Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
File:                     dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft (raw, json)
Hash identifier:          M40yIbTfuOL0wtK5vn7+NAgcoUTsxk5PjKHukhRsnxQ=
Subject key identifier:   04:5E:19:66:6D:A1:5A:29:84:3A:B6:44:94:09:51:FA:61:6C:0E:91
Authority key identifier: 74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49
Certificate issuer:       /CN=A91249C2/serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
Manifest number:          FB
Signing time:             Wed 07 Oct 2026 06:47:05 +0000
Manifest this update:     Wed 07 Oct 2026 06:47:05 +0000
Manifest next update:     Wed 14 Oct 2026 06:47:05 +0000
Files and hashes:         1: dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl (hash: pGIY1Op+T1iiOAFszzIvNHoJ90QbPJ0iP8v/g17STY8=)
                          2: ED3D0F9E48C911F0B59FB71DC4F9AE02.roa (hash: 3GDgDAyytAqGw1QJu48r4HFjWRXZvVa4Wmp9uyTwi6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl
                          rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91249C2, serialNumber=74DCEAA8506A2B327F87A42D0741AC36EEDEEB49
        Validity
            Not Before: Oct  7 06:47:05 2026 GMT
            Not After : Oct 14 06:47:05 2026 GMT
        Subject: CN=6ac5eae9-1ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:27:26:61:ac:91:6d:9a:72:0b:54:b1:d4:8e:
                    71:3f:b4:70:cd:ba:e1:c6:da:44:1f:db:24:7a:d8:
                    06:55:da:ca:b6:a0:5a:cb:f1:ca:9c:d8:20:2d:ac:
                    e1:31:6c:44:86:ec:bf:c6:2c:e0:7b:51:45:b4:0f:
                    cf:2a:9b:3d:69:4b:53:df:2b:0f:dd:d7:ea:fa:b7:
                    c7:02:1f:1b:33:a8:0f:c0:1a:cd:ad:37:49:aa:27:
                    86:91:c1:13:ef:3a:ec:a3:e3:e4:9b:b7:e5:0a:46:
                    6f:2c:36:4c:74:91:df:f4:88:0c:89:5f:6a:e7:d2:
                    65:83:79:6a:42:33:5a:23:b5:9d:b4:2b:5e:a6:f0:
                    8e:3d:68:cb:79:8e:80:7b:e1:ee:7a:54:a2:6c:59:
                    ca:e1:02:91:f8:b7:f3:01:77:56:01:d5:49:ea:df:
                    3c:d4:8d:38:96:db:ab:a5:0b:15:67:58:f1:5a:ab:
                    ea:96:8b:d1:57:cd:e5:40:1f:45:59:9a:91:5e:eb:
                    90:1a:4d:71:b2:0b:87:f0:dc:66:67:15:f5:a9:fa:
                    23:b2:f5:75:55:d2:16:54:88:2f:47:05:90:11:aa:
                    db:00:f2:17:21:0f:11:b9:f2:cf:21:c7:6f:2f:b6:
                    57:09:1a:c2:ba:e1:8a:99:7b:35:8b:2d:5e:05:9a:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5E:19:66:6D:A1:5A:29:84:3A:B6:44:94:09:51:FA:61:6C:0E:91
            X509v3 Authority Key Identifier:
                keyid:74:DC:EA:A8:50:6A:2B:32:7F:87:A4:2D:07:41:AC:36:EE:DE:EB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dNzqqFBqKzJ_h6QtB0GsNu7e60k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91249C2/E3A3DEE648C811F0B957261CC4F9AE02/dNzqqFBqKzJ_h6QtB0GsNu7e60k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d6:b9:c4:57:b3:fd:c2:ef:fa:8d:4d:be:b1:91:29:84:73:
         fd:bb:7a:2e:b3:e7:6a:50:20:57:ab:ea:1f:54:ae:d2:96:65:
         20:6b:7d:2b:93:5a:1e:ac:a5:74:7f:29:86:4d:04:81:ba:72:
         04:07:b0:3d:c8:3a:88:74:85:7b:dd:7d:13:88:77:27:42:17:
         15:6e:34:1d:79:ea:4e:70:b5:00:6c:85:99:33:db:69:ba:1c:
         bb:39:93:e0:16:0d:c9:f4:a3:20:76:2b:9f:bb:d0:a0:11:e6:
         b8:5f:81:71:61:5d:25:b1:3e:72:2a:65:bd:87:5e:cf:b9:ab:
         87:35:81:06:95:1e:62:a4:cf:69:5f:d0:5b:20:e7:db:5d:2b:
         79:01:bb:35:d4:85:f8:a4:06:b5:af:ae:3d:5f:47:91:fd:70:
         f6:a6:cb:92:2f:be:50:7b:44:e4:1c:e6:e9:5e:40:ff:08:ba:
         cf:d3:4d:c7:31:36:02:ad:be:87:71:66:ae:e3:a7:c8:92:c1:
         a3:dd:35:1a:88:dd:18:ef:ef:79:9a:7b:00:c5:1f:32:2f:57:
         9d:9c:46:3c:16:3d:58:c9:07:b2:88:5b:ec:26:5f:40:99:c5:
         ca:b9:8f:dd:5b:93:85:a5:48:4d:2b:d0:9e:80:79:20:9b:d1:
         a1:5c:08:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:30:42 2026 by rpki-client