Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
File:                     E5bqlAlF_CBf8uPRsr4bkNcsxek.mft (raw, json)
Hash identifier:          WPo3Ca0fiHj/1rgpQRZgN0S6fXodz6xn6/SQSS5KR6U=
Subject key identifier:   74:93:63:D0:42:64:06:24:8C:B2:83:FD:CB:7A:E3:7F:B4:10:48:ED
Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9
Certificate issuer:       /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9
Certificate serial:       0615
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
Manifest number:          060A
Signing time:             Wed 04 Nov 2026 23:11:29 +0000
Manifest this update:     Wed 04 Nov 2026 23:11:28 +0000
Manifest next update:     Wed 11 Nov 2026 23:11:28 +0000
Files and hashes:         1: E5bqlAlF_CBf8uPRsr4bkNcsxek.crl (hash: VSrKLk7d4Hm87VZNQnU/DI4tVEoRgjWys+t7dlMoHgc=)
                          2: EB17A8C2152511ECAD055780C4F9AE02.roa (hash: 9iwkBoSghTED5G7Gmn3J7760ui7964gnoNzuIo64Xw4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl
                          rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 23:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1557 (0x615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DF56, serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9
        Validity
            Not Before: Nov  4 23:11:28 2026 GMT
            Not After : Nov 11 23:11:28 2026 GMT
        Subject: CN=6aebbba1-98f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:e0:fa:5c:bd:3c:b1:34:4e:e5:50:1a:44:
                    5c:14:27:2b:6a:02:26:5f:6d:41:a4:85:3a:8c:a2:
                    e0:94:41:11:6e:28:81:61:cf:ad:77:16:e1:ad:3b:
                    cc:6f:46:d3:e0:7a:4d:67:47:fe:14:4f:37:17:ff:
                    c8:b8:74:4c:3d:41:5c:1f:0b:21:60:b2:60:54:cf:
                    39:33:53:7e:28:48:96:19:e0:90:76:7a:12:db:9a:
                    3e:00:5e:f7:d2:43:de:f9:c1:af:df:c2:97:48:91:
                    6a:6e:5e:f8:de:15:8e:5f:5a:a7:ab:c8:56:82:20:
                    11:a8:5a:72:fc:36:64:12:1f:0d:9f:d5:0e:25:ec:
                    44:8d:fe:fe:8e:36:9e:09:67:37:e4:78:d3:58:d7:
                    1f:ea:7a:cd:48:3f:3b:38:b6:6e:9c:c8:29:16:94:
                    36:b4:49:a3:57:78:49:0e:0e:c5:9e:31:d7:3b:e3:
                    02:0f:55:73:3a:c4:0b:26:2e:49:d8:65:46:73:1b:
                    19:f4:00:07:4f:96:0f:bd:09:ac:e5:ac:49:cf:70:
                    cf:d3:2b:7a:d6:c6:4d:8c:46:c8:03:be:a4:b2:50:
                    15:57:49:9c:8f:a0:5e:2e:63:49:3c:1e:ab:65:25:
                    63:e5:bd:65:06:63:c2:b5:45:e6:e6:e0:93:b8:83:
                    1e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:93:63:D0:42:64:06:24:8C:B2:83:FD:CB:7A:E3:7F:B4:10:48:ED
            X509v3 Authority Key Identifier:
                keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7e:92:3a:1f:7d:d9:8d:bf:74:8e:91:8f:01:2f:05:53:9c:
         4d:a8:f3:18:c1:84:75:e6:2d:66:96:d9:d1:c5:1f:da:bc:86:
         f2:08:be:b4:c5:0c:de:ca:1d:ac:9c:af:be:d7:1a:f0:c5:1d:
         98:bc:e1:a3:66:16:98:93:a1:08:c2:50:7a:ce:5a:5d:80:41:
         7a:6d:a0:e7:a0:e8:0e:37:68:f6:ea:0b:96:1f:b8:0a:e0:cb:
         7f:f2:11:37:13:67:fa:9d:73:27:e3:5e:84:d4:3a:f7:bc:2b:
         3c:1d:12:6c:0e:e0:b7:ae:c1:13:e0:f4:8c:51:9d:4f:a4:bd:
         ba:ab:07:86:79:06:92:ae:09:df:11:54:a0:5f:cf:b1:d6:6e:
         2b:cb:c7:66:bb:93:28:9f:7c:09:d7:e2:3d:56:8d:f3:dc:49:
         24:3d:2c:ca:d8:a3:7b:a4:d1:ba:22:64:52:18:d7:25:68:9c:
         c6:de:14:91:92:20:75:7e:6f:ec:c8:2c:eb:f7:82:2d:b4:b9:
         6c:e0:77:20:e1:d1:af:ac:9e:f2:19:05:77:08:13:f2:3e:8e:
         d6:c9:ae:33:90:c4:8c:88:89:73:fd:10:4b:de:32:55:22:3c:
         da:61:78:bc:de:98:3c:1a:32:dc:90:f4:a4:d6:57:bf:34:13:
         a7:72:ed:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:23:37 2026 by rpki-client