Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File:                     M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier:          ovXA9dCmtYEWP0ECoiDTRJbQbGG+JuRHVsbXCYdHMQk=
Subject key identifier:   4C:BE:68:1B:42:27:84:56:5D:15:4E:FB:37:2F:38:AB:1C:9F:FE:30
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       05A4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number:          0588
Signing time:             Sun 20 Sep 2026 20:12:35 +0000
Manifest this update:     Sun 20 Sep 2026 20:12:35 +0000
Manifest next update:     Sun 27 Sep 2026 20:12:35 +0000
Files and hashes:         1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: BhshgTERhNQt/oEKFzKn+V1LNlEmXQ+IjTc3QoObWvk=)
                          2: 0732C4DC090B11F1B0A6391E363D8C67.roa (hash: J561xmVSlPQuiaRbnBKYde82eZlXfxPuqU5+nzE9q2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Sep 20 20:12:35 2026 GMT
            Not After : Sep 27 20:12:35 2026 GMT
        Subject: CN=6ab03e33-dea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:db:03:24:1d:04:c5:79:ce:7c:0c:d6:6a:
                    78:0d:65:2b:b9:80:9a:6a:fb:51:55:06:20:6e:8c:
                    c8:42:66:f8:fc:5d:05:6e:3d:14:8d:f7:79:45:59:
                    c2:9e:fb:03:0e:b2:66:cb:d3:ff:88:88:46:0d:4d:
                    ed:b5:5b:c5:ac:35:17:5d:43:59:b9:55:5f:5e:b9:
                    8e:11:49:93:9c:9e:fb:ed:80:9b:79:cb:8d:75:31:
                    51:74:fa:6a:57:74:c2:e6:a5:b2:b7:db:ea:3a:45:
                    a7:6b:59:5b:12:0f:09:aa:5f:08:71:64:5f:8f:da:
                    44:bf:97:e5:05:98:7f:b8:64:ea:da:2f:98:32:ec:
                    10:b7:c1:0e:2d:9f:fe:df:e8:09:d6:4e:30:ff:1a:
                    62:59:4f:25:8e:72:be:9a:67:0b:25:ab:c9:13:14:
                    04:2a:6e:e5:57:d6:07:0d:db:e7:4a:93:7e:66:68:
                    d2:26:ea:03:36:fd:2c:11:23:25:b9:db:61:42:da:
                    b8:68:c8:e2:d8:d4:39:bf:24:df:63:63:ce:95:ab:
                    e4:92:df:59:7a:6c:2e:ee:2d:8f:22:84:e0:c2:90:
                    8a:0b:5b:53:0d:06:9e:a4:97:18:9a:b2:2e:01:5f:
                    b0:4d:19:ea:c3:1a:0c:99:10:a6:cc:27:6b:14:4a:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BE:68:1B:42:27:84:56:5D:15:4E:FB:37:2F:38:AB:1C:9F:FE:30
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:59:b9:2d:b0:ad:18:e7:32:16:f4:62:69:0b:34:e3:68:fc:
         57:36:a9:4c:3a:aa:6e:82:90:3a:08:a7:51:05:ff:c0:fb:79:
         b5:3f:0a:0e:61:94:d4:98:bc:e1:45:4c:fc:54:a6:ec:17:ab:
         44:38:25:d1:b4:9a:22:3d:65:b2:12:17:4f:4a:ac:a1:7b:a6:
         3d:a3:3c:03:07:00:43:fb:dd:8a:1e:86:1b:3a:5b:52:b6:dd:
         e1:69:d9:45:1d:8d:da:e1:e6:f0:0e:a5:fe:6c:a3:f5:e8:9f:
         09:13:fa:06:2b:8b:ce:a1:9f:a6:93:57:b3:0e:7c:02:c7:7d:
         f3:2b:e4:5b:a6:63:6d:3c:78:64:a1:36:37:27:92:20:1c:94:
         be:be:2e:6a:1f:bc:c7:5c:4c:d5:33:80:b2:e7:3d:fd:61:0e:
         11:69:61:c9:78:88:7b:61:1c:5f:ab:9c:90:37:13:9f:2e:30:
         4a:25:ff:c3:2d:2d:48:b9:8a:57:29:b0:a3:72:c5:f2:af:b8:
         64:de:b5:36:dc:f4:93:68:e1:31:3d:46:5c:04:dd:00:28:8e:
         d4:2b:3d:c2:c4:c5:5c:9e:b0:38:e6:6f:7e:ab:9c:21:c0:64:
         c3:55:f7:85:66:b1:e8:6f:a3:90:a3:b7:78:a6:e5:8e:40:b7:
         78:ac:43:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:36:41 2026 by rpki-client