Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
File:                     EbEncUrFQIyE8NdlOMlegnXa2Fo.mft (raw, json)
Hash identifier:          kJrTI78+IK2QmuE/dIQ/9Mt+gv5w84xYKVtRkj8Wm2A=
Subject key identifier:   FF:B3:18:83:3F:DB:6B:D2:07:94:F7:AB:14:CD:A1:E1:A5:D7:A5:25
Authority key identifier: 11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A
Certificate issuer:       /CN=A91B4E1D/serialNumber=11B127714AC5408C84F0D76538C95E8275DAD85A
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
Manifest number:          05
Signing time:             Mon 21 Sep 2026 09:15:46 +0000
Manifest this update:     Mon 21 Sep 2026 09:15:46 +0000
Manifest next update:     Mon 28 Sep 2026 09:15:46 +0000
Files and hashes:         1: EbEncUrFQIyE8NdlOMlegnXa2Fo.crl (hash: apyU9cNQkVGH9N6UtZivfO+5Gyv3mfv3YGRx2cOJn2M=)
                          2: BC271E52B31911F183412A046611F970.roa (hash: vbiJolfMPvVJDBUNL2V3IBTDoWz3FM/eSssSUTrnDrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E1D, serialNumber=11B127714AC5408C84F0D76538C95E8275DAD85A
        Validity
            Not Before: Sep 21 09:15:46 2026 GMT
            Not After : Sep 28 09:15:46 2026 GMT
        Subject: CN=6ab0f5c2-80b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:05:23:d7:a1:08:0d:63:45:5c:4e:43:5b:
                    51:47:60:2d:6b:8a:c9:0c:12:53:42:a3:b5:50:bd:
                    43:81:48:4b:37:80:58:30:bf:db:84:4b:39:04:2d:
                    d1:6a:de:16:9d:3e:11:d8:f0:1d:46:1e:93:5b:e6:
                    0e:57:c8:2c:30:9c:d7:76:f0:f9:3c:75:3a:00:16:
                    33:59:35:45:2b:cd:e9:54:11:d1:04:10:a1:dc:94:
                    b8:f8:1e:dd:8c:1a:8d:24:bc:aa:98:1f:31:62:75:
                    a9:d6:8b:a3:f1:c1:6b:bc:8a:8d:c5:39:dc:b1:54:
                    9f:76:d5:c6:6e:14:9e:66:93:f7:22:03:fa:65:c5:
                    a0:e2:00:09:2a:70:a1:8f:03:42:ab:d0:49:2d:65:
                    74:7c:33:98:33:bb:2e:79:a3:c9:47:75:97:49:e2:
                    63:7d:69:63:c5:98:c7:c8:e2:ea:af:56:88:5b:9b:
                    99:6c:78:d6:48:2c:67:74:07:bb:9e:91:e1:1c:6c:
                    b9:84:6a:f8:b6:f7:1b:08:e0:d1:ee:e9:34:ef:0f:
                    3a:6f:a1:ec:f7:7e:a8:4a:ad:d4:64:12:67:a0:6b:
                    18:dd:14:4f:d0:0c:89:17:f5:25:9c:ec:71:fd:f2:
                    e8:9b:8f:68:83:e5:c2:ed:a3:33:64:b7:b9:35:d9:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B3:18:83:3F:DB:6B:D2:07:94:F7:AB:14:CD:A1:E1:A5:D7:A5:25
            X509v3 Authority Key Identifier:
