Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
File:                     eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json)
Hash identifier:          x2nY46M1lKkUQKofCi5DRuWFeWIxGPyK0DjxDIHyleI=
Subject key identifier:   73:6A:B7:C6:7D:0E:CE:BF:EF:92:24:E7:28:24:F9:26:8C:8D:BE:20
Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
Certificate issuer:       /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
Manifest number:          0158
Signing time:             Wed 23 Sep 2026 04:57:26 +0000
Manifest this update:     Wed 23 Sep 2026 04:57:25 +0000
Manifest next update:     Wed 30 Sep 2026 04:57:25 +0000
Files and hashes:         1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: 2O/3Fw2XFrm84avsrS0BoP7jdpfiaoerNPr2GYmSMW0=)
                          2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: pLovfOrhsSDToSpDuMZH/wCfyLBbh6arUaNSLjztFog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl
                          rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2C38, serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
        Validity
            Not Before: Sep 23 04:57:25 2026 GMT
            Not After : Sep 30 04:57:25 2026 GMT
        Subject: CN=6ab35c36-b632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:57:1c:5a:ab:45:15:50:1b:23:90:30:fd:
                    81:f2:63:f2:ca:cd:e1:92:68:88:10:ef:de:cf:8d:
                    eb:5b:46:c9:f8:bd:1e:20:1d:00:0b:04:96:f3:5e:
                    73:7f:b5:2e:ce:61:ae:d6:51:f1:15:7d:fc:c2:ec:
                    76:b9:8b:2d:d7:39:ff:1e:b1:20:e2:13:f2:2c:0b:
                    74:54:41:2f:08:76:e7:ef:d6:98:e0:a1:be:11:68:
                    c7:d8:84:0a:bc:c6:db:2c:5b:00:eb:a5:05:5a:d9:
                    a1:75:92:1f:08:3c:09:cc:02:98:81:5e:c1:4d:c8:
                    cd:80:4b:51:56:ad:a8:33:6b:03:7e:ed:7d:dd:08:
                    81:af:87:ad:39:dd:e7:87:3f:31:f8:a2:9d:dc:c2:
                    ca:33:8b:09:eb:a4:01:91:88:9f:9c:05:71:4f:35:
                    f5:2f:41:d3:09:b7:90:2c:e4:a3:9e:2b:01:69:41:
                    59:5e:e8:07:1c:22:f8:03:31:84:be:88:d6:42:d9:
                    9b:1c:94:53:3a:3d:bc:9a:92:39:47:cf:5e:ff:72:
                    a9:00:b7:bb:b1:4f:13:c8:57:c8:9c:db:23:8b:b7:
                    35:55:55:4c:5f:b0:08:ea:49:4c:72:c4:a5:fe:41:
                    86:34:0d:63:ee:41:c0:4a:c7:5f:f2:cb:61:4b:7e:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6A:B7:C6:7D:0E:CE:BF:EF:92:24:E7:28:24:F9:26:8C:8D:BE:20
            X509v3 Authority Key Identifier:
                keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:82:11:94:02:60:db:e9:7b:f5:b6:0d:0d:8d:85:fb:42:5d:
         8f:5e:c9:a7:6e:b8:c9:6d:e4:bf:f6:62:86:08:3e:96:9e:3b:
         66:4d:56:ab:20:df:f9:78:65:5d:11:16:1f:e5:45:d0:e6:33:
         18:dc:a5:1a:16:bd:26:ab:a8:72:88:4c:1e:fb:a2:89:a1:0d:
         d6:7e:19:50:b0:c5:ae:20:e0:10:98:8b:90:d0:56:3c:37:6f:
         e6:56:07:12:ae:f6:b1:6b:28:0b:58:fd:f6:a2:95:b2:c2:4d:
         ef:4b:a9:d6:35:8c:28:6f:97:d7:8a:d4:34:a4:6a:aa:5f:8b:
         51:32:76:b9:da:8c:a2:a1:38:32:58:14:99:d9:18:73:e6:cf:
         90:85:d4:2c:20:5f:ee:27:f6:c2:5b:ec:99:d6:7f:7d:44:53:
         ae:e5:2a:97:c7:20:0e:6d:5a:2f:71:9a:d2:86:cd:3f:2c:33:
         f7:82:de:da:9f:8b:67:aa:96:72:ad:c1:be:71:0f:00:d9:6d:
         42:85:9c:5f:ba:c5:c7:85:e8:4a:de:2e:26:c5:f2:2e:84:c3:
         b1:8d:df:99:06:2d:92:60:17:80:96:86:9e:b2:ed:13:be:b5:
         c5:f4:df:8d:33:c7:a8:e1:ae:c5:1d:de:7f:24:7a:de:cd:34:
         88:e5:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:31:20 2026 by rpki-client