Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File:                     4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier:          JjbeNdvqsAZMB5OJg+qFkemvMGHMQeRe7m4IWv6Iefo=
Subject key identifier:   AF:21:5A:99:44:FD:22:B0:B9:0D:46:CD:D6:8E:8E:5F:F3:6B:25:2C
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer:       /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial:       07B4
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number:          078D
Signing time:             Mon 26 Oct 2026 16:46:56 +0000
Manifest this update:     Mon 26 Oct 2026 16:46:55 +0000
Manifest next update:     Mon 02 Nov 2026 16:46:55 +0000
Files and hashes:         1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: qEPdhQUwt9UmPlflqW8iP7QCX55I1o2168+5Toq8LtU=)
                          2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: cm+t/PLMMD/KFNJP5e1RTkGRkxC1xV6B78Ll218uDIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1972 (0x7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
        Validity
            Not Before: Oct 26 16:46:55 2026 GMT
            Not After : Nov  2 16:46:55 2026 GMT
        Subject: CN=6adf8400-5975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:e1:aa:ec:6c:ee:0c:4e:1e:54:cf:b9:d1:
                    90:01:ef:7a:85:c7:bd:d5:27:47:f0:6e:b5:3c:55:
                    9f:c0:b6:c4:bc:cd:37:89:ab:50:b1:e4:b6:eb:b7:
                    cc:31:5b:be:a5:22:9d:74:86:9e:1e:e1:d0:ab:eb:
                    8e:e3:45:61:db:cd:49:a1:b4:ad:ce:fa:26:45:df:
                    75:d7:49:b5:37:17:c5:31:ae:4a:d8:d3:47:13:72:
                    79:6c:d7:75:18:6e:bc:3d:f8:af:71:c6:09:57:77:
                    14:fa:b0:7d:3a:38:d3:2f:5b:d3:28:df:9d:d0:79:
                    5e:56:65:37:8d:89:38:34:c0:7e:1d:84:63:ac:a5:
                    e7:7b:78:8e:d1:f5:da:8f:f4:83:8f:41:ab:d1:1b:
                    0a:64:4d:5a:f9:c3:9d:b9:e0:65:f5:2a:86:ae:26:
                    40:8b:f3:5d:a5:79:b1:1b:2b:c0:c5:7b:0e:e1:85:
                    c4:35:08:ee:92:0f:5d:59:26:7e:75:d7:86:b4:36:
                    23:90:06:0e:c9:2d:2a:75:6f:4e:44:43:45:96:55:
                    3f:2b:04:80:cf:11:75:37:42:c0:6d:09:86:c9:de:
                    0d:10:7c:5e:41:55:50:94:c1:6d:83:e1:12:2b:8b:
                    53:92:33:af:68:6a:66:ad:e2:f1:a2:86:4f:a7:83:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:21:5A:99:44:FD:22:B0:B9:0D:46:CD:D6:8E:8E:5F:F3:6B:25:2C
            X509v3 Authority Key Identifier:
                keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f7:1f:58:46:da:2c:da:57:50:da:5b:20:7b:57:b1:be:8c:
         6c:df:41:22:bb:96:de:0c:fe:4e:61:9d:2e:5c:b5:ac:34:7a:
         3d:95:ea:f2:be:aa:50:83:a0:f3:b8:c9:b1:ba:ef:ba:1d:69:
         77:49:0e:29:42:b6:5d:37:cd:36:55:c7:6a:55:d9:46:2a:26:
         3b:59:dc:d5:39:ec:b6:86:48:bd:dc:ee:d5:bd:3a:5e:81:f4:
         6f:1d:00:aa:a3:da:81:bb:95:dc:93:c0:e2:c3:2e:18:88:29:
         48:f4:cc:80:88:ea:cc:46:5d:0a:7d:01:a6:3a:53:1d:14:77:
         11:5d:c2:06:0e:0b:58:38:35:ce:1b:36:94:4e:d8:8d:bc:0d:
         88:51:f8:92:30:af:29:fe:8e:92:e0:7c:e0:63:93:80:dc:83:
         ff:dc:64:f9:59:67:05:69:e8:34:9b:4d:db:29:0f:9e:3a:2b:
         ab:36:f8:44:fd:f1:2a:76:c1:c0:4d:b5:c6:36:73:11:fd:a5:
         1b:6d:e6:1f:0e:77:c4:b2:6a:c2:b6:1d:b0:5e:b7:bd:8d:57:
         47:c6:29:b9:0a:0e:0e:67:39:92:72:83:d2:b9:8b:38:ff:c8:
         73:ae:e6:c2:db:26:d3:f0:06:2f:1c:cd:df:f8:9c:4a:37:8c:
         7b:ad:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:37 2026 by rpki-client