Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.mft
File:                     4kbOehYGKsBgdRNj5VPvVcTGaPI.mft (raw, json)
Hash identifier:          2pFlmlAVwS64lThpTD0P8YIqiq/NIyuVVRLd+5PcctQ=
Subject key identifier:   FC:16:6D:D5:1B:FE:A2:DB:23:DC:EB:46:9F:B3:55:9A:1E:9E:AF:3F
Authority key identifier: E2:46:CE:7A:16:06:2A:C0:60:75:13:63:E5:53:EF:55:C4:C6:68:F2
Certificate issuer:       /CN=A91D82D4/serialNumber=E246CE7A16062AC060751363E553EF55C4C668F2
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kbOehYGKsBgdRNj5VPvVcTGaPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.mft
Manifest number:          1B
Signing time:             Tue 11 Aug 2026 08:20:27 +0000
Manifest this update:     Tue 11 Aug 2026 08:20:26 +0000
Manifest next update:     Tue 18 Aug 2026 08:20:26 +0000
Files and hashes:         1: 4kbOehYGKsBgdRNj5VPvVcTGaPI.crl (hash: A4i+bVHG50lOE4vRuDgotAmCvJrpA2/6vUDhdCrzWqE=)
                          2: Ub0QpNFhKqCUcCTrOnfCXYpG0PM.asa (hash: 0r7u+/j4RPtpiuh7nmmIBmpBKJ3/oTxKDjODOxTJclU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.crl
                          rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kbOehYGKsBgdRNj5VPvVcTGaPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Aug 2026 08:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D82D4, serialNumber=E246CE7A16062AC060751363E553EF55C4C668F2
        Validity
            Not Before: Aug 11 08:20:26 2026 GMT
            Not After : Aug 18 08:20:26 2026 GMT
        Subject: CN=6a7adb4b-56f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:98:c8:9d:78:28:2d:59:1b:c2:12:7b:a2:d5:
                    22:6f:b0:22:05:dc:50:2e:b0:c3:4a:c8:30:36:8c:
                    97:8b:8e:ff:e3:af:2b:0e:35:0f:58:ed:1f:06:92:
                    ac:a0:3c:18:14:9f:f8:ab:e7:e6:cf:7a:24:24:2b:
                    8d:bc:7a:dc:83:d5:8c:88:ab:83:e8:39:7e:a0:5f:
                    d7:cf:15:04:43:72:05:1f:11:3d:5c:84:bd:ff:c3:
                    6d:0a:d6:12:2b:dc:0a:86:82:a5:cc:9e:74:8e:ed:
                    cc:13:ce:16:19:28:e0:c3:b3:5d:03:ab:86:dd:5e:
                    f3:6b:62:e0:bc:03:21:4e:3d:a8:dc:11:ec:12:a5:
                    4f:31:43:d8:c4:7b:14:51:ca:bf:ab:91:7d:1c:59:
                    55:7b:8e:7a:1b:e2:e4:75:68:85:9c:4c:f2:05:04:
                    f9:5f:eb:a1:8b:8d:e6:80:33:a5:f6:34:57:61:bd:
                    cb:6c:0d:ec:25:47:16:0c:12:a7:60:81:d7:bd:3c:
                    78:e6:bc:ef:40:48:13:fd:31:26:a2:b9:c2:4c:90:
                    37:1d:3c:1f:fb:97:16:e2:80:cf:a1:66:88:45:bd:
                    5a:7c:26:d3:fc:f4:68:ea:36:aa:15:8c:0f:2e:fa:
                    43:8c:a2:b3:74:e8:4b:4b:2d:b0:5b:60:76:a3:a0:
                    54:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:16:6D:D5:1B:FE:A2:DB:23:DC:EB:46:9F:B3:55:9A:1E:9E:AF:3F
            X509v3 Authority Key Identifier:
