Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
File:                     TK4677Gsir3bmbzO5PpakW0VezQ.mft (raw, json)
Hash identifier:          krqbU+Q20BgzprJQ5XFAV7EAcZUOLRWv3GojB42Tv/8=
Subject key identifier:   6F:E0:1D:6D:22:01:BD:7C:0B:C1:64:98:CE:1A:DD:C0:83:B8:61:0F
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       3784
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
Manifest number:          3663
Signing time:             Sun 20 Sep 2026 14:28:48 +0000
Manifest this update:     Sun 20 Sep 2026 14:28:48 +0000
Manifest next update:     Sun 27 Sep 2026 14:28:48 +0000
Files and hashes:         1: TK4677Gsir3bmbzO5PpakW0VezQ.crl (hash: DOLdk9sxjMmDsP1IImMD75Z4qPC8fiUKqaChpAUFjSg=)
                          2: 24D7D74C978011EE87BB7D53C4F9AE02.roa (hash: E8tgGZnAJ0DYVToULPFkfN33B2nidUXrmWqnz+uCtOk=)
                          3: 0C51883C12E711F183ACC54E0D3D8C67.roa (hash: l7LBi/Y1FpDZmmeBXMO7I7E/b5ECT7acllocUhgV2ZA=)
                          4: 031323B06EBE11F196174E6566A30FBC.roa (hash: NXB/rg2055CKSN9ZF6BUpnYzbi4UYOhQlvoMPnUpbg0=)
                          5: 4DFF14DE71F211F08D45AC42C4F9AE02.roa (hash: RV3R+8uCKWnB9ll+ltJkxV+x3kpjR9QPpPUyngdFPaM=)
                          6: 9ED84B886EC111F19289006667A30FBC.roa (hash: hd1ZU6/Fnutera66ZXCD8DJsTN9KMedFIbuKf7ICHXM=)
                          7: D630A6B206D511EFB6CFDF2DC4F9AE02.roa (hash: j7NSyaGCsiCQNnmyTpDrtH8dk6MerGuTvymGLl12qTI=)
                          8: E83E047071F111F0BBD1B63FC4F9AE02.roa (hash: IQ74hXKfS9sBj5pIuOgIRXKGZQu6lWL3dFvrJ3NA2Fw=)
                          9: 8FF00754732F11EE90078C13C4F9AE02.roa (hash: YKihQA85OZGMIoxiktXscM0JZAAS7N+DfWFx0LMvOUU=)
                          10: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (hash: mwJTu9ubLJ5CecmwYFCQ6y7GrlQ3uGcRqvbvaSw7Luw=)
                          11: 4DC27210558111EF880A8679C4F9AE02.roa (hash: CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=)
                          12: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (hash: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0=)
                          13: 8FD552C071F111F0AE49323FC4F9AE02.roa (hash: 9irr6mRRCa6Oo6K8I9PdRq3pgeAMalaJw+pxtHcISBU=)
                          14: E73BBF76957811F1B4216A726F11F970.roa (hash: sGezONrhPqvpv1z4vFJElu1iyeEpn1z3ruGDa1oLp5I=)
                          15: 041DFBF46EBE11F196174E6566A30FBC.roa (hash: UdubWRqV2Ckel/l8C/+VnynljQ5Fshh1WNKa2k+xRl8=)
                          16: 0FCEE1C4F76411F08B4529B5436F56BC.roa (hash: YJpZIEy71VmJgEyYXAc8PneApk2Fcyu1z7/EBcc0Dg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14212 (0x3784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Sep 20 14:28:48 2026 GMT
            Not After : Sep 27 14:28:48 2026 GMT
        Subject: CN=6aafeda0-576b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:a7:0d:ca:75:2c:09:fe:b0:49:62:d3:d8:
                    cf:23:52:68:fa:56:09:4e:b2:36:c1:99:76:cf:58:
                    67:47:89:78:f2:ba:68:e6:ff:bf:9e:dd:7a:fa:ce:
                    70:7c:97:75:c0:82:12:ad:f1:86:d4:62:01:87:a0:
                    48:ef:dd:78:23:27:bc:07:be:47:4d:57:bb:12:48:
