Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File:                     M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier:          fBgC8k6Xq/Xe/1vgT8x8JIrbZf9y6lbgb7p2TX17Wm8=
Subject key identifier:   FD:B6:F0:68:47:DC:15:54:9B:97:33:E9:B4:AB:97:C8:0F:72:F9:3C
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       01B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number:          01A7
Signing time:             Mon 21 Sep 2026 04:07:23 +0000
Manifest this update:     Mon 21 Sep 2026 04:07:23 +0000
Manifest next update:     Mon 28 Sep 2026 04:07:23 +0000
Files and hashes:         1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: k+dXqQiFSsipHijdM3pqhv9CEkx1P/WgcAI61TU2HWY=)
                          2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: DkaWQMkaE5vWQ9UkMjaqB0efcfb37G5TJ9A0Ez8ePPQ=)
                          3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: 8IuopY47+jC5fpO4yB/mgjJBuoiM2BBuM5j++8YQWHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:07:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Sep 21 04:07:23 2026 GMT
            Not After : Sep 28 04:07:23 2026 GMT
        Subject: CN=6ab0ad7b-a01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:0a:79:4e:b3:80:b2:30:5a:5d:43:3b:45:
                    75:73:29:fa:fe:a8:62:9d:58:88:36:b8:7a:b3:b1:
                    a3:73:d7:98:c2:52:d6:8c:71:3d:e3:d3:51:7f:5c:
                    c3:33:04:a2:f5:fe:61:74:a0:53:8b:a8:f8:ca:ef:
                    05:41:c5:8a:4c:9a:78:af:54:cf:9d:52:9f:86:66:
                    26:65:fe:11:07:c3:e1:cb:fd:b5:5b:1a:f1:fb:4c:
                    05:e0:54:3d:ed:f3:86:8f:93:e1:5a:99:9e:3c:06:
                    23:de:45:b8:39:be:39:84:42:12:ad:31:36:b7:07:
                    a5:80:f0:6a:90:0c:98:b0:48:04:14:c3:c9:7b:6b:
                    b6:d3:39:02:8c:e8:8a:a6:ce:58:ed:cd:dc:2d:ef:
                    64:20:dd:d4:ce:35:df:05:63:8b:c5:29:7d:06:00:
                    a4:59:35:3e:13:3d:8a:d2:b3:52:12:2a:bb:9a:9a:
                    a6:d1:12:19:e7:89:d8:50:bf:55:95:a5:b9:23:92:
                    54:93:4e:87:8c:25:e8:25:67:7f:25:53:a1:40:a7:
                    0c:79:72:d7:53:24:c1:19:bb:9e:a5:29:c4:1a:62:
                    3f:52:53:54:bc:bb:4b:f6:a9:ef:cf:a2:8c:6f:4c:
                    65:74:0e:a6:d0:4f:80:22:3a:58:99:ca:a5:d4:72:
                    7e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B6:F0:68:47:DC:15:54:9B:97:33:E9:B4:AB:97:C8:0F:72:F9:3C
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6f:ed:36:7f:55:ef:c1:f5:a8:36:2e:47:4f:97:40:5c:89:
         19:04:b3:d9:1e:57:8d:3b:45:8e:08:e3:69:50:7a:20:7f:22:
         36:6a:1a:f8:a7:4b:ba:04:27:c7:7b:7d:66:50:96:42:88:cd:
         3d:78:7e:dd:b6:d8:7c:2f:01:42:7f:ba:ac:5a:af:8b:79:64:
         2e:8a:99:0f:cb:97:3c:79:d6:97:9f:00:f2:d1:47:88:b8:e9:
         ff:47:b7:4f:38:5a:f1:80:13:f0:8e:29:3f:5d:f1:39:91:26:
         07:0d:21:1b:f4:55:f1:5c:b0:20:38:04:29:55:34:3a:8e:fe:
         4d:64:25:d7:c2:cc:6d:69:4b:2b:81:99:d8:65:71:57:50:a0:
         c4:92:6f:6a:6a:fd:db:e0:55:c4:16:48:ff:27:04:76:6e:33:
         bf:1f:72:07:c6:e4:6f:cc:d7:0a:03:06:03:5e:61:39:55:8e:
         f5:e8:f7:a5:41:af:44:ab:87:31:a5:a5:c9:2a:da:67:28:26:
         86:53:54:4d:87:44:69:0f:07:f1:d6:26:53:d4:d5:6b:62:8f:
         1f:1a:4e:5e:67:7f:d7:7f:17:96:75:b8:4f:49:c4:4c:7d:c1:
         44:20:ee:1b:8a:6f:a0:44:47:7c:8b:7f:6f:c2:46:7b:4d:11:
         48:8f:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:26:37 2026 by rpki-client