                keyid:E2:46:CE:7A:16:06:2A:C0:60:75:13:63:E5:53:EF:55:C4:C6:68:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kbOehYGKsBgdRNj5VPvVcTGaPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D82D4/F4C2BF406E6911F1B8F60C4F8BA30FBC/4kbOehYGKsBgdRNj5VPvVcTGaPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ae:4a:0f:a2:1e:a5:ee:47:10:05:41:73:61:e9:9b:51:57:
         a7:0f:46:75:79:59:1c:47:00:53:31:2c:6e:fb:ac:16:d3:7e:
         fe:b9:6f:62:aa:b6:9c:4c:4b:60:2f:2a:b4:79:cc:5b:ac:01:
         95:e4:f4:30:9b:db:e2:de:98:c2:e6:d4:7b:63:4d:f4:f1:12:
         d0:2d:f0:44:f2:60:f3:1a:7b:ad:3f:08:68:86:06:67:e6:73:
         7b:31:3b:21:f8:a0:87:43:00:3e:8b:96:d5:95:7f:59:3b:15:
         fa:a0:e3:6d:a8:69:aa:74:1e:95:29:46:63:6a:9c:68:cd:9b:
         89:f5:70:f9:6d:e9:fc:bf:bd:44:c1:e0:e7:ea:ec:4f:e9:f6:
         49:50:a5:31:20:33:e0:0b:50:a0:85:fe:55:df:b2:3e:c2:c8:
         2d:51:22:63:a9:98:64:ab:f0:5d:78:4f:58:77:fa:b4:aa:5e:
         54:54:ce:1e:cf:86:d5:81:f6:a1:f9:7a:43:05:57:18:dc:71:
         5c:76:73:3c:9d:84:8f:c8:d0:29:25:8c:d7:51:70:31:04:43:
         d0:c2:c5:69:e6:5e:0a:b6:b9:61:27:92:a0:43:bf:6e:bc:dc:
         09:65:0b:fb:81:48:32:7b:c3:15:92:98:27:e0:cf:57:dc:1f:
         14:99:82:ef
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODJENDExMC8GA1UEBRMoRTI0NkNFN0ExNjA2MkFDMDYwNzUxMzYzRTU1M0VGNTVD
NEM2NjhGMjAeFw0yNjA4MTEwODIwMjZaFw0yNjA4MTgwODIwMjZaMBgxFjAUBgNV
BAMTDTZhN2FkYjRiLTU2ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCPmMideCgtWRvCEnui1SJvsCIF3FAusMNKyDA2jJeLjv/jrysONQ9Y7R8Gkqyg
PBgUn/ir5+bPeiQkK428etyD1YyIq4PoOX6gX9fPFQRDcgUfET1chL3/w20K1hIr
3AqGgqXMnnSO7cwTzhYZKODDs10Dq4bdXvNrYuC8AyFOPajcEewSpU8xQ9jEexRR
yr+rkX0cWVV7jnob4uR1aIWcTPIFBPlf66GLjeaAM6X2NFdhvctsDewlRxYMEqdg
gde9PHjmvO9ASBP9MSaiucJMkDcdPB/7lxbigM+hZohFvVp8JtP89GjqNqoVjA8u
+kOMorN06EtLLbBbYHajoFTFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/BZt1Rv+
otsj3OtGn7NVmh6erz8wHwYDVR0jBBgwFoAU4kbOehYGKsBgdRNj5VPvVcTGaPIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MkQ0L0Y0QzJCRjQwNkU2
OTExRjFCOEY2MEM0RjhCQTMwRkJDLzRrYk9laFlHS3NCZ2RSTmo1VlB2VmNUR2FQ
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNGtiT2VoWUdLc0JnZFJOajVWUHZWY1RHYVBJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
MkQ0L0Y0QzJCRjQwNkU2OTExRjFCOEY2MEM0RjhCQTMwRkJDLzRrYk9laFlHS3NC
Z2RSTmo1VlB2VmNUR2FQSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAkrkoPoh6l7kcQBUFzYembUVenD0Z1eVkcRwBTMSxu+6wW037+uW9iqracTEtg
Lyq0ecxbrAGV5PQwm9vi3pjC5tR7Y0308RLQLfBE8mDzGnutPwhohgZn5nN7MTsh
+KCHQwA+i5bVlX9ZOxX6oONtqGmqdB6VKUZjapxozZuJ9XD5ben8v71EweDn6uxP
6fZJUKUxIDPgC1Cghf5V37I+wsgtUSJjqZhkq/BdeE9Yd/q0ql5UVM4ez4bVgfah
+XpDBVcY3HFcdnM8nYSPyNApJYzXUXAxBEPQwsVp5l4KtrlhJ5KgQ79uvNwJZQv7
gUgye8MVkpgn4M9X3B8UmYLv
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:45:10 2026 by rpki-client