Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft
File:                     CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft (raw, json)
Hash identifier:          lEkvo7X/nLkq4xprxE5kl1I5l9X33KITY3+xbMpZhKo=
Subject key identifier:   87:06:52:92:F8:B3:11:DE:90:D0:F5:06:97:15:81:FF:45:D8:B6:76
Authority key identifier: 0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F
Certificate issuer:       /CN=A91EA23A/serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft
Manifest number:          4E
Signing time:             Sun 11 Oct 2026 09:02:55 +0000
Manifest this update:     Sun 11 Oct 2026 09:02:55 +0000
Manifest next update:     Sun 18 Oct 2026 09:02:55 +0000
Files and hashes:         1: CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl (hash: 3t1BNyTKhQyhyH3boOdbk1oysaMjTx+os0QtpHCUdMk=)
                          2: 28140BB0B0E111F19AD90CA83211F970.roa (hash: fjC18ilBLVBqO47F+D+SM6LDqi09QTp22sC4WXLz5ik=)
                          3: A08CACAC631411F19BD88A887D47A888.roa (hash: cui5kt/ao4ZSMnSmpM+vFQ/6IaNn7ud21wvDYaj2E2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl
                          rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:11:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA23A, serialNumber=0A25D1F321E50A0BCAC7C1D07F319397A391013F
        Validity
            Not Before: Oct 11 09:02:55 2026 GMT
            Not After : Oct 18 09:02:55 2026 GMT
        Subject: CN=6acb50bf-d407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:90:33:bf:8d:90:e1:d1:54:d2:37:86:45:
                    c5:51:a8:b3:c4:a5:82:49:e0:16:15:82:d2:78:f4:
                    12:54:f5:31:28:d5:92:3f:a4:4d:cf:a1:ad:f0:dc:
                    7e:00:d6:50:45:15:63:02:a2:58:13:8e:b5:12:4d:
                    bd:1e:6a:16:a2:b0:8b:20:90:ee:be:a0:f2:35:8a:
                    dc:7c:68:cb:53:a6:20:06:62:63:8e:03:a4:d9:82:
                    3c:66:2d:94:1e:32:db:60:7e:72:3a:98:ec:57:8b:
                    4e:47:13:28:e4:63:b3:82:53:80:15:54:18:90:ff:
                    d4:4e:57:1f:8f:b8:c6:05:f0:05:4c:ee:63:61:5d:
                    12:61:73:23:09:81:82:af:c0:68:f2:02:26:d5:8c:
                    b9:7a:51:fb:ab:d7:ef:5a:f2:2c:39:70:8f:54:62:
                    ad:e8:85:fc:97:49:28:da:25:ab:97:26:ac:cb:f8:
                    72:a0:4b:c8:79:69:7c:2d:5f:36:33:68:cc:9d:37:
                    ef:e9:56:1d:49:6c:98:f3:df:73:6a:5d:1e:0f:da:
                    b7:a2:a1:55:69:20:0c:04:93:b7:5c:8a:7c:8a:5a:
                    9b:0b:84:70:44:3c:1b:a3:da:5a:22:40:53:5b:3f:
                    a8:d8:21:c4:2b:8b:55:9f:55:9c:94:79:c8:9e:f9:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:06:52:92:F8:B3:11:DE:90:D0:F5:06:97:15:81:FF:45:D8:B6:76
            X509v3 Authority Key Identifier:
                keyid:0A:25:D1:F3:21:E5:0A:0B:CA:C7:C1:D0:7F:31:93:97:A3:91:01:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiXR8yHlCgvKx8HQfzGTl6ORAT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA23A/8D59A2E4582311F18D7F2C9EA7833773/CiXR8yHlCgvKx8HQfzGTl6ORAT8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:81:82:43:67:0c:d6:7b:11:b4:a5:c2:0a:c5:77:a0:ac:3f:
         57:e0:a9:bc:6a:7d:62:22:08:62:14:7c:59:28:c8:b8:eb:d9:
         49:a6:21:94:3d:05:2c:af:4c:d2:97:5e:e7:2d:86:b2:d6:2e:
         e5:cc:d0:0c:1d:48:61:5c:71:b2:e4:61:48:25:4c:4b:ce:40:
         a4:66:38:88:e9:78:a8:cf:ed:6a:13:ee:3c:cd:0c:12:d9:d3:
         ef:0d:4d:90:60:06:82:1b:cf:e1:98:45:dd:d5:74:47:90:bf:
         1a:7a:eb:18:c9:0c:a7:94:ae:a5:85:7c:ca:c8:f1:88:5d:c0:
         38:ee:0e:43:1a:e8:eb:93:29:fe:52:c8:01:5d:f7:33:64:08:
         78:67:c5:5a:09:0f:6b:65:e0:1b:3f:d8:b3:00:16:e3:7a:58:
         8b:dd:a6:32:04:63:ce:88:ef:3f:f7:b3:2c:37:70:16:22:ac:
         83:b8:f0:48:4a:70:a9:6b:0f:f7:11:2f:4b:87:2b:5a:c7:c5:
         9c:10:0d:cf:de:83:9e:a9:4e:8b:fc:5b:a3:4e:08:9c:4a:bb:
         4f:2f:c8:b7:b2:1f:ce:ed:8b:e2:97:93:3d:8e:bc:6a:26:89:
         73:68:a9:73:32:25:1f:a5:d2:27:eb:77:4f:5c:71:df:d6:b9:
         21:11:71:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:18:29 2026 by rpki-client