Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
File:                     4u3kp-qXJminlbJ7qdyH9LkNqJc.mft (raw, json)
Hash identifier:          qQ8Im6EoC0PVQv9LzUoL8q5owvMO76CTlTihmX6aFcg=
Subject key identifier:   07:27:AD:74:49:DB:53:D9:4A:10:F6:BF:6A:0F:2A:99:58:9B:4C:53
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Certificate issuer:       /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial:       179A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
Manifest number:          174B
Signing time:             Mon 02 Nov 2026 16:43:43 +0000
Manifest this update:     Mon 02 Nov 2026 16:43:42 +0000
Manifest next update:     Mon 09 Nov 2026 16:43:42 +0000
Files and hashes:         1: 4u3kp-qXJminlbJ7qdyH9LkNqJc.crl (hash: sFXGOlTWisILEVFVNZ5ymJcxo149mEyjd1acI+cMjcw=)
                          2: 56C8FCACE38011EFBF195482C4F9AE02.roa (hash: 21/YXXRPLk5L/rQp1wiKIAMpRY2JLU1KFkt47LtF7pk=)
                          3: 2357FC145F8D11EF94E7303FC4F9AE02.roa (hash: CAlcqJi6d37i/TxCFyf2svSkqxoKtgQLsLZWuq3dcoE=)
                          4: 854D304E0C9B11EC8433FE7AC4F9AE02.roa (hash: Ab5UYVud2bNs5oNT54NbMqTkTRHIRZLylz4Z+NqHgPA=)
                          5: 9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (hash: aVhexx8H4O1ah6UPgLMQpAuILA0ylRRun3N3rQAJ9MU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
                          rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 16:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6042 (0x179a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
        Validity
            Not Before: Nov  2 16:43:42 2026 GMT
            Not After : Nov  9 16:43:42 2026 GMT
        Subject: CN=6ae8bdbe-bd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:78:f2:73:93:73:0a:be:6f:cc:99:3d:d9:
                    d2:55:7b:f9:72:67:c7:43:00:99:d5:d9:2f:99:2d:
                    71:2c:92:78:af:a2:2a:ae:6c:53:52:e8:b5:2b:a0:
                    88:8e:27:0b:b9:bd:ca:a3:f7:e4:f1:f3:79:8c:0f:
                    54:24:e8:ab:c2:c2:53:aa:a0:a5:bd:de:75:c1:f8:
                    b6:77:74:df:ca:64:4d:99:2e:05:c1:3e:d5:1d:da:
                    fb:e5:96:46:09:34:67:a9:e9:c3:da:cb:70:da:40:
                    d9:9b:38:6a:e5:bd:f3:3f:fa:53:75:0f:0c:1b:46:
                    ef:f4:e0:d7:e8:7b:b5:e4:56:1a:16:27:25:17:4b:
                    f2:72:93:f7:c5:b7:60:e6:21:d5:01:f6:41:09:41:
                    08:ab:b8:c3:86:21:cf:c2:4c:ac:08:0d:9d:95:2a:
                    6a:e0:73:61:26:9c:ee:9c:5d:8c:bb:f8:e2:07:f9:
                    fe:3d:22:64:a6:51:a7:8d:2e:cf:ff:b7:92:3e:35:
                    7f:e0:13:f7:9e:98:e9:4b:dd:9d:2e:d2:d1:1b:7e:
                    df:ce:ef:00:97:e5:19:3e:22:2b:4b:f9:1b:76:7c:
                    80:9d:47:66:12:ff:01:21:a8:1b:6e:fb:10:1a:23:
                    4c:d1:ca:65:ea:a4:20:c2:63:80:21:fc:12:3b:5b:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:27:AD:74:49:DB:53:D9:4A:10:F6:BF:6A:0F:2A:99:58:9B:4C:53
            X509v3 Authority Key Identifier:
                keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:72:d2:18:b6:ff:0c:0e:fd:1a:1a:88:f4:b2:ea:e8:ca:94:
         65:31:7d:d6:70:5a:9e:19:df:aa:63:16:54:08:fb:12:e5:1e:
         49:dc:0b:df:d2:f0:ef:e1:7e:e9:b1:32:44:20:80:b9:cf:2c:
         9e:a4:17:54:41:34:f9:eb:ad:24:31:c7:a5:11:ee:85:48:be:
         e5:0e:22:b9:af:9b:43:1a:d8:54:75:e1:3b:37:ce:1c:1e:8c:
         0f:e5:6e:da:25:77:04:c1:61:4c:ab:b6:9c:cf:8d:1e:2b:40:
         84:fa:23:e1:ce:ad:6a:2d:76:44:91:00:6b:0d:ab:2d:40:ca:
         28:d5:73:d9:e1:ef:4b:fa:12:30:a9:b3:f1:d7:31:26:da:7d:
         94:05:5c:58:78:94:5a:7d:a9:d6:26:42:c4:03:44:f0:5c:c7:
         35:9f:b8:93:f4:a4:58:23:73:25:e6:7b:ea:f0:d6:be:15:4b:
         0b:c9:ad:e5:d8:49:38:99:a3:bb:31:bc:94:75:fb:76:f0:b5:
         fd:15:df:ba:d4:72:70:15:0a:f5:17:f8:a9:a0:2f:8a:61:20:
         2a:d9:6c:29:ce:82:a2:b1:36:51:46:a9:d7:49:f4:a2:69:8c:
         9b:a5:b9:61:0e:12:eb:c8:5b:3d:e4:d0:ee:86:d7:71:6e:e3:
         06:72:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 06:40:08 2026 by rpki-client