Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
File:                     5KlM-o0vn1s570Y1BZHOMS5RT7M.mft (raw, json)
Hash identifier:          wRkOFpY3v2zdPUZpoFrPs5xwFn0reFsuIsb9psQIZ0g=
Subject key identifier:   65:35:36:2B:C8:25:17:E0:7E:4F:3C:49:42:63:D5:98:7A:EF:D1:F2
Authority key identifier: E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3
Certificate issuer:       /CN=A91A3AB3/serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
Certificate serial:       0387
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
Manifest number:          036B
Signing time:             Wed 23 Sep 2026 00:34:11 +0000
Manifest this update:     Wed 23 Sep 2026 00:34:10 +0000
Manifest next update:     Wed 30 Sep 2026 00:34:10 +0000
Files and hashes:         1: 5KlM-o0vn1s570Y1BZHOMS5RT7M.crl (hash: iZ9zzBcB//YXBDJtM7Y3eXrVDFF1/IAaf+HLXxZ+llI=)
                          2: 3D331986E17211EFA5959B2FC4F9AE02.roa (hash: GgxFX6325kuN6RICOxtS2gvb+gkFJTzGc8YA7E0IOc0=)
                          3: 5B69CE3A474A11EF8624EE6DC4F9AE02.roa (hash: BV3fAhzYpd4ungoocRUfiG5/5RWB1BiAarK17R/lLO0=)
                          4: F3997FACE21D11EFA5819B7EC4F9AE02.roa (hash: SaiPWLAHUnkyojVdelS2uSfpAinLvbN01a3ry45lnng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AB3, serialNumber=E4A94CFA8D2F9F5B39EF46350591CE312E514FB3
        Validity
            Not Before: Sep 23 00:34:10 2026 GMT
            Not After : Sep 30 00:34:10 2026 GMT
        Subject: CN=6ab31e83-dfb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:09:e1:52:1c:51:4f:a1:51:5a:8a:29:2b:
                    8c:d3:7f:04:9b:7b:07:4b:63:93:67:53:a1:06:d4:
                    00:ff:1a:fc:02:db:a7:87:7c:04:48:09:32:60:1d:
                    7b:99:c0:07:1d:40:03:c0:6a:6b:e1:62:38:89:93:
                    52:ea:95:0d:0f:a8:c9:7a:8e:02:ae:a8:85:13:f7:
                    43:79:b9:53:bd:f5:cd:11:e8:e8:56:0c:4d:3f:2e:
                    16:55:31:be:77:6e:61:50:4d:c1:a6:4b:f2:ee:59:
                    90:d0:d8:30:ca:08:e4:42:94:b8:13:7e:10:3c:b5:
                    82:ca:c8:54:1a:52:c8:30:fd:0e:47:62:c7:62:6f:
                    66:87:be:47:27:92:d6:77:1b:de:55:e2:a5:47:4d:
                    3b:bc:22:56:92:d1:4e:ee:1a:ed:f2:68:b5:be:9a:
                    98:fc:5a:9d:5b:89:0f:26:6e:46:54:7b:34:26:22:
                    6d:69:e7:7f:99:e1:7d:d9:57:1d:e3:cb:4b:5a:68:
                    64:75:76:d6:84:38:c6:6b:1f:1c:10:9c:a6:a9:5f:
                    01:9a:ef:85:db:74:7c:04:8b:51:10:03:49:3a:f0:
                    b5:1d:e1:67:ac:64:00:23:88:67:bd:40:29:c7:df:
                    61:70:8e:ea:8a:1a:8e:25:b7:f7:48:52:33:8d:17:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:36:2B:C8:25:17:E0:7E:4F:3C:49:42:63:D5:98:7A:EF:D1:F2
            X509v3 Authority Key Identifier:
                keyid:E4:A9:4C:FA:8D:2F:9F:5B:39:EF:46:35:05:91:CE:31:2E:51:4F:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KlM-o0vn1s570Y1BZHOMS5RT7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AB3/05ED94CE194C11EDAD38F22BC4F9AE02/5KlM-o0vn1s570Y1BZHOMS5RT7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:30:69:0f:b5:e2:b7:e6:76:c5:4f:8e:28:7b:c2:7a:8a:65:
         40:9c:29:2d:a9:ac:01:53:91:a5:0e:88:b8:44:8b:0d:0a:cd:
         67:8c:7a:4d:13:9a:d9:0b:f7:7a:58:59:b0:f1:21:dd:29:35:
         26:fe:7c:ad:85:91:98:27:af:19:cc:f2:d8:b1:49:8e:ff:f7:
         d2:d9:1e:2f:a0:b8:ec:00:01:57:4a:71:35:f0:b3:31:c2:41:
         96:73:b3:66:fc:69:76:ff:c6:57:70:80:ba:53:d5:26:09:83:
         6e:1a:25:43:be:02:f7:b3:fe:a1:b0:e9:33:95:fb:d7:37:09:
         24:6e:30:2c:f1:c7:9f:f1:e6:fa:c5:69:3e:35:82:9a:ae:b8:
         ac:ba:7a:34:ca:1d:cf:52:57:f3:9b:bc:ba:34:7d:03:77:96:
         ff:71:c1:c3:d2:62:b2:cf:bd:dd:f5:1a:2d:0f:a8:50:2e:d0:
         6c:b7:6f:df:24:e4:40:c9:1a:48:26:f1:c7:68:82:68:2d:52:
         6e:0c:e1:c0:24:42:47:ef:19:1c:66:2d:97:d8:b6:7e:9d:5b:
         72:a4:b0:14:44:f6:ac:a2:cb:22:81:61:5f:58:f3:6c:c7:52:
         ea:2a:ec:42:97:ad:9c:f1:3e:47:6a:07:d3:8e:88:b6:d6:c6:
         90:76:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:38:23 2026 by rpki-client