Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
File:                     vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json)
Hash identifier:          f1BV0Kx+DBjhNg7/PvtI54cB5cvIGJP0kQ4WoSI3mYo=
Subject key identifier:   EE:8E:B8:C6:2F:11:EC:60:E8:8E:F3:55:D3:C5:1C:BD:FA:6A:A4:37
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Certificate issuer:       /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
Manifest number:          15D5
Signing time:             Fri 02 Oct 2026 18:30:35 +0000
Manifest this update:     Fri 02 Oct 2026 18:30:34 +0000
Manifest next update:     Fri 09 Oct 2026 18:30:34 +0000
Files and hashes:         1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: ccMZkGLWpM4KoiLrkxrreqW5OpvHssct7vSZHSuvrWY=)
                          2: 7C0FB3666B7F11F0A9B64752C4F9AE02.roa (hash: nHHzFrXJRcXIb2I9fczhxDS1jU+m1O4shauWLpm0dzk=)
                          3: 3FF2864AA43D11F1B8FFEA023611F970.roa (hash: Kk0AuJ/Ryqtzie4lfhU9TW/rv+oP1/JoDGak//4Qkco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
        Validity
            Not Before: Oct  2 18:30:34 2026 GMT
            Not After : Oct  9 18:30:34 2026 GMT
        Subject: CN=6abff84a-6e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:9d:23:76:dd:fb:42:6e:1b:d7:3d:cd:2b:
                    6f:60:6d:f0:8c:1a:94:a0:30:ce:fe:0c:f0:bb:8d:
                    21:f1:1c:7a:37:f3:20:fb:53:3c:4e:91:28:b2:f4:
                    64:d9:15:6e:3d:90:0d:f2:3b:e2:19:a8:51:3a:1d:
                    b6:45:f0:90:04:95:37:cf:f1:f7:7c:37:e9:ef:f2:
                    dd:35:a9:d4:db:55:9e:3f:ba:96:a7:37:95:f7:93:
                    ce:64:33:5f:e5:25:2a:7e:c9:3b:9a:d7:65:bd:b4:
                    b0:d6:50:e9:b4:63:61:fa:bd:a5:84:17:a7:a7:2d:
                    7d:d5:71:a4:d5:26:d9:02:40:26:e4:78:bf:eb:ce:
                    d2:23:ce:32:39:c8:66:81:f1:e3:05:3b:4b:96:61:
                    7e:91:01:03:f5:03:72:72:35:bc:a2:0d:4a:a0:4e:
                    b2:fc:01:f9:e1:a3:97:e3:81:a1:a7:45:82:c0:22:
                    e4:19:90:d2:5e:e8:cc:43:57:91:b2:cd:58:b1:09:
                    aa:ff:89:a5:e2:d0:b3:54:ee:47:1a:73:4d:f1:a0:
                    ee:46:95:9f:33:80:12:bb:64:61:4f:6c:09:90:d5:
                    0d:22:0b:9a:5e:78:91:c7:bb:39:76:19:51:ed:cd:
                    52:8a:42:28:88:54:f9:8a:fe:d5:97:8b:f7:4a:92:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8E:B8:C6:2F:11:EC:60:E8:8E:F3:55:D3:C5:1C:BD:FA:6A:A4:37
            X509v3 Authority Key Identifier:
                keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a7:db:86:9e:22:ad:24:ae:4c:2b:c2:5b:68:64:f3:a8:40:
         5e:1f:ab:cb:93:b1:34:9c:f3:9f:21:c1:88:53:10:00:38:e1:
         ae:38:26:a2:b8:a1:6b:13:d7:26:48:a3:87:08:fd:5d:8f:fe:
         77:21:2c:be:ae:04:0c:a1:7a:c0:71:80:f1:7e:67:3f:83:77:
         6f:05:a8:08:db:31:ea:f6:dd:a0:17:c3:6b:ec:c7:d2:a7:80:
         44:76:d4:46:d1:64:4d:eb:c5:6b:3f:a4:08:d6:0b:1e:b7:11:
         cc:6f:8b:bf:ff:c8:89:4f:1c:d6:1e:9d:da:63:a2:a3:ea:ec:
         63:7e:cc:53:24:69:1e:8f:2f:2d:dd:7a:4c:ea:34:fa:c2:c6:
         70:3e:74:fc:4c:04:1b:0c:04:87:b5:42:a2:b8:de:1c:ea:bd:
         ef:d5:49:9e:ba:ed:68:e6:34:43:54:4c:f2:d8:77:58:9b:89:
         5b:f5:45:41:00:01:51:84:69:8d:9b:27:d4:89:53:6b:0c:13:
         ff:81:ed:03:8a:79:ce:5a:f5:d4:d7:da:59:4d:a6:c4:81:cf:
         1f:41:af:d3:8c:4c:5a:41:41:ee:4b:b2:b4:0d:7e:79:38:b3:
         b9:0b:35:c1:99:7e:b5:cb:4a:6d:06:29:a6:33:70:be:fb:dc:
         9d:10:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:18:53 2026 by rpki-client