Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
File:                     8f4MMn555a9D4VsOb4zWbAMp0Tg.mft (raw, json)
Hash identifier:          BR9AHCisOknliwoDG1LWICxWxKE+QktxGIeA9HVXIAI=
Subject key identifier:   FB:42:B1:AC:52:09:87:3D:F9:C0:38:B5:13:F3:79:32:A7:57:F7:D2
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0692
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
Manifest number:          0491
Signing time:             Fri 23 Oct 2026 01:11:06 +0000
Manifest this update:     Fri 23 Oct 2026 01:11:06 +0000
Manifest next update:     Fri 30 Oct 2026 01:11:06 +0000
Files and hashes:         1: 8f4MMn555a9D4VsOb4zWbAMp0Tg.crl (hash: PtoFbmcO6qkus9aOPEm7CqWecGLWa5QA3lLKcZoNVzk=)
                          2: 90B05B70D31511EF9F94561DC4F9AE02.roa (hash: wY7JxNNcF8jwlSM4GLANwLmkG/rStSmVhR8h7itrsg8=)
                          3: FAED53589AB011F18D4F543F4211F970.roa (hash: Pa56En/WKy4Ggkg+oF7ab6Ubc7Kt7Yij5vl5e2659Rc=)
                          4: 93532FB2132211F18D96001E1E3D8C67.roa (hash: Jln5K9rCYn+/+TNN/HxVur6/cQrEKKq8dgcpJFrJnY0=)
                          5: D5A974B6957211F19A9744B96D11F970.roa (hash: kHMPxieMZBNnz4l4hI1i9tPjT6bwDgYyQ6oIxpu1lPg=)
                          6: 53E3F02CF88511EFAF4C196EC4F9AE02.roa (hash: BLB8EiUA6uoysyOa1WjbT2rDRA7bxIq4QyzF8vvNC5M=)
                          7: 187B9E4EBEEC11F0A5A7CF26C4F9AE02.roa (hash: 1NsbWgLBF1W9J0YFhgalQF/TjfLa9AXoXovaiY4WR9A=)
                          8: 014D4C442FBE11F0A6052D6EC4F9AE02.roa (hash: C6+bTGAYg7hERIISjlEtPgafjVVV7cL9GcX/ugisfbc=)
                          9: A5D0EE5C78FB11F097FE627EC4F9AE02.roa (hash: soFy73F8yYeKlV0QVqHpkd9HcDpxKAXl90btwCeFwvU=)
                          10: C6A65F843D8D11F19546C4B7C1833773.roa (hash: sGveCb2oIK4YnQVKLryat/IV2ERjHpQJfbhIrjnoJB8=)
                          11: 781AAD02C65F11F0AF552452C4F9AE02.roa (hash: dR62sUXCTNQGIjNIpwOTfHGXKHgKvKuFDTMg3f0a4KU=)
                          12: 015EFF96888511F08E124148C4F9AE02.roa (hash: NDZYFo4pzh+5p98MhnTuP74VI+2yJIbP5Jw2rjA8eLc=)
                          13: F57C464ACDFA11F1AEF64A140D66CEF9.roa (hash: YO0SfiSaRyJthv9JiRPl9s6Yzc8OTIWhiDNBFh4UGkM=)
                          14: B0F43CC6B38411F08BDD147BC4F9AE02.roa (hash: ++OS4yB7b4ExXuQyX0njdfJSVCpn2qJ3pFNqJyhu01Y=)
                          15: 5C99FBC8862B11F18ACF964A85A30FBC.roa (hash: 6XOvFxHqofjCTczcmHFMx/BLz0Xb/634ELBiYoIKFXI=)
                          16: DFA50806828D11F18E7B671965A30FBC.roa (hash: ncTfavnPCoTqISzthy+BXApnAB7awFPP9ByTFMMaSl0=)
