Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File:                     n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier:          DhbjeFYB7Zg32ePGUZzGw7nSfN5gOsvouMHF91WAPWg=
Subject key identifier:   3F:C8:12:A7:E0:25:1C:B9:C1:1B:3A:77:30:5B:99:DC:23:10:9C:5D
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       3725
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number:          35CA
Signing time:             Fri 18 Sep 2026 14:22:14 +0000
Manifest this update:     Fri 18 Sep 2026 14:22:13 +0000
Manifest next update:     Fri 25 Sep 2026 14:22:13 +0000
Files and hashes:         1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: jIU8aawz0XOQX6D9oF7uSp3F4EM9e/LBc27cT+mRnkE=)
                          2: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: 6Q7oCnYdIQMyYV7GSDRlqmiCxPyyamvaDbgj1LeE6hE=)
                          3: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: R051ecoTEDf4tp0QDcyVXIOsR/Z6KDWGtCmJAV5FoHs=)
                          4: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: I7NyIEE63t1lDroN8tpLNudfVSP/ghhR0ds+7lSznds=)
                          5: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: 2NKu0kGcFcNHvXAlK5ciHNw5Db9jbuuiRIvvd8fDxds=)
                          6: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: B0KcYf7auAbwm/XE4KlVLxzjH/gLCl42YJ4hG9Eg+jc=)
                          7: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: uTKeKs7LBN3FhtcOBV42PDPrdJ0IBDQ3Fzs9Ipyn7N4=)
                          8: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: AUyJYR9QGiCOAWUVNK5KTw7HkCYvvX/Ds53zwEXsEuA=)
                          9: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: sKAmAaXkVkSwky9iW1NOiTy4baioWOcrkXFzpI5epW4=)
                          10: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: IWs/A+FYXIH78+4xF8at9mmqTgWh8t1JE1vVrzAw3yw=)
                          11: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: Bc9bPOXxLa7s5PBO0OfOl7CrgYQeg8aSrLHDflvzJqs=)
                          12: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: /PpSkevkJJNsZbB8blKJDWOGqEQN21XKZVSsyGPH4sM=)
                          13: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: 1nNYytPUh1I02DJvpauOI7ouJq6g/LEJ1tFSi6IALFU=)
                          14: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: /jqV+A0MsQ85V2FA5N5fsbaCrpOVHjFLHAeXG/A99oI=)
                          15: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: p0kTeOWWtou4hbwVLi+Qwc9t73FKXY9t3nkgc42760I=)
                          16: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: 2dRAoHVYxoRgqEjV0RgZrY5WSKV9nv8KT/1w3CfIKmA=)
                          17: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: UMojJJ+HqHFs5L1VIMkkM535Pv8nrBXzcPcJghVjlVE=)
                          18: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: 0ehtVh7qrnpCP2HNZmYRMc2RbckLARZJZajak2lZeps=)
                          19: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: uDeVchxEdNUTap4BRcPRH59lrzaNl9YDYFNKt8sx5Tg=)
                          20: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: yyDH6NeCH82e1nObqCubXAYAUWcMb4d+loYb4JT3IzQ=)
                          21: CEC68F44973211E9954F0565C4F9AE02.roa (hash: kFvEU1sBx2v9u00o7M6vLkd+IZa0dJEcb2rZMVFeoNs=)
                          22: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: orYv1OKaU29M4Ne+KHXNUOifDh8/09Tj4r+taY2EwcQ=)
                          23: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: YOIkxF9cx34dX4M5hEuz3uSOepnStr/h7wGeR0bvSs0=)
                          24: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: v9idX2nUBElrpsWO8/4PoDuWvFqBy1rmMNsMQvtwjKY=)
