Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
File:                     tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json)
Hash identifier:          njm9C6kSXL5aUKUhYfFJiiV7KSAk0V3fyrDrc09unCo=
Subject key identifier:   A0:32:DD:B3:56:BF:0F:15:0B:AF:D7:F5:48:81:36:CE:5F:EF:53:8B
Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
Certificate issuer:       /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Certificate serial:       1395
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
Manifest number:          1389
Signing time:             Sat 24 Oct 2026 16:56:09 +0000
Manifest this update:     Sat 24 Oct 2026 16:56:09 +0000
Manifest next update:     Sat 31 Oct 2026 16:56:09 +0000
Files and hashes:         1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: ZkzZhQ8YUeye5ejSjtO+oCuWBH9FTTGC3dsMonvCg8A=)
                          2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: OeZ1QAdH9ELtz6ot25I1yxnNo5ZrJkrg9RULBUY+y7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 16:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5013 (0x1395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
        Validity
            Not Before: Oct 24 16:56:09 2026 GMT
            Not After : Oct 31 16:56:09 2026 GMT
        Subject: CN=6adce329-d7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:39:7e:65:9a:27:8e:d9:c4:46:91:e9:e2:
                    bf:f2:bb:2e:9e:a5:50:09:80:32:05:13:e5:18:9d:
                    4b:f5:d6:ee:df:49:a4:56:90:94:f1:c9:f1:23:f3:
                    35:fe:ae:78:5e:91:99:33:cf:62:1f:0e:e2:40:a7:
                    48:21:84:00:d1:4d:e8:53:68:8d:40:10:15:ad:af:
                    27:63:5f:ef:7b:b0:5d:25:45:33:17:53:cc:c7:32:
                    6f:29:1d:f6:09:68:ec:8b:89:93:87:65:ae:f9:e3:
                    04:59:0a:5a:76:8e:7e:17:5c:0f:ec:de:42:7c:31:
                    a8:77:eb:78:a4:33:70:22:7e:69:48:a6:a8:b8:09:
                    90:af:66:45:d5:a7:3e:54:b7:14:6e:3d:78:6a:40:
                    6a:e2:5b:74:e1:e1:e3:80:e1:26:28:23:03:0f:c9:
                    d2:1c:6a:6a:73:ae:38:a2:e9:39:1a:35:ae:4f:6f:
                    17:19:c1:e5:b4:5f:b6:45:a7:b9:06:95:aa:b8:47:
                    1d:5a:6d:90:33:a5:44:3e:1c:52:8e:c8:90:0f:21:
                    f9:c7:b1:8c:d7:49:b5:17:ee:bc:b6:ef:84:36:02:
                    fa:41:c7:d6:dd:cd:1b:79:1f:52:fc:a0:61:28:9f:
                    ef:54:c1:6b:8f:9d:c5:b7:c5:18:6f:67:26:b0:11:
                    06:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:32:DD:B3:56:BF:0F:15:0B:AF:D7:F5:48:81:36:CE:5F:EF:53:8B
            X509v3 Authority Key Identifier:
                keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3d:1e:81:55:90:3d:56:4f:77:c2:77:a8:7e:11:eb:b2:99:
         ca:3a:ba:17:4c:38:e8:09:16:60:11:4c:a8:cc:6a:fc:03:42:
         4c:f6:29:f6:55:05:55:94:cb:67:0f:67:a9:62:6f:98:42:89:
         3a:02:1d:c0:ce:f8:d3:d7:e9:f8:a8:d8:48:05:04:8f:dc:63:
         83:b3:a0:54:a7:d1:13:1d:2c:fd:c6:8d:9d:d9:e5:b4:6f:bd:
         58:ef:e4:1d:61:fc:19:07:40:c0:b5:f4:a3:d7:8a:2f:a8:b1:
         8f:43:6f:af:a3:48:bd:65:16:44:4e:42:a2:9f:f9:60:6b:46:
         81:a2:8e:48:e6:3b:ee:cf:dc:02:29:90:45:79:f6:76:51:5e:
         bf:c0:b6:b1:c3:5c:06:5b:27:2e:74:19:4e:fe:c5:f1:49:42:
         eb:06:86:0b:43:ab:5d:92:96:71:fe:32:54:43:30:fb:90:8b:
         92:f9:93:f0:2e:07:6e:92:25:31:50:a0:52:75:dc:dc:18:bb:
         77:8c:7a:1d:6c:9f:75:e9:da:b6:24:67:91:e1:ab:f0:ea:1b:
         ce:74:07:59:9d:07:aa:3d:62:ed:96:ac:d8:1e:25:11:54:6e:
         80:32:a5:7d:10:d7:74:3e:bc:01:88:7b:9d:20:9f:be:69:60:
         c0:19:38:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE5ODMxMTAvBgNVBAUTKEI0QTk2QUFERUVEQzdCRURENTdENjJGQzlBNDlFQTBC
M0ZGNkY1MEMwHhcNMjYxMDI0MTY1NjA5WhcNMjYxMDMxMTY1NjA5WjAYMRYwFAYD
VQQDEw02YWRjZTMyOS1kN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnT05fmWaJ47ZxEaR6eK/8rsunqVQCYAyBRPlGJ1L9dbu30mkVpCU8cnxI/M1
/q54XpGZM89iHw7iQKdIIYQA0U3oU2iNQBAVra8nY1/ve7BdJUUzF1PMxzJvKR32
CWjsi4mTh2Wu+eMEWQpado5+F1wP7N5CfDGod+t4pDNwIn5pSKaouAmQr2ZF1ac+
VLcUbj14akBq4lt04eHjgOEmKCMDD8nSHGpqc644ouk5GjWuT28XGcHltF+2Rae5
BpWquEcdWm2QM6VEPhxSjsiQDyH5x7GM10m1F+68tu+ENgL6QcfW3c0beR9S/KBh
KJ/vVMFrj53Ft8UYb2cmsBEG6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAy3bNW
vw8VC6/X9UiBNs5f71OLMB8GA1UdIwQYMBaAFLSpaq3u3Hvt1X1i/JpJ6gs/9vUM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8yOEIxQjYxQ0NE
MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2UtM1ZmV0w4bWtucUN6XzI5
UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3RLbHFyZTdjZS0zVmZXTDhta25xQ3pfMjlRdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTk4My8yOEIxQjYxQ0NEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi90S2xxcmU3Y2Ut
M1ZmV0w4bWtucUN6XzI5UXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnz0egVWQPVZPd8J3qH4R67KZyjq6F0w46AkWYBFMqMxq/ANCTPYp9lUFVZTL
Zw9nqWJvmEKJOgIdwM7409fp+KjYSAUEj9xjg7OgVKfREx0s/caNndnltG+9WO/k
HWH8GQdAwLX0o9eKL6ixj0Nvr6NIvWUWRE5Cop/5YGtGgaKOSOY77s/cAimQRXn2
dlFev8C2scNcBlsnLnQZTv7F8UlC6waGC0OrXZKWcf4yVEMw+5CLkvmT8C4HbpIl
MVCgUnXc3Bi7d4x6HWyfdenatiRnkeGr8OobznQHWZ0Hqj1i7Zas2B4lEVRugDKl
fRDXdD68AYh7nSCfvmlgwBk4Fw==
-----END CERTIFICATE-----
Generated at Sun Oct 25 11:17:11 2026 by rpki-client