Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
File:                     t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json)
Hash identifier:          2T5CWt7vtAe5EIr2cUI+WfUG5XazqjdJHRPlLmGOfhE=
Subject key identifier:   04:11:0C:1D:48:EC:33:CF:1B:86:AC:7A:CA:A3:F0:1A:BA:A7:1D:D3
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Certificate issuer:       /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial:       1965
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
Manifest number:          1951
Signing time:             Tue 06 Oct 2026 16:26:56 +0000
Manifest this update:     Tue 06 Oct 2026 16:26:56 +0000
Manifest next update:     Tue 13 Oct 2026 16:26:56 +0000
Files and hashes:         1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: RFecwqtx+VVmnw+eziDGBxa5lOS1Z6ow78UoXqUlvLs=)
                          2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: eo5Er8iuxT75wLcKVzFBlRXEOJUUc8Rit00G+PSlQNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
                          rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6501 (0x1965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
        Validity
            Not Before: Oct  6 16:26:56 2026 GMT
            Not After : Oct 13 16:26:56 2026 GMT
        Subject: CN=6ac52150-cf26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:c8:d8:b3:bc:64:dd:16:e5:a1:0f:34:19:
                    bd:86:17:7e:f6:7b:f7:e7:8f:29:ae:e3:5b:22:b6:
                    38:bc:3d:f9:f0:ef:91:c7:69:b0:52:30:d1:8b:b7:
                    66:c3:f5:c0:49:18:8a:ec:57:9e:26:9e:bf:40:f0:
                    e2:07:6f:3c:4f:da:a1:9e:07:e4:89:fe:20:de:75:
                    9f:82:bf:5e:88:26:74:a5:47:b5:12:0b:e7:47:3f:
                    1a:63:29:88:fe:c3:8d:78:d7:8f:df:e1:d1:73:94:
                    a2:ae:42:f4:31:c4:2d:0c:1b:df:83:75:c5:dd:64:
                    f0:b9:f7:af:b5:b4:80:0a:4d:31:dd:69:67:b3:81:
                    2a:62:e9:38:7a:7b:eb:99:83:4f:c1:8d:dd:30:75:
                    2f:15:ce:24:8e:4e:d2:dd:47:74:cb:89:45:c1:68:
                    62:2e:c4:2b:4e:bb:59:9a:a9:11:ad:cc:0e:2e:c0:
                    08:7a:68:60:d2:bb:8d:70:d6:41:70:42:8a:2f:6d:
                    9b:29:8e:a8:45:be:74:7f:7e:64:50:b2:f0:36:73:
                    fc:b7:0a:eb:ca:01:fd:dd:30:f7:35:33:9c:c8:48:
                    7a:44:a4:99:56:91:b1:6b:90:46:c6:67:46:0f:a7:
                    72:b3:f5:dc:02:cb:29:03:33:47:80:aa:d6:3f:5b:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:11:0C:1D:48:EC:33:CF:1B:86:AC:7A:CA:A3:F0:1A:BA:A7:1D:D3
            X509v3 Authority Key Identifier:
                keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:71:e5:e9:bd:17:5f:d1:36:20:55:05:7a:7f:32:97:39:7d:
         54:77:96:b5:9e:ae:14:4c:af:74:7f:59:9d:f4:c2:07:f2:ae:
         ec:c6:99:0a:31:2d:b0:7c:ab:c2:6d:7a:55:b8:40:4c:36:e7:
         0e:54:a0:3c:50:4c:6a:46:bd:57:a8:f1:c5:63:7c:59:00:1a:
         5d:c4:51:3f:a8:9c:39:ae:66:93:56:3d:98:a6:31:18:a0:54:
         9c:55:5d:a4:cc:e8:6a:74:cc:fa:26:1f:d8:6a:c7:50:98:9a:
         f8:ae:a8:fd:e8:e3:7c:d2:32:72:d0:b5:41:31:99:ae:7e:a7:
         a0:e5:8d:fb:38:a5:c2:90:81:17:aa:f5:a1:c8:3c:ec:ca:38:
         07:8b:14:7b:fe:f9:0d:8b:ae:09:18:6a:72:3c:93:39:37:83:
         f8:f9:9d:5a:65:c1:60:7c:26:55:4a:12:cb:63:03:3e:6f:a8:
         ae:24:dd:1b:7f:9f:85:b0:fb:0a:a5:ba:b0:62:0d:42:c3:bd:
         85:3d:d9:fd:e4:e2:37:f8:b9:76:cb:7f:1f:2e:c0:d5:50:00:
         88:d0:1a:9b:03:ad:7c:39:cd:82:74:36:84:57:86:36:16:63:
         d0:ad:47:ea:ae:c2:0b:ad:7b:56:82:b1:77:01:f4:c8:69:f3:
         17:e5:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:24:02 2026 by rpki-client