Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
File:                     SkhXfqTVPPBfDXTKwBD2q8QVI48.mft (raw, json)
Hash identifier:          3hUcQbStLhV7Sg0dc4Xe5iTVAxT+7UK1eTZvepa7ggs=
Subject key identifier:   75:C5:73:99:A2:6C:4C:64:63:F7:5C:9A:5D:EA:A6:60:8A:04:0C:8C
Authority key identifier: 4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F
Certificate issuer:       /CN=A918C519/serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
Manifest number:          DC
Signing time:             Mon 05 Oct 2026 07:00:53 +0000
Manifest this update:     Mon 05 Oct 2026 07:00:53 +0000
Manifest next update:     Mon 12 Oct 2026 07:00:53 +0000
Files and hashes:         1: SkhXfqTVPPBfDXTKwBD2q8QVI48.crl (hash: H/B+oW895wE7whTyi3/xWkcu97hJ54WnbbXb4LbhZLg=)
                          2: 19BCD4A0728211F081B6E982C4F9AE02.roa (hash: Nu5o9uyUw5npAhrDkyNMWM4BCUJy17W5mhDL+E+YEcs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl
                          rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C519, serialNumber=4A48577EA4D53CF05F0D74CAC010F6ABC415238F
        Validity
            Not Before: Oct  5 07:00:53 2026 GMT
            Not After : Oct 12 07:00:53 2026 GMT
        Subject: CN=6ac34b25-a768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:b8:13:94:8f:2a:2f:64:4c:e9:a5:88:b3:
                    c8:0c:ea:43:fb:c4:7f:a2:7c:74:d4:3e:58:cb:96:
                    5c:b6:4a:f3:6d:60:da:3d:3e:54:3c:25:80:3e:d7:
                    0d:f6:93:f8:f8:f3:1a:12:1e:6e:ac:ab:b3:62:79:
                    04:72:f3:95:7c:06:ff:f4:ec:f6:6e:b3:e4:6e:ed:
                    ef:bd:be:79:71:a3:f0:c7:5b:47:9d:6b:16:d2:da:
                    c1:35:aa:7c:da:6e:0d:6c:d8:96:60:6d:1c:aa:ed:
                    7c:9e:54:f1:5d:1e:a1:d1:26:3d:6b:a6:c7:ff:2a:
                    a0:ed:71:f3:4a:49:48:57:20:80:fa:91:45:bd:35:
                    85:26:d6:d1:70:98:24:7f:38:35:9b:a5:08:4b:78:
                    e2:fe:ef:c1:67:d1:fd:d7:a2:78:91:f8:5c:bb:ad:
                    9a:a6:47:c0:1e:01:42:60:d4:29:09:10:6b:a1:ad:
                    06:d0:2f:92:6c:ef:f4:bb:fc:5c:cc:e8:11:00:9c:
                    43:fb:09:2b:15:a2:b1:0b:71:fd:d9:23:8e:38:c7:
                    d3:50:2d:03:b2:92:df:f6:a4:b8:22:d1:ff:57:6c:
                    e2:7c:84:2c:3f:2a:db:e8:0c:7a:06:86:81:43:58:
                    fd:ba:db:35:ec:1f:97:90:12:a7:1f:7d:2c:d8:0e:
                    42:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C5:73:99:A2:6C:4C:64:63:F7:5C:9A:5D:EA:A6:60:8A:04:0C:8C
            X509v3 Authority Key Identifier:
