Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
File:                     jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft (raw, json)
Hash identifier:          Nh+TZaCt/2PrYi0UtUQ8WrfJXFBL4Prvf2VUSv0IvvY=
Subject key identifier:   79:BE:34:48:13:3A:29:00:60:79:DD:31:D4:B7:80:8D:AF:8E:08:66
Authority key identifier: 8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1
Certificate issuer:       /CN=A91B2A6F/serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
Certificate serial:       0B43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
Manifest number:          0B33
Signing time:             Mon 12 Oct 2026 19:24:33 +0000
Manifest this update:     Mon 12 Oct 2026 19:24:33 +0000
Manifest next update:     Mon 19 Oct 2026 19:24:33 +0000
Files and hashes:         1: jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl (hash: oOhw9e7xBcTwahY1LX9vyC3mXBYeruyJj7SIrHNEZxE=)
                          2: A59E2538BA0211F0892F7E0BC4F9AE02.roa (hash: Hl3Xyx26gpFtLsuBQgWv+ANMc2eZUQOg0WhN0n2+tFM=)
                          3: BDC0899A1FF511ECAE74F266C4F9AE02.roa (hash: QI3TTTsJntpzM6Jwiamem8N1Qiw1xr173Za9wXlnaQk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 19:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2A6F, serialNumber=8C5A8997FCA5BF0270EAF86EE8C0CB6551AB97D1
        Validity
            Not Before: Oct 12 19:24:33 2026 GMT
            Not After : Oct 19 19:24:33 2026 GMT
        Subject: CN=6acd33f1-3abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:ba:a2:17:3f:7e:85:8f:d2:57:88:da:d3:
                    50:3d:98:0d:8c:e7:64:bb:1b:91:96:1f:0a:5b:4b:
                    4a:64:4c:db:0e:17:09:1e:04:8b:a0:17:da:08:09:
                    60:6b:91:8a:de:5b:f2:00:72:e1:33:3c:4b:a8:b3:
                    b6:76:97:c1:1c:91:f3:7e:c3:87:42:17:47:1b:a6:
                    07:7b:78:2e:ce:57:10:03:87:52:b1:ef:e0:71:d5:
                    73:6c:ac:8f:05:25:77:ec:7e:e9:4b:42:df:e3:72:
                    c0:db:99:eb:29:e1:57:69:07:df:6f:8c:76:15:10:
                    5c:fc:57:25:6a:52:4b:9d:a9:60:9b:9a:ca:4c:bc:
                    a2:db:ee:02:6a:a6:c6:9c:ef:64:7f:bd:4c:76:11:
                    b5:43:b4:91:ee:7b:fa:af:80:cb:d3:94:e9:31:db:
                    10:f5:ed:96:2a:98:cf:41:0a:5c:21:12:bc:b1:db:
                    16:9d:28:3f:ee:c3:48:bd:78:1f:84:ee:5d:4c:9e:
                    7d:65:4e:f6:c0:96:29:a6:5f:eb:8e:78:e8:59:fb:
                    05:13:7c:59:6a:0f:7c:e9:f6:ba:96:61:2a:d2:d7:
                    56:67:80:6e:ac:6e:96:7c:f3:99:92:75:5c:9a:91:
                    85:fa:ea:74:75:3e:7b:8b:28:ed:aa:8b:0f:66:0c:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BE:34:48:13:3A:29:00:60:79:DD:31:D4:B7:80:8D:AF:8E:08:66
            X509v3 Authority Key Identifier:
                keyid:8C:5A:89:97:FC:A5:BF:02:70:EA:F8:6E:E8:C0:CB:65:51:AB:97:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFqJl_ylvwJw6vhu6MDLZVGrl9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2A6F/CADFF2FE6E3611EAA10EFF76C4F9AE02/jFqJl_ylvwJw6vhu6MDLZVGrl9E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:1f:bd:30:c7:41:d3:92:24:b3:e9:21:18:33:f4:cf:bd:0c:
         8e:12:bd:cb:4d:d1:d4:5e:93:d0:0d:2c:4b:2c:9c:19:cd:d9:
         1d:84:59:22:91:b1:6b:24:aa:bf:58:90:86:ef:2d:60:ab:72:
         e4:88:ad:38:ec:a3:27:cf:cc:83:a8:a8:fe:6a:63:e4:b8:e7:
         f7:f2:72:6e:ef:eb:70:64:02:a5:50:57:3d:b8:7a:14:f2:67:
         89:3c:fe:0c:50:cc:82:60:8c:e2:9b:8a:b2:51:fb:80:85:9d:
         1c:ca:29:16:9d:2f:db:ad:65:1b:16:8f:b6:01:28:b9:f4:a7:
         ff:de:cd:dd:15:05:05:7d:75:e1:25:dc:b2:dc:22:97:83:10:
         0b:a0:c4:7e:99:f1:9e:98:e0:66:41:f8:66:cc:8e:be:44:d9:
         88:02:a2:e7:e8:69:fe:36:1f:07:ba:f2:9d:44:e2:ee:b4:b8:
         a7:95:97:52:7e:bb:07:20:fd:b7:79:df:da:6b:c9:a7:22:90:
         e0:d7:a9:f9:33:c2:6b:31:46:4d:be:20:03:b3:4d:b6:87:2e:
         39:2a:a5:62:af:2f:48:90:45:fa:1e:03:67:8d:42:d7:15:87:
         9d:78:d7:0a:b9:5e:29:b0:dc:08:ef:1c:8e:df:99:23:92:62:
         44:bf:c9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:54:02 2026 by rpki-client