                keyid:11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:be:1e:58:46:d2:9d:ff:b4:ea:2a:4b:1a:e6:e9:2e:d0:cd:
         2e:4e:f9:ed:29:12:ef:fc:bf:de:d6:e6:36:d7:16:35:64:cf:
         69:51:3c:b6:84:51:c7:2b:a1:c1:fc:da:c0:79:26:18:1f:8f:
         d5:da:38:0e:13:de:89:9a:c8:f1:49:41:ae:e5:5f:b2:25:9d:
         3d:37:96:fa:8b:81:19:9e:8e:61:34:93:65:fd:0d:d2:6e:01:
         3a:13:c1:2c:ec:1d:c7:84:d7:17:34:c2:b6:e3:11:e5:1e:55:
         4e:86:7f:13:f8:cb:fe:55:70:0f:e6:c2:75:e0:52:49:2e:13:
         e1:0a:ee:ec:50:4c:53:ce:d7:de:24:70:1d:e7:76:b5:f7:09:
         30:30:14:86:4e:ff:c9:4d:66:88:fb:11:d7:2b:fa:1f:e8:97:
         fc:9f:d1:0b:db:8e:8b:9b:35:59:82:bb:d2:c0:03:27:10:68:
         a7:69:6b:5b:78:51:ea:95:40:bc:e1:fc:7f:44:03:89:64:42:
         85:e4:8c:c2:50:df:16:76:5c:a5:f9:73:db:38:d5:64:95:a6:
         c8:41:7f:86:45:28:27:87:3d:9b:d9:f4:af:23:1e:6a:14:3f:
         25:f5:53:6b:e2:2c:c3:b7:11:c6:d4:70:ea:fd:a7:6b:9d:13:
         35:c2:f5:b3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NEUxRDExMC8GA1UEBRMoMTFCMTI3NzE0QUM1NDA4Qzg0RjBENzY1MzhDOTVFODI3
NURBRDg1QTAeFw0yNjA5MjEwOTE1NDZaFw0yNjA5MjgwOTE1NDZaMBgxFjAUBgNV
BAMTDTZhYjBmNWMyLTgwYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfEAUj16EIDWNFXE5DW1FHYC1riskMElNCo7VQvUOBSEs3gFgwv9uESzkELdFq
3hadPhHY8B1GHpNb5g5XyCwwnNd28Pk8dToAFjNZNUUrzelUEdEEEKHclLj4Ht2M
Go0kvKqYHzFidanWi6PxwWu8io3FOdyxVJ921cZuFJ5mk/ciA/plxaDiAAkqcKGP
A0Kr0EktZXR8M5gzuy55o8lHdZdJ4mN9aWPFmMfI4uqvVohbm5lseNZILGd0B7ue
keEcbLmEavi29xsI4NHu6TTvDzpvoez3fqhKrdRkEmegaxjdFE/QDIkX9SWc7HH9
8uibj2iD5cLtozNkt7k12WUdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/7MYgz/b
a9IHlPerFM2h4aXXpSUwHwYDVR0jBBgwFoAUEbEncUrFQIyE8NdlOMlegnXa2Fow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTFELzczQjkxRkNDQjIx
RTExRjE4N0E2RjZFRjU4MTFGOTcwL0ViRW5jVXJGUUl5RThOZGxPTWxlZ25YYTJG
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRWJFbmNVckZRSXlFOE5kbE9NbGVnblhhMkZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0
RTFELzczQjkxRkNDQjIxRTExRjE4N0E2RjZFRjU4MTFGOTcwL0ViRW5jVXJGUUl5
RThOZGxPTWxlZ25YYTJGby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB3vh5YRtKd/7TqKksa5uku0M0uTvntKRLv/L/e1uY21xY1ZM9pUTy2hFHHK6HB
/NrAeSYYH4/V2jgOE96JmsjxSUGu5V+yJZ09N5b6i4EZno5hNJNl/Q3SbgE6E8Es
7B3HhNcXNMK24xHlHlVOhn8T+Mv+VXAP5sJ14FJJLhPhCu7sUExTztfeJHAd53a1
9wkwMBSGTv/JTWaI+xHXK/of6Jf8n9EL246LmzVZgrvSwAMnEGinaWtbeFHqlUC8
4fx/RAOJZEKF5IzCUN8Wdlyl+XPbONVklabIQX+GRSgnhz2b2fSvIx5qFD8l9VNr
4izDtxHG1HDq/adrnRM1wvWz
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:05:43 2026 by rpki-client