Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File:                     52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier:          fqprTG+qObgK4KVqvSP2Gsqac2j90W2X/OKFzOcyLlQ=
Subject key identifier:   8C:C3:60:EE:46:8D:EF:8A:38:EB:F7:C0:29:A7:E0:12:9C:CD:EE:EE
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer:       /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial:       0460
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number:          0458
Signing time:             Sun 11 Oct 2026 00:12:29 +0000
Manifest this update:     Sun 11 Oct 2026 00:12:28 +0000
Manifest next update:     Sun 18 Oct 2026 00:12:28 +0000
Files and hashes:         1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: Ad2R6AGmf1m0IjFbV8jhZVLmvXKVjB69vhT1RNnaqTM=)
                          2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: dHW1Qook3wZ5zh5JBvm9IKVQr+R+p5FVYsj7ayk0Xrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
                          rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 00:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
        Validity
            Not Before: Oct 11 00:12:28 2026 GMT
            Not After : Oct 18 00:12:28 2026 GMT
        Subject: CN=6acad46c-7c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:31:bf:8d:a1:2a:82:53:fe:bf:64:8c:80:
                    73:3c:18:1c:51:97:39:b8:94:52:f0:99:8a:a7:29:
                    46:4d:e3:47:c8:79:53:82:aa:bc:bc:9a:75:64:34:
                    7e:a7:cf:01:42:1b:6b:96:61:49:a0:b0:4f:6f:32:
                    9e:49:1b:68:55:46:e2:3c:04:20:be:a4:ec:8b:c1:
                    1b:e4:cb:57:cb:9f:8c:04:19:dc:7d:f2:b6:50:7f:
                    b0:a1:52:62:d3:35:63:9f:e2:22:2c:27:65:2a:64:
                    77:af:4e:74:c1:6b:2f:45:1f:5a:72:d5:77:64:48:
                    00:26:6b:07:cc:db:b1:f3:e2:41:dc:c2:55:22:db:
                    26:a3:ac:ff:43:84:1a:1d:b9:74:ad:18:20:b5:45:
                    d3:13:3f:8a:83:9b:24:8b:4e:09:06:5a:f4:be:13:
                    3f:95:ce:27:af:3a:9e:d8:b5:7b:74:49:b3:73:ae:
                    57:ca:d7:36:19:a3:55:be:d0:be:3d:f3:aa:33:af:
                    c5:63:04:0a:30:b8:10:fe:da:07:8b:05:b1:d3:e3:
                    14:df:65:10:68:63:3b:1c:f6:ff:ed:4d:67:24:cc:
                    84:bf:59:a5:03:c8:4f:ee:93:5e:95:b0:9b:76:23:
                    47:f6:98:f4:61:32:51:11:43:41:93:0d:8c:80:ce:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:60:EE:46:8D:EF:8A:38:EB:F7:C0:29:A7:E0:12:9C:CD:EE:EE
            X509v3 Authority Key Identifier:
                keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:99:f3:50:6f:71:11:bb:d7:c6:14:e8:54:b8:dc:3a:c9:a3:
         e4:25:d2:06:02:20:a4:38:3b:c9:7c:8b:a7:d6:32:36:65:ef:
         cf:c5:09:2f:6b:5c:78:18:3e:33:64:ac:f5:09:30:c7:b9:c1:
         7e:40:66:cc:b1:92:ba:3d:e3:6a:8f:80:13:e9:0b:f3:8a:b9:
         db:4a:5c:3e:24:72:60:ba:d6:30:10:c7:a7:05:b2:12:6c:be:
         29:3f:5a:49:be:80:93:3d:b4:db:31:7b:54:b2:c7:ef:7d:60:
         06:a0:e7:6a:c5:de:d4:cc:02:a6:5f:4a:6b:86:60:24:f5:fb:
         32:13:39:37:1c:14:02:02:f5:84:30:c7:a5:a0:47:7b:9c:3a:
         e7:40:94:0d:06:97:2d:f1:e6:af:89:14:ba:b8:3a:72:dd:83:
         7b:92:a6:d9:33:5e:09:93:0d:6b:c1:de:a7:e3:99:35:9d:8c:
         03:1f:87:88:d7:f6:51:2a:6c:2f:e8:19:09:3e:b7:89:6a:46:
         43:79:8f:a3:65:86:a0:b3:2a:0d:ed:1c:08:87:0e:28:87:af:
         3e:53:87:a7:7e:2e:d5:6b:4a:da:4c:7a:43:13:d4:6c:5e:24:
         21:fa:40:89:69:1f:86:fd:17:95:95:f7:19:e3:14:f8:07:b7:
         af:08:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:12:22 2026 by rpki-client