Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
File:                     71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json)
Hash identifier:          g3JLY5SIz9LP6/AyB+Vw3khbBqfZvBAXEC8MBMjrQOU=
Subject key identifier:   EF:7E:C0:35:19:D2:94:8F:00:8A:D2:B5:00:F0:D8:1C:A2:61:C5:AF
Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8
Certificate issuer:       /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
Certificate serial:       066C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
Manifest number:          0658
Signing time:             Sun 20 Sep 2026 22:32:05 +0000
Manifest this update:     Sun 20 Sep 2026 22:32:05 +0000
Manifest next update:     Sun 27 Sep 2026 22:32:05 +0000
Files and hashes:         1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: aTNl2vrad1arhC0r4lvrtiv+7LwpWp0KP8XaNVFC4ls=)
                          2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: qBq37odn1uP1cDR23kQsnsPmLtuKhyX4N8TfnOSFHU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl
                          rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1644 (0x66c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8
        Validity
            Not Before: Sep 20 22:32:05 2026 GMT
            Not After : Sep 27 22:32:05 2026 GMT
        Subject: CN=6ab05ee5-49ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:d1:00:de:e6:e0:9e:df:c3:91:b5:60:1b:
                    b6:ae:96:81:3e:c0:90:f8:d0:f1:77:52:3b:c8:5d:
                    26:77:e6:34:fc:e5:92:8d:f1:66:39:b5:cf:c7:77:
                    00:d7:f2:d1:18:35:ff:8b:59:84:9c:aa:78:34:88:
                    dc:51:e6:6e:e2:03:ad:21:3f:45:de:6b:2b:f9:bf:
                    79:9a:e2:13:64:55:8b:4c:83:c6:9a:b3:cd:51:01:
                    46:f8:d4:c7:4e:5c:87:63:45:6f:a1:ce:a0:f8:07:
                    c5:7b:e3:d5:33:01:91:07:a0:5e:64:6b:78:a0:e9:
                    71:b9:f1:e5:ee:a0:87:f0:74:ca:b6:48:18:39:49:
                    2b:d9:a2:9d:63:a8:e6:49:00:1c:bb:e1:b1:78:d2:
                    6e:4d:64:7c:0f:07:2e:c7:81:1b:d1:cd:93:19:b4:
                    42:c9:90:12:d3:7b:b7:47:46:72:5b:32:cc:df:a0:
                    3c:80:08:bf:7b:29:2c:80:dd:50:b3:fe:a0:65:a2:
                    90:7c:e8:f4:ec:3f:21:54:41:fa:9a:5f:fe:24:2a:
                    75:0b:7f:a6:33:f5:fd:fc:77:1e:34:b8:2a:79:3a:
                    33:d7:9d:3b:70:c8:dc:4b:35:8d:24:02:82:09:de:
                    2b:53:11:37:89:8c:d0:c1:69:6c:5e:d4:c1:35:76:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7E:C0:35:19:D2:94:8F:00:8A:D2:B5:00:F0:D8:1C:A2:61:C5:AF
            X509v3 Authority Key Identifier:
                keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:cc:6b:47:a4:3c:8d:b2:5b:08:af:d2:94:c6:44:95:38:ca:
         58:87:ca:08:7c:1f:a0:42:e7:d6:e3:fa:55:9a:42:93:db:e0:
         36:a5:04:f4:18:dd:6a:71:97:e8:a3:0c:1b:0a:a2:25:e8:d2:
         6e:48:07:ec:18:a7:88:9c:cc:b5:7b:1a:4e:b4:24:7b:14:5a:
         9f:96:e0:ed:ca:17:0c:bd:22:ac:f8:04:cb:36:58:c9:5f:84:
         fb:e3:ce:71:aa:1d:6d:7d:b6:07:79:c1:ed:28:50:f1:ec:cd:
         6b:58:c1:d6:b1:f0:c6:51:7f:4a:28:1b:b1:b1:ec:1d:ec:b7:
         83:8b:12:33:02:e6:74:35:42:17:69:5e:f5:dc:cb:3a:9a:e3:
         3c:c2:cb:6e:b1:19:53:d0:73:f5:fb:a8:9f:c5:0c:1b:37:c5:
         7c:c5:cd:ca:0c:62:23:e9:2d:f3:b5:4a:0e:92:a6:f8:05:f6:
         18:1c:95:9f:b4:b1:9d:06:bf:1e:d3:fd:75:ac:fd:3b:6c:03:
         8e:b1:dc:b1:be:8b:e8:52:9a:7c:d6:3a:22:84:7f:c1:8d:02:
         0b:b9:f8:95:cf:73:b9:6a:7a:7e:6d:e5:60:93:36:13:42:3f:
         64:9e:99:d3:ea:3a:6e:dd:ca:a4:09:e7:d0:64:66:f3:16:37:
         37:df:a2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:28:13 2026 by rpki-client