Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File:                     o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier:          4pgn7UV/R1MIDq7ZijJZN5NTut6jb30qD/Rp8k8LfM8=
Subject key identifier:   F5:06:D1:9F:97:3D:39:7E:FB:2C:6F:B3:03:3A:DE:3E:F6:F0:1F:E8
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer:       /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number:          01C2
Signing time:             Sun 11 Oct 2026 04:25:07 +0000
Manifest this update:     Sun 11 Oct 2026 04:25:07 +0000
Manifest next update:     Sun 18 Oct 2026 04:25:07 +0000
Files and hashes:         1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: nEqWxtq4m7LtjHlLH599THcwORpT5U8KAze3fFijgSM=)
                          2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: E+4dNZzrdNIAmtr7QQVR714FjR1jDehtxZlaTTYgGhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
                          rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
        Validity
            Not Before: Oct 11 04:25:07 2026 GMT
            Not After : Oct 18 04:25:07 2026 GMT
        Subject: CN=6acb0fa3-c18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:29:78:74:30:e4:a9:4d:2d:67:b1:a1:cd:
                    10:26:f9:b1:d2:83:54:a5:a0:c2:f7:3e:ee:9e:c9:
                    60:94:d7:a4:cf:a4:85:73:ab:a7:c1:6f:c2:0a:70:
                    4e:d2:bc:48:32:3b:f4:e5:fb:45:f0:9b:37:34:91:
                    2e:15:68:f1:4d:d4:48:d9:99:1c:52:91:44:e1:4a:
                    c8:74:13:76:49:8c:d2:a1:bb:4f:a7:17:7d:ab:6f:
                    90:61:f1:6f:cd:0e:5a:7b:59:04:48:f0:65:61:41:
                    64:40:aa:09:69:81:76:b7:4d:c1:01:88:73:14:e0:
                    44:5a:54:ee:1d:cc:5c:ee:92:b1:de:4c:3b:f3:8f:
                    d9:3e:c5:1b:e9:64:51:0d:24:ad:bd:0d:cd:1b:69:
                    30:80:d3:ea:3b:9e:6e:9a:24:95:d4:f6:fe:b3:b0:
                    8e:b6:10:55:79:ef:af:78:e3:09:ef:1f:f1:f5:ee:
                    59:ab:08:cb:31:d1:45:b2:86:9a:ef:a8:37:8d:a9:
                    00:0f:77:b5:03:83:5e:66:51:f6:eb:3b:41:75:d0:
                    40:8b:0d:68:fa:7d:f6:4d:12:f6:2f:a5:1b:91:1f:
                    be:04:d2:30:f2:ff:2b:b9:eb:e6:25:e5:38:0f:39:
                    c2:67:76:bf:54:5b:39:5f:1c:6d:95:1d:0e:39:38:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:D1:9F:97:3D:39:7E:FB:2C:6F:B3:03:3A:DE:3E:F6:F0:1F:E8
            X509v3 Authority Key Identifier:
                keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e5:b8:34:89:e2:38:4a:cf:6f:49:a1:9a:cc:f3:36:b7:e2:
         04:bb:de:2e:67:a4:1d:27:2d:b2:40:88:be:7f:6d:27:95:96:
         25:f0:89:21:29:54:9d:c4:34:c5:bf:a5:93:1a:90:08:2a:02:
         95:c6:a1:bd:7e:64:9f:82:1b:03:b2:a5:83:3e:f2:38:f0:6c:
         e4:07:6f:af:7a:3b:48:cb:d5:ad:25:6d:8b:0f:a3:49:3b:2c:
         80:da:09:79:03:09:33:eb:f6:82:6d:db:73:92:88:f1:d5:4c:
         28:2e:50:fe:7a:ef:bc:c7:29:0c:32:2d:0d:37:67:78:b9:9f:
         2c:47:66:f9:bf:da:be:7b:b4:70:ec:11:50:28:5d:de:34:f9:
         7a:25:b3:9c:4a:6e:e5:a3:d6:37:fd:37:29:67:57:48:02:ae:
         40:74:4b:a1:4a:ff:02:c5:2e:32:3f:d1:45:a5:cf:6e:b8:c0:
         8f:23:bf:c7:4d:44:e0:2a:4e:93:c6:0b:fe:1e:e8:0a:d7:30:
         4c:ed:88:da:df:00:a9:82:78:a5:8d:fd:80:8b:74:0c:a9:e7:
         a3:96:90:04:10:e4:c6:aa:c0:06:0c:47:8d:2b:b1:4b:f7:08:
         29:c1:6d:84:92:6d:2f:fc:ee:b6:56:e0:8e:9f:9c:55:dd:9f:
         55:94:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:02:49 2026 by rpki-client