Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
File:                     5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json)
Hash identifier:          itt3BamFZKWolT7E0g+Ey750bBddG7F1gRO7deiXKPw=
Subject key identifier:   3E:32:95:E0:FD:69:A8:B4:0F:D7:BE:77:CE:FE:50:6B:81:74:9C:55
Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB
Certificate issuer:       /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
Manifest number:          0131
Signing time:             Wed 23 Sep 2026 05:25:16 +0000
Manifest this update:     Wed 23 Sep 2026 05:25:15 +0000
Manifest next update:     Wed 30 Sep 2026 05:25:15 +0000
Files and hashes:         1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: IkxvLt5iR0658WFscgkY8H9xOgUYyBuPXhdXdjmND5s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl
                          rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB
        Validity
            Not Before: Sep 23 05:25:15 2026 GMT
            Not After : Sep 30 05:25:15 2026 GMT
        Subject: CN=6ab362bc-de36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:f3:1f:dc:67:df:ca:00:b6:02:f3:8d:b1:
                    bd:3c:d7:9d:74:53:e4:87:fe:c1:4d:3e:45:65:70:
                    35:21:59:50:f6:88:90:d7:a4:37:76:1b:cd:d2:26:
                    fb:e0:4d:dd:29:f6:e7:fe:81:ad:be:f8:d9:df:e9:
                    e2:86:fe:a9:fc:17:1c:1e:cb:70:74:d7:1b:1a:de:
                    fd:29:ed:77:22:2c:97:5a:52:d9:af:53:f0:7a:30:
                    40:c9:ea:0b:44:00:75:bb:6b:d2:65:25:6a:2b:d2:
                    f4:6c:cb:ce:d0:d0:39:2f:3f:4e:15:53:21:bf:eb:
                    91:4a:31:b8:dc:79:b5:e6:1a:bc:16:ad:82:2c:ae:
                    65:19:41:44:49:3d:f6:ed:b4:0c:8b:d3:b2:c4:fc:
                    0c:ba:26:00:10:6b:4c:16:02:4e:f4:3a:89:35:94:
                    31:be:ab:fb:e4:13:14:ed:70:4b:05:34:70:24:ed:
                    57:0c:81:c2:2b:0d:ab:5b:d9:b6:2c:37:3e:25:4e:
                    03:c7:17:f1:33:13:87:c7:38:6e:59:fc:55:71:22:
                    09:3c:5e:9e:48:87:a2:5f:f2:e2:98:66:82:4a:63:
                    e6:c2:ed:20:93:5b:73:d6:db:3f:2d:70:05:0d:e5:
                    16:ff:ac:c3:fc:f4:4f:bf:15:ef:6d:b7:3f:46:5e:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:32:95:E0:FD:69:A8:B4:0F:D7:BE:77:CE:FE:50:6B:81:74:9C:55
            X509v3 Authority Key Identifier:
                keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:67:5f:20:ee:51:89:90:ed:94:78:80:1c:68:38:4b:07:a5:
         6f:cd:d4:f0:f6:29:8c:d1:e6:eb:4b:df:7f:fb:fa:58:b9:b7:
         37:0a:4e:5a:a7:b2:9d:26:a0:d4:38:a3:d9:b9:f7:1a:8e:47:
         e9:49:f6:b7:6a:1a:91:69:73:54:52:62:61:e7:69:76:3e:b5:
         03:a2:eb:99:a3:22:aa:2a:5e:21:8b:12:ef:01:c5:7f:9e:ca:
         a5:30:87:ea:e5:cf:66:6a:32:be:61:fd:5c:55:31:19:e2:bf:
         c3:62:81:6e:df:ba:b7:c7:9d:53:dc:9d:64:02:2f:2e:97:dc:
         c1:ed:f8:94:55:1e:fa:6c:d8:a8:db:3d:5e:e9:e8:52:96:9d:
         7b:0d:38:8c:14:ed:af:3b:8b:3e:d4:31:4b:37:f0:1f:6b:e5:
         b8:ba:ec:4d:a1:07:4b:0d:1e:fc:ea:01:4b:78:32:dc:d3:f8:
         32:a6:b5:08:e8:a3:3d:f7:2a:ff:84:99:04:51:ef:37:73:ae:
         20:9a:2f:d3:58:d7:fd:c6:a6:89:02:8d:4f:b4:cc:dc:9c:c0:
         50:9a:72:e7:e6:bd:24:82:49:9d:e0:ea:9e:ef:a2:77:a7:49:
         9c:b9:6b:ec:82:d7:73:45:27:00:9b:4f:6d:61:85:93:a4:51:
         09:0c:47:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:38:08 2026 by rpki-client