Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
File:                     rIf9aQzGskx4_D9x0y3eDbookNs.mft (raw, json)
Hash identifier:          YJOYfWuHv+oAwypPvh8WKs2HnHzfCNm2dGNhA1zGotk=
Subject key identifier:   45:38:C0:FA:4C:5E:46:75:96:A3:20:C1:EC:4F:00:7C:81:BE:E3:CF
Authority key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
Certificate issuer:       /CN=A917C156/serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
Manifest number:          011A
Signing time:             Tue 13 Oct 2026 06:35:15 +0000
Manifest this update:     Tue 13 Oct 2026 06:35:14 +0000
Manifest next update:     Tue 20 Oct 2026 06:35:14 +0000
Files and hashes:         1: rIf9aQzGskx4_D9x0y3eDbookNs.crl (hash: ovZX4wrCJVC/mzjoXQrl2Cbg20gNQXnR27bL3JT3mVI=)
                          2: 82B7AD281C2811F0AF6EDC47C4F9AE02.roa (hash: 0jXeJcexttOaHPJUKTDWv4FQqWHkAMvIGXd7YBc2KYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
                          rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 06:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
        Validity
            Not Before: Oct 13 06:35:14 2026 GMT
            Not After : Oct 20 06:35:14 2026 GMT
        Subject: CN=6acdd123-4028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:a4:c8:db:fa:ee:0c:84:3a:39:b5:8a:53:
                    28:f8:80:ad:3b:c9:ca:d1:bf:70:b1:f2:10:4a:f6:
                    29:d8:54:1a:eb:47:7e:ef:36:7d:50:46:01:d9:86:
                    a7:66:bb:46:89:ad:2c:58:01:3b:cc:2f:29:b8:5a:
                    9d:b9:2d:bc:29:20:2e:17:61:fa:9b:56:6a:39:f8:
                    5d:27:34:ec:35:6d:06:42:4c:1e:dc:9e:6b:8c:8d:
                    1a:57:0a:7f:fa:1f:26:08:30:ea:49:ec:05:76:3e:
                    7e:49:11:b9:d8:d1:eb:2e:e9:b3:57:3b:42:d4:e1:
                    cc:29:64:4f:15:35:f0:ad:30:3d:81:a0:52:ef:2e:
                    27:66:49:21:8a:5d:d4:ac:8e:f3:f3:c9:94:43:a9:
                    78:e6:b5:53:2a:e1:89:97:48:4c:e9:e7:38:9a:ab:
                    c1:a4:04:7b:2d:91:d7:0d:9f:70:1f:79:7f:0f:1c:
                    c4:42:38:05:fe:ae:c1:09:b4:fd:1d:d2:67:43:7a:
                    e5:26:01:7b:d5:d1:8d:94:b6:cb:c6:2d:b6:c9:a9:
                    d7:6a:b0:39:92:1d:df:a7:52:d4:6a:00:98:55:f9:
                    d4:69:d4:22:eb:70:09:4a:7b:5e:1e:fd:44:66:62:
                    c3:92:72:a0:05:bc:c8:0d:d9:d3:89:5c:85:2e:ff:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:38:C0:FA:4C:5E:46:75:96:A3:20:C1:EC:4F:00:7C:81:BE:E3:CF
            X509v3 Authority Key Identifier:
                keyid:AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7e:6b:1e:49:3e:bb:af:ec:ca:f2:06:73:a8:1c:41:4c:5f:
         51:ed:ee:96:b9:f8:ca:b9:f2:a0:02:a4:fc:02:e2:67:cb:f8:
         1b:16:ba:0d:c3:8c:71:3a:8c:85:1f:59:f4:e2:c8:41:d3:c7:
         4e:35:92:9b:2a:59:9a:87:44:d9:c6:d2:12:45:70:4f:a1:f6:
         8d:f6:c5:da:2c:e8:56:5d:4a:b8:ef:1c:92:17:5a:9a:38:0a:
         48:3b:48:bb:3b:0c:a0:bb:b7:3b:49:59:2b:66:69:b9:b9:07:
         95:96:0b:ed:e4:82:33:a1:4e:cb:b6:2c:03:e7:dc:04:52:74:
         02:43:c6:84:6d:7c:5b:5c:d9:b3:14:1c:f1:c1:3a:c4:65:dc:
         04:03:24:7e:db:26:82:e9:30:56:e1:25:ba:0c:5e:58:d0:13:
         14:2d:a8:5f:6f:61:01:ef:94:c5:4b:33:44:67:50:75:bc:2d:
         cf:7f:14:2d:8a:73:67:2b:ac:a4:3e:8a:fc:66:b6:d9:22:aa:
         da:8b:7c:c3:81:6d:f5:48:70:ef:ac:ae:1e:94:27:4b:48:6d:
         a2:ec:ab:d4:29:b7:3c:e0:b7:ae:be:b1:15:39:ad:62:fc:f8:
         eb:f9:f8:ac:1c:8d:3b:98:4a:9c:6d:70:47:aa:01:a1:e2:3e:
         2b:f0:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:18:06 2026 by rpki-client