Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          hL0gX8oU29fzoKIr+G4qj0Hd6+201WarGZjJNfBXdZM=
Subject key identifier:   49:59:0C:C5:83:26:EF:8A:24:9D:B3:3C:55:FA:38:0F:F8:B5:6E:E4
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0E25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0D1E
Signing time:             Sat 24 Oct 2026 18:45:53 +0000
Manifest this update:     Sat 24 Oct 2026 18:45:52 +0000
Manifest next update:     Sat 31 Oct 2026 18:45:52 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: 37P28XxlEFZb6rMhmR+zToQdacWXNfLlTjyEeXondHM=)
                          2: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: fSPgQ0LMQzI8bkHaUu8bL3d8S8z0D/SfCDL4l0l5jeY=)
                          3: 60A1565CA1F211F1993DFC693F11F970.roa (hash: RFHpBcGzcu8zc3vv4bbihIv1/WTO6k7Pot6Tojz87xo=)
                          4: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
                          5: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
                          6: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
                          7: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          8: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0=)
                          9: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
                          10: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY=)
                          11: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
                          12: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          13: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
                          14: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
                          15: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
                          16: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
                          17: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
                          18: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: cLjdhUjlRnZ/CysDyvE5WxC4HuYKkSjsastV+5g0hOA=)
                          19: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
                          20: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=)
                          21: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
                          22: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          23: 0CE85BA6BE1111F18720DB3D5611F970.roa (hash: nz9vc68IV5WJ7mQXbS6rNZIjFtBJkdis8tlOkiay7Qw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 18:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3621 (0xe25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Oct 24 18:45:52 2026 GMT
            Not After : Oct 31 18:45:52 2026 GMT
        Subject: CN=6adcfce1-8d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c0:88:40:91:fb:67:64:2f:9c:0d:61:78:3e:
                    2c:cd:6c:7b:cb:14:18:a5:28:46:b8:a6:72:c4:6f:
                    77:bf:dd:da:53:ad:0e:54:f4:95:3b:e7:86:dc:15:
                    09:ea:01:9a:37:07:cf:2e:f5:5e:87:9a:ed:8c:20:
                    ff:b0:f3:84:2e:0a:32:29:92:c9:52:2d:75:1e:ae:
                    e4:7a:08:a0:ab:ab:67:2b:b1:9e:d2:e8:5b:d8:a2:
                    4f:4b:0c:1f:49:a9:e5:b5:49:67:83:5b:5c:bb:51:
                    c7:86:dd:93:77:98:c6:19:9e:2e:17:4e:3a:91:28:
                    5f:b1:1a:e5:59:63:be:e8:33:38:8e:a5:a2:17:87:
                    c4:37:10:ff:3b:25:4a:44:6d:04:8e:02:79:99:de:
                    75:69:06:7d:dc:a5:81:c6:4e:96:d7:18:c4:70:fd:
                    d1:47:a0:22:29:da:41:99:99:90:63:87:9c:ef:04:
                    51:58:27:55:09:f5:8e:da:eb:41:44:d6:bf:68:d2:
                    55:b5:66:4a:8c:9b:6d:72:ff:98:46:cc:a9:dc:bc:
                    25:4f:73:88:24:f4:69:4a:61:a3:b4:5e:e6:24:9b:
                    4b:18:5d:c7:24:db:ee:d9:90:1a:d0:6c:47:63:8f:
                    82:26:88:96:10:65:6a:96:bf:e4:99:23:1f:86:d3:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:0C:C5:83:26:EF:8A:24:9D:B3:3C:55:FA:38:0F:F8:B5:6E:E4
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9b:23:7d:4d:f5:b4:67:4d:00:6a:85:f2:2e:e6:72:2e:3f:
         ea:57:70:2d:96:8c:ba:e2:45:6f:ab:41:28:30:a1:d1:df:96:
         7d:0b:a7:e4:27:99:a2:9b:c9:47:16:f6:2a:2e:cd:50:90:9f:
         bf:5d:3a:10:b7:90:9a:91:ff:06:89:90:0f:75:06:83:c8:6b:
         46:4d:69:f5:17:72:63:38:4b:8e:e4:ce:84:39:14:a9:4d:e8:
         9b:7a:ca:8b:60:a9:64:40:fa:75:57:92:d8:bb:c7:c9:83:87:
         95:02:95:93:b8:c3:eb:50:a6:0a:8c:bb:e4:1a:5d:02:a9:4e:
         a1:ad:36:a6:9b:ce:01:f6:1d:ec:61:73:f2:72:af:aa:13:04:
         eb:ab:2c:10:7c:e0:1d:5c:a0:07:d8:eb:ec:32:b6:60:69:05:
         81:ea:ff:c6:7d:1d:95:51:9c:f0:a2:e6:2c:ce:40:f3:2b:ea:
         1c:15:f9:c2:4b:0d:e9:24:a5:24:7d:3d:ad:58:c4:21:7f:8b:
         9c:a9:a1:3a:6f:08:18:d3:b0:6e:e5:b1:10:db:75:a3:87:df:
         ca:98:28:ab:dd:eb:30:cb:8b:87:30:7e:b3:ee:5c:18:98:43:
         9a:74:7c:6b:aa:f6:cf:a5:11:7f:cd:5d:af:67:21:31:42:88:
         5b:f7:6d:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG
NjlDQkE4NDYwHhcNMjYxMDI0MTg0NTUyWhcNMjYxMDMxMTg0NTUyWjAYMRYwFAYD
VQQDEw02YWRjZmNlMS04ZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsCIQJH7Z2QvnA1heD4szWx7yxQYpShGuKZyxG93v93aU60OVPSVO+eG3BUJ
6gGaNwfPLvVeh5rtjCD/sPOELgoyKZLJUi11Hq7kegigq6tnK7Ge0uhb2KJPSwwf
SanltUlng1tcu1HHht2Td5jGGZ4uF046kShfsRrlWWO+6DM4jqWiF4fENxD/OyVK
RG0EjgJ5md51aQZ93KWBxk6W1xjEcP3RR6AiKdpBmZmQY4ec7wRRWCdVCfWO2utB
RNa/aNJVtWZKjJttcv+YRsyp3LwlT3OIJPRpSmGjtF7mJJtLGF3HJNvu2ZAa0GxH
Y4+CJoiWEGVqlr/kmSMfhtM0awIDAQABo4ICczCCAm8wHQYDVR0OBBYEFElZDMWD
Ju+KJJ2zPFX6OA/4tW7kMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE
OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm
M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV5sjfU31tGdNAGqF8i7mci4/6ldwLZaMuuJFb6tBKDCh0d+WfQun5CeZopvJ
Rxb2Ki7NUJCfv106ELeQmpH/BomQD3UGg8hrRk1p9RdyYzhLjuTOhDkUqU3om3rK
i2CpZED6dVeS2LvHyYOHlQKVk7jD61CmCoy75BpdAqlOoa02ppvOAfYd7GFz8nKv
qhME66ssEHzgHVygB9jr7DK2YGkFger/xn0dlVGc8KLmLM5A8yvqHBX5wksN6SSl
JH09rVjEIX+LnKmhOm8IGNOwbuWxENt1o4ffypgoq93rMMuLhzB+s+5cGJhDmnR8
a6r2z6URf81dr2chMUKIW/dtqg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:05:05 2026 by rpki-client