Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
File:                     ThDxPylfvys1nITd0WUbyFGqivU.mft (raw, json)
Hash identifier:          b67TSH+DzSZOv3/NYeOW+/EIGXKvudGFMpwaAXiZafE=
Subject key identifier:   31:5B:BF:B7:B2:74:9E:D9:C4:EF:EF:6E:1D:C1:6F:8C:50:89:23:6C
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Certificate issuer:       /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial:       28CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
Manifest number:          2803
Signing time:             Wed 04 Nov 2026 15:41:17 +0000
Manifest this update:     Wed 04 Nov 2026 15:41:17 +0000
Manifest next update:     Wed 11 Nov 2026 15:41:17 +0000
Files and hashes:         1: ThDxPylfvys1nITd0WUbyFGqivU.crl (hash: Ie5U0KVePYZzQDaoJk2Zb6WppyBEXJnOVcZP3i+Z7fQ=)
                          2: 5F2B09B4485D11E8ACB54839C4F9AE02.roa (hash: Z4xoQcPBvcW/VbL6OWwtgSaSohFPMeVXuxF8gcgjMds=)
                          3: 95F76942870611F18212677BADEE528E.roa (hash: SOLLv4/IIVbij9uBLzZ1io1DQY7xHAS/qiToU32P5kU=)
                          4: F17169E244A311E9AEF6F25AC4F9AE02.roa (hash: H6EDGgrRbesY/HC/4QOk7KDGC4ogtYE/w/DKgTKt0yw=)
                          5: C1B9CC1239DE11F0B191D94AC4F9AE02.roa (hash: SiLYgZw1OeMIYBqXEe6pyhNgEn9BwkIumVDHZgIIEaI=)
                          6: 75CF2F9A873011F1B6B4C8A97AEE528E.roa (hash: mEYn2nIRyTCP8ZVcA/82XOrMyUlLvHd+g8HTmkjqqZU=)
                          7: C4F9C4A03CCB11F0A0971A87C4F9AE02.roa (hash: FVQ+j69/Aeib4yBQpBYMh3Ioo2GLCobZFDyx7BhU9SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
                          rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 15:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10445 (0x28cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
        Validity
            Not Before: Nov  4 15:41:17 2026 GMT
            Not After : Nov 11 15:41:17 2026 GMT
        Subject: CN=6aeb521d-cd7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:bb:a2:26:c7:92:95:a1:ad:f3:a3:54:1b:
                    1d:f9:d2:f1:c3:fb:bc:90:29:aa:ae:3a:db:34:8e:
                    c4:da:57:35:28:6e:02:89:87:e9:9d:00:be:bd:17:
                    10:43:d7:d8:90:7f:53:aa:55:d4:ba:ce:f4:99:25:
                    33:a6:ff:aa:54:ba:c2:ff:f7:81:78:26:10:bb:d8:
                    52:6c:1c:2f:a2:78:16:1b:4e:69:4f:6f:d2:3f:f1:
                    44:c8:2b:02:01:c9:9d:0c:07:dc:6a:a0:b5:f8:21:
                    e3:c3:82:76:e3:fd:ae:95:92:58:16:96:5f:4b:7c:
                    92:5f:ce:2e:2a:4a:f9:f1:ad:c9:40:4c:2f:cd:23:
                    1d:5f:bf:1d:fe:52:ea:e7:39:9e:b5:8b:98:03:3d:
                    c6:ef:89:43:ac:1c:82:e7:39:25:e8:02:e0:8d:c4:
                    68:90:0f:0f:37:d5:07:74:75:26:ad:90:30:7c:ef:
