Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File:                     84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier:          9elPZ6ys2A0YOAKISsmeDcWkZpP/tPUW+zPdbp2w4Lc=
Subject key identifier:   6A:89:C1:22:99:D5:02:32:2E:AE:38:4F:C3:2A:63:82:9A:2A:F8:63
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer:       /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial:       0556
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number:          054F
Signing time:             Mon 12 Oct 2026 23:35:21 +0000
Manifest this update:     Mon 12 Oct 2026 23:35:21 +0000
Manifest next update:     Mon 19 Oct 2026 23:35:21 +0000
Files and hashes:         1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: sAKWUh2sZjDaTBibILfh1Z4fiZjuA4AGpgh+9nfdCTk=)
                          2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 4pb/gM8lDNYdlH1fovFGDxDjw7tPKno0MVw8fyTlO8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
                          rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 23:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Validity
            Not Before: Oct 12 23:35:21 2026 GMT
            Not After : Oct 19 23:35:21 2026 GMT
        Subject: CN=6acd6eb9-e25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:8c:e9:24:15:07:de:09:11:27:b1:77:fc:
                    f3:cc:e2:9a:16:e4:fb:e5:fe:48:23:58:12:91:d2:
                    79:77:a3:3b:63:74:8d:d0:f1:72:2d:0e:ea:a8:58:
                    a5:62:77:31:8f:34:b7:33:d3:bc:a3:37:f0:d3:d6:
                    99:56:4a:25:a9:d5:5f:e1:80:3c:b2:db:66:1d:c6:
                    64:cd:bb:95:2d:1a:71:1f:b3:b2:d3:92:57:cb:26:
                    cc:79:ec:7b:e8:59:33:e9:ff:18:b6:6b:02:0c:e4:
                    c1:51:8a:68:0a:4d:e6:d5:bb:26:2e:9e:09:6c:05:
                    c1:0e:5e:2c:97:a1:25:52:b0:45:77:9c:5f:bc:63:
                    24:95:02:cd:3c:e6:62:8d:fa:68:1f:63:7a:95:d4:
                    9f:30:36:28:d0:dc:e1:48:ca:61:77:6d:f3:6a:d6:
                    d9:05:23:7d:0c:a8:a1:3e:16:d4:90:98:e2:45:75:
                    f3:3a:33:89:27:a9:5e:40:5a:34:56:03:1d:99:3d:
                    cd:f5:b0:b4:60:69:9c:b9:68:1d:27:8d:a7:b0:ec:
                    68:02:53:43:77:9e:84:ea:af:69:0e:67:b2:67:8e:
                    f7:ba:64:80:b7:cc:bb:b1:20:2c:83:40:c7:37:5c:
                    e6:6f:1b:9c:9f:b3:57:b2:9a:85:ad:77:6f:62:76:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:89:C1:22:99:D5:02:32:2E:AE:38:4F:C3:2A:63:82:9A:2A:F8:63
            X509v3 Authority Key Identifier:
                keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:35:39:32:50:89:eb:62:a2:a7:93:a4:bb:8a:63:5c:9f:aa:
         c0:55:3c:ff:fb:44:f6:09:1b:df:e4:54:77:d0:be:c2:a3:f7:
         8a:9a:6a:fa:41:44:61:45:6f:5b:e7:dd:5f:7d:c2:d7:c3:93:
         86:5a:af:34:c5:63:82:0d:d0:ee:39:5a:88:e3:13:59:48:15:
         9a:72:c1:58:b2:f0:e6:3a:84:be:43:06:78:25:20:ef:b0:94:
         2f:f6:3c:c2:f0:c4:93:d5:e9:c4:85:9d:7c:65:3d:0d:53:85:
         66:c9:7b:68:cf:2c:93:6d:24:9d:73:7d:57:1d:3a:ab:7b:2b:
         85:a9:89:db:9a:d0:50:31:14:3c:a7:90:8b:01:07:16:9f:1b:
         57:6b:4a:bc:fa:44:16:05:ca:fe:8c:17:dd:50:1c:1a:3f:76:
         9d:e2:20:be:34:35:09:23:a0:9b:0b:78:7f:3a:4f:86:c8:6e:
         d8:78:6d:7f:5f:f0:02:a7:a9:0a:40:0b:ad:d5:c7:de:0c:6e:
         e7:29:3e:2d:64:06:b5:d5:9b:20:56:4f:c8:04:7c:2e:33:37:
         f9:ae:dd:d8:d3:9e:35:8f:f1:78:06:8c:64:f9:c9:ce:71:61:
         a8:c8:55:d1:af:12:d6:b8:e2:29:79:be:9d:ea:9a:c8:23:9c:
         33:5a:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:25:35 2026 by rpki-client