                    81:d6:cb:40:f0:76:10:8c:f6:8b:93:d6:85:6b:d7:
                    cb:09:93:82:94:bd:c5:f8:cb:7d:46:dc:f3:7e:9a:
                    86:8e:7f:63:9b:94:54:4d:dd:1e:ea:b3:fb:92:da:
                    b9:6e:25:f5:5c:94:aa:a2:75:f0:e7:ae:2d:8f:6b:
                    bc:ac:16:76:59:e8:5d:b6:7f:cc:b8:c1:7d:06:03:
                    7c:ae:3a:5c:e4:42:dc:2b:54:d2:55:12:e5:eb:80:
                    5f:4d:37:d9:80:d7:7a:98:df:0c:4b:92:cd:41:b5:
                    cf:be:30:31:38:13:b0:7f:09:4f:88:31:c5:11:fa:
                    5e:b2:e5:d8:13:2c:a0:9a:9a:e2:78:a1:1f:10:68:
                    bb:49:9d:2e:ac:76:bd:9b:33:6f:2f:f0:ea:77:7d:
                    9b:17:c9:a9:b3:6c:ba:86:5f:b8:42:1e:47:3d:6b:
                    60:c1:26:a7:9e:06:a4:96:68:a3:fd:96:a4:18:63:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E0:1D:6D:22:01:BD:7C:0B:C1:64:98:CE:1A:DD:C0:83:B8:61:0F
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:85:8b:9b:9d:ec:4c:a5:33:62:77:04:05:37:5a:24:7d:07:
         8f:4e:91:b0:2b:0b:5d:db:90:fa:ab:f8:ec:f4:11:fa:af:b9:
         13:e1:41:86:a7:88:e2:0b:1b:54:12:50:cd:36:d0:15:8f:ea:
         9a:47:23:86:7b:1d:4d:5d:f1:68:44:c7:ec:27:e1:16:1f:b6:
         84:21:af:46:2b:a6:3d:c4:a1:66:ac:cc:19:98:49:87:9c:1f:
         82:7e:d3:f6:96:a6:08:e1:6e:96:80:a8:a1:c7:d2:2d:84:0b:
         54:3b:45:f7:23:8e:66:be:4e:12:fc:cc:44:cc:b9:25:55:53:
         75:98:21:fa:08:f8:c1:fd:35:39:1c:a3:95:73:8e:76:37:56:
         23:70:a6:9f:5e:77:75:a7:5b:ef:5a:3d:dc:4c:47:0e:db:30:
         66:ff:be:5a:98:a9:df:46:ea:b1:54:f5:7f:92:f8:51:27:40:
         dc:f9:c2:8d:4e:a8:ed:74:94:1c:9d:03:83:77:b5:57:1a:88:
         55:37:0f:e5:8a:75:b5:b0:4a:f1:61:8c:86:21:e3:af:fe:e4:
         b0:81:25:dc:a0:6e:0d:62:39:a9:f5:73:50:97:19:ac:30:94:
         59:6e:2c:cc:12:74:b4:0f:74:ab:9f:08:6d:1e:bc:cd:ae:01:
         1c:58:3b:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICN4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjYwOTIwMTQyODQ4WhcNMjYwOTI3MTQyODQ4WjAYMRYwFAYD
VQQDEw02YWFmZWRhMC01NzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwWnDcp1LAn+sEli09jPI1Jo+lYJTrI2wZl2z1hnR4l48rpo5v+/nt16+s5w
fJd1wIISrfGG1GIBh6BI7914Iye8B75HTVe7EkiB1stA8HYQjPaLk9aFa9fLCZOC
lL3F+Mt9RtzzfpqGjn9jm5RUTd0e6rP7ktq5biX1XJSqonXw564tj2u8rBZ2Wehd
tn/MuMF9BgN8rjpc5ELcK1TSVRLl64BfTTfZgNd6mN8MS5LNQbXPvjAxOBOwfwlP
iDHFEfpesuXYEyygmprieKEfEGi7SZ0urHa9mzNvL/Dqd32bF8mps2y6hl+4Qh5H
PWtgwSanngaklmij/ZakGGNJoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/gHW0i
Ab18C8FkmM4a3cCDuGEPMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUQ3RS9FQ0E2ODIzNDFEODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2ly
M2JtYnpPNVBwYWtXMFZlelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi4WLm53sTKUzYncEBTdaJH0Hj06RsCsLXduQ+qv47PQR+q+5E+FBhqeI4gsb
VBJQzTbQFY/qmkcjhnsdTV3xaETH7CfhFh+2hCGvRiumPcShZqzMGZhJh5wfgn7T
9pamCOFuloCoocfSLYQLVDtF9yOOZr5OEvzMRMy5JVVTdZgh+gj4wf01ORyjlXOO
djdWI3Cmn153dadb71o93ExHDtswZv++Wpip30bqsVT1f5L4USdA3PnCjU6o7XSU
HJ0Dg3e1VxqIVTcP5Yp1tbBK8WGMhiHjr/7ksIEl3KBuDWI5qfVzUJcZrDCUWW4s
zBJ0tA90q58IbR68za4BHFg7Ig==
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:52:43 2026 by rpki-client