Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
File:                     mFjOS0vHLnbmaMR9RImMCQiWq-s.mft (raw, json)
Hash identifier:          UVtcic045kQmFmIvvtnzyKEYmKEwJu6kAkKO6skREiI=
Subject key identifier:   5B:44:B4:96:98:A1:81:EC:6D:93:4D:49:73:97:01:D3:E1:73:9A:5C
Authority key identifier: 98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB
Certificate issuer:       /CN=A91A4B1A/serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
Certificate serial:       02DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
Manifest number:          02D0
Signing time:             Sun 20 Sep 2026 15:59:39 +0000
Manifest this update:     Sun 20 Sep 2026 15:59:38 +0000
Manifest next update:     Sun 27 Sep 2026 15:59:38 +0000
Files and hashes:         1: mFjOS0vHLnbmaMR9RImMCQiWq-s.crl (hash: FHSi9AHFU5ze4A8Uh4ZoIy6emxxe/dYnWxVCUmXdikc=)
                          2: 4BC4F6A614DF11EEAB46A86DC4F9AE02.roa (hash: mZyDlGWu2FdiAPaQ9OzWowqY9YzGB4LKNt3/3VxufRs=)
                          3: 4C3A869614DF11EEAB46A86DC4F9AE02.roa (hash: cDlDJUGZn7R/T+BNtx5SoPKWRYaEnJYFspu2vfBh0pY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 732 (0x2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B1A, serialNumber=9858CE4B4BC72E76E668C47D44898C090896ABEB
        Validity
            Not Before: Sep 20 15:59:38 2026 GMT
            Not After : Sep 27 15:59:38 2026 GMT
        Subject: CN=6ab002eb-28be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:48:13:91:1f:8e:50:40:63:70:1b:7b:f4:
                    a7:21:3a:ed:5b:f2:6b:ff:6c:88:08:1f:32:52:ca:
                    ae:dd:27:47:bf:89:ab:de:6d:f7:ee:6b:7a:96:f3:
                    ba:a9:5c:14:23:78:ea:7d:57:e7:c6:50:84:85:21:
                    57:e6:50:1a:bc:b7:08:21:ce:83:05:0b:aa:b0:94:
                    70:62:8e:95:e4:5d:9e:18:7b:ba:65:80:97:5b:73:
                    fb:68:56:ed:15:29:37:3a:87:f0:40:70:d0:3b:61:
                    72:b0:15:f7:14:61:ea:61:ea:1b:3f:d1:f5:a9:45:
                    2b:68:8d:ac:3f:ae:5c:a7:15:08:96:56:91:ec:7e:
                    c2:2f:b1:71:46:74:05:fa:27:92:de:9b:c0:83:f4:
                    25:cd:a5:15:12:96:46:53:ff:67:f5:27:f3:0c:fe:
                    6c:c1:65:dc:36:da:0b:96:1f:37:6c:82:96:9f:7b:
                    fc:12:a8:af:c6:62:c1:3b:b5:a1:da:9d:13:28:2c:
                    1f:a4:60:c7:4c:ee:ce:b8:46:a5:06:ce:bf:8c:9e:
                    13:7e:81:46:55:76:2f:f8:00:c6:8e:c1:5c:87:91:
                    d8:37:95:e6:63:2b:62:19:26:a7:69:36:bd:45:56:
                    ca:11:8b:28:cc:9d:3c:e1:5c:ec:00:9b:c0:2e:99:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:44:B4:96:98:A1:81:EC:6D:93:4D:49:73:97:01:D3:E1:73:9A:5C
            X509v3 Authority Key Identifier:
