Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
File:                     z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft (raw, json)
Hash identifier:          xbOgih91DxXir+dAB69eRXxgqlHPV/qfPloHA+mKk88=
Subject key identifier:   77:3F:7C:CF:93:74:EE:1D:C2:AA:E4:83:BE:C1:5D:C6:82:09:A1:D8
Authority key identifier: CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3
Certificate issuer:       /CN=A91F7D5E/serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
Manifest number:          99
Signing time:             Thu 05 Nov 2026 08:22:27 +0000
Manifest this update:     Thu 05 Nov 2026 08:22:26 +0000
Manifest next update:     Thu 12 Nov 2026 08:22:26 +0000
Files and hashes:         1: z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl (hash: hqAcAr29baOqa8BPxCS6JxvHqKzx82iWKnNq9jXMbB8=)
                          2: 75FA3D56F20311F081D1C5E2496F56BC.roa (hash: iKD/upGNnZX+RaqlnGQMRh+aU9FLucr+XYy9zJq/7P4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 08:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5E, serialNumber=CFE47BC8C748BEFD1B77524CC79FFAB54C17BDB3
        Validity
            Not Before: Nov  5 08:22:26 2026 GMT
            Not After : Nov 12 08:22:26 2026 GMT
        Subject: CN=6aec3cc3-c288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ca:f1:84:04:7e:84:3f:ab:5f:f3:9f:ac:27:
                    12:b5:a0:7d:70:41:15:c1:58:13:95:03:d7:eb:43:
                    a3:d1:e9:a8:a4:36:19:10:a0:d1:28:f7:fe:ef:f7:
                    40:dd:c5:9e:7e:68:ad:5e:31:92:b5:8a:90:86:06:
                    29:8f:c1:2b:7e:05:7e:ad:df:84:ee:37:c7:c2:56:
                    69:0f:9f:66:f0:86:81:99:8c:b0:79:fd:54:f0:09:
                    b8:a3:8b:38:e4:7e:07:8a:ed:d2:f5:fc:25:7d:69:
                    d9:cd:6f:1b:59:34:1c:f3:ce:f3:fd:6a:7c:4a:32:
                    67:e9:8c:ce:90:81:b0:91:4c:f3:bb:e6:fe:0a:e6:
                    82:9a:af:e7:3a:f5:33:9c:3c:f3:4b:10:c9:77:50:
                    06:94:27:9b:91:f3:97:f0:8e:e3:23:4c:5d:6f:27:
                    8c:6d:2e:64:96:93:63:34:10:10:ec:f4:a8:7c:ce:
                    27:ec:66:46:e3:f3:eb:f3:ed:fd:ff:5c:d9:0e:69:
                    e1:f9:5e:49:52:0c:93:72:90:8e:e1:80:5c:c6:39:
                    b7:bd:26:5b:1c:56:1b:42:b8:45:69:0a:ac:f8:a0:
                    6e:66:be:01:87:7e:17:28:80:aa:ce:c1:59:7d:a2:
                    11:ab:96:51:8c:ab:32:a4:8d:8f:0e:d2:e0:f7:0b:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3F:7C:CF:93:74:EE:1D:C2:AA:E4:83:BE:C1:5D:C6:82:09:A1:D8
            X509v3 Authority Key Identifier:
                keyid:CF:E4:7B:C8:C7:48:BE:FD:1B:77:52:4C:C7:9F:FA:B5:4C:17:BD:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-R7yMdIvv0bd1JMx5_6tUwXvbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/18C83F40F20111F0AD418CBA486F56BC/z-R7yMdIvv0bd1JMx5_6tUwXvbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:69:d8:35:88:6f:4c:b8:ba:d4:d4:40:de:30:04:95:28:4f:
         6f:cf:d6:c9:85:c8:6f:a4:73:77:a8:fe:b7:2a:86:62:54:85:
         11:35:b9:92:2b:bc:12:48:a8:d4:c5:71:0f:28:9b:c5:8a:dd:
         66:c3:73:26:c2:44:df:43:d1:09:62:ab:47:a4:af:e9:04:68:
         8d:da:63:8c:f6:b9:0f:84:16:5a:6d:0f:b0:f2:99:23:6f:76:
         a0:1e:10:0b:00:a6:39:d8:93:ea:62:1a:96:97:40:09:aa:c5:
         3c:3a:cd:ff:14:f3:c0:4b:11:52:0d:8f:dc:89:80:73:70:d6:
         91:42:52:67:0b:e2:0f:d8:98:7a:b6:fd:ca:f3:d7:d2:f8:e7:
         23:2b:b9:93:e6:03:a6:2d:c8:14:bc:25:b6:08:d2:8e:0c:7d:
         ff:5b:9c:e0:6b:e5:a5:ee:d1:fb:96:42:c9:d5:3e:0e:67:ee:
         76:8d:da:b9:b7:86:ce:d7:cd:e7:d2:1d:e4:2f:e8:fd:0e:67:
         42:1a:9d:5e:72:fd:8c:45:95:c6:2e:12:63:fb:b6:95:de:05:
         49:00:a0:80:e2:a6:ef:53:1c:58:e7:e5:e5:bc:da:2b:61:52:
         8c:9d:6b:aa:5d:d0:0f:83:52:d7:f1:06:3f:da:6b:95:c1:ee:
         9d:97:2d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 12:15:54 2026 by rpki-client