Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
File:                     755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json)
Hash identifier:          88LGQpFfXHZJJ7hp8P2vbXVLels5m7UGc62kNTI7Axk=
Subject key identifier:   13:B5:AB:4F:F7:3D:63:71:69:31:2D:B7:04:A6:5E:11:D2:49:98:42
Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D
Certificate issuer:       /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
Certificate serial:       0B8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
Manifest number:          0B7D
Signing time:             Sun 20 Sep 2026 19:05:43 +0000
Manifest this update:     Sun 20 Sep 2026 19:05:42 +0000
Manifest next update:     Sun 27 Sep 2026 19:05:42 +0000
Files and hashes:         1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: 9ODB67uwuVN5+KgPHcjb0pBhBsOxcwhW3tlOo320o/o=)
                          2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: hyQjscEo1jj0I5lMXuv6OJ6RmMigRvuR1H8n5/+x76M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl
                          rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2957 (0xb8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D
        Validity
            Not Before: Sep 20 19:05:42 2026 GMT
            Not After : Sep 27 19:05:42 2026 GMT
        Subject: CN=6ab02e87-d085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:25:bb:d8:f2:74:d1:1d:26:1c:ec:5b:d4:
                    09:ff:34:6f:b6:86:99:dc:e6:30:20:0b:7e:9b:b4:
                    32:95:21:5a:51:ac:26:bc:46:60:3f:f9:d6:c7:14:
                    29:f7:b5:e0:0b:f0:b0:eb:d0:a8:bc:75:de:35:36:
                    f7:c8:d9:04:f7:aa:b2:bd:a6:d5:e7:5a:c2:7d:25:
                    98:4a:7d:52:29:69:32:1b:46:df:a9:53:4d:9e:3f:
                    2e:61:7c:a1:d4:f0:b5:7e:e1:ca:af:72:94:50:10:
                    0e:fe:a4:6a:af:a1:91:27:81:1f:53:13:2b:15:bd:
                    9a:25:cc:a0:43:70:11:89:75:5e:ba:39:64:3a:48:
                    d5:78:3f:1d:8b:be:20:8c:82:5b:47:4b:f1:87:a6:
                    62:3f:13:2c:0a:a4:57:b4:28:1e:c2:cd:93:16:74:
                    71:81:ad:15:39:0d:d4:42:4e:d0:77:9d:e9:b7:99:
                    39:33:59:cd:91:ef:0d:b1:e4:8c:dc:bf:4a:e5:19:
                    d5:ca:fb:2f:93:4f:16:63:f2:90:28:02:ba:98:92:
                    29:c8:d2:e1:13:d2:22:27:02:03:20:cd:ad:e5:05:
                    51:3e:c7:c9:1e:98:20:87:70:ef:64:11:30:b6:97:
                    9f:a0:12:37:ed:4c:f6:5b:8d:52:26:f6:82:9c:3c:
                    31:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B5:AB:4F:F7:3D:63:71:69:31:2D:B7:04:A6:5E:11:D2:49:98:42
            X509v3 Authority Key Identifier:
                keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d3:74:c6:62:9b:51:86:31:55:d6:66:46:27:6e:9f:3e:01:
         ee:6d:02:bd:c9:94:6a:0a:1e:99:44:6d:9a:eb:59:cb:b7:11:
         99:bd:92:34:79:f7:75:22:c8:71:03:eb:e6:54:af:28:9a:c4:
         91:76:85:41:6c:c9:e0:fe:40:e7:54:3e:49:b1:2c:d3:9a:8c:
         9a:5b:4a:2f:5f:e8:4b:75:73:21:52:1e:c2:e6:ba:e7:92:d4:
         85:86:51:aa:2c:84:9f:cf:5c:18:d0:f8:95:13:d1:0d:08:25:
         19:e9:f4:5f:39:f5:09:44:29:ed:eb:a5:38:4c:52:4a:49:8f:
         ff:19:46:84:20:e8:6d:d4:25:5c:80:a8:78:51:5f:dc:2f:4d:
         9d:7b:84:3f:22:85:40:59:f6:a7:6b:d6:b3:f6:cf:a9:00:67:
         fe:c5:76:aa:63:3b:fa:ab:81:33:c6:be:58:fd:75:c9:f2:06:
         b4:05:9c:51:5a:ac:a5:07:7d:96:94:ca:8b:94:5e:16:4e:5a:
         28:d1:17:73:55:c9:3d:2c:6d:85:34:29:bc:3a:d4:8e:ce:9e:
         c2:85:ea:39:93:8c:7d:96:e5:83:80:8f:fa:41:90:b6:01:50:
         fa:b6:6e:b8:61:cb:cf:92:5b:9f:8e:ff:8b:6d:2b:c4:f0:4c:
         3f:94:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:27 2026 by rpki-client