Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          cYgZocOTG9SmmAe50NHXP5GEkexBIkMyQ8ZH6kSw4Sc=
Subject key identifier:   90:E9:AC:76:6D:01:FB:00:9C:3A:36:FA:F6:CB:CC:9E:09:ED:AB:B4
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1C2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1BD8
Signing time:             Sat 26 Sep 2026 16:17:22 +0000
Manifest this update:     Sat 26 Sep 2026 16:17:22 +0000
Manifest next update:     Sat 03 Oct 2026 16:17:22 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: HaeJIUVj+fWt8EG1m5D0kCHnQoS8WtucaCSvFURLYQI=)
                          2: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: ZaZYPfA17ML/f/J4P82QVyDEPcDzxxZaNFjB0O9tVyE=)
                          3: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: 1NxyYZi8z+4zSdOTPHU5FWVo8GDquYcWL1OwjVPiKNg=)
                          4: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: AD+/rm2MmNUok2HarnjytNgvmBO5YkdTWhvT8ie3l4U=)
                          5: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: W8hlVsC5I0VPPg2kjR6TpTtecD0WvUvNvC2e5sJ/hIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7214 (0x1c2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Sep 26 16:17:22 2026 GMT
            Not After : Oct  3 16:17:22 2026 GMT
        Subject: CN=6ab7f012-87ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:87:fc:ac:fc:0c:36:30:4f:bc:4d:3b:79:b0:
                    91:fd:6f:e9:18:81:b0:83:96:ca:81:71:c6:dc:b0:
                    21:e7:f0:ca:14:ab:ec:05:2b:c7:4f:7f:7b:8c:31:
                    a2:5b:86:f3:bd:29:4b:d0:c5:30:32:14:28:38:fe:
                    fa:9b:24:49:ae:77:84:b3:2f:ac:4f:c2:51:ff:9e:
                    bf:bf:24:9b:c9:ad:a5:fc:58:08:09:03:36:ad:21:
                    48:ac:a5:4d:b5:45:1e:c6:0d:cc:e6:4a:09:24:06:
                    ce:56:51:d7:97:fc:b7:0f:3d:19:99:b7:3d:e1:2b:
                    92:e6:4a:ec:ac:26:7e:b8:66:7d:41:6b:29:94:fe:
                    d4:f5:b8:3c:3a:b7:b9:51:81:50:88:36:ee:8f:ce:
                    5e:75:94:ae:74:ed:e3:a2:09:51:6a:3e:e0:66:1e:
                    f2:39:33:18:26:1b:11:53:17:86:0e:b3:0f:e7:e8:
                    a2:6b:f9:c7:5a:e2:bb:a5:94:48:5c:12:b3:d4:be:
                    f9:10:70:1d:7a:40:f2:60:95:65:9d:77:9d:b0:e8:
                    13:67:9d:78:26:d7:32:c9:33:40:b1:c3:b3:dc:1e:
                    55:a9:e2:db:69:b5:4c:98:b1:bf:62:e3:f2:fc:d5:
                    7d:ae:e1:aa:65:c7:73:b5:08:7c:9d:8b:74:ee:70:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E9:AC:76:6D:01:FB:00:9C:3A:36:FA:F6:CB:CC:9E:09:ED:AB:B4
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9a:6d:4f:80:6e:b3:74:a7:dc:c2:70:ff:7d:cd:e0:3c:7a:
         d0:56:c8:95:2d:0b:df:6e:61:59:dc:90:2c:b0:2c:f6:70:3c:
         dd:a3:4a:af:a0:3e:cf:a8:de:5d:c2:2e:10:ed:aa:44:50:94:
         6b:fa:56:32:8a:23:d7:23:5e:5f:cd:bd:d5:0f:ac:ea:2b:a6:
         65:c6:74:19:d9:6e:1c:e2:56:70:c0:25:bd:4e:01:ce:8c:ad:
         30:ac:cf:e5:f5:45:3f:a6:0f:f9:b5:d1:1d:4f:cf:55:5e:20:
         84:7a:a0:a7:47:30:3b:3d:58:d4:07:1a:b1:69:09:99:60:6b:
         8c:a8:01:73:e5:48:8d:27:98:04:7d:70:9b:7a:72:c0:fe:8d:
         7b:a2:73:47:12:ea:ce:92:be:85:25:e8:5c:bd:d0:4e:73:1b:
         57:38:20:f0:16:04:36:3e:6f:40:c6:89:70:07:76:56:7b:32:
         de:27:86:ab:82:2a:fe:17:82:51:4e:94:1a:7b:8c:f0:22:c1:
         c8:9f:a7:a9:bd:80:3c:22:6b:d7:94:2a:88:bc:25:06:f2:6e:
         c5:27:e0:73:68:d2:0d:ee:51:b9:26:eb:e1:28:1d:de:0d:8b:
         0c:85:0f:cb:62:ab:ab:c8:89:15:51:5d:7f:07:5b:06:94:7b:
         05:61:ef:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:51:12 2026 by rpki-client