                          17: F2CEE3CEBE7711EFB34D6959C4F9AE02.roa (hash: //vTtkW3uska+U4Aky2iDHqz1RSvFaf04hMJOPNyeag=)
                          18: BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa (hash: +UjcPL4LTKH91nNYVP8bv6jJTyOAQ7EI0wbAQj7CLp8=)
                          19: D5BB4AE2379E11F19C5D9615B3833773.roa (hash: gBsRjNbfNGURTNKRxiLkaTSn2vGla/8ZkXiHiBmuxdY=)
                          20: 91F3700A960D11F1982988935B11F970.roa (hash: tyHjEBzAjArERVX2ad+K9RGI3JugfQOFVNhfWYvXCpc=)
                          21: BF1C45C8031B11F192FC7DBE1A3D8C67.roa (hash: OrZ5C4nR8Aak1YkGxun8Lcmm8cLaXdy4WPvgTQFnRuo=)
                          22: 74F68796303711EFB68DF613C4F9AE02.roa (hash: Fqtx5Wn9Ey7iYD7VUT49xNCnyMvkXXJdBXNNoMBCIyk=)
                          23: 24E07816913E11F0AE8FEC66C4F9AE02.roa (hash: IGTy3ZDLg8kJ2JK0JcYdpxie69SC73Gf8RLIOV3M1fM=)
                          24: EBFA570C843411F1A036447267A30FBC.roa (hash: oGTM+Kdmp60AZVyx3XExaSdPmXc0aCVVEKBfs02SB9k=)
                          25: D0248BD854F611F09C7C2D78C4F9AE02.roa (hash: vA1rcAQh1nZpGQs1k2HU2wHdhIB8xIXbZ+c+SSnK4Bk=)
                          26: 0A8D0EC2A8F711F096E2671BC4F9AE02.roa (hash: MHvQ3T9Wh78qiRG1jpQRl3hzWP50XcPdNaokzDmvFIQ=)
                          27: 8E90E2C4477211F1802B434C93833773.roa (hash: DN67VKOOAGr7p69GfJpRKsPH8PJaFp+083fnwnsMlN4=)
                          28: BAD612C09A5F11F0AE92FC5FC4F9AE02.roa (hash: 9v23BH3VaZHsrV6dhRyZc9ilRmXlTF13ZVbBtKGgZU0=)
                          29: 0A05EA08CDFB11F18A9194170D66CEF9.roa (hash: psb4a0isnZ4FK86r6EivtnyqzDWeZUUfOC5a1tTQRLg=)
                          30: ECFCBBA4D8D711EF91AD5538C4F9AE02.roa (hash: AUy7pH3TXzYWsJXqGFLtvRwNbokMvc4L0rqdsry0zmE=)
                          31: 7E302F28AF1211F0901A1F4AC4F9AE02.roa (hash: u0fZHI+87A8Gj8wjXBeo+F3FGXcwK9L4f+odYetMd8A=)
                          32: E579957A3D8D11F1BBF04BDDC1833773.roa (hash: z9cZzhwSX+DJTkvzT2/cdruzBLmJBKHBfvZsb3RhW9U=)
                          33: EB7DEC72068411F1BC24B18C403D8C67.roa (hash: HDRl3VxNh/FevQtH04r/t22d7Hu2w7IDQEKoc9zv31Q=)
                          34: 9E88FF86C3A011F19F3CB1CE4B11F970.roa (hash: qL8Uuk6g3JA/hP+aSt6GWTHIL6NUEZ49k6zEnFVph54=)
                          35: ADD4AC582C9F11F1BC2F15C3C3833773.roa (hash: APjgNYOczoaqqZv7RK/42rF9QsxyHD/c3wOYaEp15OI=)
                          36: 58B43D66F81E11F0B862CA6F746F56BC.roa (hash: MLy/84BYMcgbX3j8om2zcfbSwbVq9W2tiq9WtSy7wF8=)
                          37: 820501DE3D3211F09AB6A617C4F9AE02.roa (hash: 6CiJ0BYmmDNZCRkTq5RQfUjGPJjdT0N62YctLryY684=)
                          38: A88A0ED8FC7511EF92B63B46C4F9AE02.roa (hash: K5coW6WQjv47W7NRFavoSjuQWRe8GCCu/LnK38ICx+E=)
