Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
File:                     nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json)
Hash identifier:          KHK4RpxQ7W+jAsAB2r0AH/oFnTxu8xm/wHVMKauehas=
Subject key identifier:   4C:5B:89:19:1F:1C:19:AF:78:B7:DA:1F:4E:D5:6B:04:02:A5:52:C8
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0FC4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
Manifest number:          0ED0
Signing time:             Mon 02 Nov 2026 17:54:02 +0000
Manifest this update:     Mon 02 Nov 2026 17:54:02 +0000
Manifest next update:     Mon 09 Nov 2026 17:54:02 +0000
Files and hashes:         1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: DG+lYoTdmc7lm9lyYqdXsYUpnw99tB/csrj3iFEtsc8=)
                          2: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: IEzFe4BPkAZ0NzJZL6yH2kjj+JWlwA9NjN+OrbuWGN8=)
                          3: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: /lqE0fcVtZNviMtzF6KcdvDYxyFd2WfKbqPkhxIQA0g=)
                          4: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: NI9ztI/dUr8wepd6qEzurrTRw6jIjbbQY+3nIC256Cg=)
                          5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: FRg/vpc/AMBGrvMjIcOoVz1j/708E2nJzNJ2bFS2Beg=)
                          6: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: VF5Ihkgss3eEF0eF0RXv99yvFaNnXbi4F1C1EW0C81k=)
                          7: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: zlI1hG7GiNHiVUCacl+MGSO9NxzvZc+dp6nf+cN3YqQ=)
                          8: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: rOBLE6A0EIALDzqcM8ydFc2oovMN2wtUd1p0AWxIOoE=)
                          9: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1f2phcqQmmi3QewwHTntymoXxlY1vaGBHZf4d83qpRc=)
                          10: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: 7ySchihxHfebU2ZhU1CGMeKuJprNHeKF8ZvTEPQm+Ps=)
                          11: B066E5B6C5C111F0BD9B1831C4F9AE02.roa (hash: nNxHt9F+p6KI/XxX/IHOQ6Ohaw9Mn/6bqQ8JgTffC8o=)
                          12: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: 4Dur1jIx3Py+FV9GnftEwHBIoGYO+qrpeIHWnQl1eg4=)
                          13: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: wLoXAFA4bLf19b9jPn3a1aNAYCXtzzCyZRCHGXoGTTs=)
                          14: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: YFagb40AbqmE67WpsPHQQlwPOv44QLtDjwGBLFO+SMg=)
                          15: 03774914696211EC8A05D115C4F9AE02.roa (hash: 529ic9qz0jYOTL+Y9hkAcJ9upS4aOt6qG85i+oz5nlY=)
                          16: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: DvevpJu7vWFY5EjSZxts3Sc7D51eP/pW+05crk3lgB0=)
                          17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: dpkimmBVqBA7Hxpk3m2+4JsPBW+BiPPwqR13NATbL1g=)
                          18: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: CPQelJmSoQmrjckxju62zT4kF0v4K2A3XLdBMFmD/A0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 16:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4036 (0xfc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Nov  2 17:54:02 2026 GMT
            Not After : Nov  9 17:54:02 2026 GMT
        Subject: CN=6ae8ce3a-6a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:ef:41:33:6a:d1:38:bd:dd:3f:f7:22:c2:
                    dd:a1:8c:44:1a:35:5e:3c:a9:40:f0:9e:8a:ef:39:
                    6e:dc:57:f6:77:01:cb:64:4a:9c:cd:de:71:a0:07:
                    3b:6a:e3:9c:0c:3d:91:d3:b4:19:c1:c8:b4:62:35:
                    6f:90:b4:fe:09:b9:b3:32:e3:42:d8:39:d1:2a:de:
                    ae:db:f1:df:d2:ee:6b:8b:32:f0:e6:d1:8e:c0:4e:
                    0b:23:55:e1:73:49:4d:3c:1f:d7:9a:36:47:ce:4b:
                    e2:fe:f5:eb:f3:87:b1:a4:fb:10:d8:50:0b:d2:fb:
                    bf:d6:82:89:97:59:98:94:fc:79:b8:cb:96:36:a6:
                    40:68:5c:49:57:4a:0f:06:23:f8:1d:89:db:27:40:
                    f4:2d:93:8a:51:d9:3b:b8:83:e8:88:ba:28:87:8e:
                    3d:45:de:39:91:f5:32:0e:2f:e1:61:f1:b2:d3:ad:
                    65:46:ca:07:19:f5:a5:44:25:81:a8:f8:59:96:c2:
                    a8:1d:86:60:09:57:dd:4a:dd:e8:80:c2:92:46:42:
                    e9:34:12:85:f3:b0:2c:e6:ee:32:ac:40:99:07:66:
                    a4:f8:4d:2b:62:cd:40:9a:43:66:52:79:28:97:2c:
                    75:6a:e7:a2:df:05:d5:15:30:c9:e1:e0:2f:f1:5d:
                    96:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5B:89:19:1F:1C:19:AF:78:B7:DA:1F:4E:D5:6B:04:02:A5:52:C8
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fa:e7:9a:6c:76:d7:53:3b:b7:3e:37:2e:87:03:6a:4b:4c:
         f7:b0:d4:72:8b:28:3b:d6:46:9b:90:68:88:59:5a:9c:0f:45:
         73:27:10:95:3a:cc:23:8a:e2:58:16:ea:23:e1:9d:2a:94:f7:
         ae:bc:5a:34:0f:48:8e:15:ac:4d:db:3a:7a:2b:89:70:3a:8f:
         d4:5c:1f:60:bc:9d:57:3d:bd:1e:4e:3f:5c:bd:1a:6b:b0:1a:
         13:1f:c1:3c:53:d8:17:ad:bf:b7:ca:43:b4:84:12:ff:b4:d9:
         e0:84:b4:9b:92:e1:53:d8:5d:cf:12:b6:7c:aa:82:6b:28:c3:
         89:1a:22:ef:36:f9:d9:7e:82:8d:62:01:37:8c:a2:c9:99:8d:
         57:be:b8:a3:56:d0:e2:a6:b9:17:cf:de:6c:94:18:58:c6:54:
         73:91:64:1c:97:d0:8b:c4:07:6c:69:06:c7:58:26:90:ea:1f:
         df:68:5f:53:48:5a:af:9f:b6:a7:dc:a8:de:ad:60:97:c7:fa:
         db:f5:e2:97:93:d7:c3:f0:f3:00:a0:79:49:83:10:a4:b4:6c:
         f2:b5:7b:2f:63:6f:a4:92:31:d5:48:52:12:de:7f:b6:e1:ac:
         f2:04:a5:e7:df:3c:31:f7:7a:b8:d1:f5:d0:35:e9:a1:e6:f9:
         07:36:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:53:39 2026 by rpki-client