                keyid:4A:48:57:7E:A4:D5:3C:F0:5F:0D:74:CA:C0:10:F6:AB:C4:15:23:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SkhXfqTVPPBfDXTKwBD2q8QVI48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C519/4F0308F2728011F09AADFA7CC4F9AE02/SkhXfqTVPPBfDXTKwBD2q8QVI48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:04:6a:9a:52:74:8d:82:eb:b7:8b:27:68:18:de:02:ab:
         bd:aa:75:82:88:45:86:39:fa:1d:2c:88:29:9f:e5:48:f5:be:
         b5:56:47:cb:86:9d:aa:4e:c5:17:dc:09:f1:eb:ba:a3:eb:d7:
         0a:4d:df:6d:13:b4:78:dd:03:46:e8:33:f4:1f:0a:74:5f:5b:
         6d:98:4b:58:f7:24:8a:ad:75:d8:d2:aa:08:17:08:19:5d:9a:
         68:71:29:3b:06:c9:37:c0:b5:41:51:dc:46:ee:ea:38:92:a7:
         1d:0d:85:d1:d9:ba:9b:44:95:96:95:1a:6f:1b:8b:8d:12:3c:
         ca:9f:46:f9:f7:29:20:2f:71:d0:97:0e:ce:6a:78:9c:aa:00:
         0d:f7:94:29:e0:66:01:3b:de:5c:12:0c:ed:83:66:27:8b:2d:
         a3:7a:fc:b5:12:f4:4d:00:56:b3:3b:87:00:a2:03:5e:12:e7:
         6e:dc:56:ca:e4:fe:ed:2d:d0:57:62:04:cd:b9:b8:1f:5c:0d:
         ec:f8:8c:0c:bd:ce:6a:7d:60:b4:b1:5f:a7:2b:5c:e3:07:d2:
         f9:c9:d0:c5:70:96:cf:f3:3d:ce:cc:e3:86:2a:0c:d7:8e:8a:
         1c:fb:cd:ca:cb:14:4e:50:18:1e:f1:ea:96:69:7e:14:c5:90:
         cf:db:71:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM1MTkxMTAvBgNVBAUTKDRBNDg1NzdFQTRENTNDRjA1RjBENzRDQUMwMTBGNkFC
QzQxNTIzOEYwHhcNMjYxMDA1MDcwMDUzWhcNMjYxMDEyMDcwMDUzWjAYMRYwFAYD
VQQDEw02YWMzNGIyNS1hNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs9K4E5SPKi9kTOmliLPIDOpD+8R/onx01D5Yy5ZctkrzbWDaPT5UPCWAPtcN
9pP4+PMaEh5urKuzYnkEcvOVfAb/9Oz2brPkbu3vvb55caPwx1tHnWsW0trBNap8
2m4NbNiWYG0cqu18nlTxXR6h0SY9a6bH/yqg7XHzSklIVyCA+pFFvTWFJtbRcJgk
fzg1m6UIS3ji/u/BZ9H916J4kfhcu62apkfAHgFCYNQpCRBroa0G0C+SbO/0u/xc
zOgRAJxD+wkrFaKxC3H92SOOOMfTUC0DspLf9qS4ItH/V2zifIQsPyrb6Ax6BoaB
Q1j9uts17B+XkBKnH30s2A5CBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHXFc5mi
bExkY/dcml3qpmCKBAyMMB8GA1UdIwQYMBaAFEpIV36k1TzwXw10ysAQ9qvEFSOP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzUxOS80RjAzMDhGMjcy
ODAxMUYwOUFBREZBN0NDNEY5QUUwMi9Ta2hYZnFUVlBQQmZEWFRLd0JEMnE4UVZJ
NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NraFhmcVRWUFBCZkRYVEt3QkQycThRVkk0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzUxOS80RjAzMDhGMjcyODAxMUYwOUFBREZBN0NDNEY5QUUwMi9Ta2hYZnFUVlBQ
QmZEWFRLd0JEMnE4UVZJNDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbboEappSdI2C67eLJ2gY3gKrvap1gohFhjn6HSyIKZ/lSPW+tVZHy4adqk7F
F9wJ8eu6o+vXCk3fbRO0eN0DRugz9B8KdF9bbZhLWPckiq112NKqCBcIGV2aaHEp
OwbJN8C1QVHcRu7qOJKnHQ2F0dm6m0SVlpUabxuLjRI8yp9G+fcpIC9x0JcOzmp4
nKoADfeUKeBmATveXBIM7YNmJ4sto3r8tRL0TQBWszuHAKIDXhLnbtxWyuT+7S3Q
V2IEzbm4H1wN7PiMDL3Oan1gtLFfpytc4wfS+cnQxXCWz/M9zszjhioM146KHPvN
yssUTlAYHvHqlml+FMWQz9txMg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:27:12 2026 by rpki-client