Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
File:                     e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json)
Hash identifier:          MdL8VKjz/Wh1UWWHoX7H2VVk9Qx9NzpH7LiaDgxTVFU=
Subject key identifier:   E8:BB:DF:38:2F:0C:99:01:43:0A:AD:20:AD:F0:5A:40:0F:03:E4:6C
Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F
Certificate issuer:       /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
Manifest number:          022A
Signing time:             Sun 20 Sep 2026 16:23:32 +0000
Manifest this update:     Sun 20 Sep 2026 16:23:31 +0000
Manifest next update:     Sun 27 Sep 2026 16:23:31 +0000
Files and hashes:         1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: z8PnBz6mryYwoTkdkNrcjogos0Lvu5Kh2E7EWwTCSYA=)
                          2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: BXpSSI8KpMJOkiZJh2DyIGA+D+UNVbBkKMgidE7nKr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F
        Validity
            Not Before: Sep 20 16:23:31 2026 GMT
            Not After : Sep 27 16:23:31 2026 GMT
        Subject: CN=6ab00884-cc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:c4:6b:d6:0a:2f:b4:30:ab:05:11:58:8a:
                    3c:f9:1a:2f:3f:d6:98:24:61:49:52:14:38:4f:82:
                    eb:f5:1d:f4:0a:5b:e0:02:aa:6e:57:a4:71:28:c4:
                    01:57:8f:b2:32:d1:c2:26:9f:e6:52:b9:91:25:b1:
                    a1:78:b5:49:f2:74:e4:72:e7:a2:50:4d:98:f2:29:
                    54:4a:fd:61:6a:8f:0c:91:ef:a0:81:75:c5:c8:b2:
                    c9:c5:96:2a:b6:70:d1:de:ed:f7:7a:85:6a:bc:e1:
                    3e:57:ec:71:69:2f:99:23:f3:8c:cb:16:b9:02:51:
                    4a:ed:36:7f:2e:11:57:c6:db:f5:c3:12:00:ca:21:
                    7b:0d:92:7e:d2:41:cf:25:f8:0f:e0:65:17:85:35:
                    ca:37:02:01:0f:b9:0a:7e:ce:22:8e:32:09:7e:c1:
                    cc:b8:6e:1b:c6:08:19:d3:e6:41:5b:ef:0b:54:2c:
                    83:69:5d:cf:20:b4:70:9c:9c:20:33:20:68:d1:d8:
                    d7:5e:f1:45:e6:35:ad:50:17:f6:d8:3d:2e:8c:7b:
                    30:76:55:31:e0:69:9f:b5:c3:a5:9b:78:1e:2b:82:
                    96:37:d8:9b:ee:e3:f9:b5:24:30:67:3b:75:a8:ef:
                    64:0e:b4:e8:e2:2d:74:d0:38:b8:00:eb:31:42:05:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BB:DF:38:2F:0C:99:01:43:0A:AD:20:AD:F0:5A:40:0F:03:E4:6C
            X509v3 Authority Key Identifier:
                keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1c:4d:b6:7f:fb:0e:4b:4f:3d:b4:9b:c0:39:5e:78:2e:9a:
         1e:7b:c7:37:25:c7:1f:e3:a4:a8:80:f9:7e:12:cf:a2:7d:5d:
         d8:39:d4:68:f7:36:81:5b:8d:32:e0:e1:a5:25:8d:df:02:9b:
         be:0b:65:87:ac:d7:06:f2:45:8a:ca:b1:99:ae:4e:86:16:4f:
         b2:7c:2e:97:04:b0:bf:ec:b4:56:b6:a1:98:cb:39:13:05:49:
         f2:ae:4d:a4:36:86:08:e9:01:4f:5c:73:29:13:d7:8b:65:80:
         03:db:7f:32:9f:cd:3a:49:a6:30:59:03:93:3b:56:96:f8:80:
         2c:a4:45:38:c0:26:b5:98:03:01:86:b8:d6:d7:9a:63:03:24:
         8d:9a:bd:8c:f4:99:11:5f:87:80:7a:84:e6:fd:eb:25:22:74:
         10:e9:4a:4f:d6:b0:f5:fa:76:af:c9:3d:ac:a1:36:8d:1a:e5:
         55:0f:c4:2d:aa:ed:bf:42:64:53:06:ea:99:f9:e7:be:39:0b:
         3e:59:9c:65:0a:86:f1:27:fa:52:b5:75:b8:ae:6d:37:34:08:
         96:cb:b9:49:c7:fb:4a:22:88:12:1b:3d:74:d2:87:3f:63:6c:
         d8:c7:b5:61:70:43:89:86:f4:58:29:10:bf:84:a6:18:16:85:
         33:51:f0:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG
RUJDRTc2NUYwHhcNMjYwOTIwMTYyMzMxWhcNMjYwOTI3MTYyMzMxWjAYMRYwFAYD
VQQDEw02YWIwMDg4NC1jYzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs2/Ea9YKL7QwqwURWIo8+RovP9aYJGFJUhQ4T4Lr9R30ClvgAqpuV6RxKMQB
V4+yMtHCJp/mUrmRJbGheLVJ8nTkcueiUE2Y8ilUSv1hao8Mke+ggXXFyLLJxZYq
tnDR3u33eoVqvOE+V+xxaS+ZI/OMyxa5AlFK7TZ/LhFXxtv1wxIAyiF7DZJ+0kHP
JfgP4GUXhTXKNwIBD7kKfs4ijjIJfsHMuG4bxggZ0+ZBW+8LVCyDaV3PILRwnJwg
MyBo0djXXvFF5jWtUBf22D0ujHswdlUx4GmftcOlm3geK4KWN9ib7uP5tSQwZzt1
qO9kDrTo4i100Di4AOsxQgWSjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOi73zgv
DJkBQwqtIK3wWkAPA+RsMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz
NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL
ZEZicHhCUzdkOXItdk9kbDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANxxNtn/7DktPPbSbwDleeC6aHnvHNyXHH+OkqID5fhLPon1d2DnUaPc2gVuN
MuDhpSWN3wKbvgtlh6zXBvJFisqxma5OhhZPsnwulwSwv+y0VrahmMs5EwVJ8q5N
pDaGCOkBT1xzKRPXi2WAA9t/Mp/NOkmmMFkDkztWlviALKRFOMAmtZgDAYa41tea
YwMkjZq9jPSZEV+HgHqE5v3rJSJ0EOlKT9aw9fp2r8k9rKE2jRrlVQ/ELartv0Jk
UwbqmfnnvjkLPlmcZQqG8Sf6UrV1uK5tNzQIlsu5Scf7SiKIEhs9dNKHP2Ns2Me1
YXBDiYb0WCkQv4SmGBaFM1HwnQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:24 2026 by rpki-client