Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
File:                     KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json)
Hash identifier:          ckk5HlJKbuIHnW1zFTV7x7fY92U8nj5l34L4gWyi6O4=
Subject key identifier:   19:56:9D:3A:7A:41:30:18:8F:59:67:4D:1F:4F:32:08:D4:47:C9:55
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       0543
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
Manifest number:          04A4
Signing time:             Tue 27 Oct 2026 00:04:43 +0000
Manifest this update:     Tue 27 Oct 2026 00:04:43 +0000
Manifest next update:     Tue 03 Nov 2026 00:04:43 +0000
Files and hashes:         1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: j/TRluveE83NcYAnAZZMi09AGIOmP/A/wWnctvQwTF4=)
                          2: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (hash: z09c3pfBnLaBhRaO5NZ8zDgzevr5k6+alsOTlNNxpcY=)
                          3: 69E7D456E8AD11F09A679225586F56BC.roa (hash: lxI4AM7NXgVEvV+kazkW7byb/+NAwQ7P+KwB4Rom6Yc=)
                          4: 2F24736869C111EF92B54060C4F9AE02.roa (hash: VOckG74y7wIyjxUwmLFJHHGLX7LdlrZrniy9l6geOqc=)
                          5: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: cebQ1cJMGyI64NGDe9bFCbEe55Fb3f/4FQEpVIgdXxY=)
                          6: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: NG9N4OPM2kWG9G97ereKXysGh7dTUhxuuvj7CCQ3CMs=)
                          7: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: zfsi67ywK534SiQhgr/zUV/GZnBGCY0qZt7fhx8+eS4=)
                          8: 458AC21A684111EEA6632877C4F9AE02.roa (hash: ZcOPoAMlcJysHiwrollWvtIG++qNRpg0y+gKM/5fjXk=)
                          9: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: wfx2WG82kpqp78Jcf0u7LoLr2spZZPLV1CL27vl0TzQ=)
                          10: F83786F4030011F0984B974FC4F9AE02.roa (hash: gihosof38728B4SPmV9PgL0Vu4gCAdVLJnu1WOeWjlg=)
                          11: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: nkGN0BuGNBQJa9SkDsBLxEVJf4EOwgrnQ8ymG8YYjkg=)
                          12: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: hNQsBmwpefYxmLDh564qD0pdNeyaVsppq4xHZ9ozBgo=)
                          13: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: D8qVBp2VClb8+sa1J879+KOZDXHyJTue8gxn6woZXbo=)
                          14: 69738B14E8AD11F09A679225586F56BC.roa (hash: RKP5KnGoYS+/g5gzIpIJ+XrbtIbmLkTjn9xAfpNS1TU=)
                          15: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: KMYU/tkIB1m1DV1X8R4g+uYkSGoa3XSDqGtlJKqm51Y=)
                          16: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 30QWvYag8cPnjx7r94UIr3J4yrJ7eaL16fZHXUvAvsY=)
                          17: A336FE62609111EFB751B771C4F9AE02.roa (hash: sy2Y2nb+dO6LmdXM8erwH1hDY9jJEvsOUd7p2YkpVI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1347 (0x543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Oct 27 00:04:43 2026 GMT
            Not After : Nov  3 00:04:43 2026 GMT
        Subject: CN=6adfea9b-13c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:79:b8:99:5d:1e:f2:c0:3e:e2:9c:9f:ed:69:
                    c4:61:16:0a:15:c9:ac:9e:f9:f2:0e:f6:bd:bd:b4:
                    88:9e:4f:f6:96:5f:c6:7f:fd:0b:dc:c5:4e:96:d4:
                    05:3f:53:ff:b0:01:42:b3:69:67:85:9a:66:ef:d2:
                    fb:5e:a3:fe:2e:61:5c:f4:64:c1:d8:04:ea:95:1f:
                    8f:e1:7d:0b:3d:5f:19:a5:aa:72:7f:e5:ab:a5:59:
                    1b:67:06:68:8d:07:26:2d:1a:41:fc:07:54:6a:da:
                    e0:4f:19:91:33:91:25:c3:aa:69:f9:dd:b6:80:8d:
                    9a:85:04:be:f1:23:b9:3b:98:af:f2:0e:6f:fa:e3:
                    04:18:86:23:45:51:eb:bc:56:c0:5d:3e:16:44:65:
                    aa:3a:7b:3b:7f:f2:2c:dc:fb:3c:a7:e8:a6:c8:45:
                    4a:37:12:a4:24:01:72:cc:26:f9:34:bc:17:b4:85:
                    08:cd:4a:df:3b:50:99:9a:26:81:72:0c:1c:b9:c7:
                    92:66:24:06:85:9f:41:1f:ca:4d:90:e6:89:3d:5c:
                    e3:9e:5e:ae:56:68:06:1a:e3:6d:53:ce:61:0d:15:
                    e2:ce:99:7a:4d:16:03:9d:7b:11:ca:2f:f8:8d:95:
                    d5:9b:a1:29:7c:fe:b5:54:e0:bd:86:99:52:36:48:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:9D:3A:7A:41:30:18:8F:59:67:4D:1F:4F:32:08:D4:47:C9:55
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:11:85:36:7d:41:62:81:52:4d:a3:2e:9a:4e:d4:9a:29:05:
         56:86:54:7d:b5:8a:0e:74:5a:a4:b2:d9:f5:a3:5a:b4:32:43:
         66:3d:c1:31:7a:9a:7f:0f:3d:d3:34:7b:a3:c1:d7:17:8d:4a:
         e4:be:ab:8f:44:4c:23:02:d1:8f:3f:da:41:64:de:1f:e9:89:
         a5:66:a1:4f:08:8a:5a:88:63:6d:a7:f6:17:92:3b:62:85:9e:
         62:47:1c:5b:7d:07:1c:3a:86:55:f3:cf:b1:d2:44:aa:e6:34:
         73:97:2f:81:31:98:5e:85:51:c1:1d:5f:2d:bb:66:bc:0b:f7:
         19:24:84:60:b3:95:b3:52:d8:30:cc:0c:e4:3c:b0:9a:85:e8:
         57:01:73:3b:39:81:a9:98:e1:0a:c9:cd:59:9c:91:a7:2d:91:
         87:b0:74:71:dd:57:a0:ee:98:06:02:0f:93:a4:f5:68:aa:8c:
         e4:7e:2e:d6:e5:42:db:f2:15:0b:95:38:c9:ff:c9:ff:48:31:
         36:61:47:3a:f7:9e:38:12:d1:1f:87:b3:e8:f8:ce:0e:36:ff:
         19:c8:19:2b:3c:79:13:61:d8:66:da:a4:58:28:8d:00:b3:8e:
         9b:83:96:b4:6c:c4:86:2b:59:37:ea:e4:48:33:0f:a8:cf:11:
         2c:48:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:31:11 2026 by rpki-client