Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
File:                     _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json)
Hash identifier:          EifYmSchzi9fxb73k5fxg0mCAWCQncrklGxkG48Jbwo=
Subject key identifier:   60:2C:D3:26:75:EC:FC:37:0A:9A:4E:7F:B9:3C:A8:9E:D2:3D:1B:4F
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Certificate issuer:       /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial:       07B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
Manifest number:          077E
Signing time:             Tue 22 Sep 2026 21:26:46 +0000
Manifest this update:     Tue 22 Sep 2026 21:26:45 +0000
Manifest next update:     Tue 29 Sep 2026 21:26:45 +0000
Files and hashes:         1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: Chn9pmOxu8Y/1jXtmpVaFJ+pjnEWK+GOwMEVaLBkME4=)
                          2: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hmmC+8svUfRjvfcFg1OnJ8MEGlC71NOJ13MdkwrsIP4=)
                          3: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: 94GzLbfU9wvrOoMqnHUdOKE75uiqX+97F7gLUxAyt+c=)
                          4: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: imktHZ192rrh9lhy/38oX7N5C2b0tCeJYpVYjXO+0oM=)
                          5: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /uXsRHtQ85wtkXc8gIZyNG8uYla6OZlWtyeyihZtW9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
        Validity
            Not Before: Sep 22 21:26:45 2026 GMT
            Not After : Sep 29 21:26:45 2026 GMT
        Subject: CN=6ab2f296-f766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:14:35:67:b2:c8:36:29:d3:57:df:a0:51:
                    21:91:63:0a:5d:16:af:c7:6f:f9:12:aa:92:e3:83:
                    10:3f:3f:35:aa:4d:b1:ab:1c:5e:fa:9e:80:4a:e0:
                    dd:23:36:97:c3:53:d8:59:7e:ac:b7:21:0e:67:95:
                    a4:c9:4e:8d:5d:00:3f:d0:25:3b:34:5e:c3:44:ed:
                    16:78:a8:ac:a8:a5:bc:dd:95:f8:d7:53:c8:e9:02:
                    31:82:18:76:5f:65:96:a9:1a:bc:8d:f2:aa:b9:fe:
                    52:75:27:0b:17:56:da:3c:b3:c3:5a:8a:1d:c1:fb:
                    67:e8:58:10:c9:4d:29:86:96:00:68:4c:0a:2d:a3:
                    f9:10:8c:27:ae:68:8a:62:d8:86:17:49:0d:a2:4e:
                    57:1b:f8:24:72:97:72:f3:1d:58:69:26:f9:16:a6:
                    6e:80:23:5d:08:2b:5f:fc:57:32:de:44:aa:e9:5f:
                    57:97:81:e9:7d:59:ac:8b:74:2c:58:69:04:92:16:
                    1f:e2:c7:bf:d2:1b:4d:eb:b3:20:0f:4b:23:f0:ec:
                    29:1a:c6:8e:9e:bc:3b:90:46:7d:8f:93:a5:c3:22:
                    2f:ca:cf:ee:ee:26:16:4d:7d:d1:98:1d:83:85:2c:
                    65:45:fe:9c:0b:4b:0a:dd:57:85:3a:e1:d8:9d:94:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:D3:26:75:EC:FC:37:0A:9A:4E:7F:B9:3C:A8:9E:D2:3D:1B:4F
            X509v3 Authority Key Identifier:
                keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fe:d3:6a:8d:25:4f:a3:0e:46:fd:f8:00:a0:89:b5:55:10:
         48:f4:cf:ee:48:2c:2a:84:86:d7:5a:e5:d4:e5:0a:db:c1:64:
         ad:3d:35:7c:d2:3e:05:19:cd:65:96:08:4f:b7:de:d4:10:89:
         f5:ce:1f:89:c7:32:84:ee:a2:69:71:2f:1a:f1:96:e2:c6:2b:
         e3:ef:c6:cc:f2:78:45:48:f1:a4:31:0b:86:92:1e:fe:f4:03:
         35:47:bd:81:1f:88:6b:21:43:3b:a5:d6:f2:8a:63:24:58:0d:
         4a:69:16:fd:0f:8f:cf:9b:94:14:eb:33:7d:31:e5:cb:2e:59:
         9d:10:a4:31:7c:73:f2:16:57:bd:41:9b:dd:12:75:a6:fc:24:
         1e:65:0c:28:9e:e6:1f:ef:66:33:2b:66:28:6d:73:78:2d:41:
         5a:60:46:6e:95:4f:11:09:d4:04:2e:57:91:93:b5:34:3b:cd:
         97:f6:29:a4:1c:96:d0:c5:91:1a:6f:50:e5:ea:dd:57:ba:a6:
         9f:0e:9c:ae:01:fc:07:0c:b4:0a:30:98:ea:ae:9d:87:f8:53:
         36:ff:30:8b:63:57:17:5c:e5:ff:5d:d3:4f:71:87:7e:0b:d1:
         0c:dd:ed:4f:d8:ec:6d:24:2d:0a:10:f4:a5:c6:67:5a:7f:7a:
         e8:21:fe:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:18:44 2026 by rpki-client