Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
File:                     cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json)
Hash identifier:          ai82XOVY6524264DotD9+hlnp1nAH8NNUaEhC3veVL0=
Subject key identifier:   5B:0C:D4:0C:E0:73:85:6E:F9:CC:6E:5E:C3:38:A0:04:C6:63:D8:E5
Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Certificate issuer:       /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Certificate serial:       02F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
Manifest number:          02DF
Signing time:             Tue 13 Oct 2026 01:36:34 +0000
Manifest this update:     Tue 13 Oct 2026 01:36:33 +0000
Manifest next update:     Tue 20 Oct 2026 01:36:33 +0000
Files and hashes:         1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: NSPehGSY7gH4RKCRf4QMoGCkPu7no0H9OLd1ibk1CfY=)
                          2: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: P6xx3LV0yIZz7Bt3wASwzM1QkFL56uH39jrYrM1xsJw=)
                          3: 680147B486F311F1B8F66003A7EE528E.roa (hash: vd6Z39KPLKcomn09hEZQiUw+JqJNW7KhM+nNsWSg93s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
                          rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
        Validity
            Not Before: Oct 13 01:36:33 2026 GMT
            Not After : Oct 20 01:36:33 2026 GMT
        Subject: CN=6acd8b21-f1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cc:51:1c:7d:bb:7b:b8:f9:10:37:88:9f:ee:
                    12:dd:5b:9b:8b:10:52:46:55:5d:27:47:71:b8:0e:
                    0d:36:af:18:f2:ff:a9:29:6d:55:6d:f8:1a:c6:ae:
                    25:d5:da:d9:97:9c:cf:29:fe:e5:f5:4b:58:79:9b:
                    39:91:2b:e8:14:3c:7e:28:f5:4e:1f:5f:df:28:61:
                    94:58:68:ca:c1:5c:d0:4f:00:81:b7:11:80:05:8e:
                    9f:74:8a:96:db:3c:7e:e9:fd:66:ac:68:2f:b5:f4:
                    0e:16:b5:0b:d4:e9:dd:d7:0f:fa:70:e8:cd:45:3f:
                    3d:bd:ef:45:6d:e4:f4:a1:f1:4d:0f:dc:88:9c:f8:
                    f7:63:6d:6b:ca:0c:d1:a6:6c:4f:2a:c4:bb:e9:73:
                    68:13:3c:fa:2c:70:e6:34:6e:35:f7:19:01:b5:6e:
                    6e:a2:34:79:67:cd:d5:8d:e9:25:82:70:88:a1:4c:
                    f9:8c:3e:3d:f0:f2:65:71:77:30:52:f8:85:e9:4f:
                    2f:f3:3c:cc:93:e5:fd:be:8e:70:ae:78:9c:f9:13:
                    7d:63:ae:79:cb:d0:16:13:9a:44:8b:42:b3:79:a8:
                    68:1b:ab:95:84:b7:0b:d1:a9:ca:31:0a:73:75:8a:
                    4f:92:4f:16:8d:ed:bf:93:b6:c0:bf:a6:ca:1b:86:
                    4d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0C:D4:0C:E0:73:85:6E:F9:CC:6E:5E:C3:38:A0:04:C6:63:D8:E5
            X509v3 Authority Key Identifier:
                keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:70:81:93:e3:1a:4d:c2:77:e1:f8:6f:5a:a5:a0:68:61:be:
         a8:26:65:cc:37:14:a3:cd:9c:b2:85:e7:51:a6:79:6e:06:e2:
         ac:b1:28:42:ae:1c:fe:bd:d0:45:52:a3:80:c8:c6:01:94:58:
         fe:da:aa:ed:c4:07:20:c1:d0:25:0f:21:8f:5b:1c:59:40:11:
         d3:25:d4:d5:35:2e:16:3a:a6:ce:6e:e8:47:ab:cf:bd:55:e0:
         30:99:08:e8:07:1e:54:4f:94:f7:db:59:98:7e:bb:3a:89:1a:
         67:ce:14:ac:5c:ad:98:7a:e5:4d:78:42:17:c4:56:2e:ec:39:
         63:da:da:b9:a4:fa:4c:b1:52:10:b6:cf:b7:df:7c:a0:60:d1:
         96:81:3a:0b:fe:dd:57:d5:d0:4c:a4:53:26:e1:8d:de:9d:dc:
         56:25:5f:e4:ea:0b:b2:01:27:1e:ff:7a:f6:2f:a8:25:0c:13:
         8f:03:ce:b9:89:19:08:78:e6:54:99:16:fa:89:05:e7:08:fb:
         de:5c:09:e7:67:fd:ce:56:6e:61:fd:e5:d8:7c:88:3f:e0:9b:
         5e:08:27:1d:e2:fe:09:25:dd:ae:fd:56:51:01:80:7b:58:70:
         01:10:2e:1c:e2:8b:87:83:19:56:be:3c:b2:90:50:53:25:cb:
         46:fb:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:15:24 2026 by rpki-client