Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
File:                     IadvO7gWz_58RmVVwrC-vJx7xW4.mft (raw, json)
Hash identifier:          p2LhdB8zPn6EUUJMNYlvr+axkIejjiGoDjNM84dReJM=
Subject key identifier:   6D:61:15:A2:50:A0:5F:93:03:F0:13:5B:64:6B:8D:26:C8:18:20:79
Authority key identifier: 21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E
Certificate issuer:       /CN=A91CA559/serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
Certificate serial:       05BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
Manifest number:          05AB
Signing time:             Mon 28 Sep 2026 23:18:23 +0000
Manifest this update:     Mon 28 Sep 2026 23:18:22 +0000
Manifest next update:     Mon 05 Oct 2026 23:18:22 +0000
Files and hashes:         1: IadvO7gWz_58RmVVwrC-vJx7xW4.crl (hash: rXYwOzlzRzdsJIlBHIgxUFWaLR8aHwHTT7jmEqTKioA=)
                          2: 45CC5B763C8311ECA86D031EC4F9AE02.roa (hash: Uw2FZTkHUIqrr7yagK8cTLFCJvmGH/94ekgNsNUOejg=)
                          3: 44D508E43C8311ECA86D031EC4F9AE02.roa (hash: rybthJdFuq/pPEywNNw6CY2xy0sjK2dGh2/15++J1U4=)
                          4: 5295B96E705F11F1BD79389570A30FBC.roa (hash: n1nOWdau1wyLHktQpIFU/BOos2aKf6aKxaZ+x98puqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl
                          rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 23:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA559, serialNumber=21A76F3BB816CFFE7C466555C2B0BEBC9C7BC56E
        Validity
            Not Before: Sep 28 23:18:22 2026 GMT
            Not After : Oct  5 23:18:22 2026 GMT
        Subject: CN=6abaf5bf-6fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:43:b5:62:bc:90:85:05:64:a3:64:b6:0b:
                    b5:65:91:cd:b9:de:cd:bf:f1:ea:21:9c:7e:e5:6b:
                    81:f1:99:51:fb:dc:ad:5b:a3:f6:84:04:cb:f1:29:
                    36:3f:86:72:0f:88:c8:09:39:a2:b3:2b:de:94:a0:
                    1a:34:08:79:38:e1:2d:5d:04:97:c0:98:68:94:12:
                    f9:3c:b6:a4:8e:5d:d7:a7:f9:b7:99:e0:72:b7:13:
                    9b:5b:40:44:ba:96:16:1e:21:ec:56:c8:ba:29:3b:
                    a1:a2:71:0c:0f:48:4d:0e:ec:68:c9:3e:5d:79:f5:
                    fb:bb:80:bd:d9:3e:66:13:4b:6f:07:b5:17:0e:8c:
                    e3:11:59:0f:92:7f:ce:2a:00:6a:1a:3e:db:6c:04:
                    a0:c3:2d:b3:12:f8:11:d6:ad:e7:ae:d2:0c:62:a3:
                    0f:f5:71:b1:46:59:d4:97:72:6c:3f:ed:b9:74:3e:
                    dd:10:08:c8:63:ff:50:e2:0c:5f:ee:09:e0:3e:42:
                    09:a4:df:88:50:c3:a1:bc:a7:84:39:88:19:6b:65:
                    84:78:5d:40:05:09:53:c3:b8:e9:44:50:17:08:63:
                    8e:9d:4c:1b:f3:49:63:58:b8:99:cb:d7:1b:bd:8f:
                    00:ca:b4:da:dd:fb:f1:72:60:a6:e6:94:0c:7c:91:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:61:15:A2:50:A0:5F:93:03:F0:13:5B:64:6B:8D:26:C8:18:20:79
            X509v3 Authority Key Identifier:
                keyid:21:A7:6F:3B:B8:16:CF:FE:7C:46:65:55:C2:B0:BE:BC:9C:7B:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IadvO7gWz_58RmVVwrC-vJx7xW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA559/AAC34F4630C411EC99F2F66CC4F9AE02/IadvO7gWz_58RmVVwrC-vJx7xW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ad:4b:da:5d:b3:80:4c:8b:7d:ad:dd:f5:70:4d:d0:c0:34:
         3a:5d:5d:51:8d:f2:a8:bb:fc:82:55:14:56:10:ff:b4:e7:58:
         c5:f7:99:19:9c:bf:ef:79:f3:d7:89:93:9c:f4:10:d6:1c:2f:
         e7:c2:b1:59:cc:31:1b:13:d9:b7:60:fc:b8:39:5a:86:45:18:
         68:67:64:ac:26:ae:d7:8f:ce:d9:8f:01:2f:3c:66:a0:9b:14:
         8d:ce:e5:58:54:8f:bd:29:af:a5:6d:82:39:44:41:0d:44:1f:
         dd:27:c2:bf:69:59:8d:b1:19:dc:a4:30:aa:38:d1:3e:be:97:
         d3:98:f8:ec:25:aa:a3:06:f3:2a:ab:59:46:7c:34:da:8d:99:
         23:09:c5:06:d7:5a:71:08:b0:7d:ae:32:8e:58:5f:92:35:37:
         f5:5d:ce:ed:e1:e7:2a:02:78:8f:ff:6c:1a:8a:b1:50:37:4a:
         2b:f5:4c:e1:ec:c1:e5:7e:b3:92:27:c8:73:10:c4:c3:28:bc:
         fe:8a:74:b5:fa:41:4b:46:df:c6:a2:36:a7:56:a7:93:44:f1:
         8e:05:f8:2e:a3:36:3a:c1:1e:49:b9:5c:54:75:ae:08:9a:5f:
         aa:5e:81:89:62:25:c5:79:ae:dc:65:a3:0a:bf:fc:2e:3c:70:
         da:0e:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:11:50 2026 by rpki-client