Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
File:                     1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json)
Hash identifier:          O0spYqxr6NxsKXbpN9epdnFLwhVr/RolbSgw1Q/Q9Ys=
Subject key identifier:   E7:09:BC:87:8C:4C:A8:5B:97:5D:27:A2:25:1D:C5:58:FA:91:FF:EE
Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89
Certificate issuer:       /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
Manifest number:          0157
Signing time:             Sat 03 Oct 2026 05:58:00 +0000
Manifest this update:     Sat 03 Oct 2026 05:57:59 +0000
Manifest next update:     Sat 10 Oct 2026 05:57:59 +0000
Files and hashes:         1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: 9/hGpDzsZ3/GEhwgfd7bWLbcWdM71wcvtem2flsqOgc=)
                          2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: /AunwFrvROT949ER300con7tMv9t6hnrAMstakDSUnc=)
                          3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: wpQZ9n5tOzLHw2Dp8uE1s9PaRxpgXwgFNni9J4wuW/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl
                          rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189
        Validity
            Not Before: Oct  3 05:57:59 2026 GMT
            Not After : Oct 10 05:57:59 2026 GMT
        Subject: CN=6ac09967-c58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:c1:02:c6:aa:91:28:7a:d4:06:71:de:e1:
                    55:2b:66:1e:2a:4c:73:3b:ba:77:ce:0a:f5:e0:bf:
                    0f:4e:ec:04:7b:32:e6:0b:42:b8:07:69:99:f3:93:
                    20:1d:41:15:b2:84:75:3e:03:3e:a6:db:43:af:82:
                    2e:4d:83:5f:88:61:79:5d:38:df:52:97:3f:81:e1:
                    a2:4b:e5:7b:83:02:b2:81:d6:16:a3:5e:25:54:60:
                    65:5d:12:28:2b:11:08:35:94:82:d6:68:e2:ab:d3:
                    0c:73:fe:43:e6:4b:b9:12:09:6b:2e:63:1f:37:13:
                    df:c6:ca:ed:6b:3b:57:94:7a:17:94:e7:9c:f0:6e:
                    b7:25:a6:86:08:10:5d:d9:c1:43:e6:2b:df:77:6e:
                    3c:db:fd:e4:26:d1:b4:c8:80:08:46:dc:de:fe:a9:
                    56:2c:08:d9:fc:92:4a:b1:f2:34:38:51:86:24:2f:
                    a1:ad:7c:2f:89:d2:ef:e3:1b:98:db:18:52:9b:7e:
                    75:96:98:a4:26:e7:1e:ee:ac:10:d9:22:b7:c8:92:
                    ea:53:d3:fe:7f:11:ee:ba:3a:38:ba:1d:95:11:14:
                    dd:e6:88:96:c9:3a:c2:d2:3d:44:c8:5d:d5:49:26:
                    89:ab:b9:79:3a:54:3b:82:b7:b4:a4:2d:de:fd:d5:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:09:BC:87:8C:4C:A8:5B:97:5D:27:A2:25:1D:C5:58:FA:91:FF:EE
            X509v3 Authority Key Identifier:
                keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:6b:15:f8:cc:b6:fb:75:10:12:8e:1e:c9:d7:c9:9a:66:07:
         ee:b2:c3:3d:0d:bd:88:94:36:2c:ee:d4:a3:9d:1a:df:53:9c:
         e0:4b:80:aa:93:9e:f3:54:59:b6:52:6d:cc:e6:f9:45:f4:be:
         54:69:20:02:af:24:8b:4d:d4:50:a7:aa:b9:ba:53:a6:6b:24:
         04:26:c7:88:6b:c4:5b:91:9c:e2:f6:59:eb:a7:1a:72:8d:9a:
         36:23:cc:31:ab:f0:b3:9b:17:33:a2:d9:38:43:d7:b2:b4:f4:
         e3:aa:00:58:38:c0:4a:60:83:66:96:22:68:5a:17:c2:8d:3a:
         41:4a:93:31:ff:35:3a:50:2c:dc:21:75:c7:f7:16:26:4c:45:
         d0:a7:17:c1:e0:44:1e:c7:42:79:16:78:a3:4b:9b:38:df:1a:
         28:77:8e:65:85:7c:1e:34:97:8a:2f:46:50:71:6b:31:f4:d4:
         50:8d:fa:4d:f1:93:3f:f3:f1:67:26:90:17:cd:29:91:14:71:
         b7:dd:94:35:52:00:b5:84:cf:24:1e:01:10:b6:cd:6d:0a:ec:
         0b:da:9c:65:41:f2:72:f6:a0:3e:bc:a9:72:a0:01:5d:4b:44:
         0e:ed:d5:06:b6:28:88:c3:40:1e:db:ff:37:f7:f9:8c:77:8a:
         93:49:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:38:40 2026 by rpki-client