Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
File:                     hkuImlN4cQmFJlQfDrkSVv2vp7E.mft (raw, json)
Hash identifier:          k14SEVtERuWUC5G9ufduHfhL1LtgU5ipNofMKU3vPeM=
Subject key identifier:   D3:67:D9:37:52:63:39:15:76:C0:70:B8:67:0D:2E:4B:9F:44:0C:C5
Authority key identifier: 86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1
Certificate issuer:       /CN=A91DB53B/serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
Manifest number:          94
Signing time:             Fri 25 Sep 2026 07:36:41 +0000
Manifest this update:     Fri 25 Sep 2026 07:36:40 +0000
Manifest next update:     Fri 02 Oct 2026 07:36:40 +0000
Files and hashes:         1: hkuImlN4cQmFJlQfDrkSVv2vp7E.crl (hash: D+TaWsAhxoLwD8krxp2L4NeLCwCFey3m/tuKGadN9V4=)
                          2: 53F3631AE09A11F0A599D036446F56BC.roa (hash: WoFjSSb7IQkAQ4Xj41j5FesrpjNa8U4BYhsQXgjZdyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl
                          rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB53B, serialNumber=864B889A537871098526541F0EB91256FDAFA7B1
        Validity
            Not Before: Sep 25 07:36:40 2026 GMT
            Not After : Oct  2 07:36:40 2026 GMT
        Subject: CN=6ab62489-7d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4a:ec:22:b0:32:07:82:38:73:7c:8c:f3:82:
                    a3:82:fa:d6:86:c8:ab:60:02:eb:fb:8b:4b:08:e1:
                    d7:6f:bd:6d:3e:c6:39:89:ae:e1:f3:d1:4f:50:cc:
                    27:87:a6:fd:a6:ed:ef:7f:8d:da:99:0e:52:dd:84:
                    88:07:1f:f4:1a:b7:53:13:2d:c9:0f:9c:4f:1c:d8:
                    a8:07:6c:88:0a:39:a3:fa:2b:47:1c:32:64:be:45:
                    26:91:b4:17:9d:ae:a7:14:04:65:23:49:d5:ba:77:
                    cb:1b:f5:7c:4a:72:bc:d9:b0:b6:3d:5a:4c:33:7a:
                    a2:cc:ba:4e:64:1a:cc:b6:0f:74:9e:f1:4f:ff:d0:
                    76:ef:dd:71:b3:0a:98:95:5a:82:7e:3e:6a:fe:73:
                    3b:2d:07:5f:7a:c5:33:c6:b7:eb:d5:c4:fe:7c:6e:
                    18:0e:94:84:94:d4:46:8b:89:74:69:4c:b7:b1:af:
                    db:7b:53:f5:5b:f8:3e:a1:2a:8e:2f:6b:15:4c:f7:
                    63:10:40:c9:6b:b0:3d:b3:22:ae:18:2c:ef:9e:a6:
                    68:87:cb:c8:42:ce:81:ae:d6:3c:5a:c1:7f:a6:77:
                    76:63:20:7b:45:3f:63:84:57:44:1e:19:86:ef:1e:
                    a2:bc:4b:32:cd:ed:b5:55:01:62:53:99:06:7e:8b:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:67:D9:37:52:63:39:15:76:C0:70:B8:67:0D:2E:4B:9F:44:0C:C5
            X509v3 Authority Key Identifier:
                keyid:86:4B:88:9A:53:78:71:09:85:26:54:1F:0E:B9:12:56:FD:AF:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkuImlN4cQmFJlQfDrkSVv2vp7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB53B/00DA9D68E01A11F08AD3EB8D626F56BC/hkuImlN4cQmFJlQfDrkSVv2vp7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ca:be:2b:c6:80:1d:2e:19:a7:71:0a:62:4d:89:8d:2d:a0:
         a5:03:b1:61:bf:12:bf:b6:89:d0:df:ed:e6:56:ed:77:be:e8:
         ad:af:48:f6:2e:92:2a:cf:92:7e:ac:03:b0:b8:52:a2:5a:3d:
         67:2e:96:ed:22:1a:0b:2d:d3:67:be:5a:38:cf:b7:2b:84:c5:
         20:dd:22:92:cc:a2:f7:d5:fb:95:7d:91:07:ac:f3:8e:aa:0f:
         cc:6a:87:d6:bb:6f:c4:de:0f:4e:4d:35:fe:50:ea:23:53:24:
         b2:ce:fd:5c:46:3c:ee:af:d1:12:a4:9d:42:9d:43:74:99:7a:
         42:ad:fc:c5:54:96:86:12:f5:dc:35:84:a4:94:9b:5c:ea:b0:
         ce:b5:16:fc:6b:91:4b:79:6f:a5:93:1b:08:8d:b8:a8:1e:32:
         16:fd:91:ad:fe:cc:fd:fa:ea:04:83:57:1b:c7:62:3d:34:45:
         03:f6:3b:c0:58:93:e9:da:17:3d:05:a1:a7:65:1f:68:55:f7:
         ca:3d:e8:94:39:89:81:bc:10:df:e9:13:08:64:79:71:21:ce:
         3b:61:14:74:91:29:50:cf:64:5f:4b:ac:20:ca:83:1b:ab:18:
         ca:05:68:0a:66:23:02:3c:24:dc:59:21:da:6d:90:a8:25:78:
         88:57:32:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:11:39 2026 by rpki-client