Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
File:                     rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft (raw, json)
Hash identifier:          bAIg+B2g17JJImcdF/sJxt1L5x3dyZ4DOcOj44rcypU=
Subject key identifier:   5B:5B:D1:C2:84:A5:7F:9E:D2:D7:EB:3E:6A:72:00:DB:CE:D6:08:54
Authority key identifier: AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2
Certificate issuer:       /CN=A91CB765/serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
Certificate serial:       05EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
Manifest number:          05D7
Signing time:             Sun 20 Sep 2026 22:53:31 +0000
Manifest this update:     Sun 20 Sep 2026 22:53:31 +0000
Manifest next update:     Sun 27 Sep 2026 22:53:31 +0000
Files and hashes:         1: rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl (hash: TpsdYMO7FRsY5tZV8PGkEG8J1Jn8/Z98Xdr1ojZIFng=)
                          2: sqGj_F7T0xSvuoydrD7DOYOYmL4.asa (hash: WjE8a7bssxFoeRxVqoTfMjV9rANOzfHTYw3K71/tV5E=)
                          3: E66070EE36F911F0B0111510C4F9AE02.roa (hash: KwF38ZBP8Utf4qS1kbQsJebYoDtue89xp1vHyUdKSU0=)
                          4: Sfnoau1p4nQyCYhdbS1yqwztDEs.asa (hash: oeHwimBa5repKOUMjgvQtcXZEIdBswSyYd5r0iIeCns=)
                          5: F9A8F3561F3D11ECB2E88C32C4F9AE02.roa (hash: nMAueD71AbMo3NTxzg/tId7Satepp1btvdBVnm0IwvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB765, serialNumber=ADF312EA68B7F05DA6101080F98322FBD65918B2
        Validity
            Not Before: Sep 20 22:53:31 2026 GMT
            Not After : Sep 27 22:53:31 2026 GMT
        Subject: CN=6ab063eb-dd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:df:e5:fb:71:2f:f6:01:6a:ad:d6:95:5a:a9:
                    37:62:e7:b1:64:eb:52:5c:11:b8:5d:9e:14:6b:89:
                    33:cf:df:17:76:a1:d5:23:dd:5e:c3:b5:73:a6:79:
                    24:c8:5c:2f:4e:57:97:ff:e8:78:e8:d3:99:3a:fc:
                    7e:de:56:8f:fb:05:4d:42:1b:7f:cb:d8:a8:8c:a3:
                    c1:92:90:d6:c1:8a:f5:66:5c:74:77:af:12:07:52:
                    da:49:2a:ca:c6:16:66:c5:7b:ea:78:ed:dd:b8:a8:
                    ba:f2:9e:a5:b9:a0:6d:78:8e:3a:2d:61:6a:42:09:
                    f6:c7:48:b1:a0:dd:f4:58:68:97:f7:da:7d:eb:f6:
                    83:21:93:1e:6d:be:53:3a:0a:3c:f8:3c:eb:49:67:
                    2b:a5:b5:ea:5d:7c:41:2d:12:50:9f:aa:3c:dc:ea:
                    9a:ec:da:ed:78:c6:e6:6d:60:d8:95:db:e5:85:52:
                    56:4c:b7:98:67:53:bc:9f:fd:9c:2a:c7:fe:43:72:
                    44:73:d2:bb:d3:25:26:73:94:31:66:d1:06:10:67:
                    8e:ce:56:0a:3e:26:84:3b:28:8f:fa:a2:e8:e8:04:
                    d8:ad:7c:ff:72:26:a5:c5:6f:16:82:b1:62:8c:f1:
                    7a:4c:a7:c7:93:f4:34:f0:f7:04:22:3e:21:af:4b:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5B:D1:C2:84:A5:7F:9E:D2:D7:EB:3E:6A:72:00:DB:CE:D6:08:54
            X509v3 Authority Key Identifier:
                keyid:AD:F3:12:EA:68:B7:F0:5D:A6:10:10:80:F9:83:22:FB:D6:59:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rfMS6mi38F2mEBCA-YMi-9ZZGLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB765/A4DDFA941F3B11ECB7DC452FC4F9AE02/rfMS6mi38F2mEBCA-YMi-9ZZGLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:25:fa:d8:39:94:1d:fb:a9:ec:b0:cd:68:d6:3c:5e:cf:f2:
         0c:8c:77:57:2a:c3:ae:ae:9c:45:84:fa:08:29:ab:54:7b:42:
         50:ab:23:d9:76:fe:f7:81:57:5b:57:ac:95:25:01:b8:35:45:
         d0:7c:08:62:31:d7:da:b2:c5:a9:80:66:2a:97:1e:60:2c:b1:
         ac:f5:2c:78:4f:77:96:93:26:19:10:c4:a0:c6:fb:6b:8a:48:
         08:2c:f6:0d:dc:4c:34:92:2d:69:94:af:d4:47:4d:a4:5d:2f:
         96:73:df:53:23:6d:19:20:7f:01:c5:91:4d:98:ac:df:fb:5a:
         3f:af:71:16:b7:f8:f6:a7:a2:d5:47:3d:a6:58:fe:76:d4:15:
         dd:29:0d:68:ac:80:fd:d2:c2:44:17:ab:3a:b9:c7:20:71:4d:
         77:82:7c:ff:1a:84:83:28:22:ab:f0:81:a3:05:65:68:5e:47:
         3e:09:f6:04:0d:1d:34:67:07:af:cc:52:49:8c:e1:62:20:be:
         4c:b3:46:2f:58:c5:14:8f:a9:e5:5c:40:72:04:ff:be:05:61:
         8a:a9:5f:ca:ff:25:9d:44:69:43:16:1f:ad:14:9f:b6:d5:bc:
         cd:05:92:dd:df:41:fe:c9:31:5e:6e:44:ab:03:29:ed:5b:53:
         a0:c8:92:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:03:17 2026 by rpki-client