Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
File:                     0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json)
Hash identifier:          R8Y5qv/ZhWNpNXvCKCneX4hDz88xxaUZpRwOjfUyd4Q=
Subject key identifier:   DC:B7:94:E6:A8:1A:2D:0C:2D:92:62:AC:2A:70:07:32:14:27:83:73
Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11
Certificate issuer:       /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911
Certificate serial:       076A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
Manifest number:          0762
Signing time:             Sat 10 Oct 2026 21:49:07 +0000
Manifest this update:     Sat 10 Oct 2026 21:49:06 +0000
Manifest next update:     Sat 17 Oct 2026 21:49:06 +0000
Files and hashes:         1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: 8sVTem3ZHXlY/io/wHkTTMxCLQIaSUkRBn6lb1giGWs=)
                          2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: oeB8/47xsF+hpt5i8iGPJ2EnXsL0GaoatzlImZS5Dnw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl
                          rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 21:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898 (0x76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E215, serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911
        Validity
            Not Before: Oct 10 21:49:06 2026 GMT
            Not After : Oct 17 21:49:06 2026 GMT
        Subject: CN=6acab2d3-32a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9d:bf:e8:84:2f:1a:f9:be:25:6d:1c:a9:95:
                    9f:7b:8a:74:46:f2:be:3f:c3:1c:ba:c8:3d:fd:5a:
                    0a:0c:32:03:ea:f3:56:33:9a:90:15:ec:44:4d:5c:
                    e7:69:d2:70:ed:ab:f8:93:64:8e:ee:45:61:d8:eb:
                    6f:fb:e9:64:40:6c:6f:76:50:08:7c:38:38:68:4a:
                    41:db:81:89:6c:da:9e:ef:69:5e:ad:17:ea:06:a2:
                    f5:36:1b:e2:d6:50:79:98:26:cf:05:07:94:fd:10:
                    47:4e:4a:81:57:e3:33:16:bc:97:39:7e:9d:06:1b:
                    fe:23:dc:da:dd:28:e9:6b:96:a9:fb:d4:b9:d4:d6:
                    13:10:b8:26:3f:13:40:0a:ef:ae:bf:8d:a5:15:e7:
                    b4:77:8f:49:e9:74:a6:d8:71:ed:6b:d6:99:be:db:
                    b3:1a:e6:3a:20:38:79:76:88:3e:4d:2a:3c:2a:7c:
                    d0:20:db:8f:aa:da:e1:6d:4d:51:3f:cf:43:26:93:
                    69:71:14:90:93:91:c2:4f:9b:48:31:63:59:af:1b:
                    79:4f:5e:a3:79:bd:2d:e8:5b:47:b6:c0:a9:47:f7:
                    58:30:f2:86:9b:c3:08:ac:50:ea:a6:1e:53:24:ef:
                    06:aa:d1:c6:d2:12:f3:88:e9:68:95:4a:55:a4:08:
                    b6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B7:94:E6:A8:1A:2D:0C:2D:92:62:AC:2A:70:07:32:14:27:83:73
            X509v3 Authority Key Identifier:
                keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b7:3c:88:59:c7:53:b8:97:62:c1:f9:3b:eb:f0:e8:7c:88:
         38:fb:66:a1:6f:97:0e:48:d9:da:df:bb:4e:49:a2:e6:de:76:
         11:88:95:21:9f:30:a5:8d:fc:47:c9:f0:89:de:8d:81:de:64:
         f5:bc:c2:e6:49:36:90:5d:10:2e:4a:99:f5:9f:6a:77:2f:f2:
         0c:e6:a2:48:e0:c3:d0:e3:2a:59:c5:95:e4:5f:93:d2:16:70:
         83:49:6d:36:11:5a:f1:ec:3f:c6:a9:dc:35:4c:f2:3d:aa:c9:
         2e:3d:07:06:77:27:83:51:c1:b0:50:f8:e0:b0:90:80:4b:c7:
         39:81:e4:a1:2a:d1:1f:3d:9f:e7:d9:4a:fd:c4:c2:3f:01:c1:
         5d:04:54:d7:97:6a:8c:ab:fa:82:bd:8f:61:74:b9:e6:99:ff:
         d5:73:6a:ae:77:0e:bb:a3:79:32:0c:bd:79:13:f5:42:7b:c3:
         64:ff:d9:dd:89:4c:18:94:ed:09:24:9e:3a:cf:cd:b6:fe:2d:
         9c:f8:37:01:17:d5:2c:9d:5f:f4:37:d8:60:65:54:16:79:c8:
         c6:f5:aa:dd:4f:0b:23:35:d8:9b:e8:3d:d8:68:a4:d8:ea:e3:
         46:b9:6d:ac:f4:0f:e0:a5:e1:a5:d1:18:d5:48:6c:a4:fe:a2:
         63:c2:43:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:10:59 2026 by rpki-client