Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
File:                     5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json)
Hash identifier:          f+Je3cg0934lQRH5UsqjRpQofBz31fCohwDJ0awCV60=
Subject key identifier:   42:BC:29:CC:91:B3:AA:B2:CB:95:A7:43:E7:F3:ED:78:00:88:FF:C5
Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F
Certificate issuer:       /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
Certificate serial:       0507
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
Manifest number:          04BB
Signing time:             Fri 09 Oct 2026 00:04:57 +0000
Manifest this update:     Fri 09 Oct 2026 00:04:56 +0000
Manifest next update:     Fri 16 Oct 2026 00:04:56 +0000
Files and hashes:         1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: RTUPvnX+4Xqq567+LverXFMobYoYLEMWHB8NkTskbDU=)
                          2: 06820D08961011ECA540626AC4F9AE02.roa (hash: CzUXYWkkIQDOcHq1RR+8siO68bCnK+19oDi4KioI2dg=)
                          3: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 2uDIVTyJFeprZ8aKmJZDal4SC0k4TrY+Gr38dV8hu3U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl
                          rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 00:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F
        Validity
            Not Before: Oct  9 00:04:56 2026 GMT
            Not After : Oct 16 00:04:56 2026 GMT
        Subject: CN=6ac82fa9-8b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:8a:c1:22:1d:1d:d5:c7:12:fd:80:9e:89:6b:
                    c2:76:c0:42:bc:39:3b:13:e2:bb:43:0b:d1:38:55:
                    ed:c6:cf:53:13:6d:fe:87:7f:56:a0:72:5b:f5:1c:
                    df:8c:62:b7:b1:7e:26:19:c7:0c:24:92:57:f4:3a:
                    30:a4:04:2e:1f:6a:00:96:a7:e5:53:45:83:d8:c0:
                    fd:19:c7:3e:a6:07:c9:dd:5d:1b:44:11:d8:8d:7e:
                    01:87:b9:a8:c9:7b:b1:ef:9b:74:92:55:5b:70:76:
                    a0:dd:e5:28:2d:f2:7a:14:b0:60:62:34:7b:9d:6f:
                    57:9c:38:b0:48:ed:56:f9:fa:67:fa:1f:69:59:e7:
                    a0:7a:1a:6b:aa:72:67:6a:1a:56:38:ad:f0:08:9d:
                    9c:f6:0c:b1:b4:f7:d0:de:7c:6d:dc:d6:e0:ce:ce:
                    5f:de:e5:a0:fb:96:85:bf:0b:0b:17:dd:db:67:68:
                    b9:32:b3:44:ef:7e:99:65:27:14:c6:3c:72:7f:26:
                    6b:5a:f1:b1:8b:d1:be:9b:b9:e2:7b:44:65:f3:d4:
                    d1:3a:62:a7:20:8d:0f:2a:b8:75:33:ff:78:a8:2c:
                    de:d5:4e:a5:d1:ef:a4:d5:7a:7c:11:10:5c:82:bd:
                    ed:ec:46:a5:a3:27:e0:0f:71:8f:d7:0a:9a:49:9b:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BC:29:CC:91:B3:AA:B2:CB:95:A7:43:E7:F3:ED:78:00:88:FF:C5
            X509v3 Authority Key Identifier:
                keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:91:fd:74:96:03:b9:fc:d7:56:05:78:7b:5c:1d:83:1f:80:
         68:56:ba:d5:77:2a:e1:73:71:32:8d:3a:75:f7:e4:7c:9c:82:
         4e:33:c0:ed:9c:fe:10:89:c4:24:08:67:37:b7:fc:bb:24:55:
         a3:87:dc:de:5e:5b:84:0a:0c:9d:cd:54:a9:d5:52:1a:c0:1e:
         0c:b3:e9:05:72:66:a4:7d:c6:4a:f3:18:f4:83:7e:0d:ae:0e:
         cd:73:9a:a7:06:f1:3f:dc:6f:5d:ca:63:ed:a7:97:ff:23:56:
         06:61:2a:9f:45:91:98:31:d2:df:1c:ff:ed:ae:8d:40:17:38:
         55:e1:c8:f6:7a:d5:bd:25:af:95:9c:2a:08:d8:b3:31:06:f4:
         24:8f:72:ef:6e:b8:92:2d:ba:35:4f:58:c0:fa:00:46:cc:d3:
         64:2f:e2:26:5d:e9:57:0e:9d:12:2f:e7:54:82:65:99:6c:4e:
         4d:98:c9:bd:1c:92:36:90:5e:7d:22:7a:d6:cd:aa:40:8a:11:
         17:0b:fa:c7:47:88:b8:ee:0c:cf:43:b2:82:5a:6f:21:a3:73:
         b7:69:5a:d5:49:03:3c:b2:a8:28:18:43:20:6f:fd:9b:61:bd:
         54:30:a7:44:cd:c9:58:81:44:21:1b:6b:7f:61:d9:33:b0:58:
         cb:4e:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:43:30 2026 by rpki-client