Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
File:                     pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json)
Hash identifier:          mOGzAt9a4yaaDgJo77VfUAQIrfyoIqIOMNPHoxhUrqk=
Subject key identifier:   62:CD:49:19:EA:5F:B9:8A:2D:E2:DD:CB:65:39:06:D2:AA:F3:07:04
Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
Certificate issuer:       /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
Manifest number:          015C
Signing time:             Sat 26 Sep 2026 18:57:50 +0000
Manifest this update:     Sat 26 Sep 2026 18:57:50 +0000
Manifest next update:     Sat 03 Oct 2026 18:57:50 +0000
Files and hashes:         1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: 4SK45q1BvgBYQnHTVbUrKHxZpEaL91/W70gcXCZ9Mhg=)
                          2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: XIBVLN0QTNRfgKTP2te+4QcwWNVAHO7ezlqwT3o7bi8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
                          rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
        Validity
            Not Before: Sep 26 18:57:50 2026 GMT
            Not After : Oct  3 18:57:50 2026 GMT
        Subject: CN=6ab815ae-6da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:3f:e1:12:60:c5:65:df:5d:b7:07:0c:c1:
                    7a:60:29:7c:57:b3:98:ae:75:81:d6:30:81:fd:fc:
                    98:c6:94:88:76:f1:7d:c8:60:a9:e1:e6:32:fb:b3:
                    ab:7c:73:25:da:d1:e9:f1:fa:70:27:dd:d7:2a:7c:
                    1a:69:2f:69:95:dd:75:89:8d:e3:16:ea:75:e5:a2:
                    73:a4:56:4d:fb:fb:73:a1:1d:26:61:09:6c:8b:0f:
                    86:32:69:82:5c:a0:c7:e1:d6:43:35:75:7d:c6:38:
                    82:69:4d:4a:e6:50:b0:a4:9b:be:18:af:74:11:27:
                    d2:c7:2e:fe:06:43:eb:7c:d2:3d:9a:cf:1e:9d:af:
                    1b:81:a1:60:b2:03:09:5f:8b:d5:5f:19:77:c5:bd:
                    88:c9:a5:73:a1:00:a7:0e:48:54:ef:9b:17:31:40:
                    26:71:39:26:56:a9:fd:fe:33:3b:b9:07:67:67:d1:
                    a8:22:18:2e:fa:ff:fc:08:2a:b8:6e:45:cc:0d:15:
                    08:40:34:da:41:42:8f:76:39:4c:0c:b4:ab:15:9b:
                    7f:4b:1b:a9:2b:30:7e:54:9c:95:8a:a1:4c:c3:6f:
                    85:1b:c6:8f:26:7a:4e:f0:9c:0e:5c:ea:d7:52:fa:
                    73:5e:8d:5b:41:12:a3:6b:e1:8b:39:a7:af:01:ca:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CD:49:19:EA:5F:B9:8A:2D:E2:DD:CB:65:39:06:D2:AA:F3:07:04
            X509v3 Authority Key Identifier:
                keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:fb:5c:23:fa:1c:41:53:cb:52:94:30:ae:62:4f:6a:7b:f2:
         50:d6:dd:18:6c:1e:e9:0f:c3:d5:7a:4c:a9:45:f6:52:d0:d4:
         1f:79:08:cc:3d:a8:bb:52:c0:e9:9d:cf:24:b7:8b:38:1b:12:
         ae:29:dd:57:c5:3b:3f:58:4b:ae:0e:82:dd:92:2d:7d:6b:a3:
         64:74:ca:fb:bc:9b:d2:b6:58:01:de:0c:6e:9a:32:e6:6e:fd:
         ec:c6:81:a0:70:e3:10:7c:c5:9d:57:58:62:1b:d8:b6:f7:93:
         2b:8b:9d:a8:b8:14:26:40:3c:88:fc:bb:5a:c6:10:ca:f6:37:
         53:9e:58:0f:48:b1:97:cf:42:5f:04:3c:7a:36:92:58:b4:17:
         32:f2:b5:d9:b5:03:0d:93:a2:f6:fe:a3:fa:fb:af:73:bf:b0:
         68:d0:cc:3d:eb:d4:c5:85:a8:4f:f5:a1:b7:c6:3e:60:94:de:
         a2:9a:0f:0c:2a:10:93:0a:fd:17:70:f7:60:bd:64:85:c9:1e:
         ca:8e:bf:39:5e:ec:4c:aa:bb:cf:57:fd:56:85:47:cc:d7:92:
         04:9d:08:b8:20:5b:09:3c:2e:56:af:d9:7c:fa:65:82:86:e9:
         ee:5e:4f:1a:78:b1:39:3a:ea:9e:c8:e9:e7:f0:ba:6f:83:17:
         db:82:1b:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg4RDkxMTAvBgNVBAUTKEE2NEJFNDRBQ0IwMEU0QkRBRTQ0OTFCMEZBMENENzA5
OUQyQzcyN0MwHhcNMjYwOTI2MTg1NzUwWhcNMjYxMDAzMTg1NzUwWjAYMRYwFAYD
VQQDEw02YWI4MTVhZS02ZGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvRg/4RJgxWXfXbcHDMF6YCl8V7OYrnWB1jCB/fyYxpSIdvF9yGCp4eYy+7Or
fHMl2tHp8fpwJ93XKnwaaS9pld11iY3jFup15aJzpFZN+/tzoR0mYQlsiw+GMmmC
XKDH4dZDNXV9xjiCaU1K5lCwpJu+GK90ESfSxy7+BkPrfNI9ms8ena8bgaFgsgMJ
X4vVXxl3xb2IyaVzoQCnDkhU75sXMUAmcTkmVqn9/jM7uQdnZ9GoIhgu+v/8CCq4
bkXMDRUIQDTaQUKPdjlMDLSrFZt/SxupKzB+VJyViqFMw2+FG8aPJnpO8JwOXOrX
UvpzXo1bQRKja+GLOaevAcodOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGLNSRnq
X7mKLeLdy2U5BtKq8wcEMB8GA1UdIwQYMBaAFKZL5ErLAOS9rkSRsPoM1wmdLHJ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9GODNFM0ZDRUFE
QkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVMMnVSSkd3LWd6WENaMHNj
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODhEOS9GODNFM0ZDRUFEQkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVM
MnVSSkd3LWd6WENaMHNjbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdvtcI/ocQVPLUpQwrmJPanvyUNbdGGwe6Q/D1XpMqUX2UtDUH3kIzD2ou1LA
6Z3PJLeLOBsSrindV8U7P1hLrg6C3ZItfWujZHTK+7yb0rZYAd4Mbpoy5m797MaB
oHDjEHzFnVdYYhvYtveTK4udqLgUJkA8iPy7WsYQyvY3U55YD0ixl89CXwQ8ejaS
WLQXMvK12bUDDZOi9v6j+vuvc7+waNDMPevUxYWoT/Wht8Y+YJTeopoPDCoQkwr9
F3D3YL1khckeyo6/OV7sTKq7z1f9VoVHzNeSBJ0IuCBbCTwuVq/ZfPplgobp7l5P
GnixOTrqnsjp5/C6b4MX24IbSw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:45:55 2026 by rpki-client