                    05:0e:1c:b4:1f:60:f0:a9:85:99:af:6c:0d:0c:22:
                    39:48:98:1b:cc:f1:96:ce:8c:d3:41:bd:47:b7:20:
                    18:fe:39:a9:d8:fe:56:8c:19:f3:e3:84:5e:65:43:
                    a3:43:49:aa:35:26:90:9b:b7:e6:a3:bc:9e:04:ac:
                    9f:9c:48:5a:5f:e7:8c:35:97:ff:dd:72:24:40:51:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5B:BF:B7:B2:74:9E:D9:C4:EF:EF:6E:1D:C1:6F:8C:50:89:23:6C
            X509v3 Authority Key Identifier:
                keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:23:e3:82:31:77:a2:7e:38:8c:0b:8d:6d:01:45:e1:4c:75:
         03:06:87:38:89:a8:85:5d:f8:42:82:25:09:4c:d9:90:35:33:
         1e:5a:b2:0a:9e:db:27:49:2a:32:eb:d5:05:fe:79:a4:fe:26:
         ac:2f:53:71:dd:bf:43:fd:b6:63:94:13:a0:64:60:7e:ca:b6:
         b4:9c:99:fe:46:04:1b:56:bd:bf:b7:38:14:13:f7:90:76:dc:
         e8:91:dd:e7:f8:a6:a8:c9:84:b5:20:44:cd:cc:29:7b:48:a7:
         bc:e6:70:cd:91:92:3e:cf:4e:9c:ec:1b:d9:55:b0:30:70:39:
         74:9c:91:7d:7c:81:c9:8c:6c:c9:69:37:69:9f:9e:56:e5:81:
         26:0d:77:e2:a0:c7:23:2f:30:44:31:a9:c9:88:b3:3c:db:c6:
         ef:57:1d:e1:99:6e:1a:a1:cf:a5:a0:b6:4c:6e:38:90:2b:10:
         4e:2e:8c:50:3d:3c:68:60:09:9c:bb:ba:43:6c:33:c1:12:e3:
         2d:d1:82:fb:3b:9b:b5:ce:3a:e0:af:eb:44:2f:49:dc:d3:de:
         7a:01:2d:9f:66:4e:b7:fc:83:e5:b0:4f:84:8c:39:e7:72:d5:
         80:a4:a9:14:e4:7b:02:ed:51:f3:37:9e:2e:40:17:4c:b0:fc:
         16:74:f5:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4
NTFBQThBRjUwHhcNMjYxMTA0MTU0MTE3WhcNMjYxMTExMTU0MTE3WjAYMRYwFAYD
VQQDEw02YWViNTIxZC1jZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzJi7oibHkpWhrfOjVBsd+dLxw/u8kCmqrjrbNI7E2lc1KG4CiYfpnQC+vRcQ
Q9fYkH9TqlXUus70mSUzpv+qVLrC//eBeCYQu9hSbBwvongWG05pT2/SP/FEyCsC
AcmdDAfcaqC1+CHjw4J24/2ulZJYFpZfS3ySX84uKkr58a3JQEwvzSMdX78d/lLq
5zmetYuYAz3G74lDrByC5zkl6ALgjcRokA8PN9UHdHUmrZAwfO8FDhy0H2DwqYWZ
r2wNDCI5SJgbzPGWzozTQb1HtyAY/jmp2P5WjBnz44ReZUOjQ0mqNSaQm7fmo7ye
BKyfnEhaX+eMNZf/3XIkQFFrowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFbv7ey
dJ7ZxO/vbh3Bb4xQiSNsMB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF
Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzVGRC9FMUVGRDlCNkRFQ0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5
czFuSVRkMFdVYnlGR3FpdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeCPjgjF3on44jAuNbQFF4Ux1AwaHOImohV34QoIlCUzZkDUzHlqyCp7bJ0kq
MuvVBf55pP4mrC9Tcd2/Q/22Y5QToGRgfsq2tJyZ/kYEG1a9v7c4FBP3kHbc6JHd
5/imqMmEtSBEzcwpe0invOZwzZGSPs9OnOwb2VWwMHA5dJyRfXyByYxsyWk3aZ+e
VuWBJg134qDHIy8wRDGpyYizPNvG71cd4ZluGqHPpaC2TG44kCsQTi6MUD08aGAJ
nLu6Q2wzwRLjLdGC+zubtc464K/rRC9J3NPeegEtn2ZOt/yD5bBPhIw553LVgKSp
FOR7Au1R8zeeLkAXTLD8FnT1AQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:25:42 2026 by rpki-client