Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
File:                     KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json)
Hash identifier:          arl1fgQ3i85TsQdKrWlKQMqbDUtQMdvwjg9FXQJJjpk=
Subject key identifier:   74:5E:1D:E1:DB:3A:FB:04:3C:C6:A9:AF:57:9E:26:68:31:7D:E4:F8
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       052B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
Manifest number:          048C
Signing time:             Wed 09 Sep 2026 00:17:41 +0000
Manifest this update:     Wed 09 Sep 2026 00:17:40 +0000
Manifest next update:     Wed 16 Sep 2026 00:17:40 +0000
Files and hashes:         1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: DvTmgT41+B6rkUM2h2IQ8RSoonEgA++2yBNYRCRofNA=)
                          2: 69738B14E8AD11F09A679225586F56BC.roa (hash: RKP5KnGoYS+/g5gzIpIJ+XrbtIbmLkTjn9xAfpNS1TU=)
                          3: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: cebQ1cJMGyI64NGDe9bFCbEe55Fb3f/4FQEpVIgdXxY=)
                          4: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: hNQsBmwpefYxmLDh564qD0pdNeyaVsppq4xHZ9ozBgo=)
                          5: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 30QWvYag8cPnjx7r94UIr3J4yrJ7eaL16fZHXUvAvsY=)
                          6: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: wfx2WG82kpqp78Jcf0u7LoLr2spZZPLV1CL27vl0TzQ=)
                          7: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: zfsi67ywK534SiQhgr/zUV/GZnBGCY0qZt7fhx8+eS4=)
                          8: 2F24736869C111EF92B54060C4F9AE02.roa (hash: VOckG74y7wIyjxUwmLFJHHGLX7LdlrZrniy9l6geOqc=)
                          9: F83786F4030011F0984B974FC4F9AE02.roa (hash: gihosof38728B4SPmV9PgL0Vu4gCAdVLJnu1WOeWjlg=)
                          10: A336FE62609111EFB751B771C4F9AE02.roa (hash: sy2Y2nb+dO6LmdXM8erwH1hDY9jJEvsOUd7p2YkpVI0=)
                          11: 1F89C5C22CB511F08A1A9242C4F9AE02.roa (hash: D8qVBp2VClb8+sa1J879+KOZDXHyJTue8gxn6woZXbo=)
                          12: 02734B6624D611F0B50DE20BC4F9AE02.roa (hash: nkGN0BuGNBQJa9SkDsBLxEVJf4EOwgrnQ8ymG8YYjkg=)
                          13: 69E7D456E8AD11F09A679225586F56BC.roa (hash: lxI4AM7NXgVEvV+kazkW7byb/+NAwQ7P+KwB4Rom6Yc=)
                          14: 458AC21A684111EEA6632877C4F9AE02.roa (hash: ZcOPoAMlcJysHiwrollWvtIG++qNRpg0y+gKM/5fjXk=)
                          15: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: NG9N4OPM2kWG9G97ereKXysGh7dTUhxuuvj7CCQ3CMs=)
                          16: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: KMYU/tkIB1m1DV1X8R4g+uYkSGoa3XSDqGtlJKqm51Y=)
                          17: 11BD8780E8AD11F0B4C8CA81576F56BC.roa (hash: z09c3pfBnLaBhRaO5NZ8zDgzevr5k6+alsOTlNNxpcY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 00:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Sep  9 00:17:40 2026 GMT
            Not After : Sep 16 00:17:40 2026 GMT
        Subject: CN=6aa0a5a4-2347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:aa:9c:b6:9b:fc:80:67:4b:d9:25:de:e7:c6:
                    90:e0:66:90:17:d0:35:64:88:d7:16:20:5a:32:53:
                    24:d0:6c:15:d4:96:78:74:75:59:3b:3b:c2:31:9a:
                    e1:3f:95:5d:a5:a8:35:20:d3:f3:b6:f1:f8:33:61:
                    a7:21:50:a7:ce:69:a8:16:00:e3:68:a1:66:e2:cf:
                    83:ca:fe:8a:4d:94:87:57:05:1f:d0:88:93:ca:1c:
                    03:63:74:49:72:0a:40:4d:6c:61:cb:e2:bc:c1:de:
                    3a:51:77:e4:be:cb:2d:09:10:15:64:e2:fa:2b:9d:
                    53:3c:5d:ba:f9:cd:0e:10:f1:1e:ed:a5:12:70:0a:
                    26:1d:3e:8d:5e:0e:63:eb:5d:57:a9:91:27:fd:39:
                    d1:e6:e4:a6:bd:87:15:14:07:8c:64:e8:fb:05:db:
                    3e:dd:6c:55:99:93:c8:0a:fd:c1:c5:73:c0:06:ad:
                    bf:aa:f1:23:ec:dd:c4:17:3c:72:33:ad:99:c4:50:
                    fc:77:a2:ad:d0:a5:9f:6b:d7:f8:66:53:6b:7b:60:
                    2d:9a:e2:2a:39:8f:cc:b6:11:71:15:5a:77:46:6f:
                    f2:66:77:bc:6b:c9:d9:b8:ee:ca:30:c3:d9:3b:cf:
                    12:12:08:ea:13:6a:84:d7:e7:55:4e:26:87:9b:71:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5E:1D:E1:DB:3A:FB:04:3C:C6:A9:AF:57:9E:26:68:31:7D:E4:F8
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:69:41:28:90:33:8e:79:b0:2c:82:74:c2:ee:74:c3:f8:46:
         46:25:72:d7:37:2d:39:c0:51:bb:d7:61:9a:2f:dc:ff:a7:7c:
         61:e0:ff:72:2a:01:69:a3:e1:87:8c:10:36:24:97:06:d1:78:
         ff:d7:07:c7:2d:ac:de:fe:f8:8d:e0:f8:b6:00:fe:49:63:cb:
         cb:bf:bd:d3:f5:25:4c:43:e1:b0:3c:f7:2a:68:cd:5c:31:41:
         7c:a8:6d:4e:cd:77:24:0f:66:84:49:09:15:3e:86:cd:43:51:
         d3:0c:a9:0b:66:67:2f:a1:f6:2e:06:2b:93:29:e7:a7:5f:4d:
         a9:b3:be:90:6d:1f:d4:cc:03:25:bb:31:0e:8e:ef:20:99:38:
         22:ae:79:60:ef:d7:81:f8:e6:7d:03:c4:2e:ec:f7:f6:be:d3:
         e0:ca:f2:44:76:90:4b:d4:c2:a9:48:d0:f4:76:f6:38:44:1c:
         f3:e2:91:b2:7f:46:ec:02:56:39:16:1f:df:c8:33:8d:c4:d9:
         07:a9:a1:4f:fb:ee:b4:f0:83:0c:16:f7:7f:d1:73:e4:f4:7d:
         a2:d2:7c:4e:4a:a5:02:f3:d7:27:d0:73:bd:3c:ca:02:2c:8a:
         68:7f:82:66:87:31:c8:e5:2d:fd:e3:70:1d:a8:87:b4:4e:78:
         d7:68:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:58 2026 by rpki-client