Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
File:                     MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json)
Hash identifier:          gwMzW6BzoV3s0xTmVZsyZ5MOkfIn01iS0tW//KzotNI=
Subject key identifier:   C0:35:99:F6:40:BD:F9:48:41:F3:0A:85:60:D4:A5:EE:D7:09:38:98
Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
Certificate issuer:       /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Certificate serial:       15E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
Manifest number:          15D5
Signing time:             Mon 12 Oct 2026 16:47:48 +0000
Manifest this update:     Mon 12 Oct 2026 16:47:47 +0000
Manifest next update:     Mon 19 Oct 2026 16:47:47 +0000
Files and hashes:         1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: 217UTCNtFFWKCjwGYQUAvmofvDKX9ms2Hf/eNotYIOU=)
                          2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: VcSy0vkfhEBIfvlo4qFzATUrPa6ZU2MybzTSF9fgvpU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
                          rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5603 (0x15e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
        Validity
            Not Before: Oct 12 16:47:47 2026 GMT
            Not After : Oct 19 16:47:47 2026 GMT
        Subject: CN=6acd0f34-39da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:84:b8:cf:f4:cb:1a:05:b1:b6:43:87:88:
                    54:28:b5:4c:b3:5e:6b:77:5d:cc:7d:a1:fb:cf:47:
                    3b:c9:f1:44:57:a1:48:da:73:11:24:78:c4:af:fa:
                    bf:91:5d:5e:12:84:13:9a:d1:a3:fe:f8:62:bb:f1:
                    9c:2e:3d:be:5c:48:0a:9c:67:31:ec:30:6d:16:e9:
                    39:03:ce:ee:38:f2:e1:a6:a5:59:b6:3c:75:8f:0c:
                    d4:0d:6c:d4:e8:c3:16:97:4e:b8:aa:1e:1d:93:90:
                    9d:e1:0f:ae:07:3c:20:26:59:aa:07:3e:fc:53:20:
                    b0:61:c9:b8:06:06:f2:ed:b8:06:16:a6:85:fd:b7:
                    a7:5f:b0:a3:54:4d:e0:7f:40:b8:e5:72:c1:cb:e0:
                    2a:8c:13:e3:bb:cb:f8:8e:d9:77:9f:01:10:93:46:
                    c6:11:34:9b:67:98:45:65:78:8c:2b:2e:d9:8d:68:
                    70:40:a1:a5:de:df:e7:af:6f:b2:21:7d:43:d6:4c:
                    7c:61:75:52:fc:f0:5a:de:c6:81:05:18:58:86:81:
                    f0:fa:80:e4:29:eb:48:be:d7:38:9d:eb:fe:d9:2d:
                    6e:d8:e4:5c:ed:72:b2:bb:fb:44:e9:e7:59:5d:0e:
                    16:06:12:99:76:7e:44:38:97:d3:a2:0c:34:cd:14:
                    11:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:35:99:F6:40:BD:F9:48:41:F3:0A:85:60:D4:A5:EE:D7:09:38:98
            X509v3 Authority Key Identifier:
                keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:56:7b:a6:ec:3b:9e:04:ed:d0:ad:3d:85:4c:62:bb:49:45:
         ce:1a:ea:e2:8e:e4:e5:6e:75:bc:54:70:94:17:4d:83:c4:0e:
         31:08:3e:a4:da:96:d6:2e:9e:a6:61:70:0f:4e:1a:f1:bd:c4:
         8c:12:47:f9:e9:04:4c:14:68:d7:a9:94:b4:4e:ce:0f:7c:46:
         80:d9:37:d5:5f:0d:27:1c:45:13:9c:27:c6:71:19:0b:89:57:
         7c:18:7b:7f:03:74:8f:94:db:1d:e6:31:46:95:43:01:5b:cd:
         c2:48:97:15:6d:b4:38:91:f8:15:ab:9f:a9:d7:15:e6:91:a5:
         05:43:5f:a1:f3:a3:55:e1:87:25:2d:fc:78:22:93:b5:01:d8:
         7b:fa:87:ed:34:ca:28:67:30:10:0d:e3:f6:b4:45:b3:63:d5:
         4b:7f:b6:ed:af:03:41:69:78:6d:0f:06:70:e4:4d:88:17:b8:
         8f:a0:b4:ea:6e:4a:c3:95:3e:b3:be:03:fb:31:60:bc:a1:5e:
         83:a9:05:43:d9:33:53:f9:6c:e5:44:8d:97:12:11:38:c8:55:
         b8:e0:96:61:8f:82:27:96:63:c1:64:d9:72:60:a6:25:15:89:
         d8:92:f4:6b:5e:69:12:50:96:13:e8:84:f5:61:47:27:51:f9:
         7e:73:73:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:16:14 2026 by rpki-client