Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
File:                     ROq4zxyb1totteNCtBx0fuOkUF8.mft (raw, json)
Hash identifier:          grb0xJVBLc7gqkCP9qPZdKZJYyE2vI/CVMrUybByGCs=
Subject key identifier:   CC:46:16:92:03:DF:F4:A0:A9:3F:22:B7:9B:C9:2F:31:D1:70:BF:80
Authority key identifier: 44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F
Certificate issuer:       /CN=A91B00B6/serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F
Certificate serial:       0B0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
Manifest number:          0B05
Signing time:             Sat 10 Oct 2026 19:23:54 +0000
Manifest this update:     Sat 10 Oct 2026 19:23:53 +0000
Manifest next update:     Sat 17 Oct 2026 19:23:53 +0000
Files and hashes:         1: ROq4zxyb1totteNCtBx0fuOkUF8.crl (hash: qpo3F3vVqPAdfNsaojmt4Qd31G8AKBLwq4T2uZ7uEv0=)
                          2: 800EC4AE756F11EAAA2E0F6CC4F9AE02.roa (hash: 9qAqPPfS3Lm3NNjuC/c07MbOLoTWODGnuEywIygxL5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl
                          rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2829 (0xb0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B00B6, serialNumber=44EAB8CF1C9BD6DA2DB5E342B41C747EE3A4505F
        Validity
            Not Before: Oct 10 19:23:53 2026 GMT
            Not After : Oct 17 19:23:53 2026 GMT
        Subject: CN=6aca90ca-6d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:9e:da:c8:c5:f6:94:bc:b1:49:a0:94:41:
                    51:d8:ba:57:c8:be:54:7b:90:81:42:70:30:f6:70:
                    c9:87:bc:10:06:49:54:19:fd:4c:98:2a:d6:38:84:
                    46:17:cd:d3:2b:d5:17:34:14:59:4a:cf:d1:8e:ff:
                    61:27:69:f6:5a:3a:8f:7d:70:57:1f:30:7b:52:08:
                    aa:08:92:96:7e:dd:3c:ea:5e:f6:d4:b2:cc:f8:8f:
                    b1:0a:0f:81:52:9d:0a:a1:8f:89:5c:cd:e9:46:6e:
                    b3:ca:ff:ca:99:e6:a9:8d:f6:1a:5d:75:a1:28:cd:
                    8e:c0:21:1c:d3:5e:06:b0:2b:0f:7f:4d:72:70:ab:
                    68:00:ea:ee:3a:6f:a3:90:e7:48:58:ad:d4:0d:2e:
                    b4:0c:a7:bf:e0:ce:53:6f:d5:fe:de:ac:b2:81:3b:
                    81:2a:f2:6a:32:5d:c3:bf:68:b6:0e:b9:32:a1:44:
                    ff:09:bf:ca:fd:68:c0:e3:fb:44:b3:60:c4:74:be:
                    4c:68:51:0e:43:c1:22:32:bd:40:04:11:e3:da:64:
                    07:38:5d:0b:69:de:b1:f6:e8:f1:04:4a:89:6a:f3:
                    f4:fe:f2:83:f3:91:66:db:15:25:50:0a:74:32:c8:
                    31:0b:84:3c:28:bf:19:b2:ff:42:45:e4:fc:34:bf:
                    b7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:16:92:03:DF:F4:A0:A9:3F:22:B7:9B:C9:2F:31:D1:70:BF:80
            X509v3 Authority Key Identifier:
                keyid:44:EA:B8:CF:1C:9B:D6:DA:2D:B5:E3:42:B4:1C:74:7E:E3:A4:50:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROq4zxyb1totteNCtBx0fuOkUF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00B6/9F9AF7A8756E11EA9914236BC4F9AE02/ROq4zxyb1totteNCtBx0fuOkUF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:49:92:61:41:4c:b1:13:6e:5c:5e:ef:a9:3f:38:03:98:64:
         c0:54:b2:23:bd:b3:f7:fd:f6:67:57:11:6e:91:a0:ec:5b:21:
         a3:a1:ef:58:e0:0f:8b:7e:90:59:c2:38:33:65:6a:92:36:3f:
         78:13:62:3f:d3:6c:87:40:52:1a:76:4d:e8:2b:6c:76:da:6a:
         b1:30:78:6d:4b:ea:45:bc:61:a3:cf:6f:f7:52:4a:6f:95:72:
         d0:db:d9:4e:81:0d:da:a5:ff:2d:1b:4a:0b:d8:30:17:6c:a8:
         03:b8:28:05:b7:34:a5:40:07:c2:f9:4a:a3:df:65:32:47:19:
         3a:8c:25:63:eb:af:af:ad:85:82:31:f2:af:66:b5:be:a0:42:
         ce:bb:a9:d8:18:b8:93:65:f9:af:a9:77:7e:69:75:94:ce:91:
         1b:7f:4e:88:67:0c:d3:81:e9:58:48:6c:a5:f4:03:f1:f1:4d:
         a4:3b:2a:41:98:6f:50:91:68:f7:a3:4e:cb:e0:93:39:9b:78:
         8a:d2:b8:e7:f5:6e:55:17:62:06:9e:14:61:42:cc:42:5f:6a:
         ee:c8:c7:8c:ea:f1:8a:2a:8f:78:8e:06:92:20:ea:2c:a0:f0:
         e2:df:99:7c:5d:14:eb:2a:8c:89:74:d1:10:f7:f0:a7:d0:72:
         23:bf:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:36:36 2026 by rpki-client