Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
File:                     a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft (raw, json)
Hash identifier:          b38jo8Svkyr1OLwTae8KE/SkTTKvvCwnUy2rco9qxtM=
Subject key identifier:   2B:16:56:60:B7:7D:72:34:CD:E8:31:D9:07:1F:2B:A7:55:3B:56:5B
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Certificate issuer:       /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial:       157F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
Manifest number:          1568
Signing time:             Sat 26 Sep 2026 16:51:41 +0000
Manifest this update:     Sat 26 Sep 2026 16:51:41 +0000
Manifest next update:     Sat 03 Oct 2026 16:51:41 +0000
Files and hashes:         1: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl (hash: lyYn7iOu0OsBiviiUZ92+Vw8QmtrRUdt+ZpCLEvw2lI=)
                          2: F693F2689CB811EB97F77E14C4F9AE02.roa (hash: YMv0r7cgJCxpk4HSp8I/SfGyxuRnawMQX2mraCd5KmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:51:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5503 (0x157f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
        Validity
            Not Before: Sep 26 16:51:41 2026 GMT
            Not After : Oct  3 16:51:41 2026 GMT
        Subject: CN=6ab7f81d-cd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:98:9c:db:92:7f:5b:36:ce:77:89:56:f5:
                    c0:2c:27:63:cd:29:d0:80:b0:f2:1c:16:fe:48:43:
                    2c:8f:ff:11:ee:05:5c:0a:e9:14:a0:8e:53:a8:09:
                    6f:3c:68:b5:a1:9e:50:c5:5e:c0:c0:d5:b7:fe:96:
                    88:b3:3d:b4:70:1d:56:11:ac:a8:70:c1:81:60:ad:
                    4c:bc:85:9d:66:a4:c0:5e:44:cb:be:85:9f:fa:8d:
                    ab:b5:07:9a:ca:19:94:db:a6:94:02:f0:98:47:12:
                    19:7f:8d:d2:7f:9d:74:e0:ad:f9:2d:37:50:37:2a:
                    70:41:11:13:f5:ba:07:1d:d2:3b:49:e2:ec:0a:15:
                    1d:1a:d4:29:80:04:42:6f:b9:aa:84:5f:10:69:85:
                    70:a0:9a:66:32:8e:2a:14:d7:4a:e1:5e:07:a7:da:
                    92:04:b1:47:98:2e:b3:7b:1a:a2:e6:cd:9a:fe:9f:
                    01:88:dc:67:d0:70:e9:52:6b:ac:aa:39:13:9d:77:
                    77:ed:7a:26:01:3d:55:1c:0b:d4:89:3c:82:71:ed:
                    4f:7e:df:98:67:f2:0c:ad:bf:26:da:56:54:6e:8b:
                    b4:b3:16:46:c7:e9:16:a9:2a:63:81:d1:3d:18:02:
                    f9:19:c7:cc:dd:a4:d5:6b:3d:cd:22:22:c7:ac:5d:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:16:56:60:B7:7D:72:34:CD:E8:31:D9:07:1F:2B:A7:55:3B:56:5B
            X509v3 Authority Key Identifier:
                keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:b5:3f:f5:a7:25:b1:6a:44:20:cb:67:7f:fa:a3:45:46:80:
         b7:4f:4d:59:32:bc:58:3f:9a:3f:cb:5f:d0:0c:04:0a:00:8b:
         a4:ae:8f:1e:f0:65:79:46:69:09:8c:2f:13:24:cf:8c:a2:4d:
         27:e3:13:81:06:87:a7:83:9b:ea:9c:7b:c3:a7:d4:19:c4:72:
         13:dc:ea:5f:13:73:56:1c:dc:02:00:b7:e4:17:a5:f5:a3:c7:
         23:d0:0b:8d:9f:8c:44:98:8a:09:3c:bd:d2:b0:2b:c8:59:91:
         d2:83:36:e8:62:e5:ee:12:ab:83:8a:85:89:7a:9e:1b:80:97:
         c5:2c:1f:ba:ea:ce:aa:59:af:01:bc:f3:90:05:d6:57:ae:fa:
         7a:62:4c:1f:85:08:ec:3b:51:6a:b3:81:fa:b7:12:f5:75:b8:
         0f:c6:72:1f:57:00:4d:8f:67:87:aa:df:e2:03:21:32:7d:f4:
         af:2e:33:9c:01:39:0f:52:03:36:ff:b4:5c:3f:9b:11:e3:32:
         54:d4:21:6f:98:6f:b5:ff:a8:63:bb:bc:e5:a4:ea:f2:bf:a1:
         e0:d8:da:41:ae:34:62:f5:95:68:1a:f5:5e:d0:30:88:92:90:
         8f:be:2a:75:c1:23:38:a8:d2:3b:80:da:dd:92:9b:cb:5f:9c:
         15:8b:60:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:18:58 2026 by rpki-client