Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File:                     t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier:          ekoHSam701IOrs9HHac5Jcu9oKiMvXMYDXfHS2xnasU=
Subject key identifier:   43:9F:46:BD:22:7A:52:D8:DB:9E:99:D5:7E:4C:A4:D9:78:77:2B:28
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer:       /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial:       1C32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number:          1BDC
Signing time:             Sun 04 Oct 2026 16:15:50 +0000
Manifest this update:     Sun 04 Oct 2026 16:15:49 +0000
Manifest next update:     Sun 11 Oct 2026 16:15:49 +0000
Files and hashes:         1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: zcLXJsi3dn6+w5mNsRZa1MpOizfOIuEdJmIFm663BLU=)
                          2: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: AD+/rm2MmNUok2HarnjytNgvmBO5YkdTWhvT8ie3l4U=)
                          3: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: W8hlVsC5I0VPPg2kjR6TpTtecD0WvUvNvC2e5sJ/hIQ=)
                          4: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: 1NxyYZi8z+4zSdOTPHU5FWVo8GDquYcWL1OwjVPiKNg=)
                          5: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: ZaZYPfA17ML/f/J4P82QVyDEPcDzxxZaNFjB0O9tVyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
                          rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7218 (0x1c32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
        Validity
            Not Before: Oct  4 16:15:49 2026 GMT
            Not After : Oct 11 16:15:49 2026 GMT
        Subject: CN=6ac27bb5-e374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:49:fb:88:fc:78:56:a1:ff:0b:15:4e:d5:
                    da:48:45:71:bd:7e:31:5c:32:4f:cb:4a:32:3b:7e:
                    77:82:6f:a8:62:79:12:77:99:48:00:7d:b0:2b:e9:
                    6a:59:29:94:28:e8:11:d4:31:92:03:ea:a2:20:ba:
                    e8:8e:be:09:fc:f8:4a:8f:a9:af:e8:f5:04:f5:a5:
                    8e:53:d0:a4:56:bb:8a:03:e0:1e:53:86:21:6a:1d:
                    d2:c4:57:e6:21:0d:48:34:c3:7a:e3:86:f1:90:59:
                    b7:ec:af:10:94:ea:96:c2:1d:85:99:ac:71:83:86:
                    3f:a5:eb:59:f8:5a:3b:20:27:99:11:c0:88:7c:16:
                    95:ed:a5:bb:d9:5a:21:72:da:85:b3:21:20:10:65:
                    f7:61:cc:f1:ac:34:4e:8a:69:1d:2e:e2:04:4c:04:
                    8b:b2:5a:92:09:28:d5:84:a4:82:8d:a5:7a:82:1d:
                    39:c1:26:49:eb:88:0e:5b:47:f8:24:ea:4b:8d:6e:
                    1a:0b:f3:61:3f:9f:bf:fc:8f:13:84:3c:4c:2c:36:
                    d9:c2:d1:81:06:00:37:ba:fb:8f:51:28:bb:9f:f8:
                    82:b2:fe:ac:71:01:54:f9:66:cd:4d:eb:19:70:40:
                    6f:da:c2:cc:b5:8d:2a:8d:25:86:45:cb:42:8c:7f:
                    7f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9F:46:BD:22:7A:52:D8:DB:9E:99:D5:7E:4C:A4:D9:78:77:2B:28
            X509v3 Authority Key Identifier:
                keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5a:70:01:e3:c1:78:b3:ab:22:61:7d:45:3b:10:10:4c:d9:
         0b:c4:de:f8:5f:a5:25:4e:9d:fd:a0:2b:5b:f2:35:e4:26:c1:
         b9:0a:3f:1f:23:42:19:54:43:42:c6:22:45:fe:68:c4:c4:91:
         ad:2b:ae:eb:b2:3e:a5:bf:c4:da:ee:99:13:37:f6:3b:80:b0:
         39:7d:08:65:1e:77:e7:15:bb:db:d9:c2:b4:69:5e:45:e2:9c:
         56:54:76:93:6d:e6:e0:b6:d0:6d:0d:b8:f0:64:e4:8d:21:06:
         b1:89:e0:a4:37:c1:2d:8b:16:9b:75:60:5b:27:08:25:78:7b:
         93:1f:27:4f:bf:19:ee:d0:65:34:63:09:81:4f:56:54:d1:e8:
         db:12:64:51:77:14:3e:d5:f7:62:c8:37:42:d2:ea:63:e5:91:
         57:69:52:05:7f:fc:46:4c:e3:29:13:42:83:d5:2d:0b:b8:e0:
         56:24:9a:91:9d:66:29:98:f7:f3:3f:de:55:27:e7:b2:c1:0a:
         de:84:0e:97:2d:7c:e3:e7:27:5d:65:ca:66:ba:d1:07:a1:23:
         70:31:a5:65:48:d5:c6:f4:b6:e7:31:b0:b8:90:eb:94:f0:fa:
         2e:6e:fc:5c:bc:58:4f:4f:6e:52:ea:c1:8b:25:12:5f:72:a5:
         c1:29:7e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:59:36 2026 by rpki-client