Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
File:                     5EZZ6m_c00PGwef_0BSlsHgYlos.mft (raw, json)
Hash identifier:          lu8RU+75aWl/t0M2WWgaL7gLL0XSSDhxc2JBC0eUDGE=
Subject key identifier:   79:6B:BD:51:36:1C:7D:C4:9A:AD:4E:0C:5A:56:0F:3A:57:C3:1E:36
Authority key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B
Certificate issuer:       /CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B
Certificate serial:       07BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
Manifest number:          07B1
Signing time:             Sat 26 Sep 2026 21:34:00 +0000
Manifest this update:     Sat 26 Sep 2026 21:34:00 +0000
Manifest next update:     Sat 03 Oct 2026 21:34:00 +0000
Files and hashes:         1: 5EZZ6m_c00PGwef_0BSlsHgYlos.crl (hash: QaHlN+dwjVX3lXGl5y9LNgzN7DeJVld8iHDo/aWhw7k=)
                          2: C8FB0DB8616D11EB928F0250C4F9AE02.roa (hash: MGnp83DG6LQ3pBTGZSOqna2+szDEN2VP3ADbsJcanb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl
                          rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3062, serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B
        Validity
            Not Before: Sep 26 21:34:00 2026 GMT
            Not After : Oct  3 21:34:00 2026 GMT
        Subject: CN=6ab83a48-a012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:bb:d1:54:a6:4e:3e:cc:b8:b0:a4:29:e3:0d:
                    cb:8d:1d:4d:e5:74:d1:7e:bf:d2:60:27:70:dc:09:
                    75:cf:e4:b2:37:56:62:8b:47:f9:be:dc:b3:cc:9d:
                    31:49:39:ae:ae:38:5a:57:c3:02:ed:4a:3f:46:2b:
                    54:f6:84:74:fd:10:6d:db:4c:0d:c7:a0:b5:37:9a:
                    b5:7b:86:e6:0f:60:36:8d:e0:c7:d5:e4:f0:dc:88:
                    7c:07:9a:a2:38:6c:da:8c:6b:7a:39:8f:73:6b:dc:
                    91:1d:8b:5f:6f:dd:51:f9:85:51:7b:f0:4d:98:c0:
                    4c:8b:54:95:93:ce:db:00:49:64:7c:30:1e:b9:88:
                    67:c9:ec:35:b6:09:ca:0e:fc:75:bb:51:bc:56:b8:
                    2a:b5:7a:1c:32:53:c3:c2:7f:06:db:5f:d5:1d:4c:
                    fa:67:8b:e7:5a:32:fd:ce:7e:b8:2a:b3:24:6e:3f:
                    58:b0:60:a8:b2:4a:f8:b3:38:91:4d:6b:cd:00:82:
                    e4:9e:dd:f9:91:d2:3e:01:05:14:c6:4a:b1:2b:6d:
                    db:2c:fb:90:23:7b:ae:4d:fe:d8:73:60:34:8c:04:
                    9f:ef:82:5e:22:8c:a1:56:70:a8:15:d2:7b:47:64:
                    8a:c8:19:86:38:36:f6:8c:ef:ca:5c:a5:21:7a:6e:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6B:BD:51:36:1C:7D:C4:9A:AD:4E:0C:5A:56:0F:3A:57:C3:1E:36
            X509v3 Authority Key Identifier:
                keyid:E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:08:e8:b3:cd:a4:49:74:82:77:f5:1c:5a:b6:fa:75:39:fd:
         5f:07:2d:85:d6:a3:f1:86:cd:aa:1b:3e:b2:8c:06:1b:5e:46:
         23:96:77:cd:76:1b:af:f3:ed:75:24:d1:4e:54:71:28:3f:a8:
         69:f0:6b:0a:97:7b:bb:c0:1b:fb:4f:ab:74:7a:e6:0c:c2:be:
         2d:b9:84:6d:cc:d0:03:47:46:0b:62:dc:aa:63:f7:f6:52:46:
         01:13:05:2d:cc:25:6e:ca:41:b8:fd:08:81:e8:0a:1d:2e:67:
         d6:4f:25:58:0c:04:44:7d:c2:ef:5e:fb:c2:8a:1a:b5:db:5a:
         24:6b:6c:67:6e:b2:dd:a6:6b:69:35:ea:c1:cb:cf:cd:6e:55:
         4c:ca:7e:f5:0b:6f:a2:73:9a:33:90:03:53:13:8e:d2:81:ff:
         7a:ad:a7:f5:03:f8:0f:af:6a:90:b0:e6:5b:b5:30:29:cd:d2:
         6d:75:13:fd:c1:3b:69:a0:27:86:74:49:1b:9c:f3:b9:50:61:
         fe:ef:cf:7d:e0:d6:f0:a7:7c:aa:a1:33:cc:d7:57:c0:3c:86:
         7c:74:78:07:fa:46:f0:98:82:8a:af:63:19:78:c5:d3:4a:a2:
         7c:78:9a:f5:d9:6b:24:2c:71:a4:09:12:a4:0a:fb:28:be:ce:
         2a:08:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:32:25 2026 by rpki-client