Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          O1jGI6IiyH/0OiwJoWCwDxmYSbP9hBqKsvBjisYTOXI=
Subject key identifier:   BD:44:DC:05:E4:1A:AD:D8:71:7C:16:95:1E:4A:10:7A:F5:00:74:04
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0E2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0D25
Signing time:             Wed 04 Nov 2026 18:56:48 +0000
Manifest this update:     Wed 04 Nov 2026 18:56:48 +0000
Manifest next update:     Wed 11 Nov 2026 18:56:48 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: xDHEjDNyEJbmIrpN4Fyn9grJ9vap6RDn7xRoUIQuz68=)
                          2: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0=)
                          3: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          4: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
                          5: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
                          6: 0CE85BA6BE1111F18720DB3D5611F970.roa (hash: nz9vc68IV5WJ7mQXbS6rNZIjFtBJkdis8tlOkiay7Qw=)
                          7: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
                          8: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
                          9: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY=)
                          10: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: fSPgQ0LMQzI8bkHaUu8bL3d8S8z0D/SfCDL4l0l5jeY=)
                          11: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: cLjdhUjlRnZ/CysDyvE5WxC4HuYKkSjsastV+5g0hOA=)
                          12: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
                          13: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          14: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=)
                          15: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
                          16: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
                          17: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
                          18: 60A1565CA1F211F1993DFC693F11F970.roa (hash: RFHpBcGzcu8zc3vv4bbihIv1/WTO6k7Pot6Tojz87xo=)
                          19: 9DBA4E02D71411F1A6D299031A66CEF9.roa (hash: pdSyUMPpA8a/ewj/0DOaHahHB7MmG/Q6lb6CIo1RnLQ=)
                          20: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
                          21: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
                          22: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          23: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
                          24: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 18:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3629 (0xe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Nov  4 18:56:48 2026 GMT
            Not After : Nov 11 18:56:48 2026 GMT
        Subject: CN=6aeb7ff0-a97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7b:79:08:ec:44:a0:d4:52:b3:fe:b7:d8:ec:
                    56:20:22:26:7a:f0:d7:b3:19:96:ee:4f:74:7a:bc:
                    02:45:20:81:9e:ea:6a:be:55:a2:b2:7a:d2:95:7d:
                    b0:2e:b1:bd:5a:eb:63:49:6c:d4:57:37:bd:37:f4:
                    34:3b:d0:23:f0:ac:af:2d:6e:e0:ae:ed:24:47:d8:
                    8a:bb:b9:7a:2c:d7:57:2e:7d:e4:60:3a:a8:5d:d5:
                    de:ea:0e:d5:a5:d0:7a:33:7b:20:e8:9b:04:5c:5a:
                    97:0b:8d:64:4e:c8:c4:f8:52:77:26:73:d0:91:3e:
                    29:84:ae:68:c7:84:f6:94:81:e3:15:04:bc:4d:87:
                    76:70:9b:a0:09:57:c3:e2:19:e9:05:65:eb:37:a1:
                    37:b9:33:17:b9:51:0a:ef:5b:cb:c8:6c:c5:d4:f9:
                    2a:c1:f3:7f:1d:f3:70:72:c5:ef:73:3f:48:c1:e2:
                    e4:c7:d9:33:c4:15:12:52:68:f9:79:29:80:56:a1:
                    4a:d2:16:b8:b5:49:c2:d3:d2:32:0f:a7:19:12:26:
                    cc:d0:10:e1:06:ed:11:16:e7:94:3b:1f:6d:02:26:
                    85:3e:83:c3:98:ad:b3:03:d2:0f:3a:41:41:b8:c5:
                    dd:65:2a:47:15:ca:a3:38:d8:bc:ce:e6:da:ad:bd:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:44:DC:05:E4:1A:AD:D8:71:7C:16:95:1E:4A:10:7A:F5:00:74:04
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:1f:c4:ee:94:39:f2:93:f0:bb:43:64:6a:32:bb:aa:cc:13:
         32:8f:4a:53:96:60:8b:42:d5:21:16:c0:2c:7d:51:21:c1:19:
         99:0c:b4:9c:36:65:6a:ec:4c:87:1d:72:ac:ca:5c:c8:95:ff:
         32:fa:0b:11:60:28:c6:d9:dd:ea:0c:2d:05:11:da:d1:7c:90:
         ea:c3:02:11:cb:ac:0d:31:8f:f9:b0:cc:86:64:ab:c3:45:ca:
         8a:71:5f:0e:23:c7:e6:b9:03:b6:1d:66:1a:62:eb:09:3f:6b:
         65:ba:d4:97:0d:55:39:f7:89:92:3a:5e:5b:58:61:45:6d:8f:
         22:d0:83:21:e3:98:c6:81:7a:ce:5d:04:c0:63:0b:be:90:c2:
         9e:37:24:5e:62:30:ac:c0:c6:48:d6:74:d6:80:fa:d4:e5:f2:
         72:c0:df:8e:7e:32:d4:d3:f5:5c:0e:40:7d:1e:da:da:b7:ab:
         0b:66:f4:46:fc:8d:7b:d4:92:3c:12:0f:cc:54:63:8d:46:b8:
         8e:6c:57:51:9c:80:b7:be:7a:3c:39:6d:f2:16:70:47:2c:cb:
         2f:de:4b:a0:dd:38:3d:4f:38:89:11:fb:fe:ac:69:cb:0b:4b:
         f9:fd:1d:1c:46:34:de:86:8e:67:59:40:bb:fb:d0:87:bf:67:
         2d:c5:a5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:32:14 2026 by rpki-client