Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
File:                     iWZCPuKkFWMfevMU5NiEAHqEaLY.mft (raw, json)
Hash identifier:          TfqNuHO2iOhwEszxYUk/c0tMQAe0DK9l9Nz2qY/+Mig=
Subject key identifier:   BC:35:97:8B:55:76:28:17:D4:04:47:8B:EF:BD:F3:DF:D7:CA:93:D8
Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
Certificate issuer:       /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Certificate serial:       0133
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
Manifest number:          012F
Signing time:             Wed 23 Sep 2026 05:27:55 +0000
Manifest this update:     Wed 23 Sep 2026 05:27:54 +0000
Manifest next update:     Wed 30 Sep 2026 05:27:54 +0000
Files and hashes:         1: iWZCPuKkFWMfevMU5NiEAHqEaLY.crl (hash: Hx4FDznHy7/8s0Y/NJVq9+rKcuiABnqJtQQkipiMR68=)
                          2: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (hash: yxcEwj+JBBXiVTX+aFQc5ddxq/vEi232S7B1rwDfWO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
                          rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
        Validity
            Not Before: Sep 23 05:27:54 2026 GMT
            Not After : Sep 30 05:27:54 2026 GMT
        Subject: CN=6ab3635b-9c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:fb:fd:5b:e1:ee:d0:94:a9:be:e6:03:2d:
                    b9:72:b1:fa:a5:89:75:e0:4e:31:34:2f:7b:6e:12:
                    76:98:08:f8:d9:ab:7d:f6:f3:d3:49:43:1f:65:51:
                    2e:99:03:ca:43:a7:c1:1f:ab:d2:6d:79:0d:6a:e8:
                    7d:05:7b:ae:20:bb:00:da:0f:70:22:3d:66:cd:6d:
                    11:c7:48:ed:ca:68:95:a5:98:de:6c:56:c3:bb:70:
                    e1:86:0e:41:42:02:cd:b1:38:17:5c:4e:50:39:cc:
                    d6:50:d5:a2:5d:27:3c:67:65:a6:63:4e:cb:8e:d4:
                    b6:23:8e:bf:69:72:96:f6:d5:20:cb:34:fd:c2:d0:
                    9c:f4:2f:bc:ad:ba:a4:79:68:7c:ee:87:b8:f5:93:
                    e4:49:75:2a:d5:77:9a:f1:73:56:d4:d9:a8:23:18:
                    32:81:9b:d3:2f:83:fc:e5:0a:46:e5:ec:86:51:1e:
                    eb:20:29:76:34:16:62:25:4b:51:b6:f9:d2:98:0c:
                    82:64:4e:f8:9a:4f:55:4f:b1:8c:40:c4:9c:04:84:
                    ce:ed:b7:3e:c2:b2:94:8c:07:39:02:80:26:ef:52:
                    4f:a4:5c:9a:c7:ee:6f:f5:ad:2c:0f:48:37:93:e9:
                    9c:6b:fd:ee:8e:0a:63:fa:ec:7e:9d:46:99:10:97:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:35:97:8B:55:76:28:17:D4:04:47:8B:EF:BD:F3:DF:D7:CA:93:D8
            X509v3 Authority Key Identifier:
                keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:7b:9a:2b:38:fa:18:24:33:ab:e6:63:d1:f4:af:31:fa:50:
         18:bf:65:ad:c8:5c:85:66:14:ab:e3:4d:99:38:05:22:b2:84:
         41:94:9a:d8:32:5e:2f:fb:bc:0c:5e:3b:81:f7:14:80:54:a0:
         44:e4:25:6b:38:0a:8d:e8:43:2f:2e:c3:fb:4f:b2:a0:83:39:
         af:a0:60:53:a6:49:e0:6f:e8:cf:d4:20:ff:fa:d5:c4:d3:07:
         cb:df:be:c0:58:a4:dc:e1:97:f7:55:c7:12:2e:a5:c4:76:23:
         00:64:0d:9c:71:bc:74:c2:b0:68:52:2b:70:f5:da:09:f3:c6:
         ca:e6:17:48:4d:e9:c4:4d:1d:6a:2f:4b:0c:67:79:b3:cd:81:
         14:9f:8d:9e:29:5a:a3:65:86:db:b1:f0:e5:9c:c2:03:45:4e:
         f5:45:bf:81:4e:d9:4f:03:f7:3e:95:6e:22:8e:49:a7:b8:99:
         11:49:c6:4e:e4:bb:73:c3:c0:d7:06:4d:7e:d2:b2:3b:87:49:
         ae:e4:2d:38:ce:d9:bc:09:3b:c2:cd:c4:86:c4:a8:90:fa:15:
         86:37:3c:2d:af:3f:ee:27:0f:26:06:92:53:33:a1:bd:95:45:
         36:b3:31:47:81:de:16:85:ed:09:d5:38:c9:01:c5:2c:11:b8:
         03:9d:2f:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkxQ0IxMTAvBgNVBAUTKDg5NjY0MjNFRTJBNDE1NjMxRjdBRjMxNEU0RDg4NDAw
N0E4NDY4QjYwHhcNMjYwOTIzMDUyNzU0WhcNMjYwOTMwMDUyNzU0WjAYMRYwFAYD
VQQDEw02YWIzNjM1Yi05YzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlHH7/Vvh7tCUqb7mAy25crH6pYl14E4xNC97bhJ2mAj42at99vPTSUMfZVEu
mQPKQ6fBH6vSbXkNauh9BXuuILsA2g9wIj1mzW0Rx0jtymiVpZjebFbDu3Dhhg5B
QgLNsTgXXE5QOczWUNWiXSc8Z2WmY07LjtS2I46/aXKW9tUgyzT9wtCc9C+8rbqk
eWh87oe49ZPkSXUq1Xea8XNW1NmoIxgygZvTL4P85QpG5eyGUR7rICl2NBZiJUtR
tvnSmAyCZE74mk9VT7GMQMScBITO7bc+wrKUjAc5AoAm71JPpFyax+5v9a0sD0g3
k+mca/3ujgpj+ux+nUaZEJdlQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLw1l4tV
digX1ARHi++989/XypPYMB8GA1UdIwQYMBaAFIlmQj7ipBVjH3rzFOTYhAB6hGi2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi82NTBFNjAwQUVB
NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9pV1pDUHVLa0ZXTWZldk1VNU5pRUFIcUVh
TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lXWkNQdUtrRldNZmV2TVU1TmlFQUhxRWFMWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTFDQi82NTBFNjAwQUVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9pV1pDUHVLa0ZX
TWZldk1VNU5pRUFIcUVhTFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATXuaKzj6GCQzq+Zj0fSvMfpQGL9lrchchWYUq+NNmTgFIrKEQZSa2DJeL/u8
DF47gfcUgFSgROQlazgKjehDLy7D+0+yoIM5r6BgU6ZJ4G/oz9Qg//rVxNMHy9++
wFik3OGX91XHEi6lxHYjAGQNnHG8dMKwaFIrcPXaCfPGyuYXSE3pxE0dai9LDGd5
s82BFJ+Nnilao2WG27Hw5ZzCA0VO9UW/gU7ZTwP3PpVuIo5Jp7iZEUnGTuS7c8PA
1wZNftKyO4dJruQtOM7ZvAk7ws3EhsSokPoVhjc8La8/7icPJgaSUzOhvZVFNrMx
R4HeFoXtCdU4yQHFLBG4A50vYg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:38:42 2026 by rpki-client