Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
File:                     MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft (raw, json)
Hash identifier:          5trGMjORql6j0Zpkc5aCuA+6pm/ezqiBu2NwIGSB0T4=
Subject key identifier:   D4:F4:F1:52:3E:DB:D9:E1:6A:CE:51:41:19:E3:B4:A9:4B:F1:71:55
Authority key identifier: 32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76
Certificate issuer:       /CN=A91C1D71/serialNumber=3269AA220C2FE4B6EAC651E7221A7C03B8814276
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
Manifest number:          4C
Signing time:             Fri 09 Oct 2026 09:08:11 +0000
Manifest this update:     Fri 09 Oct 2026 09:08:10 +0000
Manifest next update:     Fri 16 Oct 2026 09:08:10 +0000
Files and hashes:         1: MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl (hash: 7OZvny1HvzHuSG35HzDfqaPjMpDnwhDNVX7AkYJjGGQ=)
                          2: FE3124A04E6A11F19EF4B4E9A9833773.roa (hash: 5G0WnfmhAWln0DoFaMqx4jKc4Si31Bq5mzX8fwHCaN4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1D71, serialNumber=3269AA220C2FE4B6EAC651E7221A7C03B8814276
        Validity
            Not Before: Oct  9 09:08:10 2026 GMT
            Not After : Oct 16 09:08:10 2026 GMT
        Subject: CN=6ac8aefb-7795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:a8:23:5e:eb:ee:cb:86:54:05:25:f2:d2:
                    29:87:c8:72:9b:11:22:7e:87:e0:b5:90:c4:7a:59:
                    7a:b2:40:a1:51:76:08:dc:fe:87:ba:f1:90:99:52:
                    66:eb:19:ca:33:35:52:35:c1:76:d5:17:04:b6:2b:
                    16:a4:c7:0f:7e:e2:d8:00:50:d6:64:7e:90:97:4f:
                    fa:ec:c7:94:c1:45:89:d7:57:eb:1c:f4:c8:78:67:
                    64:f9:86:e3:69:05:55:e0:ae:28:46:76:9a:e1:a2:
                    92:50:bf:e1:c9:10:87:27:d4:bc:4d:29:62:e2:29:
                    bc:c5:4c:65:d9:01:15:7d:73:a6:2f:76:3f:01:c3:
                    c2:27:7c:fc:cf:06:a3:90:3b:23:b5:fd:1e:ad:10:
                    b2:44:35:ae:e0:d6:ca:50:ea:ad:5e:fc:2a:3f:7d:
                    fb:27:b2:2b:37:10:c1:f7:1e:6a:e6:5b:4e:29:cd:
                    64:35:3c:29:ce:d2:a5:36:33:3e:0a:08:55:9c:74:
                    ba:01:42:34:c2:72:30:b5:64:36:5a:d0:72:0b:ae:
                    3f:66:ce:cf:e8:59:ab:6a:42:03:96:0e:dc:bc:a6:
                    77:bd:18:a8:c3:37:04:8f:d0:ae:1f:94:6f:fd:8a:
                    39:73:3e:01:f5:76:60:69:d7:19:3f:4d:31:cb:f3:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F4:F1:52:3E:DB:D9:E1:6A:CE:51:41:19:E3:B4:A9:4B:F1:71:55
            X509v3 Authority Key Identifier:
                keyid:32:69:AA:22:0C:2F:E4:B6:EA:C6:51:E7:22:1A:7C:03:B8:81:42:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmmqIgwv5LbqxlHnIhp8A7iBQnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1D71/22BAAEC84E6A11F18A51049EA9833773/MmmqIgwv5LbqxlHnIhp8A7iBQnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e7:c9:e0:23:f1:4f:2b:18:ab:2d:02:47:ef:29:bf:fd:5a:
         b8:e8:1d:ee:4a:82:0d:9f:12:ba:18:5b:a8:cb:95:20:88:83:
         99:38:ff:93:e8:88:1f:35:aa:51:1b:8b:f0:aa:5f:e5:db:4d:
         4a:5e:20:b1:a6:a5:10:8a:26:66:88:65:65:08:58:48:41:53:
         3a:3f:60:89:6f:e6:ae:80:da:44:b7:c9:fe:2e:62:e9:54:0d:
         a1:c6:13:2d:30:35:39:39:4c:9f:ca:c3:ef:78:66:e4:ba:63:
         d4:39:6d:10:01:1a:37:e5:41:a8:f6:17:20:5a:d3:b3:67:e3:
         23:e4:b5:74:e2:74:cd:99:ed:b9:94:39:20:65:ef:ad:4a:1b:
         68:67:b4:d7:2a:d2:07:5b:eb:d7:40:45:2b:8f:5c:db:b6:87:
         32:12:25:94:2e:ed:50:59:08:0d:56:d4:f9:06:87:2b:99:55:
         ac:7a:bd:e9:22:0e:86:37:3b:3d:2c:e2:3e:96:2f:bc:ad:e6:
         5b:b4:45:7f:4b:79:fe:91:16:b1:5d:18:2a:cb:49:aa:a9:59:
         db:b1:41:64:0e:97:8c:66:d5:74:8c:3b:3b:69:17:a1:de:ea:
         f0:5c:ee:c2:1c:70:da:85:06:08:db:e8:3c:83:f5:7f:99:62:
         08:6a:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:39:48 2026 by rpki-client