Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft
File:                     1K7zROHhNEdHmOy_XSnecaiG3sE.mft (raw, json)
Hash identifier:          rXui89OLd/Hfe1NvQop80xqJKEc14EyRNvea/v8lAD4=
Subject key identifier:   34:B9:6B:19:A6:97:B7:46:E9:2B:5D:88:2D:8B:84:14:D8:81:05:A4
Authority key identifier: D4:AE:F3:44:E1:E1:34:47:47:98:EC:BF:5D:29:DE:71:A8:86:DE:C1
Certificate issuer:       /CN=A91629AA/serialNumber=D4AEF344E1E134474798ECBF5D29DE71A886DEC1
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1K7zROHhNEdHmOy_XSnecaiG3sE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft
Manifest number:          20
Signing time:             Sun 11 Oct 2026 04:05:27 +0000
Manifest this update:     Sun 11 Oct 2026 04:05:26 +0000
Manifest next update:     Sun 18 Oct 2026 04:05:26 +0000
Files and hashes:         1: 1K7zROHhNEdHmOy_XSnecaiG3sE.crl (hash: gwPYokcYn+N8rQGzbhL9rZBlit9OOcNF/G60sxqQqdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.crl
                          rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1K7zROHhNEdHmOy_XSnecaiG3sE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91629AA, serialNumber=D4AEF344E1E134474798ECBF5D29DE71A886DEC1
        Validity
            Not Before: Oct 11 04:05:26 2026 GMT
            Not After : Oct 18 04:05:26 2026 GMT
        Subject: CN=6acb0b07-fd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:c6:c9:4c:9b:3e:54:fe:ef:55:fc:f5:38:
                    ae:a5:8b:c8:b9:75:15:b6:25:af:5a:95:39:aa:46:
                    03:2d:75:dd:d2:d9:11:ed:ad:12:bd:69:b6:45:1f:
                    52:78:c4:6a:75:2b:9f:b3:ca:c5:e6:a9:40:f3:66:
                    3b:8a:07:a1:aa:f7:e7:07:a2:58:dd:dc:29:37:44:
                    d9:8f:b2:ce:21:13:fb:a9:54:ee:82:b1:5f:dc:2f:
                    05:25:86:ba:76:c3:51:a2:af:63:e3:88:29:90:99:
                    f9:9b:b6:4c:d5:f2:e3:5a:da:ba:aa:c2:64:1a:d7:
                    eb:26:c2:8f:b1:59:a7:cc:0c:6b:09:21:a8:86:18:
                    71:00:15:ec:92:05:b2:23:33:9e:d0:b1:dd:72:31:
                    0c:49:23:41:3f:15:58:fe:6c:a2:25:8d:f6:04:6b:
                    e4:6f:8a:10:51:5e:ff:ef:ba:24:29:be:28:fb:0e:
                    cd:77:d9:50:d4:3f:47:e1:ea:ff:77:2a:0e:10:a9:
                    a0:31:e0:2f:ec:2a:02:9a:84:9e:11:ba:b2:0a:55:
                    b2:06:c7:95:14:0f:a9:ef:ca:b4:21:02:cc:a5:57:
                    3d:aa:3c:30:3c:c1:56:67:b2:0a:a6:f9:35:fe:70:
                    59:76:a0:8b:7e:cf:8b:4f:50:a4:b3:f7:6a:1f:04:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B9:6B:19:A6:97:B7:46:E9:2B:5D:88:2D:8B:84:14:D8:81:05:A4
            X509v3 Authority Key Identifier:
                keyid:D4:AE:F3:44:E1:E1:34:47:47:98:EC:BF:5D:29:DE:71:A8:86:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1K7zROHhNEdHmOy_XSnecaiG3sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/56B72188977711F18A4446554811F970/1K7zROHhNEdHmOy_XSnecaiG3sE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:fe:08:50:51:ad:54:57:71:7d:25:e8:d1:1a:16:6e:f2:
         3b:1b:51:92:25:3f:2f:7c:07:e9:87:ce:7a:b9:c1:c5:ff:db:
         c6:3d:a0:21:58:ae:a9:4e:60:1e:70:42:f6:5e:88:eb:4a:40:
         42:3f:35:a6:55:87:e8:eb:46:11:59:61:6a:87:32:c0:23:91:
         06:37:4f:fe:c1:0c:6a:0d:a5:64:e1:ef:b4:ca:56:f9:af:ec:
         3f:cd:0e:e7:7c:ad:80:99:f3:69:b9:e3:9b:fc:61:cf:8c:85:
         74:ee:00:99:4c:30:a3:57:2e:a0:7d:13:65:80:76:75:a5:05:
         3a:43:64:9b:96:48:ff:86:e2:da:8a:f3:55:f3:82:17:08:ce:
         e2:b9:7b:81:6c:e5:5d:25:40:48:1b:d8:e6:0a:26:6b:74:b8:
         49:9b:d4:6d:08:76:77:a3:f4:d8:92:b7:8a:47:62:87:4e:4a:
         f9:a7:7f:5c:e7:23:4c:90:ef:28:3d:ac:e1:e1:a8:31:ce:5c:
         a3:2a:cc:43:3f:27:73:6c:09:c9:00:21:51:2c:48:6c:07:f6:
         d4:6b:67:5a:f1:7f:82:00:9d:a9:60:55:f2:68:08:44:74:a5:
         bd:d0:71:c4:75:c1:b2:17:bb:69:29:70:5c:f2:86:2c:39:3d:
         c0:33:c1:39
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MjlBQTExMC8GA1UEBRMoRDRBRUYzNDRFMUUxMzQ0NzQ3OThFQ0JGNUQyOURFNzFB
ODg2REVDMTAeFw0yNjEwMTEwNDA1MjZaFw0yNjEwMTgwNDA1MjZaMBgxFjAUBgNV
BAMTDTZhY2IwYjA3LWZkNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3XMbJTJs+VP7vVfz1OK6li8i5dRW2Ja9alTmqRgMtdd3S2RHtrRK9abZFH1J4
xGp1K5+zysXmqUDzZjuKB6Gq9+cHoljd3Ck3RNmPss4hE/upVO6CsV/cLwUlhrp2
w1Gir2PjiCmQmfmbtkzV8uNa2rqqwmQa1+smwo+xWafMDGsJIaiGGHEAFeySBbIj
M57Qsd1yMQxJI0E/FVj+bKIljfYEa+RvihBRXv/vuiQpvij7Ds132VDUP0fh6v93
Kg4QqaAx4C/sKgKahJ4RurIKVbIGx5UUD6nvyrQhAsylVz2qPDA8wVZnsgqm+TX+
cFl2oIt+z4tPUKSz92ofBCapAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNLlrGaaX
t0bpK12ILYuEFNiBBaQwHwYDVR0jBBgwFoAU1K7zROHhNEdHmOy/XSnecaiG3sEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYyOUFBLzU2QjcyMTg4OTc3
NzExRjE4QTQ0NDY1NTQ4MTFGOTcwLzFLN3pST0hoTkVkSG1PeV9YU25lY2FpRzNz
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMUs3elJPSGhORWRIbU95X1hTbmVjYWlHM3NFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYy
OUFBLzU2QjcyMTg4OTc3NzExRjE4QTQ0NDY1NTQ4MTFGOTcwLzFLN3pST0hoTkVk
SG1PeV9YU25lY2FpRzNzRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAKov4IUFGtVFdxfSXo0RoWbvI7G1GSJT8vfAfph856ucHF/9vGPaAhWK6pTmAe
cEL2XojrSkBCPzWmVYfo60YRWWFqhzLAI5EGN0/+wQxqDaVk4e+0ylb5r+w/zQ7n
fK2AmfNpueOb/GHPjIV07gCZTDCjVy6gfRNlgHZ1pQU6Q2Sblkj/huLaivNV84IX
CM7iuXuBbOVdJUBIG9jmCiZrdLhJm9RtCHZ3o/TYkreKR2KHTkr5p39c5yNMkO8o
Pazh4agxzlyjKsxDPydzbAnJACFRLEhsB/bUa2da8X+CAJ2pYFXyaAhEdKW90HHE
dcGyF7tpKXBc8oYsOT3AM8E5
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:18:51 2026 by rpki-client