Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File:                     t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier:          G5VZwC2xtx9reuLflqJfVMVjm99xlLGfl3t/n/noIy8=
Subject key identifier:   B5:35:CD:6C:94:60:DD:5A:E5:21:0C:29:21:22:C9:20:CF:1B:01:01
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer:       /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial:       08C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number:          08A2
Signing time:             Sun 18 Oct 2026 20:50:16 +0000
Manifest this update:     Sun 18 Oct 2026 20:50:15 +0000
Manifest next update:     Sun 25 Oct 2026 20:50:15 +0000
Files and hashes:         1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: BN8hLgQy6no2tKZkm2cACeeXfnnY59cC+/xRvmWzHIU=)
                          2: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: WzKy9u9B88D10HY+ConM6LT0I2T55QHznbzlIn3dfH4=)
                          3: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: 816YLoIvH9Oaj07rOnlACoUv6ymscAs9lYY/BFhZ/Lc=)
                          4: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: sI6tR4a2HYfJurDOPfrB4Umd60Gjw1lCZTz+9gBI5MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
                          rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 20:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
        Validity
            Not Before: Oct 18 20:50:15 2026 GMT
            Not After : Oct 25 20:50:15 2026 GMT
        Subject: CN=6ad53107-0e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:8f:54:e8:4c:7c:64:fb:2b:d5:74:d3:f2:
                    84:5d:0e:dd:5b:5d:bb:7a:f5:80:aa:57:49:ce:12:
                    12:27:22:cf:a6:b9:9f:e4:a5:99:30:76:5c:ac:e8:
                    e7:2b:2a:cf:d4:91:63:51:9b:b3:2f:3d:af:be:a1:
                    65:5b:eb:8b:50:4e:04:bc:24:ee:78:b5:b2:59:35:
                    b4:26:b7:c7:83:d0:cf:d0:9a:69:ee:85:5a:fe:fe:
                    44:e3:97:1a:36:66:3a:80:fa:0c:5a:52:69:35:c4:
                    e8:48:e3:35:25:6e:f9:c3:dc:68:56:59:f2:89:92:
                    d6:60:16:2c:94:4b:f3:5b:67:86:5e:55:10:73:73:
                    b4:67:cd:cc:90:46:1b:9a:04:95:5c:64:f7:5e:1a:
                    ef:08:ca:8d:a3:e7:9f:00:5b:49:43:79:5a:07:a4:
                    37:74:ca:55:97:c0:d7:31:d0:37:ca:17:ce:72:7a:
                    64:84:82:7d:27:6c:4a:ff:5a:66:87:d2:54:94:fe:
                    41:09:ac:2c:24:b0:55:83:1b:00:66:f1:fc:58:d6:
                    ef:21:1d:ea:70:58:7c:06:57:39:54:4c:10:33:dd:
                    81:19:6f:8c:f4:ef:d4:fd:8d:a6:34:7a:20:b7:7b:
                    f8:6a:a2:2c:d2:76:0f:9b:07:c6:14:d1:b1:22:61:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:CD:6C:94:60:DD:5A:E5:21:0C:29:21:22:C9:20:CF:1B:01:01
            X509v3 Authority Key Identifier:
                keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a0:e9:bd:71:bd:18:fb:36:82:f1:d0:98:75:6b:b4:fb:0c:
         3a:58:70:ba:24:38:fa:16:95:b8:bb:9e:ed:2a:30:1a:fe:86:
         52:53:9f:0c:b0:ac:ed:25:23:b7:ec:72:6d:cf:d8:3f:66:98:
         93:74:78:64:95:af:01:e0:18:d0:aa:39:17:0b:0b:23:68:8e:
         ab:76:d5:13:24:6c:e6:54:18:98:2d:9c:3f:21:e7:a2:50:3d:
         d1:22:f3:68:d8:99:e2:ce:a4:a8:45:b7:d7:7a:2d:ca:6b:97:
         43:9c:40:78:ed:bc:99:e9:29:26:f2:01:7e:59:8b:3d:f7:8a:
         80:c7:97:9a:7a:eb:02:ae:62:fd:d4:ad:46:f6:0e:b6:f6:b6:
         02:bb:6b:9b:4e:72:e4:25:d8:9d:92:d9:89:78:aa:a9:18:64:
         36:43:fa:43:c5:d0:7c:a9:f1:36:2a:93:84:05:af:a5:aa:fd:
         86:dc:8b:dc:50:47:eb:3c:29:56:bc:48:d9:91:e7:a2:ed:9d:
         b0:c2:2b:4d:8c:59:3b:f0:7d:09:0c:03:ae:75:51:5d:1b:6c:
         b4:37:8e:7b:d5:62:5f:76:36:fb:bb:88:1c:c8:cb:02:16:a9:
         ef:a6:c8:c1:22:40:33:1a:9a:d2:60:71:68:59:2a:de:06:df:
         8e:c1:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:34:44 2026 by rpki-client