Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
File:                     inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json)
Hash identifier:          hHwbqHRVc8ZM3uqaF8lqfR72owlvfoC9Ri0zx8D9JFo=
Subject key identifier:   5B:76:88:F6:D3:C6:42:0F:EF:4E:3B:51:D1:C3:6A:FF:57:93:10:DD
Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45
Certificate issuer:       /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
Certificate serial:       1D12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
Manifest number:          1CEE
Signing time:             Sat 26 Sep 2026 16:13:02 +0000
Manifest this update:     Sat 26 Sep 2026 16:13:02 +0000
Manifest next update:     Sat 03 Oct 2026 16:13:02 +0000
Files and hashes:         1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: 9PnEDktaaOIuUDXLpuawuazzw/wz4UpwrkFmu6UHEHk=)
                          2: 5A927B8088BA11F0951D1687C4F9AE02.roa (hash: g0+QvgpXruscePL1SLKMUlUezN1b9BZazs+tciuutXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl
                          rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7442 (0x1d12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
        Validity
            Not Before: Sep 26 16:13:02 2026 GMT
            Not After : Oct  3 16:13:02 2026 GMT
        Subject: CN=6ab7ef0e-c6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:55:f0:68:e7:ab:47:9b:79:12:49:38:44:
                    22:1c:d9:32:4e:74:00:e4:2f:64:a1:ed:cd:85:08:
                    5f:2a:eb:4b:8c:a3:de:21:6c:88:57:ec:4f:f0:c7:
                    b4:59:51:a1:98:5f:ea:a0:b7:38:f8:95:81:85:ca:
                    5e:fd:be:1b:3c:a7:01:57:78:d7:99:0c:eb:db:e0:
                    1c:2f:4c:e2:e1:b3:de:83:92:f2:04:15:fe:4e:e3:
                    7f:26:22:f6:0d:bb:43:35:24:43:b9:a9:71:92:72:
                    b1:c2:1d:76:db:d0:bc:1c:73:e0:ff:c3:10:d0:bd:
                    97:e6:c5:fe:19:af:f5:65:87:e5:8a:48:9b:02:89:
                    69:16:72:0f:38:cd:4d:2d:f2:e7:9d:09:c7:eb:bd:
                    2e:15:3b:24:51:52:a5:4d:6f:71:e2:53:34:f5:32:
                    48:5c:aa:49:fe:d6:90:08:b4:94:2b:c3:10:41:9b:
                    4f:c8:8f:99:9d:1b:a5:ea:e6:18:c1:73:0d:57:31:
                    34:54:62:3c:69:6d:25:a5:6a:c0:23:28:a5:7e:0f:
                    72:9a:99:a2:e2:f0:b9:7f:fe:fc:1f:72:58:34:00:
                    eb:2e:9c:80:00:19:a1:df:fd:ba:b6:67:20:21:b8:
                    d1:60:a8:d7:1c:84:0b:4b:0a:23:30:8c:33:24:93:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:76:88:F6:D3:C6:42:0F:EF:4E:3B:51:D1:C3:6A:FF:57:93:10:DD
            X509v3 Authority Key Identifier:
                keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4c:5a:84:15:a6:8c:b6:1e:2c:b8:52:58:84:f7:2c:6e:6c:
         97:0a:3e:af:9d:b3:45:ae:4e:1e:f1:dc:b8:dc:27:94:7e:d3:
         7a:0c:e9:19:ed:37:fd:15:8a:04:b4:7d:b3:9d:fe:73:65:ea:
         58:00:6c:a5:ba:bc:ae:c8:e3:42:5d:e2:e7:fc:c0:cd:5d:85:
         4b:96:f7:a0:bc:36:c6:a7:7f:72:b4:d0:08:fe:d6:ab:c8:c0:
         42:3a:d6:d8:cb:36:6a:a5:1c:37:9b:69:47:33:6b:74:55:69:
         c8:c1:a6:11:ab:dd:63:5a:e5:0b:87:9c:a3:48:5f:71:7b:b7:
         4d:8e:ff:60:6d:9a:e1:54:51:e1:00:f5:c9:ec:da:03:b1:ad:
         2d:0a:fc:29:1b:75:54:cc:eb:2a:ff:66:12:e5:c0:6c:a7:76:
         92:5f:c2:36:ea:f3:55:1f:76:2a:7d:ca:ed:e3:25:2e:4b:c0:
         8f:60:44:f0:3c:9e:08:f3:26:30:97:33:f8:81:1c:04:8e:e7:
         a6:f4:a4:34:1a:32:57:81:3d:06:f1:ae:b9:79:87:59:77:11:
         f7:10:d7:fc:70:b9:06:e0:60:ee:45:10:0e:60:f4:d4:f3:25:
         65:8e:40:be:4c:3c:39:40:b8:8a:9d:1d:61:a0:d7:ea:82:a9:
         a6:2a:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:05:03 2026 by rpki-client