Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
File:                     5TfQw0j9fcSfX8OwBmoxxYT64as.mft (raw, json)
Hash identifier:          1/2GPA0beFD7h6bcTqsWKOjX38c2gKubJWJU/vpzPEo=
Subject key identifier:   F0:33:42:EF:CF:34:F6:D9:67:57:3F:BE:33:00:BF:F7:90:5C:98:DC
Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB
Certificate issuer:       /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
Certificate serial:       0D6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
Manifest number:          0D51
Signing time:             Tue 22 Sep 2026 18:02:38 +0000
Manifest this update:     Tue 22 Sep 2026 18:02:37 +0000
Manifest next update:     Tue 29 Sep 2026 18:02:37 +0000
Files and hashes:         1: 5TfQw0j9fcSfX8OwBmoxxYT64as.crl (hash: WMnZnfaezNchju0604GC/qCwIuwnCiWo1whvz/CMZoI=)
                          2: 2154A9349EC011F1B15E06384311F970.roa (hash: IaN1CbJjVBbSbEXHP5CyiCsaIkx1jFd1E5bqJGTrPXY=)
                          3: 974869042C2A11F19F1796939D833773.roa (hash: dNxf/Mml8OnQdOuNplaosydIcb29Iuv8OpEtTrmU0KU=)
                          4: 3EE29A9C9EC011F1B8C3B83E4311F970.roa (hash: AFLjAgw1dWKibG08OoNz6L3i0I2Mmj7usG10lfqsncI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl
                          rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3437 (0xd6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB
        Validity
            Not Before: Sep 22 18:02:37 2026 GMT
            Not After : Sep 29 18:02:37 2026 GMT
        Subject: CN=6ab2c2be-a499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:43:7b:d0:83:9f:7c:26:20:85:42:74:e4:
                    1b:a1:62:95:66:c6:c7:32:f8:73:cc:e2:a7:34:8b:
                    0a:0f:44:bf:49:12:10:28:a4:b6:dd:5c:22:7e:e5:
                    b2:15:e3:94:e3:1c:e8:45:a1:68:64:16:33:1e:fc:
                    c4:ad:ad:12:6e:7d:84:2b:29:4b:9a:ae:e1:e9:c2:
                    c4:f6:5c:5f:60:2c:ef:2a:22:09:6d:2d:14:52:d3:
                    76:29:04:f8:88:2b:60:47:3e:ab:f9:9c:7f:80:a3:
                    e9:97:52:95:11:2f:f4:16:4f:7d:63:18:27:e8:51:
                    d8:bf:e7:a1:8c:3e:4e:97:20:8a:bd:bf:2d:01:e2:
                    73:b7:bc:d5:f6:20:f6:2f:69:21:8b:07:5f:27:d9:
                    a8:aa:59:70:11:03:da:d4:99:32:bd:55:32:0d:88:
                    80:41:9d:c3:bd:12:4c:43:07:87:be:3d:b8:a1:43:
                    7f:02:66:bf:17:f3:39:1a:58:70:6d:11:14:39:1e:
                    ff:8a:b9:64:9e:c0:80:44:c3:4c:77:da:71:84:70:
                    ee:e1:5d:3b:c1:fe:30:86:f8:b1:1c:a6:af:ea:a2:
                    55:33:6e:2b:83:3e:35:c0:36:88:ed:60:d2:74:95:
                    37:d1:cd:ef:af:0a:23:66:2a:d6:b5:a5:66:89:b6:
                    ae:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:33:42:EF:CF:34:F6:D9:67:57:3F:BE:33:00:BF:F7:90:5C:98:DC
            X509v3 Authority Key Identifier:
                keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6b:7a:e5:11:f8:67:cf:cb:bf:ab:fd:ea:a8:31:74:d9:0f:
         0e:4b:0a:65:39:5a:e2:3b:9b:ed:70:1a:21:4c:a7:5f:ab:ce:
         95:7f:55:a5:3f:40:0b:2c:98:a6:b1:f9:92:7b:12:4a:dd:86:
         8a:e5:ec:d4:04:b2:37:4f:b4:cb:ec:7d:e4:2a:ad:d5:6e:d2:
         e0:ed:c3:10:5b:7e:44:d8:cb:6d:f5:8b:98:73:b8:1e:69:4b:
         37:9c:73:7a:bf:62:81:c2:ef:e5:1d:3a:40:08:7f:28:8b:85:
         6f:7d:58:13:e4:07:5a:03:48:2d:21:b1:be:fa:8a:77:4e:69:
         50:f6:50:76:dc:7e:14:7d:da:c0:66:94:6d:b5:e3:15:ea:35:
         5c:90:cd:bf:eb:98:61:9f:23:7c:88:c1:26:c2:29:94:3a:8c:
         99:17:03:93:6d:17:3f:cf:22:8d:86:2a:2e:e4:62:5c:cf:6e:
         6f:01:69:10:69:64:41:90:c4:cc:24:cf:d7:e2:ab:40:0f:02:
         9d:cd:cf:dd:c3:04:08:af:f2:50:03:59:ae:f8:44:34:4c:bc:
         5e:ce:64:a9:61:5e:f2:cb:c9:7e:f2:1c:4d:3b:ec:85:c3:d9:
         0c:5b:44:0c:72:9d:43:85:23:3e:f2:46:41:36:91:e6:f0:1d:
         3a:1b:5a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:27:10 2026 by rpki-client