Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
File:                     cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft (raw, json)
Hash identifier:          mjwaZsK16ADKf9OHruPvNh9u87MkROxgbBJaBMUCqUs=
Subject key identifier:   70:5C:2A:C8:37:B5:2F:AB:69:86:C6:41:13:FA:18:FA:64:9E:F0:2F
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       1477
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
Manifest number:          13E8
Signing time:             Thu 22 Oct 2026 16:59:58 +0000
Manifest this update:     Thu 22 Oct 2026 16:59:58 +0000
Manifest next update:     Thu 29 Oct 2026 16:59:58 +0000
Files and hashes:         1: cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl (hash: jBxvGCam79dIwqKv5t+YIITnP3f7OZorXg3eyeOB6zA=)
                          2: 75522B0A002B11EA855CA925C4F9AE02.roa (hash: 9GpcqksqCneDnIf0DLfUkzA97uuRd85btObC4kf3ijE=)
                          3: 0F1831F8D64011F0B09E955FA6248E41.roa (hash: k2O1CtUKRCEkXOGGzGsaUfOLKyu0Sri3Iwysc/yq0zw=)
                          4: DEF977A6E53611EB81682769C4F9AE02.roa (hash: BY1q4admFM1K3k9XOXY8WrtJMNhMxHjhqzjGLz8rJKM=)
                          5: 3B38CB22BA7011EA80520A63C4F9AE02.roa (hash: XDn9fY1X5lM9+O7xj1bF2fsWb+ZsafY9/512e6hZNw4=)
                          6: 8C163A62FD4611EE8FAE061EC4F9AE02.roa (hash: whYb9PEntg2pj4PjuuKkmpVjN6g4o1BtxySfMVOaOi4=)
                          7: NCVrvih3-OvHWFI3_DEzxPiIwb4.asa (hash: gct9+B0kSHyt1ZcyrgI1Cxg2i8uYKaHOibbkvAeqZ6Q=)
                          8: 6E0B5938066711EFA1505F46C4F9AE02.roa (hash: ZEkfVCe1jvusGWdm67nOduFNHJqppbPsftgTBXfdHHA=)
                          9: A65587CEDC8E11F084B8ABC03D6F56BC.roa (hash: MwLuq2r0Jxyzv9RKFp+tqRzlh6B3D52BDpe0X8kJ1Jw=)
                          10: EB429364CA3811EE99BEB838C4F9AE02.roa (hash: YyVZn/ye0Rqf/VhJTxnivGBOOaUk6qL+nndzTncgFxg=)
                          11: dk1B9s0Ybwmo8VtPFKAMn8Qnndo.asa (hash: p4zzO3kLLXhU6sQZoqwld7vtUgx3LFuEHLszv6tJzs8=)
                          12: TpaR9ud1PckaggkCQoSc3V-jvds.asa (hash: TOmM2TdSi3LyeX5N8bgqimrTXq6pa7uDILsXCIPwtPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 16:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5239 (0x1477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Oct 22 16:59:58 2026 GMT
            Not After : Oct 29 16:59:58 2026 GMT
        Subject: CN=6ada410e-8e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:f9:f6:e4:ae:7f:e7:95:66:ee:19:f5:bb:
                    d6:e3:e7:d4:be:da:94:bf:5b:f4:35:bc:85:a1:47:
                    69:80:9d:d1:ff:dc:ac:22:15:e5:09:18:21:c6:19:
                    91:8a:55:6a:86:95:47:e0:60:c0:c3:0c:9d:b3:81:
                    86:a6:32:30:85:8c:ba:52:ae:5d:7c:54:45:9c:cf:
                    fe:cb:f6:8f:b2:e7:0f:58:7a:ce:8b:78:2b:46:18:
                    e3:be:d7:d1:f2:a3:00:d7:0a:88:32:e7:90:b5:1a:
                    6a:3d:8c:de:c9:6e:a6:f5:e3:18:ee:55:8d:b9:95:
                    a8:6b:de:4c:10:07:b6:e1:d8:4a:78:a7:e9:5d:6f:
                    d8:b7:90:18:1c:96:01:47:5a:c2:ef:5c:11:e4:05:
                    98:b5:99:33:90:4b:19:d2:17:fb:ec:2e:b8:c9:b6:
                    38:cb:1e:8f:ff:79:93:5a:17:f9:e0:18:af:75:93:
                    2c:c6:62:90:1a:60:42:f8:be:b3:f9:05:a7:68:4a:
                    0e:72:81:24:94:3f:84:0c:4e:3b:9f:ed:cd:40:fe:
                    20:97:eb:a0:a9:8f:b8:8c:fd:1b:4d:c3:60:c0:05:
                    10:d3:29:cb:db:de:21:3a:2d:67:aa:ea:54:f8:28:
                    e5:e6:aa:92:ee:7e:46:18:4a:cb:58:a7:30:d8:a6:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5C:2A:C8:37:B5:2F:AB:69:86:C6:41:13:FA:18:FA:64:9E:F0:2F
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:08:a2:49:e8:80:f2:f0:40:96:42:22:9e:59:7d:95:4f:c4:
         64:86:ac:ce:71:a5:fd:0e:d2:24:07:b7:e2:3f:30:5c:8b:e7:
         62:99:88:5d:9d:cb:f6:12:b7:35:19:9b:10:48:ff:c5:75:25:
         db:f1:b6:4c:22:02:55:25:08:eb:44:0c:cd:86:cb:ad:e9:17:
         87:0b:50:a5:8a:81:b8:b8:bc:5e:17:e3:7e:81:4e:8a:2b:6c:
         e2:1e:14:a3:0b:24:75:d2:85:0d:4f:ba:88:39:33:fc:fa:04:
         26:75:62:67:91:87:4b:f3:b7:30:af:71:ec:c1:0c:8e:44:71:
         4f:04:9c:4f:d3:44:e6:86:ac:53:38:44:aa:4e:61:2f:8d:3c:
         30:35:1a:9a:68:9f:32:20:fa:df:f8:60:49:5d:5f:7c:20:07:
         7f:bd:16:a3:9e:ec:f6:96:cc:7c:e8:16:ef:e6:de:9a:d6:f9:
         08:d4:97:76:39:e1:b2:93:f4:a4:a8:cc:66:60:69:8c:40:e2:
         41:75:b7:32:ee:cd:49:76:af:96:de:8d:ea:84:08:81:e3:0b:
         b7:d1:c3:11:c2:16:20:68:e2:63:bc:33:10:6c:6e:f8:7f:3a:
         a6:2d:16:11:87:39:7a:5f:42:7e:52:95:e7:ba:a8:c8:35:08:
         8e:7c:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:13:47 2026 by rpki-client