Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File:                     kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier:          ziXyZpJyQaA0Eeg5lJD4qkxBc+BiEwpky5JV8pSMo3c=
Subject key identifier:   7B:38:02:F4:80:77:16:9D:F9:99:AC:7D:BD:CE:34:81:F3:BD:09:74
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer:       /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial:       191C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number:          188E
Signing time:             Mon 26 Oct 2026 16:30:27 +0000
Manifest this update:     Mon 26 Oct 2026 16:30:27 +0000
Manifest next update:     Mon 02 Nov 2026 16:30:27 +0000
Files and hashes:         1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: yxrP46GELWUmpEnl9NwvE96YYoB0eQnvZFhpSZOmutA=)
                          2: 94999A16857111F1A0D8004588A30FBC.roa (hash: 8q5lC+1RjFHXNb4lTHzCKYGRlBr81S/uW1xBYSXiE58=)
                          3: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
                          4: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
                          5: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
                          6: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
                          7: B04675FC959711EA9F290A33C4F9AE02.roa (hash: tSx5qcokGrO0XeuDEg4dq4Gv2TvUPRuiEyNUGbbOLAs=)
                          8: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
                          9: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
                          10: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 16:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6428 (0x191c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
        Validity
            Not Before: Oct 26 16:30:27 2026 GMT
            Not After : Nov  2 16:30:27 2026 GMT
        Subject: CN=6adf8023-8afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:40:fa:27:b4:08:cb:ba:07:a1:f6:79:1c:
                    e4:34:ca:69:b9:01:9f:c1:4a:84:52:62:88:c7:ec:
                    6b:4e:90:fa:d0:9d:d0:3b:b4:d7:37:c0:b4:26:d0:
                    69:a5:fc:45:49:13:46:79:2d:b3:d7:3e:f0:8f:2f:
                    7c:0d:31:a2:a8:5b:30:e6:08:c7:bb:a9:7b:9c:b0:
                    ed:1e:83:ef:83:cc:51:08:d5:57:fc:f7:eb:c1:e5:
                    99:df:40:f7:b4:4b:2c:a3:e6:ca:34:b8:4f:b8:b9:
                    03:4c:4b:80:c3:f6:7b:75:09:37:39:6e:fc:42:7b:
                    87:66:87:87:9f:ca:5f:a5:51:da:64:7b:af:82:5a:
                    e2:50:86:3d:a1:93:05:cf:be:e0:21:b5:74:fe:d1:
                    fd:03:39:8b:b3:02:35:45:8f:be:6c:24:35:06:42:
                    fd:ba:86:ad:f8:1f:5d:6b:70:d2:76:63:19:23:c9:
                    aa:21:fc:99:01:8b:b2:06:59:a5:98:e5:88:f1:e6:
                    a7:6b:d3:55:de:9d:ab:01:89:a5:7d:29:4a:2a:9f:
                    da:e0:0b:60:61:22:54:9e:17:7b:20:3f:c7:49:c7:
                    f6:ab:e3:e3:1e:88:f0:b9:32:20:ae:ac:11:86:f4:
                    5e:bb:58:48:5e:4a:04:00:0c:78:00:33:00:92:d1:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:38:02:F4:80:77:16:9D:F9:99:AC:7D:BD:CE:34:81:F3:BD:09:74
            X509v3 Authority Key Identifier:
                keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:20:d6:48:99:f1:98:39:e7:49:09:0e:6f:c6:c3:e3:3d:26:
         c6:a7:4a:81:28:54:d4:a3:a2:2d:75:0a:08:f4:87:d5:b0:69:
         ea:73:d3:22:80:1c:84:0e:1a:13:76:bf:f3:8e:48:b4:b6:2d:
         46:2e:54:99:51:04:45:ad:44:68:b9:c7:db:c5:98:5f:b0:9e:
         13:c0:fa:a9:2e:b4:9e:9a:3e:a1:99:71:70:dc:33:a0:aa:20:
         27:41:37:b7:6e:f1:6e:3a:35:d8:93:61:d0:5e:5e:62:59:9a:
         5a:06:8c:84:39:32:6c:e2:23:68:d0:fd:f4:03:98:7f:5d:29:
         a1:04:13:39:6e:a9:50:d2:ec:1a:10:11:1e:4f:d6:e0:6f:ed:
         eb:6b:66:1d:90:30:7c:b7:8c:11:13:7d:04:08:01:eb:b0:b4:
         83:69:86:cd:de:88:42:e6:f5:81:4b:13:26:ad:c8:db:17:d0:
         a3:19:67:a6:4c:d7:c3:0c:e9:18:c8:97:7a:cb:63:29:9a:b3:
         3f:d3:5d:59:8d:99:90:5c:47:2e:42:21:fa:70:88:4a:cd:e6:
         9d:df:11:a6:ed:00:df:38:8b:aa:b2:ef:38:32:19:79:e8:ba:
         dd:ec:e6:ca:7a:56:48:86:0a:50:c6:50:f4:29:f6:26:9f:cb:
         96:b3:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:59 2026 by rpki-client