Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
File:                     5CnUKeZreXs9ihy-JJFXetw4pI4.mft (raw, json)
Hash identifier:          gcQTCRcIzlIn0T20d/dtKkDoKh+a7oXZ5VfJv3ceOXA=
Subject key identifier:   07:8D:ED:49:5D:2B:FA:DB:71:64:28:3C:DB:60:A0:EF:45:02:49:4B
Authority key identifier: E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E
Certificate issuer:       /CN=A91CC711/serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
Manifest number:          01E1
Signing time:             Sun 11 Oct 2026 04:27:37 +0000
Manifest this update:     Sun 11 Oct 2026 04:27:36 +0000
Manifest next update:     Sun 18 Oct 2026 04:27:36 +0000
Files and hashes:         1: 5CnUKeZreXs9ihy-JJFXetw4pI4.crl (hash: e5Zop53+CekXB77PHX3l6Ewtu3Ro8cHuShvRhHps748=)
                          2: 06FA65A81F2711EF98DA2926C4F9AE02.roa (hash: NZ41GePO+wVrHhL385esVXgxdvkRTvbJf+OBmKNcFbQ=)
                          3: 25ED44B41EE411EFA62B1335C4F9AE02.roa (hash: PUGLK3hnFXvhVOmJO/mpJIqVNCfFg3Hqylh+LQYF1dI=)
                          4: A7FC5DEE8D0411EFBD7A0057C4F9AE02.roa (hash: 1qP+GrX3zgK9BKEEg6Dkyc1WLFMQUS+ZMJmqVReMcJ4=)
                          5: 359CBDB28D0D11EF90882959C4F9AE02.roa (hash: NZgLuzLqNee1fYy4mFTHbT3bJ6KftmgEr6+x/+S42oQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl
                          rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC711, serialNumber=E429D429E66B797B3D8A1CBE2491577ADC38A48E
        Validity
            Not Before: Oct 11 04:27:36 2026 GMT
            Not After : Oct 18 04:27:36 2026 GMT
        Subject: CN=6acb1039-9dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:76:bf:2a:76:a3:ec:2b:c1:0d:41:b5:67:
                    21:e2:ad:a3:c3:7d:a9:f1:d6:bc:8d:5d:a4:8c:a9:
                    c2:7b:f1:60:81:75:ad:b2:c5:07:8c:01:b6:6b:17:
                    e7:b3:e2:79:1a:a9:19:7b:ac:8d:e4:f8:22:3d:cb:
                    b7:1d:4d:2d:e7:4f:15:e2:75:52:fe:98:0e:10:6f:
                    f3:2c:e1:b6:d4:60:72:46:3b:24:60:df:c5:05:d0:
                    ac:15:c0:66:6b:77:98:2f:bf:6e:1a:4d:8d:81:ae:
                    67:85:2b:4f:e3:c6:da:23:00:cd:a7:89:95:0d:24:
                    5f:25:73:c5:77:82:94:4b:c1:70:80:ec:f3:32:35:
                    bc:a6:f0:2f:49:88:6d:ca:ff:82:02:79:d9:c7:b3:
                    bf:97:f0:74:93:59:61:be:a4:ab:56:fa:87:2d:d1:
                    42:44:12:8a:a9:9e:27:de:7e:e1:d5:46:4f:d6:9a:
                    a4:59:10:9a:71:4d:e7:cb:2b:c6:2a:ab:dd:80:0e:
                    4e:7e:d2:f1:df:e3:f0:d5:da:61:4d:a7:e7:45:b8:
                    a3:0e:c1:fd:ec:35:b7:20:f7:6c:76:e8:f2:62:0d:
                    16:c9:49:a3:98:85:09:c0:ef:1d:a6:ec:0c:55:75:
                    96:40:00:4b:93:80:e0:e5:2a:bc:92:a3:3a:a9:ff:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8D:ED:49:5D:2B:FA:DB:71:64:28:3C:DB:60:A0:EF:45:02:49:4B
            X509v3 Authority Key Identifier:
                keyid:E4:29:D4:29:E6:6B:79:7B:3D:8A:1C:BE:24:91:57:7A:DC:38:A4:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CnUKeZreXs9ihy-JJFXetw4pI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC711/C7D1B0541EE311EF90D21234C4F9AE02/5CnUKeZreXs9ihy-JJFXetw4pI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a8:9d:a8:47:51:fa:80:09:9b:0c:8b:92:eb:14:61:7d:57:
         de:38:ff:b8:c6:f3:d4:a1:8f:ad:7e:d7:dc:5f:58:e0:cd:cc:
         6e:65:83:8f:8c:d8:e6:82:5d:ad:a4:1a:36:de:32:f9:58:e3:
         09:07:b1:56:85:f2:5f:98:a8:e3:1f:07:c1:be:7a:63:ad:bf:
         5c:c6:72:fe:d1:75:cb:61:00:b3:2f:9d:c1:4b:bc:e7:46:2a:
         74:f9:8a:8a:4f:b6:b7:1a:ce:2a:57:79:d3:e0:6e:2d:06:e9:
         37:5f:a2:1b:4b:0a:e0:e8:87:4b:72:a1:15:30:1b:a9:53:42:
         40:e2:2f:37:e0:d5:96:15:3b:11:f2:36:bf:27:31:3e:3c:27:
         0b:f9:6e:da:00:db:d9:5e:b7:8c:f9:ba:8a:9d:d6:cb:b3:5f:
         00:5f:50:4b:56:be:12:ad:84:5b:b7:7b:52:e2:5a:37:1c:b7:
         0e:7e:d7:15:88:25:07:35:25:44:24:48:5b:99:aa:12:e8:65:
         cc:fb:fb:46:49:80:db:cd:6e:05:ea:87:4d:64:99:70:89:97:
         a4:8d:6e:98:34:d1:d7:6d:37:83:93:b1:71:4d:f7:38:d3:b4:
         d1:55:78:6b:b1:a2:01:9d:c6:8c:ea:3a:5b:41:c7:db:40:f6:
         88:93:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:49:40 2026 by rpki-client