Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
File:                     ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json)
Hash identifier:          I5d3ny3RwmDk1b/CfPB9LEotxZPP9YEPgv4D1nlJ1dg=
Subject key identifier:   15:7F:54:9C:A7:CB:06:D3:29:08:20:4D:5B:EA:C6:F8:A0:C1:7E:A3
Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
Certificate issuer:       /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Certificate serial:       71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
Manifest number:          6E
Signing time:             Thu 15 Oct 2026 09:06:25 +0000
Manifest this update:     Thu 15 Oct 2026 09:06:25 +0000
Manifest next update:     Thu 22 Oct 2026 09:06:25 +0000
Files and hashes:         1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: wmQO9EAy1ZbaJ13IV1DFy+GEW/TmijCRbkZQHt/vVp8=)
                          2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: aKiZx9bAHTnqGJOBAfW2TQZBMx8LZSsNmHEuGV9buHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
                          rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 09:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
        Validity
            Not Before: Oct 15 09:06:25 2026 GMT
            Not After : Oct 22 09:06:25 2026 GMT
        Subject: CN=6ad09791-6017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cc:f7:af:d9:e3:66:65:21:80:ea:16:ff:f0:
                    b5:98:85:2d:52:60:fe:dc:5a:53:8d:e9:54:b7:46:
                    15:6b:7c:fe:81:a3:1e:12:b4:06:4d:6f:cb:84:85:
                    bb:ae:ed:54:77:28:54:ba:66:3c:bc:b7:3f:5b:91:
                    c0:ac:cd:a9:7f:fc:d7:4d:47:83:18:a3:b2:de:c3:
                    a4:c2:f2:9e:13:19:ec:2d:85:d7:c3:1b:f5:6a:c5:
                    33:83:23:14:04:0f:28:01:a1:ae:7a:5a:10:61:63:
                    19:ec:c5:83:2b:73:cd:80:56:ba:6b:21:e2:cc:55:
                    29:79:ed:6b:02:5d:f0:68:8a:23:b5:31:b9:1e:15:
                    ee:7e:02:be:4b:d0:60:44:bd:48:e7:75:50:cf:6b:
                    06:1c:02:e5:b8:a2:93:49:fc:02:b0:ca:83:17:c5:
                    74:3e:9d:fe:c5:76:3e:b3:44:92:3a:78:11:32:64:
                    b8:d9:ea:11:d6:36:9c:d5:3f:7b:7e:09:b1:b6:63:
                    90:b9:4b:42:82:94:b1:f0:12:7e:01:51:73:0c:cb:
                    71:5c:12:1d:f1:95:c3:e2:49:29:d2:f7:69:f2:04:
                    80:1d:3b:74:6c:f9:a8:d3:24:57:fc:6c:27:76:df:
                    a9:f0:57:08:81:72:e7:3b:69:ff:31:28:fa:37:dc:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7F:54:9C:A7:CB:06:D3:29:08:20:4D:5B:EA:C6:F8:A0:C1:7E:A3
            X509v3 Authority Key Identifier:
                keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7c:2f:8d:06:a4:1e:cf:47:b8:5a:3e:a7:cf:66:70:96:f5:
         37:ef:70:fc:8e:91:33:ba:89:58:12:0b:6d:e4:bc:1f:8d:fb:
         c6:72:b5:e3:9a:ed:f1:5e:09:24:88:27:ea:2f:75:3c:57:ce:
         1b:04:31:02:b7:71:e1:3b:e2:70:1f:d8:2a:7d:63:47:43:25:
         39:c0:bd:b9:d1:0d:6b:f7:45:8b:43:80:aa:11:73:f4:d8:19:
         b2:6b:ed:e5:40:a3:1d:de:18:06:19:21:33:74:0b:11:30:61:
         ad:60:2b:ba:96:38:4d:b5:40:ec:7d:03:89:9c:81:29:1e:cf:
         bd:c0:7e:4b:47:b6:64:1b:09:2f:5c:02:b3:6c:f7:b1:fd:3e:
         18:af:b4:85:40:a1:e9:e2:01:f2:64:a7:43:a5:41:41:48:5e:
         7b:2c:d4:d3:55:10:f6:ad:35:74:ec:97:ec:37:51:b8:c3:e6:
         58:76:8c:33:14:51:a8:9c:e3:a7:92:ce:fc:67:66:3f:b3:7f:
         71:6a:8a:f2:a0:5f:48:dc:70:dd:72:ef:d0:0b:74:39:d1:c1:
         90:c0:22:2b:bf:a3:bb:16:ac:ec:e6:a1:2b:ce:8e:25:9c:e8:
         9e:f6:aa:1f:3a:3a:6c:34:9d:28:fe:f5:74:76:50:e5:7b:a2:
         fb:ae:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:07:35 2026 by rpki-client