                          25: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: NbnrpuPdjaJ9/qwyVFj1+pG7R+Jwde17taoEW0C3p7w=)
                          26: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: lhXPMVTt2UFIZj0lCq6prRReMQPmTP0Uw35+7SMlNXg=)
                          27: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: anud056i0pXYbRncgVJTkdjRCUcpxpVeDT3/UVMnGCM=)
                          28: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: Wg4tgLpwdeYBdsyjdAeGgZtXAPAhs+Gm9tcLHxmPv0k=)
                          29: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: vhVJuPrt2WMbeuT1nfT4sHOscgQloynHYGoOSaZ4llM=)
                          30: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: S8S+91q9dQPL7ZeLDFqiWmTSkB9/OeQP2HoVlwZObVE=)
                          31: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: Y4eL5Gz9hvKZwu3s5cr/XWHTZT7n0B+5hZ7DUDmg+8I=)
                          32: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: z9mQ+QhTbrpVKcWfvXXeEwZeLNlN4O7lm2+1usNkzYg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14117 (0x3725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Sep 18 14:22:13 2026 GMT
            Not After : Sep 25 14:22:13 2026 GMT
        Subject: CN=6aad4915-73a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:f4:4a:fb:5e:1e:d1:c0:cc:33:6f:a5:e8:
                    76:ac:73:91:f9:41:d2:1c:f0:8f:95:8e:15:54:2b:
                    75:cc:5b:76:59:9a:ee:9f:e4:e7:ed:5f:73:4c:3f:
                    bc:58:ae:9a:35:ab:f0:f6:27:7b:60:40:d5:6b:cc:
                    91:66:1d:51:1b:90:d6:6f:5a:b2:15:33:67:c5:e4:
                    18:44:3c:85:4c:d1:8a:ea:8b:74:3b:5e:43:17:5e:
                    b1:f9:8a:26:58:d7:2b:99:69:77:82:0e:64:85:11:
                    c7:40:9c:3d:5b:1f:fb:fa:16:93:95:d5:31:f6:ad:
                    d0:da:a0:7e:69:7b:23:a0:37:7b:42:c7:95:61:be:
                    fc:25:13:7f:9d:d6:da:3d:99:7a:bd:32:1b:cf:b7:
                    79:a0:91:d4:e8:7a:d6:ea:03:15:76:7d:95:bf:f5:
                    65:6f:68:e2:9f:8a:f0:eb:94:c3:56:c2:62:45:3c:
                    89:46:4c:df:76:ef:a5:98:6f:df:46:5b:ee:46:5c:
                    11:03:76:73:18:90:af:94:d1:3e:cd:2d:b3:2e:97:
                    eb:d9:e5:67:a8:d8:21:08:fc:e5:91:55:ff:a8:5a:
                    fc:79:86:a5:db:20:21:83:85:d7:a3:8f:4b:ea:7b:
                    51:77:83:b4:7c:98:c7:b6:a5:ef:65:99:c8:20:b5:
                    c1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C8:12:A7:E0:25:1C:B9:C1:1B:3A:77:30:5B:99:DC:23:10:9C:5D
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:7e:f5:ba:c7:18:f9:8f:ef:db:86:c2:ac:32:6c:96:98:
         4b:71:6a:8f:56:0d:b9:34:a8:31:c3:8e:bf:07:1d:58:45:7d:
         e0:8c:41:4c:5e:79:cd:49:3e:74:c0:8a:26:52:27:30:3e:19:
         f3:49:19:70:fe:98:f3:01:cb:15:ed:19:14:e4:29:c4:fc:ab:
         b0:56:f6:61:a8:18:2e:94:24:ca:c0:01:2e:50:8d:7d:35:4a:
         99:f7:73:0d:93:e7:1b:62:55:03:30:6a:49:35:8d:cb:52:1e:
         3b:df:73:b5:56:3d:c6:9a:e3:fa:9d:e6:82:1f:06:fe:63:f3:
         85:55:2a:b1:a7:fd:fb:b6:a8:6e:58:9c:08:ac:2f:a0:8d:d5:
         d5:a4:ae:83:ba:4d:48:1c:27:e5:78:7a:cd:15:3c:a3:06:be:
         3b:54:89:62:68:98:58:ed:93:bd:a4:9b:a1:67:31:b6:db:6f:
         4c:70:29:02:c6:d7:a9:5b:f0:a2:7c:56:e2:ab:de:0f:fe:1a:
         85:ca:28:82:f8:41:39:c1:6e:c2:67:2b:1f:4a:54:56:b6:dc:
         39:93:3c:d7:6e:97:55:f4:72:d0:c4:e7:f9:bf:81:71:44:17:
         3d:14:1e:13:b5:23:3d:aa:b4:a9:e5:67:ee:c2:ab:41:ae:b9:
         36:77:2c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:40:11 2026 by rpki-client