Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
File:                     rQWVkiI-gWrFPEM7llhG950wUjQ.mft (raw, json)
Hash identifier:          zSsr105uWXQKCcPZ2OnafqyA9t6vix3KrjKn+1KqDIM=
Subject key identifier:   42:4C:37:6E:E8:99:41:92:2D:B0:8E:46:B6:FA:52:7A:D2:25:A6:18
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1C97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
Manifest number:          1C79
Signing time:             Fri 18 Sep 2026 16:10:15 +0000
Manifest this update:     Fri 18 Sep 2026 16:10:15 +0000
Manifest next update:     Fri 25 Sep 2026 16:10:15 +0000
Files and hashes:         1: rQWVkiI-gWrFPEM7llhG950wUjQ.crl (hash: 2zwk0VyNIVF0Ow9uDq33nUYpq3tdWkXzbMsL8M//TxY=)
                          2: C85D0F7E477711EBB4044E31C4F9AE02.roa (hash: fQDDLLVpB7tlhKbTchUr+f8pc87eehWOolUlYcKucho=)
                          3: EB6B3FFA86EF11F19E006003A7EE528E.roa (hash: DAeAFcyF/YNOKPuEFYrJ40g8SH0qo3OoC9C6ggkgmKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7319 (0x1c97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Sep 18 16:10:15 2026 GMT
            Not After : Sep 25 16:10:15 2026 GMT
        Subject: CN=6aad6267-4f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:95:37:f0:55:30:15:ed:a8:90:07:e3:0b:
                    c7:97:5e:ca:bf:b9:f5:10:94:99:7a:d6:08:58:42:
                    17:21:2a:8f:51:b2:5b:90:e5:72:8c:41:f1:8e:d2:
                    c8:d5:a9:3e:d1:64:3d:61:0e:35:46:61:8b:62:11:
                    2e:e9:1d:e9:c6:b3:2f:c0:21:cb:c5:db:0d:36:77:
                    a4:61:cf:d9:1a:a6:1f:00:0f:eb:94:85:6d:16:ec:
                    23:fd:45:8a:d7:4b:da:2c:2c:04:54:2c:b8:95:66:
                    0b:3b:ea:db:72:7b:5b:95:78:81:e5:17:83:12:9b:
                    d1:ac:f0:5f:b3:ea:e3:2f:92:c7:12:67:32:a5:03:
                    67:cc:74:29:5c:98:74:9e:d6:69:14:a8:75:3d:73:
                    8b:66:f9:7e:7d:02:23:e5:44:2f:a0:59:dd:d9:d2:
                    dd:06:45:a8:a5:cc:34:75:8f:3c:4d:f8:92:7b:5c:
                    6a:5c:80:78:6c:04:22:67:1a:bd:96:40:06:ff:47:
                    12:37:40:c2:61:58:a3:33:d2:00:3d:57:3f:08:ab:
                    27:84:37:9b:0d:e9:0c:97:df:ec:3d:d7:c8:b9:1d:
                    bb:4e:f6:ee:84:12:cd:44:66:9a:5a:a6:9d:2b:f6:
                    7e:fd:53:5c:6b:e9:da:bf:34:3c:ed:4f:5b:3a:c1:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:37:6E:E8:99:41:92:2D:B0:8E:46:B6:FA:52:7A:D2:25:A6:18
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:ca:1a:2e:8b:89:b8:7f:b2:bd:71:f6:c9:1a:ac:55:e5:8b:
         d5:0a:b2:a1:1d:19:47:2d:21:33:0a:65:0d:f8:be:ec:72:88:
         5c:92:0f:5c:8f:c9:38:e2:4c:34:da:bf:e0:31:90:b6:53:3e:
         b0:c1:73:69:32:22:b4:8e:0c:db:44:d5:49:60:20:16:44:93:
         a6:98:01:ed:0c:cb:1f:38:f8:44:f6:24:3a:e2:11:b0:66:52:
         5d:a0:54:8e:81:d2:fc:b0:47:17:1c:2b:dc:44:90:98:78:36:
         1e:27:c5:68:8f:8b:64:e1:9f:9d:46:21:48:24:c9:9f:9a:e4:
         72:e4:65:10:6a:5c:1b:a6:23:f9:1a:dc:a0:14:d5:a3:1c:3c:
         6d:73:23:3d:66:de:5f:d9:fc:cf:12:51:20:8c:ce:16:9a:57:
         41:18:a5:42:28:89:00:5f:26:67:81:e5:a7:22:2c:fd:aa:23:
         59:c5:ff:ea:09:8a:c1:74:05:c1:f5:4f:0c:41:ee:95:fb:44:
         77:94:49:f4:5f:40:cf:a3:ce:23:32:bc:6c:2a:a6:91:b0:e7:
         a6:cf:c0:74:27:df:d1:c7:01:1b:64:e2:52:af:fa:72:53:f4:
         08:cc:17:d7:ba:b9:af:24:d9:0f:18:10:9f:d1:8f:fa:6c:11:
         6d:00:f2:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFFREMxMTAvBgNVBAUTKEFEMDU5NTkyMjIzRTgxNkFDNTNDNDMzQjk2NTg0NkY3
OUQzMDUyMzQwHhcNMjYwOTE4MTYxMDE1WhcNMjYwOTI1MTYxMDE1WjAYMRYwFAYD
VQQDEw02YWFkNjI2Ny00Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3y2VN/BVMBXtqJAH4wvHl17Kv7n1EJSZetYIWEIXISqPUbJbkOVyjEHxjtLI
1ak+0WQ9YQ41RmGLYhEu6R3pxrMvwCHLxdsNNnekYc/ZGqYfAA/rlIVtFuwj/UWK
10vaLCwEVCy4lWYLO+rbcntblXiB5ReDEpvRrPBfs+rjL5LHEmcypQNnzHQpXJh0
ntZpFKh1PXOLZvl+fQIj5UQvoFnd2dLdBkWopcw0dY88TfiSe1xqXIB4bAQiZxq9
lkAG/0cSN0DCYVijM9IAPVc/CKsnhDebDekMl9/sPdfIuR27TvbuhBLNRGaaWqad
K/Z+/VNca+navzQ87U9bOsHJLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJMN27o
mUGSLbCORrb6UnrSJaYYMB8GA1UdIwQYMBaAFK0FlZIiPoFqxTxDO5ZYRvedMFI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUVEQy8yREMxQkFGMjA5
ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdXckZQRU03bGxoRzk1MHdV
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JRV1ZraUktZ1dyRlBFTTdsbGhHOTUwd1VqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUVEQy8yREMxQkFGMjA5ODUxMUU3QjFGRkMyM0ZDNEY5QUUwMi9yUVdWa2lJLWdX
ckZQRU03bGxoRzk1MHdValEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc8oaLouJuH+yvXH2yRqsVeWL1QqyoR0ZRy0hMwplDfi+7HKIXJIPXI/JOOJM
NNq/4DGQtlM+sMFzaTIitI4M20TVSWAgFkSTppgB7QzLHzj4RPYkOuIRsGZSXaBU
joHS/LBHFxwr3ESQmHg2HifFaI+LZOGfnUYhSCTJn5rkcuRlEGpcG6Yj+RrcoBTV
oxw8bXMjPWbeX9n8zxJRIIzOFppXQRilQiiJAF8mZ4HlpyIs/aojWcX/6gmKwXQF
wfVPDEHulftEd5RJ9F9Az6POIzK8bCqmkbDnps/AdCff0ccBG2TiUq/6clP0CMwX
17q5ryTZDxgQn9GP+mwRbQDywQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:05:00 2026 by rpki-client