Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
File:                     wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft (raw, json)
Hash identifier:          eXnPpyPi8zfFH9Tbo/YY8C4KnNY1nN8XmpRdQOu/iy4=
Subject key identifier:   A9:65:5B:C2:C9:0F:90:A2:5A:C7:EB:00:E5:D5:71:0B:FF:2B:CB:C9
Authority key identifier: C0:57:E8:39:9F:35:16:06:2C:D2:B8:EC:6E:08:DC:2C:48:AC:31:34
Certificate issuer:       /CN=A91C5911/serialNumber=C057E8399F3516062CD2B8EC6E08DC2C48AC3134
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
Manifest number:          54
Signing time:             Sat 03 Oct 2026 08:56:15 +0000
Manifest this update:     Sat 03 Oct 2026 08:56:15 +0000
Manifest next update:     Sat 10 Oct 2026 08:56:15 +0000
Files and hashes:         1: wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl (hash: lF27TkOXz0Q0gz8ANmxCqmWISfozOgC2WG53VGXPnr0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5911, serialNumber=C057E8399F3516062CD2B8EC6E08DC2C48AC3134
        Validity
            Not Before: Oct  3 08:56:15 2026 GMT
            Not After : Oct 10 08:56:15 2026 GMT
        Subject: CN=6ac0c32f-d533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:04:78:29:ad:5e:28:b7:28:73:2b:9c:bb:2b:
                    4d:37:37:e8:9a:b8:97:e2:79:93:ec:bd:f9:9c:a9:
                    d2:54:d1:7b:b5:7f:61:d0:92:2f:c4:e4:44:2d:7f:
                    15:80:9b:23:3c:bd:b5:c9:8e:a7:79:67:f1:1c:01:
                    3e:5f:28:3a:51:c5:45:bf:9a:d5:ba:4e:70:54:33:
                    55:1d:bb:c4:57:aa:fa:ef:80:cb:7e:1b:87:d7:c8:
                    e6:1f:7b:80:01:8e:52:c4:1a:ed:29:e2:53:4e:71:
                    5c:18:f0:d5:f0:13:d5:30:b2:aa:93:40:78:5c:7d:
                    ca:c5:46:54:bd:60:1a:28:27:64:b4:f5:21:c2:c4:
                    f2:76:3c:01:d2:25:da:93:ba:23:f0:e2:a2:13:1a:
                    72:57:b0:a1:6b:78:41:59:73:ee:da:35:4b:11:f3:
                    8c:ff:a5:13:20:18:46:96:39:24:29:d4:68:cd:22:
                    49:7e:2f:4b:a2:10:b7:63:d0:d6:b9:18:a8:da:bb:
                    aa:bb:3d:f7:e8:d5:09:28:62:4d:f4:2a:b4:93:7e:
                    a9:aa:09:9a:7e:b7:84:ec:c9:4f:5d:7a:94:8f:2f:
                    12:e3:cd:eb:f6:0d:e9:b1:df:2b:24:a2:0c:bf:af:
                    cf:a5:c9:15:ad:1c:5d:b8:f3:cc:3c:e6:dd:0c:d3:
                    97:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:65:5B:C2:C9:0F:90:A2:5A:C7:EB:00:E5:D5:71:0B:FF:2B:CB:C9
            X509v3 Authority Key Identifier:
                keyid:C0:57:E8:39:9F:35:16:06:2C:D2:B8:EC:6E:08:DC:2C:48:AC:31:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFfoOZ81FgYs0rjsbgjcLEisMTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5911/C35392263E0411F1871F0B19A6833773/wFfoOZ81FgYs0rjsbgjcLEisMTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:10:8f:d9:fe:23:dc:67:70:42:47:44:31:83:bc:43:6b:1b:
         95:5f:e3:2a:26:1a:67:7c:d8:c4:c5:b9:8e:70:c0:61:c1:12:
         31:0f:2b:2f:30:60:3b:f0:c0:65:8e:f3:26:03:ae:bb:84:9c:
         7e:cf:9c:33:af:c2:38:8e:d8:37:c7:ab:46:3b:88:64:56:43:
         20:08:22:80:7e:83:8b:9c:f6:f4:39:ce:aa:cf:8a:21:b4:ee:
         7c:7e:0e:ae:cd:de:aa:5b:2e:89:75:87:d0:ee:a6:b2:c4:63:
         88:91:f6:9b:fc:d4:f7:26:62:6e:da:e1:43:b6:82:af:ef:89:
         24:7b:df:19:f9:6f:2a:17:4d:43:3f:05:a3:e8:5b:29:da:e6:
         8c:a4:87:cc:13:a7:f4:64:71:7e:2c:fd:fd:51:b3:5e:20:3a:
         02:7f:25:e7:ca:88:07:a6:f0:49:c1:c0:39:ee:70:53:18:11:
         4d:47:30:f4:ff:cd:76:2f:01:54:55:19:cd:42:1b:5c:25:03:
         14:cc:f5:83:1a:00:e6:2f:bb:8d:be:94:78:69:d7:78:5c:4c:
         b9:d9:31:53:6a:38:63:87:9e:f8:45:82:ac:97:05:c3:79:21:
         1d:87:30:28:11:e8:cb:96:64:2e:c4:ea:dc:ae:99:51:73:59:
         1b:71:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:21:58 2026 by rpki-client