                keyid:98:58:CE:4B:4B:C7:2E:76:E6:68:C4:7D:44:89:8C:09:08:96:AB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mFjOS0vHLnbmaMR9RImMCQiWq-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/B45F3FC4819A11ED8D61BA2BC4F9AE02/mFjOS0vHLnbmaMR9RImMCQiWq-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:fd:34:b2:12:e8:a7:c1:f5:e8:64:68:c7:cb:62:e6:c7:
         5e:4c:55:ae:c5:40:45:5a:93:9f:36:c0:6e:c8:1e:a8:b3:2e:
         df:16:36:07:4c:a2:61:fe:84:4c:c9:54:9e:b5:e1:3f:95:97:
         18:47:24:52:8e:25:67:52:80:e7:60:65:74:b7:91:d0:1c:69:
         81:61:24:39:e4:ed:ed:57:f8:ff:29:58:a5:74:4f:c0:a0:13:
         e7:45:64:d1:a6:95:e6:b8:bf:4c:1c:20:bd:2f:bd:a4:ce:58:
         81:e4:0e:d3:81:6d:35:9b:a3:e2:33:0d:95:e2:de:e1:dc:27:
         2d:7b:bb:e6:49:99:17:51:99:17:75:a9:94:19:af:a7:b7:3a:
         67:f6:f4:12:6d:f4:c5:ff:ce:36:f3:51:a2:5d:6f:92:10:6e:
         25:5c:cc:e3:d2:77:56:0a:72:e3:bc:ad:05:7b:e4:4f:35:5f:
         1e:a8:66:82:a1:42:af:fe:d1:af:67:42:97:89:47:e8:72:cc:
         6a:68:1f:93:7c:aa:53:8c:2f:c6:b2:60:94:34:50:a2:69:bf:
         7c:e1:10:73:5d:a3:7a:01:aa:c1:10:b6:c6:40:51:97:ee:5f:
         fb:89:ad:47:6e:47:10:36:b5:77:1b:55:94:11:80:de:47:dc:
         48:a3:7e:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMUExMTAvBgNVBAUTKDk4NThDRTRCNEJDNzJFNzZFNjY4QzQ3RDQ0ODk4QzA5
MDg5NkFCRUIwHhcNMjYwOTIwMTU1OTM4WhcNMjYwOTI3MTU1OTM4WjAYMRYwFAYD
VQQDEw02YWIwMDJlYi0yOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryRIE5EfjlBAY3Abe/SnITrtW/Jr/2yICB8yUsqu3SdHv4mr3m337mt6lvO6
qVwUI3jqfVfnxlCEhSFX5lAavLcIIc6DBQuqsJRwYo6V5F2eGHu6ZYCXW3P7aFbt
FSk3OofwQHDQO2FysBX3FGHqYeobP9H1qUUraI2sP65cpxUIllaR7H7CL7FxRnQF
+ieS3pvAg/QlzaUVEpZGU/9n9SfzDP5swWXcNtoLlh83bIKWn3v8EqivxmLBO7Wh
2p0TKCwfpGDHTO7OuEalBs6/jJ4TfoFGVXYv+ADGjsFch5HYN5XmYytiGSanaTa9
RVbKEYsozJ084VzsAJvALpkHnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtEtJaY
oYHsbZNNSXOXAdPhc5pcMB8GA1UdIwQYMBaAFJhYzktLxy525mjEfUSJjAkIlqvr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS9CNDVGM0ZDNDgx
OUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExuYm1hTVI5UkltTUNRaVdx
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21Gak9TMHZITG5ibWFNUjlSSW1NQ1FpV3Etcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEIxQS9CNDVGM0ZDNDgxOUExMUVEOEQ2MUJBMkJDNEY5QUUwMi9tRmpPUzB2SExu
Ym1hTVI5UkltTUNRaVdxLXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX4D9NLIS6KfB9ehkaMfLYubHXkxVrsVARVqTnzbAbsgeqLMu3xY2B0yiYf6E
TMlUnrXhP5WXGEckUo4lZ1KA52BldLeR0BxpgWEkOeTt7Vf4/ylYpXRPwKAT50Vk
0aaV5ri/TBwgvS+9pM5YgeQO04FtNZuj4jMNleLe4dwnLXu75kmZF1GZF3WplBmv
p7c6Z/b0Em30xf/ONvNRol1vkhBuJVzM49J3Vgpy47ytBXvkTzVfHqhmgqFCr/7R
r2dCl4lH6HLMamgfk3yqU4wvxrJglDRQomm/fOEQc12jegGqwRC2xkBRl+5f+4mt
R25HEDa1dxtVlBGA3kfcSKN+wQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:09:29 2026 by rpki-client