Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          Lx3gMsznMNuoq7MjD65iQauLRFRDw1Rs/eEInOJMgxY=
Subject key identifier:   EA:96:40:C1:7C:AE:28:84:83:73:6B:72:A5:FA:83:7E:2E:EE:EA:D0
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       0891
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          0842
Signing time:             Sat 28 Feb 2026 21:27:13 +0000
Manifest this update:     Sat 28 Feb 2026 21:27:13 +0000
Manifest next update:     Sat 07 Mar 2026 21:27:13 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: Nf3WnqIzMXTdE3S02OS1aFkErvNrzOzGfStOxVvIdOI=)
                          2: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: VkWJzJFrrUcjfw7Whrx8quFhXrqF53pxpjDYVlqErEw=)
                          3: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: rDpjDMpANY5UP6fw4xa4nyyZLU0t3Hrc+biZaf2hOUQ=)
                          4: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: RhTeRHpmCccyQhXwsz/bPbzoRbw66rFE3vQDJJkIS6I=)
                          5: 0989F3EE120911EB83107638C4F9AE02.roa (hash: DUQq8P61M4M6+etTKG7c0xOZ7LZFpErrHGfiypMoOQs=)
                          6: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: TFKRxnOklHqBqHXkm8eeXU3NFE2mAwrypGYRlqO2PKA=)
                          7: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: jmaQJtuQ6vSq6YYc8AsEnJn997H4f/GRY+0oxDMtloE=)
                          8: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: uEpcGMfb+CGF0z9h3Ele0SfHW0qliwyiiR2UENjBIPQ=)
                          9: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: 5xWWm5B7YxaTci+cj4GRnwpowZUui6TAGk8vPkARCxI=)
                          10: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: dVyRa6uQinj6rgpm/KJU/KE97sLzC0gECUdWL7tkdrs=)
                          11: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: RWYwT5yolPmZnCIMSVF9rkeuAXuXhvKasppBIkRvvpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Feb 28 21:27:13 2026 GMT
            Not After : Mar  7 21:27:13 2026 GMT
        Subject: CN=69a35db1-0774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:36:0d:f3:ce:c6:5d:2c:81:dd:4a:d2:c0:
                    28:29:da:54:68:aa:1e:ec:2e:85:0b:b4:0b:8b:97:
                    d3:94:70:88:12:ec:fe:d1:b5:7a:bc:b4:5a:4b:fa:
                    fd:ed:6a:19:45:59:09:4d:20:8f:f6:64:64:f8:9e:
                    9d:3e:81:28:e5:2c:3b:f9:9f:4a:38:5a:dc:3c:e4:
                    4c:7f:b3:bf:d5:84:29:45:7f:94:97:25:d7:4b:a1:
                    d6:f7:51:57:44:ce:92:e9:27:32:ef:a3:18:0a:9c:
                    a4:37:d0:71:80:25:1d:32:d2:7e:d2:5c:07:4a:9c:
                    f3:d1:b2:c0:50:2e:dc:46:d2:4e:15:1a:79:66:95:
                    e6:95:b8:ff:95:92:95:ed:73:83:ac:9a:83:3e:39:
                    f3:93:f0:65:86:91:76:f1:a1:f9:38:c8:eb:1c:b2:
                    82:67:d2:a1:b5:dc:63:aa:17:48:09:18:ef:3d:4c:
                    e6:9e:8d:63:27:b9:7b:73:85:70:31:7c:eb:be:82:
                    3c:d6:7e:18:3c:9d:15:91:81:44:b9:95:67:91:e1:
                    76:78:b0:e1:31:e9:e4:77:62:93:ce:f0:76:23:9c:
                    41:1c:64:44:f5:40:b8:d3:77:5f:72:a3:8b:5b:2c:
                    fe:83:08:e9:92:5e:32:0a:c0:dd:91:2b:20:63:e9:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:96:40:C1:7C:AE:28:84:83:73:6B:72:A5:FA:83:7E:2E:EE:EA:D0
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e2:a2:5f:5d:1c:89:5b:be:14:eb:12:63:58:90:63:80:80:
         6b:2d:bc:55:c8:b2:9b:df:22:ec:f6:60:69:6d:de:22:7d:2b:
         58:d1:31:bf:56:9f:1f:a4:14:f3:1d:0c:de:79:1f:54:4d:ba:
         ae:93:73:8b:04:5f:9b:e3:ff:91:b3:00:95:4e:ee:87:c9:77:
         53:8b:ed:7f:fb:cd:a7:65:81:14:1f:c4:1e:52:ef:87:2c:aa:
         f7:51:3d:da:16:67:0d:d5:75:6e:5b:6b:97:90:3c:22:0e:51:
         c1:0e:7a:4d:73:44:98:1a:a9:09:56:24:c5:93:46:62:02:6c:
         a6:99:64:8a:a1:a0:3c:fa:f9:4c:f0:4b:63:99:52:b3:29:ee:
         36:4d:2d:7d:9a:59:36:bf:d1:22:f1:fb:8e:ed:c9:10:e4:19:
         f6:cb:60:47:d8:05:bb:94:f7:77:9b:ed:16:a2:0c:f1:56:d9:
         27:f1:1e:fa:ee:fd:dd:6f:6e:56:aa:a4:8d:04:ff:6a:cf:3e:
         71:52:74:46:53:d6:e9:0e:5f:8e:80:96:39:12:f9:6c:2c:1e:
         be:09:d7:ed:30:42:46:21:bf:55:df:b1:e4:94:01:69:2f:79:
         ee:f5:df:a6:f5:e2:39:c1:23:ab:b1:a9:09:7d:4a:4e:eb:76:
         0d:10:38:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3
NDRBQUY0ODAwHhcNMjYwMjI4MjEyNzEzWhcNMjYwMzA3MjEyNzEzWjAYMRYwFAYD
VQQDDA02OWEzNWRiMS0wNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunE2DfPOxl0sgd1K0sAoKdpUaKoe7C6FC7QLi5fTlHCIEuz+0bV6vLRaS/r9
7WoZRVkJTSCP9mRk+J6dPoEo5Sw7+Z9KOFrcPORMf7O/1YQpRX+UlyXXS6HW91FX
RM6S6Scy76MYCpykN9BxgCUdMtJ+0lwHSpzz0bLAUC7cRtJOFRp5ZpXmlbj/lZKV
7XODrJqDPjnzk/BlhpF28aH5OMjrHLKCZ9KhtdxjqhdICRjvPUzmno1jJ7l7c4Vw
MXzrvoI81n4YPJ0VkYFEuZVnkeF2eLDhMenkd2KTzvB2I5xBHGRE9UC403dfcqOL
Wyz+gwjpkl4yCsDdkSsgY+l7swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqWQMF8
riiEg3NrcqX6g34u7urQMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx
Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv
ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc+KiX10ciVu+FOsSY1iQY4CAay28Vciym98i7PZgaW3eIn0rWNExv1afH6QU
8x0M3nkfVE26rpNziwRfm+P/kbMAlU7uh8l3U4vtf/vNp2WBFB/EHlLvhyyq91E9
2hZnDdV1bltrl5A8Ig5RwQ56TXNEmBqpCVYkxZNGYgJspplkiqGgPPr5TPBLY5lS
synuNk0tfZpZNr/RIvH7ju3JEOQZ9stgR9gFu5T3d5vtFqIM8VbZJ/Ee+u793W9u
VqqkjQT/as8+cVJ0RlPW6Q5fjoCWORL5bCwevgnX7TBCRiG/Vd+x5JQBaS957vXf
pvXiOcEjq7GpCX1KTut2DRA4tg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:24 2026 by rpki-client