Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
File:                     EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json)
Hash identifier:          jxnkVKW8AyAc4vvpWLurhyrqPn3+nIjQ8sc7Ln+3xK0=
Subject key identifier:   A1:78:17:BB:0A:C4:C0:95:3D:02:80:79:57:BA:AF:13:B7:5D:22:61
Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5
Certificate issuer:       /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5
Certificate serial:       0130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
Manifest number:          012B
Signing time:             Fri 25 Sep 2026 05:47:02 +0000
Manifest this update:     Fri 25 Sep 2026 05:47:02 +0000
Manifest next update:     Fri 02 Oct 2026 05:47:02 +0000
Files and hashes:         1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: DLvUZp3MeYi2AwMe9XG4Ou3rUQ5LsmVLN+CACDWNA4s=)
                          2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: NFFJXgXuoaxMrml8Oh8vxaW8xrfeeiE5Wfe+px5WY+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl
                          rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5
        Validity
            Not Before: Sep 25 05:47:02 2026 GMT
            Not After : Oct  2 05:47:02 2026 GMT
        Subject: CN=6ab60ad6-20ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:76:87:49:93:bb:91:0f:55:31:2f:9a:bc:
                    60:e3:80:97:eb:0c:d5:23:d6:d2:96:85:92:7d:a0:
                    00:95:cd:b0:c3:a8:7a:d5:84:b0:98:d0:60:1d:cd:
                    1c:6d:3e:21:c3:42:b8:fd:91:cd:b4:ba:19:6c:b6:
                    7d:93:ce:61:8a:78:93:74:a7:76:29:9c:e7:c1:e5:
                    1f:a6:3f:7b:a9:53:35:67:41:47:b9:7f:1e:1d:28:
                    dc:6a:83:8d:2c:ed:0c:b7:36:38:92:d6:cb:37:f6:
                    a6:13:07:ed:f3:0d:55:61:66:4e:cc:79:6b:21:b0:
                    5d:be:2d:21:c0:cd:95:ae:f4:8d:50:af:21:3e:48:
                    9d:ad:c4:d1:b3:1b:af:72:61:72:f9:7d:09:dc:8e:
                    ad:06:9c:52:b7:67:88:8f:c2:d8:2f:21:1e:fa:bc:
                    5b:07:38:62:e2:5b:b5:56:85:47:27:3b:da:bf:18:
                    b8:b0:f4:12:6a:b7:6b:03:5e:7a:1c:c1:d4:d1:51:
                    84:e4:e3:c1:c0:d2:5e:03:ec:a4:08:14:2e:22:6a:
                    71:1b:0a:b4:45:c0:4b:dc:86:31:01:b7:97:4b:75:
                    1c:18:05:01:4b:f0:ac:3e:86:ef:28:8f:5c:ec:b4:
                    4f:cd:41:60:db:71:8c:82:32:c9:4f:c7:05:e3:98:
                    3e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:78:17:BB:0A:C4:C0:95:3D:02:80:79:57:BA:AF:13:B7:5D:22:61
            X509v3 Authority Key Identifier:
                keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ca:75:0f:00:3b:e1:4a:3d:4b:01:5b:42:c3:f7:15:b5:a6:
         98:df:e9:e4:bc:b9:51:2a:0f:66:99:03:44:72:a3:34:5c:9f:
         13:1f:15:58:ee:a0:62:3d:26:e7:9a:61:0f:89:75:06:43:32:
         54:fd:7d:e4:af:3a:22:71:e8:e3:31:d1:93:ef:d6:73:29:73:
         af:5f:ed:64:ba:39:54:d2:56:49:88:51:24:36:73:29:67:35:
         21:14:6c:2c:be:1e:c7:d9:8e:60:79:c8:a6:b1:6e:d6:ac:42:
         1e:1b:6b:95:37:27:2f:0b:72:f4:05:17:b4:22:c1:5b:41:85:
         dd:44:e6:bf:14:0b:c1:d4:0c:51:eb:b9:d7:b1:45:50:8c:94:
         1f:97:49:ab:ff:0d:c2:3f:ab:a1:88:07:57:2e:2f:4a:4e:50:
         1c:3e:4c:76:55:72:41:4b:28:53:bb:86:07:a9:c2:34:30:f3:
         fc:72:12:7e:89:7c:b5:97:cd:15:d3:e3:09:85:f0:04:92:80:
         40:48:19:b4:73:00:b9:7b:96:88:2c:e1:4e:4f:26:9f:6a:d1:
         26:ca:60:fc:bc:ee:6f:c5:29:e0:39:dc:3a:3f:7b:f3:a7:ec:
         48:2b:85:ec:9c:6f:05:98:81:6c:20:5f:99:f3:f8:3f:9a:05:
         20:43:af:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:57:10 2026 by rpki-client