Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
File:                     cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft (raw, json)
Hash identifier:          CT3RGWsekp5/Ndr24TG3Xqddc9BWiR0XNBzSw+6bB8Q=
Subject key identifier:   FA:44:49:1C:99:2C:C8:BD:80:A9:22:A9:57:EA:FD:49:21:A3:19:BC
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       02F3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
Manifest number:          0279
Signing time:             Sat 03 Oct 2026 02:57:43 +0000
Manifest this update:     Sat 03 Oct 2026 02:57:43 +0000
Manifest next update:     Sat 10 Oct 2026 02:57:43 +0000
Files and hashes:         1: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl (hash: N0pFZv0MCl8NIVF7yW+eaAs13Vy6UUmbm9X4x9PG2GQ=)
                          2: 97F664EC366311EEB376DC3AC4F9AE02.roa (hash: f+7hbFu2v1z1/CI2FBI+l9ik9Oq5JXZ77of4oiG/jFU=)
                          3: 993E65A2366311EEB376DC3AC4F9AE02.roa (hash: hQK+5lOgMzpih2UWUzxKi+xGcJjqrXUJ3V2GWbdrHec=)
                          4: 986FD2A0366311EEB376DC3AC4F9AE02.roa (hash: GchPLS5J236W2KlAoH2YoU77qngjuKMqUIBqFM1TIcI=)
                          5: 9FCDE686692911F0882CE164C4F9AE02.roa (hash: q1atvLCPmFeISYOaPa6hcCxxU8WtvI4/Bj2pv4TpJfs=)
                          6: 16824DB06EAD11F1BEE2281461A30FBC.roa (hash: UDgCG/Y4K0eNvh7QSVH/Px5XQGlS4hFfpmn0e16+X/g=)
                          7: 75A05C926E8211EFA843807EC4F9AE02.roa (hash: IC6S29BDCA3ebJHkBP133EcDGdXxl8/oyFCmOevksxg=)
                          8: 6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (hash: gpZAC3B4cf0P/imDYdwj9wYrl+UznoKvZqgWUfxAVec=)
                          9: 9663A3B0366311EEB376DC3AC4F9AE02.roa (hash: duE0RdpAcQS37YUm0MBesLZjHqBTcqo/iP96oTdR2f8=)
                          10: 9DB1FB565EA511EFBA70FD68C4F9AE02.roa (hash: 65XWf2ICyot2hiO2LgcHuRKF3Gi9BMxT6EzYSw7Gng4=)
                          11: 4A122A3C663E11F1833519836C47A888.roa (hash: s1J2I1iS7t0NO7B3FkWj76CTzugstD7J6jKlwLSSwgo=)
                          12: 616950CE619411F1AAF641588347A888.roa (hash: 85l6JVvihxAkzulND/6hVXZpBAFkUy/kNDU9a1Amuro=)
                          13: 96EE3F5C366311EEB376DC3AC4F9AE02.roa (hash: HWDKrWR4ZSzndqYGfGz3yyZCIawFWZQQaQyTTbVr3n4=)
                          14: 99B68AAA366311EEB376DC3AC4F9AE02.roa (hash: ZUZGRqzABF3e0vVh1u5ovpeNC6Jdx+LCWvAUVh0diJ8=)
                          15: 9C62F7D4366311EEB376DC3AC4F9AE02.roa (hash: W0ZAQl0CnTBSVyek7GiP39Gt1w17u/6L/QzWTcVOfoQ=)
                          16: 9AADC284366311EEB376DC3AC4F9AE02.roa (hash: g83NG1HZfiJL+vcjzqOivBUnHMB1ELqSwaUNsJNE1VM=)
                          17: BFDC8CE68AAB11EF93DB792CC4F9AE02.roa (hash: wkvyO2o6LF9oqZ2WfiFlM73GqnUxri239jf1iKk7alc=)
                          18: 9A3920B4366311EEB376DC3AC4F9AE02.roa (hash: mxv19lUdvAACnTLBCNoKDJxY8cmrT91nRYUb3vfLzoI=)
                          19: 95EA48DA366311EEB376DC3AC4F9AE02.roa (hash: qLH3fu12ggtmW0BfMc4e6M7eHEyxfR+qrZxDfYpP4SQ=)
                          20: 9767C3CC366311EEB376DC3AC4F9AE02.roa (hash: mhHZJkVP5QGZ7wHebgGKhz8nBGrVw5ynPXxgzGT5fJc=)
