Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
File:                     dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json)
Hash identifier:          4mFz3AuJJV89s44kJTvr5ObFTICQ5qTVtCiuWWfLlQQ=
Subject key identifier:   B3:FA:5F:68:41:89:5C:91:54:FA:35:45:E5:61:48:B9:A0:1F:F4:7C
Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64
Certificate issuer:       /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
Certificate serial:       02A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
Manifest number:          029E
Signing time:             Thu 01 Oct 2026 02:21:22 +0000
Manifest this update:     Thu 01 Oct 2026 02:21:22 +0000
Manifest next update:     Thu 08 Oct 2026 02:21:22 +0000
Files and hashes:         1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: cX/XxFcJ19tbWeS9fDgMKHF0nVf8K6sQYP/XJG1FqJ8=)
                          2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: 0Ijz+UY/qG59jnxM6F9e8jT0AK5gXL4f9XftWto6NZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 02:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
        Validity
            Not Before: Oct  1 02:21:22 2026 GMT
            Not After : Oct  8 02:21:22 2026 GMT
        Subject: CN=6abdc3a2-d84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:16:1d:88:ca:81:03:82:bb:df:9f:ba:ec:
                    bb:99:84:00:55:5e:0d:5a:27:84:61:8e:fe:ed:11:
                    e3:34:52:a3:a2:88:60:e0:db:59:11:63:33:a6:fc:
                    85:c4:14:7a:89:b6:8b:9c:ea:e2:e5:4f:8f:ad:cc:
                    17:d2:e7:ea:4e:b8:5c:24:ae:0a:85:f8:e5:2c:d5:
                    46:a8:ef:7b:ab:94:21:9f:d7:2b:ad:ff:46:6e:8e:
                    a1:4e:53:7c:46:b5:06:39:0d:ea:31:60:19:98:01:
                    c9:f3:7d:0b:79:4d:ea:8a:46:46:b2:d3:c4:eb:75:
                    39:17:7a:ba:86:43:f2:d6:5f:9a:32:b0:20:34:e4:
                    8b:0d:f2:03:f6:50:8c:1d:9c:c1:c6:15:ec:d9:f1:
                    9a:fc:dc:a1:8d:dc:c5:8e:62:cc:aa:b5:12:a8:16:
                    b4:ba:07:d7:70:4f:d1:45:b0:fa:c6:76:0b:b2:d1:
                    49:4f:d9:fb:7b:ae:79:c6:39:14:66:ea:dc:81:74:
                    92:a2:eb:06:7e:58:48:1e:3e:68:1d:7d:a6:1a:18:
                    03:a1:05:85:fb:77:87:cc:d8:50:a1:c0:fb:c6:26:
                    c5:05:f9:93:ba:33:58:9a:d3:53:b9:ac:77:7c:b9:
                    d0:eb:48:e9:06:80:87:15:fd:42:41:9a:c2:aa:c6:
                    33:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FA:5F:68:41:89:5C:91:54:FA:35:45:E5:61:48:B9:A0:1F:F4:7C
            X509v3 Authority Key Identifier:
                keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:71:8c:49:cf:a1:2f:02:c9:26:e9:29:87:e5:4a:3b:6f:ac:
         5a:c9:4f:a4:86:60:6b:0b:10:b0:24:3c:ac:a7:4e:43:dd:bf:
         14:b5:e1:21:d5:96:42:d7:65:1d:a1:16:6f:50:b6:7b:58:75:
         02:b1:cf:9b:3a:48:86:19:8e:4f:9a:65:b1:4b:f8:df:d1:5a:
         ba:60:c9:02:19:5f:ee:7e:f5:95:98:5f:a2:4f:f3:56:ca:1d:
         b5:94:da:c8:ea:0c:13:24:d5:7c:91:a6:f5:9c:cb:0e:e8:44:
         ec:58:55:f5:fd:da:e3:52:1c:30:0e:cb:a7:d7:98:8f:37:31:
         77:7d:e8:6f:cf:06:e7:47:87:63:3b:9f:8e:c5:cc:2c:27:91:
         7d:55:73:bc:4b:33:21:0e:6b:c2:97:da:8c:a7:a0:3d:6f:9a:
         ce:bd:a5:cf:24:2c:c3:96:ee:74:b0:d8:8e:47:8f:bd:fe:c9:
         9b:99:19:7d:a1:62:ef:fa:8b:4c:db:57:27:23:29:0c:1a:8c:
         7e:b1:41:50:e0:28:7f:2d:11:6d:e8:65:7c:1f:c6:0c:28:bb:
         ec:2d:0c:2a:8c:63:3b:56:e9:7e:e4:2e:93:ff:ab:a2:4a:09:
         06:6a:a0:44:97:97:22:6f:73:43:90:0e:9d:63:ef:b8:2e:1a:
         d2:0a:21:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 22:07:25 2026 by rpki-client