Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
File:                     -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json)
Hash identifier:          9IaYRSJWujqxklo9MeOdiCriZw7CYr4x3vBsF5eyozE=
Subject key identifier:   1E:CF:03:28:BB:B8:27:2A:8E:B1:4E:46:5C:AD:FF:87:DF:FB:06:CB
Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00
Certificate issuer:       /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
Certificate serial:       02DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
Manifest number:          02D6
Signing time:             Wed 07 Oct 2026 01:30:19 +0000
Manifest this update:     Wed 07 Oct 2026 01:30:18 +0000
Manifest next update:     Wed 14 Oct 2026 01:30:18 +0000
Files and hashes:         1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: S6hYlJ3bRYJ3esOkYITTaLJgY77OcqHMRRkLx6oNe1c=)
                          2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: KkRg7bEKwnHuBm+Yd+/J88cAG/SeruIhl6B9YZ5p9Ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl
                          rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900
        Validity
            Not Before: Oct  7 01:30:18 2026 GMT
            Not After : Oct 14 01:30:18 2026 GMT
        Subject: CN=6ac5a0aa-4589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:2d:6b:94:66:c6:3f:f9:37:7d:ea:47:83:
                    1e:b4:33:2d:ea:30:1c:80:f5:c9:a7:81:c7:52:f3:
                    e5:24:bc:12:17:07:1f:8a:c3:99:db:9e:09:fd:8a:
                    9e:50:07:23:c1:42:41:5e:90:4a:ae:ff:ab:13:da:
                    2d:5d:35:94:97:40:ee:50:de:c6:16:df:c1:c0:1d:
                    0a:f4:c1:03:39:0a:8c:0f:fe:40:eb:f6:1e:70:71:
                    9d:94:8d:ba:ff:92:97:5b:7e:4a:c1:81:f5:c9:b3:
                    11:09:8b:f6:99:c2:53:11:b9:86:d2:1d:54:62:c3:
                    54:f9:b1:a3:be:c8:a5:55:6a:0f:ad:6f:74:80:c2:
                    f5:85:c1:51:3c:d8:08:3f:7f:44:ea:a9:82:5c:c0:
                    db:8a:cc:41:c8:b7:74:b7:66:49:3c:ad:fb:81:1f:
                    54:b8:f9:ef:85:04:f9:4d:b8:02:07:3a:d9:fe:0a:
                    c7:aa:ab:7b:90:d3:0f:5f:83:24:4d:47:43:08:14:
                    88:b1:b0:52:fc:c0:42:fc:b8:ba:d6:66:3c:a0:41:
                    35:b3:d9:10:3b:9d:9c:bb:29:20:98:93:ea:40:de:
                    8a:07:18:4f:3f:14:14:5b:8f:93:44:25:d3:36:39:
                    3b:dc:8d:e5:79:ed:ee:db:68:94:08:54:a6:1f:ca:
                    52:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CF:03:28:BB:B8:27:2A:8E:B1:4E:46:5C:AD:FF:87:DF:FB:06:CB
            X509v3 Authority Key Identifier:
                keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:09:fc:44:60:00:79:3f:c9:34:df:69:f0:4a:ec:f2:35:6a:
         99:fc:59:67:2a:0b:9d:1d:b3:ff:fd:4d:43:b0:12:a0:b0:68:
         6f:91:e1:e9:f8:3e:35:63:b7:53:b7:37:db:bd:5c:3f:40:78:
         f0:4f:95:3d:e4:0b:5a:00:d5:d8:13:2d:98:0f:7c:23:b7:69:
         53:5c:a5:8e:05:a4:e5:ca:5f:c9:d1:89:ce:38:8e:4d:0e:7f:
         b1:4a:8d:81:7d:97:29:c4:0b:4d:c4:6b:69:ea:a2:f1:39:dd:
         23:77:10:f2:fa:c9:d1:9f:9d:f4:7c:79:5d:80:fe:58:18:76:
         89:72:83:54:8f:db:e9:1d:6a:4e:44:94:fe:1f:d2:fb:02:f0:
         62:ea:f3:19:93:f7:bb:50:dc:51:0f:47:82:9f:37:6c:ee:02:
         e1:27:a0:fd:ec:3d:2a:bf:f9:2c:e5:b1:cb:0d:53:e0:c4:f9:
         5f:70:49:ae:b6:d5:0c:75:18:ff:80:b2:8d:65:7f:89:ce:78:
         91:30:2d:80:16:3c:1c:89:f6:af:8a:a9:06:c8:16:c6:23:44:
         51:6f:a2:90:1a:16:01:51:0d:f2:cf:c0:40:e6:4d:40:7c:88:
         40:70:28:e8:79:e9:1e:77:69:26:c5:fc:39:7b:d5:5c:01:eb:
         ac:7e:e1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:39:48 2026 by rpki-client