Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          KzHP5sRaua39swx66ZeLyZ1HbxjGXdyyQO0kcd1iKuc=
Subject key identifier:   36:C6:3D:B2:14:2D:8E:6E:63:91:E2:C1:BB:12:AA:EA:72:23:74:91
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       0954
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          08C9
Signing time:             Sat 14 Nov 2026 20:37:00 +0000
Manifest this update:     Sat 14 Nov 2026 20:36:59 +0000
Manifest next update:     Sat 21 Nov 2026 20:36:59 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: b/L/r3IV3R3fvhhGH+P3DslCORSeRYh1fIkGxarFuM0=)
                          2: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
                          3: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
                          4: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
                          5: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
                          6: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
                          7: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
                          8: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
                          9: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
                          10: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
                          11: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 20:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388 (0x954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Nov 14 20:36:59 2026 GMT
            Not After : Nov 21 20:36:59 2026 GMT
        Subject: CN=6af8c66c-9374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:a9:9d:24:97:bc:0c:df:29:fd:07:9f:b4:
                    92:8a:bc:57:d1:c5:91:cb:9e:20:06:54:b5:e3:ff:
                    60:59:1f:d1:6a:77:bf:81:39:b1:e2:2a:65:d0:00:
                    59:7f:5c:81:db:ce:14:91:e8:91:5b:39:cb:c9:9a:
                    e7:af:92:e9:46:e6:05:14:ae:88:ea:01:f1:cc:65:
                    a6:5f:f7:ce:72:48:91:bc:1d:ff:eb:83:e6:73:d1:
                    a8:f0:16:b4:7b:b1:2a:09:b3:e2:df:cf:5a:37:f8:
                    42:a3:fc:9a:79:57:54:ca:77:b3:b9:da:ce:f4:32:
                    39:01:eb:5b:8e:29:a0:f1:be:8c:d6:a0:7d:0b:fe:
                    4a:42:97:fa:f5:0e:03:86:81:f4:f9:9f:71:b1:33:
                    3e:c3:de:d6:e6:23:49:5d:c2:8a:cb:ae:aa:37:cf:
                    17:46:62:e2:bc:19:28:56:17:c3:50:77:77:06:bc:
                    a4:9d:5c:a2:26:94:14:3b:3b:a7:63:35:21:c2:d3:
                    a7:cd:46:3b:45:ca:61:62:37:36:8c:f2:88:2b:8b:
                    37:f2:47:1a:f0:bc:2e:20:d9:84:b9:02:d4:4e:9f:
                    6e:da:2f:6f:53:01:23:6b:44:a3:77:ed:83:01:02:
                    98:25:b9:f9:9e:36:4a:e8:92:8b:36:22:66:d0:6f:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C6:3D:B2:14:2D:8E:6E:63:91:E2:C1:BB:12:AA:EA:72:23:74:91
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:24:2f:63:c6:8e:ba:e7:14:98:47:4b:f3:f0:b2:a4:6d:69:
         6b:41:21:d5:73:76:14:46:c7:e3:d9:2c:8b:c4:19:83:7e:6e:
         60:7e:80:c2:96:bf:9a:79:76:46:88:5b:5f:3f:2c:54:40:aa:
         a7:49:8c:4b:2a:a4:39:28:0e:65:1e:bc:7f:01:2a:b3:3c:2f:
         bd:79:c9:06:83:4e:10:be:a9:02:00:4b:1e:0f:6b:e4:9c:4d:
         66:8e:ae:48:00:ce:48:9d:d1:04:5e:6a:67:d3:8e:9e:4d:b1:
         00:27:8c:97:9f:7a:bd:b0:4a:95:1f:e3:ed:1a:b1:0e:c5:b7:
         ae:0b:ad:79:67:2d:9d:95:ad:f5:97:59:fe:b9:7d:ee:cd:b2:
         66:a5:47:10:d3:7f:c3:52:e4:6c:37:20:15:52:70:aa:43:de:
         98:86:a3:c9:ed:62:58:8b:ab:b8:cf:3a:d1:03:23:d8:64:8a:
         7c:d5:74:63:6d:55:4f:65:51:60:1f:6e:b1:74:c4:3c:cd:b7:
         dd:b5:87:53:ff:ee:1c:eb:6e:c7:db:83:73:66:d7:6f:95:4b:
         e1:42:3a:9f:bc:0a:17:c5:5b:9b:04:91:dd:a4:d1:b5:b2:49:
         ff:cc:4c:a5:6a:9b:1d:91:f4:5e:35:79:01:d1:82:89:59:e6:
         4a:74:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:33:54 2026 by rpki-client