Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft
File:                     fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft (raw, json)
Hash identifier:          s4skEyYaD6c+jrza4jShXUdMcscSZUhwpUq7REiZbiw=
Subject key identifier:   EF:66:8B:B8:C0:84:2E:3E:B5:2A:7C:6A:A2:A2:95:73:8F:43:F9:1A
Authority key identifier: 7D:61:3F:B7:2D:19:98:2A:5A:09:29:64:F4:8B:C3:80:90:B0:FD:19
Certificate issuer:       /CN=A91D09BC/serialNumber=7D613FB72D19982A5A092964F48BC38090B0FD19
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft
Manifest number:          01B8
Signing time:             Fri 25 Sep 2026 05:09:50 +0000
Manifest this update:     Fri 25 Sep 2026 05:09:49 +0000
Manifest next update:     Fri 02 Oct 2026 05:09:49 +0000
Files and hashes:         1: fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl (hash: 6T/rCiATE/YYmWMLWjw0zZXCqAUeELIKYzz0/ZtRM2c=)
                          2: 53019A023C7B11F1B0CB2EC97EEE528E.roa (hash: M3iMcgHJGqo7ewXbliP4Rc0morYWpPz1VYKQET0JHNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl
                          rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09BC, serialNumber=7D613FB72D19982A5A092964F48BC38090B0FD19
        Validity
            Not Before: Sep 25 05:09:49 2026 GMT
            Not After : Oct  2 05:09:49 2026 GMT
        Subject: CN=6ab6021e-8fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:ae:2c:b5:73:0d:13:3a:e3:79:d1:d7:51:
                    c9:3f:5c:cd:e1:a9:0f:3f:b5:e6:b1:fb:74:bb:f0:
                    a6:e2:e6:46:c8:9a:d9:c8:26:7d:c2:39:fa:fa:01:
                    dc:e7:b7:0f:16:a0:d1:05:c1:31:12:3f:71:94:71:
                    9e:8d:f5:2b:b6:76:94:b2:2e:51:81:a3:f1:98:fd:
                    6c:47:c2:86:b8:6e:44:50:c9:00:10:d5:c7:1e:06:
                    2e:4c:6d:40:f3:9b:7a:5d:83:e3:59:78:6c:85:d1:
                    01:66:f0:3b:2f:00:f7:2d:ee:52:e0:be:83:db:87:
                    b2:7a:52:60:dc:b3:4a:57:e2:55:96:ea:cd:dc:ec:
                    22:9b:2d:63:fa:94:fa:77:3b:3d:d3:a7:9d:27:16:
                    21:9e:36:ba:51:7b:d8:9a:04:51:a7:3f:0b:0f:26:
                    c7:04:9a:19:24:44:57:c5:f9:07:22:2b:26:f9:52:
                    c0:b2:73:50:eb:86:66:d6:a1:8f:30:ac:54:ef:71:
                    a7:a1:9c:8e:e8:7b:cd:d7:d8:9b:8e:5f:12:3c:1e:
                    5f:79:f5:f7:fb:1b:9c:8f:c6:90:e9:dd:90:5e:7c:
                    df:39:be:b2:ec:49:35:75:54:b2:67:3f:3e:4d:79:
                    40:08:3a:e9:6e:75:16:1a:c6:c1:62:ef:17:6e:d0:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:66:8B:B8:C0:84:2E:3E:B5:2A:7C:6A:A2:A2:95:73:8F:43:F9:1A
            X509v3 Authority Key Identifier:
                keyid:7D:61:3F:B7:2D:19:98:2A:5A:09:29:64:F4:8B:C3:80:90:B0:FD:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:02:71:90:af:e9:1c:e3:f1:4e:76:20:a0:12:5c:bb:cf:4b:
         d4:30:1e:37:fb:3b:8f:af:e5:90:c5:c5:6b:5f:2b:57:c3:27:
         9e:17:a7:4a:7a:8c:9d:60:a0:0d:71:b7:2c:d1:73:cd:bf:68:
         9e:3c:f4:e6:e0:f2:11:ef:0c:18:3d:d9:f3:e6:35:85:d0:32:
         10:57:9c:72:96:15:e1:c3:38:90:e5:38:6f:b4:6a:4a:af:20:
         e0:b9:cc:a0:1f:ea:5d:62:e6:1d:d7:d7:38:5e:fb:93:61:91:
         70:bb:de:02:2f:aa:11:e1:3b:c6:de:f5:5c:9e:99:fd:3b:50:
         34:4b:56:b3:a0:c5:6d:b0:9d:75:a1:c6:1c:19:47:24:66:4b:
         f7:6e:0c:0f:5c:1b:a6:30:0e:73:4d:02:a9:2b:e0:05:25:65:
         3e:45:f5:ae:a2:25:ca:3d:4c:a2:49:98:cb:b2:33:74:ec:98:
         06:58:ff:28:08:2a:8e:e0:af:fe:97:75:c5:de:fd:98:c9:11:
         39:d0:f7:0a:27:28:e1:c6:65:75:f9:b2:09:ef:d8:28:bf:aa:
         07:1f:dc:e3:88:cc:f0:71:30:ad:33:04:98:20:b1:39:b6:1e:
         57:4c:12:e7:fe:43:83:66:cd:03:7e:d2:49:36:d0:45:d6:28:
         c7:1e:ac:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:56:49 2026 by rpki-client