Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File:                     aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier:          FEzkS8ArcXgRYxmJ+IGwnizUXkKp0Aif7rETnseFfUU=
Subject key identifier:   9F:A8:28:FF:E0:FA:5E:73:6E:15:5E:9A:C8:E5:D6:4D:48:E6:4F:9F
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer:       /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial:       013F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number:          0134
Signing time:             Sun 27 Sep 2026 06:06:07 +0000
Manifest this update:     Sun 27 Sep 2026 06:06:06 +0000
Manifest next update:     Sun 04 Oct 2026 06:06:06 +0000
Files and hashes:         1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: c8xYI/iXhqI26i47HXNNasY3ugW+eEzg2DtVUiLOX54=)
                          2: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: VJiboECQcz4EPJ3s89go0nGoquID30lt86NixvuBLSQ=)
                          3: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: uOYxYsUyV5d201wkHKNC5KliU1I0MfAZOgIjo4393UM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 06:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
        Validity
            Not Before: Sep 27 06:06:06 2026 GMT
            Not After : Oct  4 06:06:06 2026 GMT
        Subject: CN=6ab8b24f-c722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:c0:12:3f:75:e9:64:5d:95:07:32:fb:b8:
                    62:e2:dc:14:4b:cd:c4:24:ec:c8:c6:7d:00:f4:90:
                    1a:e5:4a:cb:c1:39:ea:56:67:f0:dd:ca:d8:ab:18:
                    97:9a:62:23:32:b0:f2:e1:58:e6:31:31:d3:b1:d7:
                    5e:91:e7:70:17:32:c8:5f:4e:bb:0f:38:73:d5:0d:
                    42:67:ea:a6:bb:9f:79:39:cc:41:c0:cb:6d:d0:0a:
                    a7:fc:78:8a:23:86:10:bb:f6:17:16:db:50:af:9f:
                    e8:98:fd:19:e3:b1:07:9d:45:1f:e8:51:b6:c1:12:
                    16:a0:d2:92:b1:4a:34:95:47:bb:8b:3c:c8:87:17:
                    78:66:93:09:2c:99:3a:ed:ff:37:60:9c:84:60:6c:
                    c6:ba:29:27:e3:1c:99:f3:d1:29:c5:43:41:53:33:
                    31:23:00:da:f7:f7:af:83:a4:ed:5c:db:55:2c:5c:
                    9e:c9:68:48:4c:d2:bc:c5:5b:74:67:e6:4c:0e:32:
                    7f:25:9d:dd:fd:eb:f6:b1:b1:b6:ae:fd:92:f0:06:
                    58:a9:9b:1b:f4:e6:d4:ab:06:46:98:8d:9c:e6:e0:
                    a8:e0:73:be:57:02:02:6a:03:22:a6:f9:81:42:a3:
                    c2:12:66:82:bc:11:06:ca:93:d8:8b:bc:c1:5c:9a:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A8:28:FF:E0:FA:5E:73:6E:15:5E:9A:C8:E5:D6:4D:48:E6:4F:9F
            X509v3 Authority Key Identifier:
                keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:82:d4:2d:31:1a:68:cd:84:1e:b5:d5:0c:64:de:c9:b5:
         d2:dd:11:f6:8a:f6:4a:a3:96:10:a7:e8:20:6b:43:62:16:b7:
         db:ca:63:d0:7d:15:be:e7:63:58:c4:24:7a:a5:7b:25:7c:50:
         04:a1:14:ea:cf:87:e0:cd:46:09:29:c4:bf:af:c7:0f:3c:8c:
         ac:44:24:c7:b4:2f:6d:f5:14:ad:38:9d:90:f4:a1:a6:98:9d:
         5d:d5:d8:de:4e:1e:c7:1d:9e:b3:1c:95:fa:32:17:ba:5a:68:
         29:30:fa:81:d2:5c:02:bd:a7:b7:67:b1:c5:90:83:14:b2:d8:
         bb:d0:0a:6f:cc:83:37:c6:50:a2:f7:b5:95:ae:07:45:26:40:
         7a:fe:f4:03:b5:d7:80:3d:52:81:61:95:f8:3b:5e:03:d0:e1:
         41:33:37:63:7f:30:ac:28:7d:d1:ad:b3:41:a1:ae:42:bf:31:
         91:9b:ec:dc:65:b2:8f:92:06:0b:99:0f:01:20:8d:1c:a5:b5:
         51:c8:91:0d:7d:05:cc:6d:5b:13:a6:82:5e:06:02:67:db:3b:
         87:8f:0d:e9:69:ec:15:3c:dc:3f:e5:5d:c8:6a:be:4c:fd:aa:
         a3:08:7e:9f:3a:48:1c:e7:42:b5:82:59:02:0a:c3:35:81:b1:
         de:2d:5f:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTBBMkUxMTAvBgNVBAUTKDZBM0VGNjcxODJEQkIwRjZDQ0YzQ0E0MTM3OEMwMTE5
ODA2QUU5QkQwHhcNMjYwOTI3MDYwNjA2WhcNMjYxMDA0MDYwNjA2WjAYMRYwFAYD
VQQDEw02YWI4YjI0Zi1jNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiH7AEj916WRdlQcy+7hi4twUS83EJOzIxn0A9JAa5UrLwTnqVmfw3crYqxiX
mmIjMrDy4VjmMTHTsddekedwFzLIX067Dzhz1Q1CZ+qmu595OcxBwMtt0Aqn/HiK
I4YQu/YXFttQr5/omP0Z47EHnUUf6FG2wRIWoNKSsUo0lUe7izzIhxd4ZpMJLJk6
7f83YJyEYGzGuikn4xyZ89EpxUNBUzMxIwDa9/evg6TtXNtVLFyeyWhITNK8xVt0
Z+ZMDjJ/JZ3d/ev2sbG2rv2S8AZYqZsb9ObUqwZGmI2c5uCo4HO+VwICagMipvmB
QqPCEmaCvBEGypPYi7zBXJpd8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ+oKP/g
+l5zbhVemsjl1k1I5k+fMB8GA1UdIwQYMBaAFGo+9nGC27D2zPPKQTeMARmAaum9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEEyRS9DODM2QzdCMkU5
MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQYk04OHBCTjR3QkdZQnE2
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FqNzJjWUxic1BiTTg4cEJONHdCR1lCcTZiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MEEyRS9DODM2QzdCMkU5MEIxMUVGODIxODU4MjRDNEY5QUUwMi9hajcyY1lMYnNQ
Yk04OHBCTjR3QkdZQnE2YjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATceC1C0xGmjNhB611Qxk3sm10t0R9or2SqOWEKfoIGtDYha328pj0H0Vvudj
WMQkeqV7JXxQBKEU6s+H4M1GCSnEv6/HDzyMrEQkx7QvbfUUrTidkPShppidXdXY
3k4exx2esxyV+jIXulpoKTD6gdJcAr2nt2exxZCDFLLYu9AKb8yDN8ZQove1la4H
RSZAev70A7XXgD1SgWGV+DteA9DhQTM3Y38wrCh90a2zQaGuQr8xkZvs3GWyj5IG
C5kPASCNHKW1UciRDX0FzG1bE6aCXgYCZ9s7h48N6WnsFTzcP+VdyGq+TP2qowh+
nzpIHOdCtYJZAgrDNYGx3i1fog==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:52:44 2026 by rpki-client