Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File:                     4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier:          lmYH8jWxGh5Xh+eRsId+4qTMbZB6WyeUWqVw6i2+3/8=
Subject key identifier:   61:DA:4F:CD:6C:92:EB:46:B7:C2:4A:4A:80:35:C3:D8:6B:A3:1A:0E
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer:       /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial:       09FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number:          09DA
Signing time:             Wed 14 Oct 2026 20:07:04 +0000
Manifest this update:     Wed 14 Oct 2026 20:07:04 +0000
Manifest next update:     Wed 21 Oct 2026 20:07:04 +0000
Files and hashes:         1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: GH5qFu4O7Sra2RAAD3nc0o+HFFVjerDCns6oQQfl5d4=)
                          2: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: NITUGIY3VUrXvrMgL7aqXfgZesSmrM25OMjQ5mv/ZQM=)
                          3: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: 6RXwgbnN2rBKh/2tqm5RTVGi0Iq1Kc0Yd6NErbg5XT4=)
                          4: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: Q8Dw0nOFQkliPbcwFzRrinH8y/mmTbLGc4WI/8vPvqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
                          rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 18:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2559 (0x9ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
        Validity
            Not Before: Oct 14 20:07:04 2026 GMT
            Not After : Oct 21 20:07:04 2026 GMT
        Subject: CN=6acfe0e8-58bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e1:4c:a6:74:71:2c:1f:bc:7a:5f:ee:12:84:
                    2b:fc:3d:16:b8:73:e8:21:ff:cd:05:b3:9c:c4:a0:
                    79:df:fe:0e:f5:df:42:b4:fb:8e:9a:b2:a2:b7:7e:
                    3d:b7:56:a9:d4:5f:10:45:93:86:44:4a:b7:6a:a5:
                    93:65:cc:f6:86:06:c2:51:11:fd:fa:09:ba:d3:1d:
                    31:fe:1e:f8:73:3f:24:09:46:f2:84:f6:2c:7b:36:
                    58:84:a3:0d:0b:32:44:b6:16:d8:3d:51:fd:c9:5e:
                    eb:09:aa:04:62:9a:3f:18:a1:1e:56:47:b6:ad:2b:
                    9e:4c:d6:a8:60:9b:68:ba:73:47:68:f6:84:0a:89:
                    87:9e:c0:a2:9c:14:15:94:b2:af:24:7e:fd:b2:50:
                    41:17:68:26:6c:5a:54:93:13:70:cf:7b:0f:2d:a8:
                    c0:b2:ad:aa:d1:ce:7e:20:e2:93:0c:f6:09:cc:14:
                    92:58:f6:08:9b:dc:86:91:93:30:8a:6d:9e:dd:0f:
                    da:78:49:03:df:a7:6d:c0:b7:3e:ee:be:2c:1c:18:
                    7e:c2:ef:d3:a7:29:61:c3:b5:01:87:e6:a6:4f:53:
                    69:29:94:c9:f7:fe:d4:22:da:15:d6:c0:d7:b7:8a:
                    96:fc:e9:6f:1b:8a:dd:f5:bf:2c:cc:ab:45:0f:cb:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DA:4F:CD:6C:92:EB:46:B7:C2:4A:4A:80:35:C3:D8:6B:A3:1A:0E
            X509v3 Authority Key Identifier:
                keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:87:d8:e7:a6:63:41:68:e6:a7:dc:73:d1:ec:e7:03:83:5c:
         9c:21:ce:2d:b9:ae:95:3f:d5:ff:a2:9c:87:6d:84:54:a4:cf:
         3d:52:2a:1b:4b:35:9e:dc:57:88:10:2e:bf:0f:6b:2d:f2:e6:
         9e:e2:d5:6e:7e:58:90:c0:1e:f1:0c:3e:df:ea:17:e3:f9:5e:
         8b:b8:91:b4:53:e1:f8:13:21:1b:63:3e:95:8d:35:09:83:9d:
         52:2c:3d:ab:2d:f1:aa:df:00:f6:a1:2e:aa:d3:72:43:5a:9c:
         1a:5d:75:c9:de:9b:d8:b2:bd:a2:d5:1e:20:6d:27:2f:30:9b:
         23:f1:1f:9a:71:d9:98:b6:6b:ec:33:59:b4:70:c5:1a:54:32:
         e4:ba:19:9c:9e:1e:49:c7:c2:5e:3f:a9:9b:c8:9a:53:19:d9:
         08:99:ee:59:59:ac:03:52:6f:9a:99:1a:5a:29:09:f6:ae:60:
         1b:8d:de:a5:83:b4:ba:95:e7:c8:2e:46:fe:53:e5:66:e2:06:
         60:af:59:70:b0:d2:72:04:1e:b3:43:5e:af:1c:9b:f5:b7:8c:
         6f:2b:b9:f2:36:d1:c7:c8:d1:78:f4:f1:ab:28:e5:a1:5c:07:
         46:b6:46:98:6a:5a:1c:2a:8e:2b:5d:5b:32:c5:15:06:46:5b:
         76:01:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:47:11 2026 by rpki-client