Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
File:                     lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft (raw, json)
Hash identifier:          sxzOgtCLQQA5TILjSqk+Pt5A/4RH/kDgKYSj2PNK43M=
Subject key identifier:   DA:46:05:2D:2A:07:8A:7F:2C:00:2D:6F:5C:58:65:A1:C1:A3:7A:EC
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Certificate issuer:       /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
Manifest number:          016E
Signing time:             Fri 23 Oct 2026 05:32:10 +0000
Manifest this update:     Fri 23 Oct 2026 05:32:09 +0000
Manifest next update:     Fri 30 Oct 2026 05:32:09 +0000
Files and hashes:         1: lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl (hash: zXW9MZid3wNyCyjALV/H2t5Ii0+v4fKT9Kak+jHi52Y=)
                          2: 3853657658CA11F188C8E1F19D833773.roa (hash: dGgAXDrAOa6dHqoeo3Tw6FLvY9KJRR5IMwL6J/VPqTs=)
                          3: 9C9FACF6502411F093EA9419C4F9AE02.roa (hash: dKN+fQdCYaHSjnPaMzWvmqBEhN/PUwJv3Ea9b1RzV1Q=)
                          4: C5D7AFBA502411F0881DEB19C4F9AE02.roa (hash: 0gUF/085wYPoCyvzlJWV9rqJj0B1nA/oZ4c4Dkoi26s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
                          rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 05:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
        Validity
            Not Before: Oct 23 05:32:09 2026 GMT
            Not After : Oct 30 05:32:09 2026 GMT
        Subject: CN=6adaf15a-1a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:36:27:f4:27:27:e5:68:af:1e:de:71:16:
                    fa:c1:b3:7e:1b:c4:09:53:97:13:1c:2f:39:c6:3c:
                    f6:df:75:ab:c0:85:da:59:fb:68:4a:ec:d2:93:7c:
                    1a:58:1c:45:b0:20:0a:9e:5a:2d:bd:75:be:2d:6b:
                    56:1f:a2:27:ae:29:34:a0:39:7c:61:74:ae:fb:e2:
                    08:f6:3b:af:3c:2f:5e:fe:ae:e6:eb:a2:22:f3:57:
                    0e:13:9b:1c:4b:b1:1d:8d:03:c8:15:68:a9:1f:99:
                    37:54:4e:87:d2:3c:8a:6b:f9:29:ad:7f:a0:16:23:
                    f2:3c:31:92:70:8a:1f:f4:e6:44:48:5b:8b:ed:fd:
                    0e:8b:91:4b:bd:5a:91:e6:39:f2:ef:e2:1a:60:1f:
                    85:93:c0:0e:b9:85:5f:63:a1:ca:aa:2f:0f:5e:fe:
                    d3:a9:83:17:ea:2a:08:f1:60:3b:9a:c9:2f:7e:61:
                    ec:d7:77:09:de:e0:bd:11:bd:b1:6e:ea:6d:d1:81:
                    46:89:3c:68:84:4b:3a:31:41:00:f5:60:cb:12:c7:
                    a9:0a:3a:fb:ba:18:bb:23:f7:65:5e:47:8c:98:37:
                    f3:00:ab:6a:15:77:95:3d:e0:08:a0:26:9a:3e:27:
                    33:70:92:4e:62:cd:6c:64:bc:f7:b2:06:e0:21:3c:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:46:05:2D:2A:07:8A:7F:2C:00:2D:6F:5C:58:65:A1:C1:A3:7A:EC
            X509v3 Authority Key Identifier:
                keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:51:f0:7d:03:df:bb:65:00:50:14:eb:76:9a:79:09:12:33:
         06:c4:85:a0:b2:37:89:41:3a:3d:54:ff:a3:05:f0:03:27:77:
         5d:00:e2:10:3f:7b:ba:8e:33:9b:e8:30:fa:5a:11:c4:f0:35:
         a4:36:c5:28:3b:d5:36:e0:44:0c:50:92:6b:6f:35:23:1e:c6:
         5e:4c:56:a4:5e:80:5b:12:13:2a:84:5d:e7:c0:91:4b:99:22:
         f5:6a:05:60:a7:79:2f:bd:ad:12:dc:61:d2:25:d9:c6:f7:0f:
         e2:ed:f3:eb:38:67:38:bf:78:ff:db:14:ea:89:d8:67:3b:31:
         46:6e:31:a5:43:29:af:6c:fb:fe:5a:6e:b7:0d:d0:fa:d8:2a:
         60:83:a9:30:65:97:8c:ab:07:2c:1c:51:cf:0c:ac:ba:0e:3c:
         f1:7c:04:1c:e6:e5:7a:24:2d:12:c4:17:0b:59:8b:b9:be:0c:
         f7:a0:58:8b:6d:06:9d:ee:b5:ae:c2:14:a4:4f:15:57:eb:46:
         d9:bf:f1:fd:44:a6:36:b9:bd:48:cd:d8:51:97:c1:9b:bf:ce:
         23:1e:9c:6f:b0:0e:41:cd:84:4e:cc:75:75:7a:32:f2:e0:93:
         bd:f6:7a:e2:76:83:d3:05:e8:f3:1a:21:b8:83:d9:90:cd:30:
         ec:52:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:48:10 2026 by rpki-client