Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File:                     b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier:          Fh+z7u1uZ6NlhWk9qhStn+TgRKCyFm8dZccDXn8LXmU=
Subject key identifier:   EF:11:46:E7:42:C0:C8:A9:85:7C:41:37:B3:85:73:6D:E3:27:47:FE
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number:          0247
Signing time:             Sat 07 Nov 2026 02:59:20 +0000
Manifest this update:     Sat 07 Nov 2026 02:59:19 +0000
Manifest next update:     Sat 14 Nov 2026 02:59:19 +0000
Files and hashes:         1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: Ozy9Y0zPCchOVWNWH88Dg1Q/8pFuq//wsxdkd7r/u9U=)
                          2: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: d361r9fYfx4QlmvOZDXaFl9lFshWegTqKOt6ceQ4xWk=)
                          3: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: 9o2NDhKahcG7+3rV1ZRCTakFUHbZfa3Ire911jjrqQg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Nov 2026 02:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Nov  7 02:59:19 2026 GMT
            Not After : Nov 14 02:59:19 2026 GMT
        Subject: CN=6aee9408-e323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:a7:8a:3d:98:e6:61:fc:ab:f3:62:44:c5:
                    12:51:cc:1b:78:43:76:7d:15:ea:f4:d8:14:dd:82:
                    96:02:70:58:1a:17:0c:59:e6:35:94:62:bc:e2:08:
                    a0:cc:a0:fc:e0:26:1a:ca:cd:e4:3f:98:29:e3:80:
                    ee:5a:1d:26:41:4b:1b:fa:ea:a7:63:46:77:75:2b:
                    eb:ac:24:51:60:1e:aa:d6:de:83:cb:8e:76:b0:b6:
                    22:1d:a1:39:0c:46:68:87:87:05:4a:05:4f:ae:a4:
                    18:74:03:64:82:25:22:29:0f:10:c8:52:86:ec:46:
                    01:7f:63:25:63:95:08:b9:d8:c9:b5:e0:6b:f0:0c:
                    92:82:f8:bf:b4:2f:6a:a0:be:5b:eb:1a:5a:04:e7:
                    62:71:9d:4d:c0:b8:45:e5:35:32:46:a8:e4:7b:51:
                    16:25:7e:31:74:5b:6c:9e:2a:d6:cf:8a:70:73:ef:
                    a2:e5:f8:88:5d:41:e8:dd:d2:fb:b8:08:d3:43:e6:
                    96:52:8d:69:45:ce:e2:de:b1:1f:00:5c:8d:23:77:
                    ff:18:57:e2:69:3a:08:76:f4:73:a7:fe:6a:b3:51:
                    d2:b5:a3:4f:e0:33:47:26:fa:d4:63:8d:10:15:c4:
                    6c:df:9f:85:7c:89:77:ee:5d:ce:da:71:33:9e:34:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:11:46:E7:42:C0:C8:A9:85:7C:41:37:B3:85:73:6D:E3:27:47:FE
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e4:a5:51:f6:ff:51:4f:4b:5c:a4:86:df:d8:88:84:96:e6:
         8e:c3:10:f0:34:42:7d:b2:ff:d4:bd:ac:60:56:0b:30:05:bd:
         f6:96:02:86:b7:db:6c:cb:4f:5a:d9:49:cc:0d:02:d9:94:1f:
         ab:02:4e:96:53:90:42:c0:1b:ab:44:f2:ad:a5:4b:03:bb:b6:
         77:ee:bd:57:75:17:73:ae:b8:2e:96:c8:40:d0:58:a3:84:9b:
         99:9a:0f:20:3a:65:2a:1c:65:04:60:4d:03:ce:27:0a:6a:d3:
         ab:59:92:e4:5e:a5:5a:f0:71:37:c0:48:85:b6:c6:af:c0:65:
         ee:f3:02:e0:cc:8f:75:87:61:ba:b7:5c:01:d0:b0:6a:a2:ec:
         eb:6b:ce:a7:50:93:cb:05:3b:91:00:42:60:ad:7a:b7:7a:25:
         fe:f1:c7:26:61:13:a5:26:35:e7:e7:b6:9a:ef:0f:c8:eb:95:
         8a:f3:a6:65:17:2d:c7:4e:0d:68:66:56:10:a1:fd:e3:82:2b:
         db:0f:9a:22:ef:d2:ff:28:17:a1:9e:ce:6b:6d:35:7c:53:92:
         01:01:69:d4:a0:ee:6f:f3:0f:12:e1:8d:1c:cc:dd:49:90:7f:
         b4:23:c6:ff:18:5a:c6:94:0d:ee:e0:ef:b7:67:36:b4:01:84:
         aa:23:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 16:34:18 2026 by rpki-client