                          21: 9BDF5D70366311EEB376DC3AC4F9AE02.roa (hash: qfIgVPe/LxXZegiY3OPJ2qs6ZgHHnZ2Bm9mQCgyt9nk=)
                          22: 6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa (hash: CV2Ah2EheqVgYD3smx7l67bOLL4aEoMWAZ6LiDXLGYU=)
                          23: 9B616A50366311EEB376DC3AC4F9AE02.roa (hash: 034Zu5c2DMARaxqbGq7TvBZSQWPeiz/F0dFBreItvdg=)
                          24: 957D5E14366311EEB376DC3AC4F9AE02.roa (hash: CFxEqODtPIM78XqoJNJ4wLRkngw17N28FutDZmF3VNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Oct  3 02:57:43 2026 GMT
            Not After : Oct 10 02:57:43 2026 GMT
        Subject: CN=6ac06f27-509e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:11:2e:86:52:aa:11:bf:dd:73:14:f4:26:
                    b7:9d:9d:ef:d0:dc:47:af:a5:70:66:51:2b:be:5e:
                    a3:bc:93:ce:3b:f1:b0:df:0f:e8:77:de:45:83:71:
                    57:3a:ca:bd:0f:b6:28:91:f1:4b:9f:38:1c:5b:79:
                    93:f4:1e:2d:bc:ce:94:d3:d9:2a:eb:40:59:60:f9:
                    a0:69:6d:7a:66:50:6c:f0:bb:a7:40:c4:5b:66:c8:
                    fe:ef:ee:43:7f:9e:77:52:67:8a:b2:cf:9d:48:1e:
                    b6:45:66:53:f6:72:31:4e:3d:37:86:b4:70:e7:32:
                    b5:3a:a9:a9:77:a6:a7:6e:33:5c:47:e4:d7:d5:30:
                    46:e5:c6:d2:2b:30:40:22:90:f7:d3:ef:13:68:cd:
                    57:df:76:9f:4c:30:9b:be:5a:72:2d:0f:70:a8:a4:
                    06:53:8e:c8:a5:e5:fa:bb:83:68:56:28:c7:2b:6c:
                    be:a7:72:b6:80:68:e7:37:2d:59:7b:8d:04:18:73:
                    95:d5:67:91:c4:d2:eb:08:a6:14:ba:19:dc:a9:6f:
                    21:b3:73:37:b4:78:9e:e3:52:25:a6:0d:78:83:88:
                    c2:32:8a:30:5b:61:81:01:7e:a5:fc:dd:70:de:ca:
                    6c:c7:2d:ee:9d:1b:8d:5c:b8:46:c6:0d:b8:30:5b:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:44:49:1C:99:2C:C8:BD:80:A9:22:A9:57:EA:FD:49:21:A3:19:BC
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:37:f8:22:04:7b:e7:54:73:99:ef:59:45:1a:26:fa:be:ea:
         1d:0e:32:65:28:4e:ed:22:06:c1:c8:7f:a1:e4:26:51:fc:40:
         fd:82:ee:ab:37:95:28:b0:ef:55:59:4a:81:1a:d7:5e:58:5b:
         1c:78:5f:c5:13:3f:47:dd:a3:0c:9c:14:72:e3:cc:31:c9:b3:
         da:8f:a5:aa:1f:01:28:15:aa:53:d8:07:db:df:89:13:1d:f9:
         ab:ee:26:cf:aa:33:2b:da:76:19:b2:21:42:d4:09:81:f2:6e:
         e8:c9:37:77:8d:b6:5f:e3:6f:5d:e9:b2:d1:0d:48:81:29:2d:
         ab:c0:d8:5d:cb:9c:4b:94:c6:2e:01:d5:aa:39:99:f6:23:39:
         64:b2:14:79:af:d0:39:53:30:0a:f7:64:0d:d2:40:33:c7:ee:
         da:3d:8b:3d:22:dc:9e:63:b0:28:1e:fc:c1:92:48:98:ec:79:
         70:df:09:00:b1:a7:eb:27:18:ac:47:90:d6:49:a4:3a:33:a5:
         b4:63:0d:43:0a:42:ae:fd:d0:02:54:fb:9d:1e:c9:3f:5e:b6:
         5c:62:cc:ea:7e:d3:a4:8a:23:29:3a:21:c5:e5:95:2a:74:de:
         e3:45:23:ae:2b:b2:f2:00:fc:42:fd:a5:35:e9:87:ac:7e:e9:
         64:af:a3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:43:52 2026 by rpki-client