:ae:10:
         27:98:9c:d9:eb:50:65:f0:28:80:b5:ed:1f:da:48:38:8b:ac:
         51:47:83:8b:bd:ca:8c:2f:12:68:d4:82:09:4e:ad:65:92:d1:
         16:ec:84:45:22:3e:06:ad:f4:e1:9a:14:44:04:f7:36:35:c0:
         02:18:46:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:01:13 2026 by rpki-client