Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
File:                     4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json)
Hash identifier:          hEioVego78LUlAhrwBMePItEtXxDHIyr5sfWdQZoDZc=
Subject key identifier:   12:AA:EE:68:24:8D:70:9B:37:EB:FC:4C:23:A5:42:77:93:68:6D:45
Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE
Certificate issuer:       /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
Certificate serial:       03C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
Manifest number:          03BC
Signing time:             Fri 25 Sep 2026 00:25:24 +0000
Manifest this update:     Fri 25 Sep 2026 00:25:24 +0000
Manifest next update:     Fri 02 Oct 2026 00:25:24 +0000
Files and hashes:         1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: coyCiZBfMuCIBEDA+hofdIIdILFkqTX3fbVqV1QIryg=)
                          2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: GXpK+pRpG+NlM+6tNcejzOKzO0QAHDY9K5I7GneuBi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl
                          rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965 (0x3c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
        Validity
            Not Before: Sep 25 00:25:24 2026 GMT
            Not After : Oct  2 00:25:24 2026 GMT
        Subject: CN=6ab5bf74-bba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:cc:4a:b3:83:b4:5e:15:77:f6:cc:39:20:
                    60:f3:95:21:bd:37:c7:f7:41:3d:c1:ad:5c:61:77:
                    25:19:4f:3a:24:e0:90:e0:2f:8d:99:19:6e:df:35:
                    af:ad:3d:6a:f1:19:c9:8c:1d:df:b1:04:bc:8d:41:
                    c3:17:00:c5:41:c3:5b:6f:1a:7c:e8:e8:a9:26:39:
                    bf:74:52:f6:0f:56:a8:e4:5f:98:85:39:7f:9a:10:
                    89:20:ae:ed:f2:17:8b:62:1c:62:11:56:93:51:ad:
                    a7:c2:a4:35:46:a7:99:2b:73:aa:c0:d2:92:9f:27:
                    44:97:d1:e4:8c:72:76:a7:87:cb:bc:80:78:87:4b:
                    3b:1a:c2:1c:98:f7:08:71:50:5a:ac:bd:a6:f0:8c:
                    15:4b:1b:a0:ca:67:24:e1:86:35:6c:38:b1:7b:7c:
                    78:45:06:65:02:a2:d9:dc:37:d9:60:66:de:51:3e:
                    26:fa:2c:7a:ab:5d:58:d7:af:c1:9e:fa:f5:16:27:
                    9b:6c:44:41:dc:de:75:42:3d:6f:5c:63:11:02:eb:
                    54:e6:0c:64:a4:6d:04:ee:da:bc:73:7f:ae:51:ca:
                    65:51:75:32:7e:64:47:24:37:49:3d:0e:42:ce:f3:
                    ba:49:b2:a2:e9:a7:1c:4c:e0:7b:49:81:53:55:c4:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AA:EE:68:24:8D:70:9B:37:EB:FC:4C:23:A5:42:77:93:68:6D:45
            X509v3 Authority Key Identifier:
                keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:00:75:f0:33:2a:65:f2:b3:d7:85:36:1a:0d:12:1f:8e:f5:
         b3:67:3b:b4:97:e2:54:e5:bb:82:56:05:cf:4b:ab:b4:40:ad:
         06:95:44:48:aa:3f:4e:0c:2f:13:1d:59:e5:9d:91:3f:5e:21:
         30:79:cd:6c:c6:3b:b1:7e:a4:9b:be:20:1a:5c:02:87:48:da:
         c6:2a:3c:1e:92:06:ad:7e:89:94:ca:fa:31:cb:57:33:1c:39:
         01:a3:f9:5f:b1:84:35:c6:40:cd:3b:5a:ef:7b:46:d1:51:ea:
         cd:cd:02:51:6d:78:c2:e8:ea:e2:94:b1:7c:a6:4c:85:46:ef:
         a2:85:ef:69:9a:80:bb:d1:2c:51:91:8e:ce:8d:93:c0:59:ff:
         bf:21:84:c3:47:40:cb:75:aa:69:32:31:f6:14:10:af:6d:30:
         16:56:a5:d2:b2:71:27:c7:f6:f1:ae:6c:a0:12:c7:cb:7c:01:
         cc:28:4d:b3:0e:f2:27:f3:93:62:14:32:66:7f:eb:89:a7:22:
         1d:94:7e:f2:7e:3c:70:c2:88:fe:8d:1a:7a:a1:19:44:46:c5:
         63:e9:bf:ab:1c:93:c7:56:9b:58:47:22:f5:37:ee:14:4a:34:
         4e:0e:8f:9f:c3:af:6f:a6:48:11:45:0d:08:d0:30:18:8e:b1:
         3c:47:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:12:36 2026 by rpki-client