Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          jqPdgvRgX2eDKouY5Sd8BeQmawMOqoIgaQ0++d60k80=
Subject key identifier:   33:01:05:F5:3A:46:D1:6B:CB:E3:1A:C9:DB:6F:1B:86:E3:B7:85:F1
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       0938
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          08AD
Signing time:             Sun 20 Sep 2026 20:43:04 +0000
Manifest this update:     Sun 20 Sep 2026 20:43:04 +0000
Manifest next update:     Sun 27 Sep 2026 20:43:04 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: XWd+8ZmxzB4XKfcnrp2iFxBWE/4Kfc8DOnKXFzIEQj0=)
                          2: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
                          3: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
                          4: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
                          5: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
                          6: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
                          7: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
                          8: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
                          9: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
                          10: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
                          11: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2360 (0x938)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Sep 20 20:43:04 2026 GMT
            Not After : Sep 27 20:43:04 2026 GMT
        Subject: CN=6ab04558-cde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:b1:3f:f7:9c:d8:04:b3:1c:cf:f2:8c:19:
                    45:fa:90:eb:40:f9:ba:f8:1a:5b:de:e7:b5:97:3e:
                    e8:c2:df:ac:7d:39:26:eb:c5:d3:b0:1e:3e:a7:d3:
                    a5:77:0f:31:2c:9a:92:ab:5b:64:69:79:95:dc:84:
                    d1:0a:d8:fa:6f:1e:a4:f0:d9:f5:e5:ad:34:8b:5d:
                    cc:ee:14:de:5c:c5:2b:8a:dd:fb:fe:cf:48:ae:80:
                    f2:ed:99:4b:97:a3:03:c6:f3:06:33:4e:17:d4:29:
                    97:8b:39:76:97:5f:04:cd:4e:cd:9c:a4:73:77:8d:
                    ef:77:24:35:4a:54:08:5c:03:f2:df:72:d3:76:58:
                    93:36:e6:98:b8:00:dc:12:c5:58:82:ac:bd:34:00:
                    ea:dc:65:b8:fc:e3:59:a7:ed:a2:bb:14:68:1e:c2:
                    8c:18:20:b9:57:f3:dd:58:2d:5f:6a:cb:69:ee:8c:
                    67:eb:c7:43:ac:6b:8b:57:96:1e:a2:62:47:9b:ef:
                    61:cb:92:cc:73:c4:29:0b:33:ba:5e:95:59:db:72:
                    58:c8:b6:23:42:c4:76:5f:2b:8d:f2:fe:ef:e7:16:
                    3c:dd:3c:6d:9f:e3:53:e5:5f:af:20:3a:a5:1a:13:
                    c7:3f:47:77:7d:c5:31:fe:b2:12:f7:f3:87:a6:ba:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:05:F5:3A:46:D1:6B:CB:E3:1A:C9:DB:6F:1B:86:E3:B7:85:F1
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:4d:43:23:8f:14:0c:7d:51:00:1c:95:33:ee:7b:19:83:
         65:4e:26:72:38:57:84:fb:cf:b2:6e:97:46:85:b6:77:c0:66:
         57:2c:e3:a5:f0:1b:b0:7a:00:e7:9d:e0:74:18:d3:8b:b0:5c:
         73:e0:41:78:90:f1:39:27:46:63:37:38:c4:c7:2c:64:eb:7e:
         d7:3c:4b:d0:dd:65:54:d9:a7:e8:ac:6e:90:4b:69:ec:93:b6:
         e3:ae:c0:3d:37:31:9a:d1:06:e4:da:45:58:80:bd:a2:44:14:
         75:81:21:0a:c3:62:03:f4:9e:5b:77:fd:ee:5f:ca:7e:2a:de:
         ca:46:92:4b:6b:74:9a:c4:6f:b2:6e:36:6a:4f:9f:0e:fd:46:
         29:81:c4:52:bd:33:fe:e6:41:46:17:e6:8b:5a:2c:df:88:b2:
         1f:23:63:69:6c:f4:2f:36:2d:ea:6a:28:2d:83:db:2a:55:8d:
         22:4d:37:1d:c9:b0:d8:5d:4e:d5:0d:e3:00:6f:58:4d:d2:39:
         48:16:ee:9a:a7:db:ba:30:a8:62:22:ed:2d:86:1f:b6:4a:41:
         78:fd:06:c3:69:47:24:75:92:33:1f:bf:83:08:41:f4:69:ed:
         3b:bb:89:c3:a3:89:81:c3:b0:6c:b6:d1:97:48:fe:46:cd:7a:
         04:99:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:03:20 2026 by rpki-client