Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
File:                     f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft (raw, json)
Hash identifier:          XKfAXDsvJJwE1GPGupk0e4uPA6EBcuQPECRmJRIuLoA=
Subject key identifier:   64:76:5D:0B:B6:4E:00:17:F4:E3:1B:87:48:55:3F:AA:C1:3B:0A:DE
Authority key identifier: 7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53
Certificate issuer:       /CN=A914E600/serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
Manifest number:          0191
Signing time:             Sun 25 Oct 2026 04:55:59 +0000
Manifest this update:     Sun 25 Oct 2026 04:55:59 +0000
Manifest next update:     Sun 01 Nov 2026 04:55:59 +0000
Files and hashes:         1: f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl (hash: 1WyiZnWyryDJoS8hVEgbowcPBA1kmwtuZlKSgHQoQQo=)
                          2: B47102FE77F211EFBA1E9F7EC4F9AE02.roa (hash: KTXRbrZ6qKuYEPl1zTCVojGoH8Atgp7D2x4UoeP6XcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 04:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=7F8245BBD4D459721B41D4FF2BBFB425FF118953
        Validity
            Not Before: Oct 25 04:55:59 2026 GMT
            Not After : Nov  1 04:55:59 2026 GMT
        Subject: CN=6add8bdf-6b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:90:05:89:a5:b3:4e:37:ba:95:f1:1a:23:
                    2a:3e:da:58:a7:5f:e8:9e:2b:05:bd:f0:cc:2b:dd:
                    f1:b8:fb:b2:e1:41:6b:4b:20:25:dd:90:05:ba:4f:
                    23:80:ed:d2:9a:1f:c6:e1:60:d3:94:60:91:ce:1c:
                    b7:69:45:33:7b:bf:cf:b8:ec:fd:e7:84:b1:25:a8:
                    b8:a7:dc:75:67:3f:63:b6:05:3d:f8:8a:41:b7:50:
                    cf:f7:82:78:17:70:6e:24:39:26:7d:93:97:26:b0:
                    5e:89:e7:d5:07:3e:5c:42:1b:b5:67:ed:11:14:2b:
                    6e:14:b7:c2:23:e5:15:c6:e9:60:cd:ed:3c:0a:ae:
                    47:d2:d4:14:b9:0e:2c:d9:bb:ad:79:e9:67:ee:3a:
                    fa:3b:0a:fd:39:3e:3d:92:1b:d2:40:82:0b:0f:a3:
                    d6:b5:e4:ad:db:f2:78:31:f3:94:01:1d:60:b0:43:
                    66:0a:82:37:0b:8a:63:61:fd:35:cd:87:28:cc:44:
                    1c:91:41:db:74:57:85:83:db:dd:f8:ba:34:63:28:
                    47:4d:7b:17:82:e1:82:97:64:e6:59:bf:79:9d:4f:
                    e7:90:fc:78:cd:aa:06:70:0f:a1:27:b0:bf:42:08:
                    e6:24:e8:65:36:34:53:01:6b:28:b7:d5:85:97:18:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:76:5D:0B:B6:4E:00:17:F4:E3:1B:87:48:55:3F:AA:C1:3B:0A:DE
            X509v3 Authority Key Identifier:
                keyid:7F:82:45:BB:D4:D4:59:72:1B:41:D4:FF:2B:BF:B4:25:FF:11:89:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/2AA7D45E77F111EFAC112942C4F9AE02/f4JFu9TUWXIbQdT_K7-0Jf8RiVM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e3:86:ed:ae:97:68:8e:fc:6b:4c:81:df:07:70:9f:e5:d1:
         af:b7:a0:5c:95:30:2a:b6:ef:d9:f9:05:77:9c:68:36:d9:8a:
         04:d9:9c:9c:f0:2d:86:d3:f6:a5:a2:4a:f3:59:65:eb:d7:de:
         cc:43:08:3b:bb:4c:88:4b:9f:4d:c9:be:0b:8b:44:65:2e:98:
         c0:8e:77:77:ae:8f:c1:e0:a3:43:32:70:60:94:e8:c1:36:b0:
         b3:a8:1a:31:63:d8:33:7e:eb:fb:29:1e:66:90:a0:fc:a2:b7:
         d9:44:76:23:98:f6:13:ab:6c:f5:27:a9:1b:21:b7:16:d5:d4:
         f6:78:54:85:73:fd:26:bc:5c:02:80:89:a9:99:75:3e:88:90:
         52:59:0a:85:19:1c:0e:f1:82:bf:66:01:d2:c7:d5:9f:51:2b:
         c4:9c:42:80:6b:d9:f1:c0:07:af:8b:63:f2:fc:40:9b:23:89:
         cb:f5:a3:83:66:69:b1:53:c0:b6:4b:20:56:c3:d4:99:05:61:
         32:33:1e:86:c3:15:50:ad:41:d8:b5:9b:1d:fa:de:55:35:c1:
         97:3c:8a:8c:ae:aa:aa:64:38:c4:01:2b:e7:3b:ba:32:e0:51:
         3c:a3:8f:72:94:f8:f8:f5:92:1c:6b:b7:f0:fe:60:cf:c6:34:
         19:38:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:42 2026 by rpki-client