Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
File:                     t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json)
Hash identifier:          1dcHcErLROKF8sMjS8jnoiEJZBrprDP/VK5EAfmHyOQ=
Subject key identifier:   29:9F:39:DF:29:77:DE:A6:5B:88:30:6E:6A:B8:E5:9F:51:FD:47:D0
Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9
Certificate issuer:       /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9
Certificate serial:       0EBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
Manifest number:          0EAF
Signing time:             Fri 02 Oct 2026 17:54:17 +0000
Manifest this update:     Fri 02 Oct 2026 17:54:16 +0000
Manifest next update:     Fri 09 Oct 2026 17:54:16 +0000
Files and hashes:         1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: xYxeng3Rgq0GY1FThVYQ1ex7kI6FR70C6ouVEuh9znQ=)
                          2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: o6Xw5xLS8YVW62CrGPTjvjmk2nm6Ne1ncHaH7pEqVM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl
                          rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:54:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3770 (0xeba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9
        Validity
            Not Before: Oct  2 17:54:16 2026 GMT
            Not After : Oct  9 17:54:16 2026 GMT
        Subject: CN=6abfefc8-5c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:5b:54:b2:3e:a0:94:59:90:d0:0e:66:c8:
                    c2:3b:b2:0d:76:db:85:21:23:69:0c:ff:c0:87:ec:
                    cc:4c:47:ea:bd:a7:9a:08:c1:f8:ce:4a:7c:9c:45:
                    06:33:b9:8f:36:61:80:d6:d6:c1:b4:fb:0d:cb:8e:
                    96:c1:a9:0a:76:46:01:ad:68:24:12:f6:ea:ba:58:
                    cb:8d:34:fd:91:24:14:67:26:ec:2d:57:38:e7:9b:
                    55:d5:d3:bb:79:29:b7:ff:33:5f:3d:19:d9:9d:4f:
                    a6:87:32:05:f4:85:71:4a:70:e1:c5:a0:c9:f6:54:
                    a1:82:05:d0:2f:6a:82:96:c7:3c:8f:94:01:de:86:
                    5c:bb:ab:02:b3:eb:e4:1e:32:e4:f8:fa:34:f8:eb:
                    6b:db:af:26:01:6a:53:50:e4:db:e3:7a:f1:5a:c6:
                    58:ed:d4:b2:d8:40:fb:ea:d9:6e:2d:33:37:c8:c1:
                    1b:34:40:87:cf:1f:b3:e3:72:18:a9:04:81:ca:78:
                    4f:3e:7b:2a:4c:72:58:3c:c5:0d:0e:40:c9:1f:9c:
                    e1:4a:ff:30:13:34:51:eb:12:dc:cb:0e:1d:5e:e6:
                    27:d5:69:a5:71:1f:3c:03:6f:08:b1:be:00:b9:e3:
                    f4:95:26:39:b3:a0:9a:b1:d2:23:5a:50:6c:2d:5c:
                    94:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9F:39:DF:29:77:DE:A6:5B:88:30:6E:6A:B8:E5:9F:51:FD:47:D0
            X509v3 Authority Key Identifier:
                keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:83:27:e9:ed:f8:cc:e2:2f:db:6b:52:c6:95:05:8b:f3:87:
         41:35:09:0d:f9:d9:f9:e2:fb:3b:4b:6f:5b:a0:b1:15:a9:24:
         dc:80:37:e6:ea:f2:de:39:cf:de:28:e1:4d:5f:d8:92:fa:6b:
         2c:52:c8:e2:65:dc:e1:cc:06:6a:a5:5b:a3:35:5d:bc:3a:d0:
         8e:c7:88:d5:19:d7:53:08:2e:84:bb:b5:47:b4:ba:c3:3c:22:
         4e:a0:a4:97:14:48:b9:e7:93:af:29:cc:e5:fb:2b:07:02:3b:
         57:f2:3f:59:33:97:d6:c0:59:aa:11:72:54:a9:53:ce:22:81:
         73:36:e4:1c:f7:af:10:1b:31:0e:0e:25:b6:8e:44:e6:ae:8f:
         b7:4f:34:5d:65:1f:a4:b9:00:3f:8d:2e:22:4a:ae:3c:62:9b:
         af:a0:ae:b5:3d:40:12:c5:24:19:04:f3:47:81:5f:ef:b0:4b:
         a1:e7:0d:88:34:a2:2e:ff:f6:09:46:66:45:f9:80:46:3b:7d:
         68:9d:a9:ab:d4:f9:57:ed:98:a1:c5:be:ec:59:6b:fa:a9:f4:
         44:8f:12:96:37:c5:9a:ba:0d:f1:6e:25:9a:81:4b:2f:22:e7:
         8b:35:bb:5f:ff:07:1c:7a:65:1c:52:ca:21:b9:3f:d8:b1:c6:
         45:38:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:17:49 2026 by rpki-client