                          39: BD5D1956031B11F192FC7DBE1A3D8C67.roa (hash: 5UOYihu+c2SG12O5Sjtm3ZtU94Pthftu92wea5AD44w=)
                          40: 4F10ED76D3B311EFA7B56234C4F9AE02.roa (hash: nESgoPFI04xQrJ3sbtwHbOkUwlWL2X6Lh3KwvoWkxTY=)
                          41: 1AEC708A26EA11F0A1989F5AC4F9AE02.roa (hash: JVaZUZm0NAyjAd/+LVRQi99eCXeUGHHM5HXQ82YfKlU=)
                          42: FC09C7E49AB011F18D4F543F4211F970.roa (hash: 4Iinnzwkz7OEiGAzy+rjkkEsmpQ0Ng3RDk5gK6EiHHY=)
                          43: 3CF11BEA163211F0B2BBF073C4F9AE02.roa (hash: Ug3OnlY3rLccu6gdvaa3PgClabCuD6asHbE4EBpDDSY=)
                          44: 17E12AD6547E11F081A32B30C4F9AE02.roa (hash: M38Rs57exBHtUV9LqQTMv54tM/DlWXmFkF9YYaOY8M8=)
                          45: 25A5300C885B11F09F3C8013C4F9AE02.roa (hash: QeN3kY7Jp8EcmxCUJ++F92Otf7l26Dz7rZaoTfGSBUo=)
                          46: C68EA896D18011EFA738B84AC4F9AE02.roa (hash: 4+7sus0OzYlXI0lFmBMzYULeNWaG++0mOSDHK/VO9vs=)
                          47: 1B740C443DF811ED8EA29234C4F9AE02.roa (hash: YpJmDn+9lZVjWxMhEk3QF5kOb8jVR/FoRF4NZF8LHgg=)
                          48: FD241BDE9AB011F18D4F543F4211F970.roa (hash: 2NMTIY5EjIi+Svo8u5yzZSOuoUJKDxII7+i9ICSsk5M=)
                          49: BA7491AAE0FE11EF9196F463C4F9AE02.roa (hash: GxjIC/dRCQuJIUTBPE/mwK6JhE0IKNRA6yKGhdkLnAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 01:11:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1682 (0x692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Oct 23 01:11:06 2026 GMT
            Not After : Oct 30 01:11:06 2026 GMT
        Subject: CN=6adab42a-9200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:47:6e:e8:ef:04:55:66:ce:3f:fe:70:09:
                    83:24:88:4e:a4:3f:a2:a8:c6:28:dc:74:e8:51:96:
                    53:72:ed:4e:b8:30:fa:5a:30:d5:d9:bd:bf:7c:05:
                    3f:50:7e:d1:a9:d6:9d:c9:5f:be:1b:fb:4d:da:67:
                    96:72:d8:81:2f:47:79:60:4b:5f:71:33:ab:76:4b:
                    13:62:e1:be:38:a6:0b:0a:06:4b:0e:41:93:cb:7d:
                    9e:45:c9:9d:3e:6e:3e:c5:d3:fb:b4:0e:3f:26:b6:
                    a1:13:47:2e:f7:03:e1:aa:14:ce:b2:8c:2f:bc:9f:
                    89:ed:02:f1:6d:56:38:f9:1b:c5:0c:c3:b5:a7:19:
                    8b:6a:0c:e9:b6:ef:35:bd:2d:67:dc:08:a5:cc:18:
                    b8:68:77:53:86:e2:d3:ab:67:f7:fe:f5:12:5b:85:
                    db:8e:df:2d:97:ed:4b:0f:c6:71:c9:7a:f0:3a:22:
                    26:ab:be:14:6d:77:b6:cd:f9:87:46:72:70:97:67:
