Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
File:                     _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json)
Hash identifier:          2iNRkeU45VsnuxTWbr6BS0as34dihuNZKRNRFQem+S8=
Subject key identifier:   03:E0:87:06:98:6E:A1:57:F0:79:A7:1E:A8:E0:62:BE:04:65:C1:72
Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4
Certificate issuer:       /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4
Certificate serial:       02EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
Manifest number:          02E5
Signing time:             Sat 03 Oct 2026 01:40:40 +0000
Manifest this update:     Sat 03 Oct 2026 01:40:40 +0000
Manifest next update:     Sat 10 Oct 2026 01:40:40 +0000
Files and hashes:         1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: vz6hdzxc42FG1BBSTPXHssUtb3UTzhp7svkhmM/CKgk=)
                          2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: ZZwjkiMgX/YpAYi/6L+ggkuSAVan4KIPX1b4XSQPGvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4
        Validity
            Not Before: Oct  3 01:40:40 2026 GMT
            Not After : Oct 10 01:40:40 2026 GMT
        Subject: CN=6ac05d18-e188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:92:b1:98:bd:be:d6:62:ba:93:b6:a9:4b:
                    fe:c9:b2:67:e5:0c:4e:4d:4f:f1:78:45:32:a2:fc:
                    34:8a:47:cb:c5:97:7c:c3:87:29:19:c5:48:2d:8e:
                    48:c2:56:c3:15:af:f5:89:31:ef:61:97:a3:28:7b:
                    a2:51:c2:8c:d1:e1:8e:3e:b3:f6:e4:ac:08:ff:02:
                    41:e0:31:68:a4:4d:c8:fe:67:6e:c3:49:f1:b2:b2:
                    da:8d:e8:bf:df:d0:46:3f:2e:58:11:e6:0f:ed:27:
                    fb:b5:93:55:78:f5:f7:31:e7:c5:15:aa:7d:f1:0c:
                    10:ca:e2:9e:0e:19:fb:b5:3e:41:c5:2b:5a:95:ac:
                    c6:39:3b:5d:3f:4d:ea:82:39:c7:c6:ab:d1:6c:d1:
                    aa:cd:4b:87:34:ba:0e:7f:84:9b:d1:d6:77:2b:07:
                    76:08:89:7c:55:fc:de:02:05:bd:4a:47:39:16:8c:
                    59:e9:a6:ab:5b:6c:11:99:24:5f:f0:8e:e5:71:61:
                    68:34:18:92:4a:6c:90:d7:70:8f:13:47:8d:7b:74:
                    1d:ef:2e:06:66:52:6b:d3:79:94:74:ef:ff:3b:d3:
                    26:96:77:24:55:b9:e9:54:52:34:0b:c1:55:97:93:
                    53:c1:f5:64:08:36:88:51:a7:cf:08:06:8c:92:75:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:87:06:98:6E:A1:57:F0:79:A7:1E:A8:E0:62:BE:04:65:C1:72
            X509v3 Authority Key Identifier:
                keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:4a:0c:50:af:2e:28:37:69:40:35:dc:25:25:26:16:8a:9b:
         92:aa:c6:cf:0f:43:ce:0b:e6:07:ee:93:c0:ad:a1:fa:2b:1a:
         67:a5:7b:ec:29:bd:25:3f:27:d1:e3:c3:82:d3:06:76:30:28:
         86:4c:29:e9:e2:08:ff:78:c7:cd:e8:57:7d:38:71:74:95:ae:
         f8:13:b2:17:61:e7:20:ba:cd:f2:94:5c:78:78:c1:6b:38:40:
         32:f7:c2:38:f8:ce:45:92:b4:96:8a:26:c0:35:16:31:c2:4b:
         16:b2:3d:a1:f9:8e:4f:8c:f5:0e:ae:e7:08:c0:1f:4b:95:b5:
         de:76:8a:cb:bc:82:16:b4:5d:e5:a4:3c:21:08:66:65:70:fe:
         2d:fd:19:be:0a:89:55:c3:36:51:f9:7c:88:0c:35:f4:96:84:
         6b:4b:9d:d7:36:38:51:e9:8c:6b:0d:26:5b:ff:de:db:b7:d8:
         2e:bf:e6:18:5f:58:5c:fb:4c:10:f7:26:2d:b4:24:53:f5:7e:
         1d:2a:3d:a1:47:3e:b1:e3:72:e2:61:8f:c4:c1:b0:40:7a:7e:
         fc:6a:29:3a:19:9e:20:93:6f:c9:86:a5:98:99:f8:d9:48:52:
         27:55:62:d0:ed:43:b8:5c:54:e6:dd:d7:e7:95:8e:88:92:c4:
         98:8d:08:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:21:46 2026 by rpki-client