Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
File:                     Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft (raw, json)
Hash identifier:          ATaY3mfOtx+KfihdkUWHqSbNA+X9pa2JoInGYj2qIXU=
Subject key identifier:   67:1A:C4:0C:3D:A4:F1:98:80:F8:DC:F1:65:CF:93:F4:64:BE:D7:31
Authority key identifier: 4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B
Certificate issuer:       /CN=A916C4BC/serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
Certificate serial:       055E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
Manifest number:          0555
Signing time:             Sun 20 Sep 2026 23:14:54 +0000
Manifest this update:     Sun 20 Sep 2026 23:14:54 +0000
Manifest next update:     Sun 27 Sep 2026 23:14:54 +0000
Files and hashes:         1: Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl (hash: Swcl2pbhxRrbLmLYbBYl4L4lhX7go70/SPsnn7N6snA=)
                          2: F12D3964A14511F188E366FA4811F970.roa (hash: /7A+MrFTwbSQAF/aPb3EG1CH9OALPa+O2iFc9fzKmy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl
                          rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4BC, serialNumber=4DFEC3437C90BF414D05188B482C7848E6F3161B
        Validity
            Not Before: Sep 20 23:14:54 2026 GMT
            Not After : Sep 27 23:14:54 2026 GMT
        Subject: CN=6ab068ee-7e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:69:40:89:03:e4:a8:c3:88:ac:05:fc:6b:
                    ab:70:6c:56:b0:5b:9a:51:c7:1f:57:8a:59:b8:16:
                    cb:56:83:23:3d:52:29:c4:40:d2:b3:3d:1b:80:be:
                    c2:6c:31:b8:9f:48:b6:cd:14:33:a2:00:27:aa:cd:
                    e5:63:6e:f2:cf:05:b0:05:de:89:7a:67:8d:3f:5f:
                    c2:56:8c:4e:0d:54:5c:fd:b2:2a:d0:73:20:05:15:
                    39:e0:f0:ea:cf:e2:d0:18:23:cb:b2:90:0f:85:d9:
                    f6:ff:ff:a8:b0:b4:2a:b4:61:16:11:f5:99:36:b4:
                    41:9f:55:00:fb:f5:f8:c9:ff:a0:a3:1c:a1:d5:db:
                    f0:0b:d2:43:13:ae:b7:22:50:5a:30:49:1f:ed:a6:
                    ae:92:34:bf:7e:25:4b:c6:9f:a2:41:f5:e9:c3:ce:
                    82:75:99:f3:c8:2c:da:d9:bd:f1:75:d7:90:78:64:
                    6b:c3:18:ee:65:4c:4b:b9:70:72:dd:cc:3b:65:c9:
                    75:af:13:3e:d0:cf:46:79:13:d4:d4:39:ac:2b:70:
                    fe:c8:cf:3a:d3:31:3e:33:12:b7:5b:00:72:d3:18:
                    39:cc:8b:ba:60:d1:2c:92:65:2a:73:45:4f:1c:1e:
                    ca:e3:bc:8d:d2:65:82:1a:f2:6d:1c:c5:b2:05:67:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1A:C4:0C:3D:A4:F1:98:80:F8:DC:F1:65:CF:93:F4:64:BE:D7:31
            X509v3 Authority Key Identifier:
                keyid:4D:FE:C3:43:7C:90:BF:41:4D:05:18:8B:48:2C:78:48:E6:F3:16:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4BC/A970B2EC51AC11EC9ED9041BC4F9AE02/Tf7DQ3yQv0FNBRiLSCx4SObzFhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:8f:ef:8e:cd:ea:c3:60:68:49:b8:e8:d5:d6:45:e7:16:51:
         a8:b6:84:33:cd:62:02:45:4d:3b:d5:37:9d:ca:91:18:b4:45:
         a2:95:8d:52:35:7b:c0:9d:8b:ae:fc:31:e8:3d:61:c7:29:92:
         a4:28:68:86:60:80:51:29:dc:88:97:80:e8:ad:74:06:48:21:
         9d:f8:ee:51:b6:8a:d2:82:78:77:87:02:1f:12:71:d9:8b:db:
         e8:3d:02:a9:e4:5d:26:d1:39:7a:ad:85:f8:62:ff:11:06:06:
         3a:b2:c0:4f:86:14:b2:b3:a5:37:92:48:98:e1:a8:62:3a:b0:
         10:a5:3b:4d:01:bf:e7:50:40:c1:5f:64:25:79:67:e5:7c:6a:
         d1:33:ed:37:0d:e2:9e:05:e6:c0:f8:e1:15:55:66:eb:b6:0e:
         74:dc:f0:78:a5:30:6c:bc:05:aa:1c:84:e0:7a:fb:7c:2a:18:
         80:85:b5:b8:fa:4b:60:fa:e9:a0:75:cd:3a:3c:cd:a1:09:38:
         c9:c5:77:a3:a9:e0:3b:73:97:bf:c3:a7:78:22:d0:07:79:01:
         c0:d3:3a:ea:d7:d3:27:82:df:92:25:15:87:9d:76:d3:df:68:
         46:b7:c0:53:60:46:a7:6d:ba:e0:cb:9a:b5:4f:e0:fc:e9:7d:
         bb:0c:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:49:47 2026 by rpki-client