                    5f:d6:4b:85:8b:b5:87:a0:4d:7b:e8:31:83:93:61:
                    f9:40:ef:c6:89:91:7a:3a:d8:e9:ad:9c:0f:23:92:
                    cb:8f:38:91:1c:e6:d2:ef:7d:d9:5f:af:76:0a:65:
                    9c:f4:33:44:4e:61:09:30:d8:ba:3e:1d:d1:74:05:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:42:B1:AC:52:09:87:3D:F9:C0:38:B5:13:F3:79:32:A7:57:F7:D2
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:82:38:c2:79:a4:4a:a2:9e:86:23:9d:45:22:d8:66:cc:9b:
         cc:93:82:ee:a1:38:b3:c8:d0:5f:7e:ef:5d:30:1a:bb:57:b9:
         be:79:08:2e:45:02:f1:1f:f1:d7:3c:fd:62:9c:79:4c:94:36:
         2e:88:db:63:5f:98:4e:04:37:29:bd:97:18:c0:87:f3:f0:f5:
         10:46:f2:12:1b:be:5e:4b:f2:31:90:31:bf:89:98:b2:f2:d4:
         06:e7:8e:14:0e:5d:ff:4b:d9:30:a2:8c:f3:20:e9:cb:f3:d2:
         70:08:5c:bd:d8:f0:4d:73:57:18:d2:cb:1a:af:49:c0:56:08:
         4e:b2:75:f9:45:d6:50:df:80:1c:a3:82:b9:57:00:1e:69:f0:
         42:04:4e:c1:f7:5f:15:03:4a:6e:e1:13:43:1a:ae:ac:36:5d:
         5b:ee:4d:4b:e8:15:c4:be:07:4e:3f:0e:ed:4c:a8:f6:cf:bd:
         90:98:4b:de:ab:3e:a7:49:4a:dc:f2:db:6b:8c:1a:47:b7:1e:
         33:d0:de:2a:f3:e5:f3:f5:27:de:d1:3d:04:c7:62:61:bc:26:
         29:13:cd:9b:2d:ad:54:8d:19:21:b2:1b:14:f7:af:4e:6a:5c:
         5c:ec:20:25:e2:ff:bf:ae:38:0f:04:6a:d2:7b:ce:14:33:de:
         fd:6d:31:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYxMDIzMDExMTA2WhcNMjYxMDMwMDExMTA2WjAYMRYwFAYD
VQQDEw02YWRhYjQyYS05MjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArAFHbujvBFVmzj/+cAmDJIhOpD+iqMYo3HToUZZTcu1OuDD6WjDV2b2/fAU/
UH7RqdadyV++G/tN2meWctiBL0d5YEtfcTOrdksTYuG+OKYLCgZLDkGTy32eRcmd
Pm4+xdP7tA4/JrahE0cu9wPhqhTOsowvvJ+J7QLxbVY4+RvFDMO1pxmLagzptu81
vS1n3AilzBi4aHdThuLTq2f3/vUSW4Xbjt8tl+1LD8ZxyXrwOiImq74UbXe2zfmH
RnJwl2df1kuFi7WHoE176DGDk2H5QO/GiZF6OtjprZwPI5LLjziRHObS733ZX692
CmWc9DNETmEJMNi6Ph3RdAXVNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtCsaxS
CYc9+cA4tRPzeTKnV/fSMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkMxOC85QTVFRUE4QzNERjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVh
OUQ0VnNPYjR6V2JBTXAwVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAioI4wnmkSqKehiOdRSLYZsybzJOC7qE4s8jQX37vXTAau1e5vnkILkUC8R/x
1zz9Ypx5TJQ2LojbY1+YTgQ3Kb2XGMCH8/D1EEbyEhu+XkvyMZAxv4mYsvLUBueO
FA5d/0vZMKKM8yDpy/PScAhcvdjwTXNXGNLLGq9JwFYITrJ1+UXWUN+AHKOCuVcA
HmnwQgROwfdfFQNKbuETQxqurDZdW+5NS+gVxL4HTj8O7Uyo9s+9kJhL3qs+p0lK
3PLba4waR7ceM9DeKvPl8/Un3tE9BMdiYbwmKRPNmy2tVI0ZIbIbFPevTmpcXOwg
JeL/v644DwRq0nvOFDPe/W0xsw==
-----END CERTIFICATE-----
Generated at Fri Oct 23 07:45:39 2026 by rpki-client