Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
File:                     e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json)
Hash identifier:          pszGc6/WF0//ERa2lwyBzZZWUYagRD/tBGVnbCbUMtc=
Subject key identifier:   21:D7:01:2C:80:0E:D7:44:2F:81:E9:62:3B:A0:9A:42:44:0A:5A:50
Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4
Certificate issuer:       /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
Certificate serial:       09A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
Manifest number:          0999
Signing time:             Sun 20 Sep 2026 19:56:06 +0000
Manifest this update:     Sun 20 Sep 2026 19:56:05 +0000
Manifest next update:     Sun 27 Sep 2026 19:56:05 +0000
Files and hashes:         1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: 7hMNK/5G/OXqFFR1tVOLeg3bJDC6KHw31H1OIlgbwKY=)
                          2: 7E854EB2BEEF11F084D11C58C4F9AE02.roa (hash: X+eBxovvqzHyCJboQeyc2wo6Qm3l7D8nVBLA57hyGZk=)
                          3: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (hash: OFe6pYT5si7P735ls7Y5SGcQNrbPBZR9CsKE32oRmEA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4
        Validity
            Not Before: Sep 20 19:56:05 2026 GMT
            Not After : Sep 27 19:56:05 2026 GMT
        Subject: CN=6ab03a56-4252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:99:ae:81:fd:ed:84:50:8d:67:88:9e:08:
                    9f:48:1f:16:7e:50:9c:9a:2d:b4:4a:69:96:31:c7:
                    d4:45:20:7b:f6:02:57:82:59:42:4b:77:52:ad:80:
                    1a:c2:04:6b:bb:4c:64:c1:df:13:cc:a0:87:b5:78:
                    e1:a0:bf:97:cd:bb:0c:94:60:22:7e:8e:be:67:f0:
                    37:38:c1:6a:6e:78:ed:da:5c:c6:4f:53:05:39:44:
                    f6:5e:48:3b:ec:01:3a:ed:e5:26:24:0d:94:8c:5b:
                    38:32:ee:a4:26:3d:cf:67:0b:c7:71:72:0e:0f:e1:
                    c9:51:5b:94:f2:ee:ed:c1:74:01:57:ae:75:3b:a6:
                    b6:55:98:1f:a6:fc:51:25:7d:f1:8c:44:1a:38:68:
                    12:0f:0d:a4:7f:cb:7d:99:02:89:5c:41:08:99:43:
                    a8:19:8d:f5:2b:60:71:c1:f5:fe:f7:bb:6a:45:c3:
                    9d:62:bb:a6:b9:73:83:26:e5:e7:39:87:ac:31:52:
                    0c:9b:c7:41:69:06:a0:dc:88:f4:dc:7b:29:cf:8e:
                    52:64:82:45:ae:17:fc:07:50:fe:0a:a8:ad:30:be:
                    e3:ed:e0:7b:9a:b2:6b:45:a7:2a:3a:07:26:3c:31:
                    45:77:bc:41:e8:87:12:65:43:40:e2:98:4e:2c:90:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:01:2C:80:0E:D7:44:2F:81:E9:62:3B:A0:9A:42:44:0A:5A:50
            X509v3 Authority Key Identifier:
                keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4c:36:aa:85:08:ea:95:06:26:69:b0:4e:66:51:57:eb:7e:
         94:cf:76:59:26:50:96:75:00:f6:b6:15:8d:53:87:92:fd:55:
         e9:b7:e9:c6:9e:b0:4c:49:5e:ad:94:62:b9:35:2b:45:ad:8d:
         10:53:87:30:d5:84:8f:df:19:07:21:25:96:73:b0:4d:80:65:
         18:49:4e:51:a4:8d:32:04:6b:9e:62:85:7c:28:35:5b:71:73:
         5b:55:d3:28:da:6a:e5:c8:49:43:09:ea:d3:e9:e5:67:98:62:
         f2:9a:ac:71:c1:22:df:8f:71:d9:01:08:6c:43:5c:ea:45:77:
         53:fc:3f:99:e7:10:5c:59:ad:1f:30:29:ef:9b:df:e8:af:d5:
         92:59:9b:ce:bf:60:fe:1b:36:3a:c1:64:4a:4b:49:9e:06:f7:
         11:e5:4d:5f:73:a8:51:54:96:29:85:34:f0:8b:8f:61:2f:b2:
         36:d7:4a:46:f8:ed:fa:72:b3:48:74:4a:55:ac:ac:29:c9:b2:
         68:11:7b:e9:83:59:3d:d1:70:0a:90:c9:eb:96:6b:01:c0:8a:
         68:96:0a:26:7b:1d:d0:ea:9c:b7:18:82:6c:6b:f8:65:14:6b:
         9e:d4:9c:3c:11:a5:35:0c:15:3e:5a:c3:4d:84:cd:f4:2c:e1:
         d7:f0:8b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:28 2026 by rpki-client