Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
File:                     SDhChq65tguzQoR_K6dhL4TbQ7I.mft (raw, json)
Hash identifier:          JvSnrybYzgdCXx9ohm/L4aSNDrIOsFOvwUVBLukJqVk=
Subject key identifier:   D5:08:A5:A8:A6:17:04:7D:A2:4E:D3:D2:80:18:DD:5A:B3:D1:AA:13
Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2
Certificate issuer:       /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
Manifest number:          85
Signing time:             Sat 03 Oct 2026 08:32:29 +0000
Manifest this update:     Sat 03 Oct 2026 08:32:28 +0000
Manifest next update:     Sat 10 Oct 2026 08:32:28 +0000
Files and hashes:         1: SDhChq65tguzQoR_K6dhL4TbQ7I.crl (hash: iXH4U9qm9h5IC5vND8UyzozPmgi9G9kCFa0O1Mhk9es=)
                          2: F85CEC2417BC11F1A40B39FC393D8C67.roa (hash: Lk3LIKj/GiDK4MdOByMKxwMl2tprlDsVLGGIsH3ZkXM=)
                          3: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (hash: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl
                          rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2
        Validity
            Not Before: Oct  3 08:32:28 2026 GMT
            Not After : Oct 10 08:32:28 2026 GMT
        Subject: CN=6ac0bd9c-a72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:fc:63:b6:5a:0b:a3:ad:ab:cd:5c:d9:da:
                    ba:70:f5:91:0c:24:f6:75:e1:2a:18:f1:b2:15:4a:
                    4a:7f:9f:c2:48:83:2b:66:ce:f0:a3:af:f4:f2:15:
                    eb:af:69:19:32:26:dd:10:94:f6:89:cb:98:4e:a6:
                    b6:01:45:b9:0b:29:c3:f9:79:dc:4d:88:9a:f8:72:
                    56:a7:f4:0b:f8:0a:b6:db:de:df:5d:6f:c0:bd:08:
                    21:60:d5:92:01:d9:73:b5:0a:54:19:86:0a:64:f5:
                    8c:e0:09:56:49:00:4e:d0:ef:e1:ce:4f:a9:32:7b:
                    2e:4e:78:8b:a7:83:ab:cf:6d:81:31:48:53:30:aa:
                    52:28:68:1e:fd:84:31:1d:91:5f:74:9b:41:b7:c3:
                    f9:5e:60:12:24:fe:8b:36:ef:6f:4a:2f:1c:7c:f5:
                    34:3f:13:c5:d0:4a:42:0c:4c:3f:1f:fc:9b:44:7e:
                    23:a1:09:1c:d9:94:36:e0:b2:2d:3c:97:56:d7:e4:
                    1f:06:45:79:47:ac:3f:a1:fb:d5:59:d5:40:99:98:
                    89:48:43:bd:90:fe:46:73:d8:fe:f0:c2:94:c0:c2:
                    ca:d1:62:67:7f:c8:a6:0b:8f:87:4e:40:23:d0:21:
                    65:71:30:20:d6:7c:d2:71:94:0d:aa:09:85:8f:71:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:08:A5:A8:A6:17:04:7D:A2:4E:D3:D2:80:18:DD:5A:B3:D1:AA:13
            X509v3 Authority Key Identifier:
                keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:e7:8c:ca:a6:d7:e4:d0:c5:0c:3a:da:fd:3d:8b:5b:f2:
         91:a6:68:df:63:59:7a:f0:0c:fd:55:c3:80:d9:19:7d:cc:58:
         a9:5c:0c:c3:d8:ff:15:6f:45:07:33:e8:91:ff:29:3f:ea:76:
         ca:64:24:c0:4f:90:9e:a7:24:fe:2c:1c:49:68:66:d2:ac:af:
         db:ab:e6:5b:64:28:3e:b8:c9:8b:04:6e:b0:13:b8:a9:8b:54:
         eb:9f:eb:50:15:d7:9b:f2:a9:02:af:24:7e:b7:e5:b2:3b:b2:
         55:87:05:b6:02:6f:4a:38:55:74:3e:bd:34:80:cf:36:ed:a3:
         5d:96:95:17:d8:77:bc:2d:86:79:4e:3c:b7:87:4e:4b:fb:15:
         7d:69:57:9c:70:fb:9d:4a:9b:c8:43:3e:6e:de:34:e7:93:7e:
         58:38:5f:cc:82:f2:5b:47:85:89:94:22:63:b3:40:45:5e:33:
         90:c9:eb:bc:b4:e9:d2:63:dc:b2:05:c0:66:c0:38:fc:ea:d3:
         69:76:b3:20:94:e0:45:cd:e8:05:a1:8a:58:aa:18:6e:bc:22:
         b9:2c:3d:5e:29:d1:19:ba:26:ae:71:1e:c3:10:a1:ca:55:ee:
         7a:43:f9:fb:cb:20:58:31:75:48:b3:a5:b6:b9:d4:a6:03:a0:
         3a:d8:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:22:27 2026 by rpki-client