Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          oRgaibPOcQbVKazclFt66mHuoWwuO+NSlbCuxPxeCVY=
Subject key identifier:   AD:B8:13:74:0E:65:C0:45:21:E5:E0:E1:1D:C8:39:1B:CC:5B:4D:3B
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0BA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0B5A
Signing time:             Sun 20 Sep 2026 19:11:40 +0000
Manifest this update:     Sun 20 Sep 2026 19:11:40 +0000
Manifest next update:     Sun 27 Sep 2026 19:11:40 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: A+HlsYxpAis7qLD8u2L6IuyxpmYNhqEYMrRg+qcbs48=)
                          2: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=)
                          3: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=)
                          4: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=)
                          5: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=)
                          6: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=)
                          7: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=)
                          8: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=)
                          9: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=)
                          10: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=)
                          11: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=)
                          12: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY=)
                          13: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2980 (0xba4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Sep 20 19:11:40 2026 GMT
            Not After : Sep 27 19:11:40 2026 GMT
        Subject: CN=6ab02fec-348a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:85:e0:46:dd:97:87:91:61:8c:50:04:c7:
                    6f:d0:e7:a7:38:4c:99:56:41:f5:25:f7:52:1f:27:
                    d7:78:88:46:ea:e3:05:cc:85:ac:75:c8:bc:31:7b:
                    3b:9a:98:db:8f:36:46:9c:cb:f2:c7:ec:b4:9c:b6:
                    e4:51:7e:e3:f9:b4:b3:95:2a:29:76:29:d4:0a:d3:
                    50:fe:79:0e:bd:a3:f6:44:62:cc:93:0a:03:94:ba:
                    04:32:51:3c:4e:d9:af:42:19:56:cf:8d:26:ed:31:
                    a2:bd:b0:02:00:14:ab:ce:a6:cd:ac:ea:59:6b:f1:
                    0f:89:65:21:0f:ea:45:f6:c9:1c:ba:40:73:f2:e6:
                    a6:37:f1:39:ae:77:37:0e:ef:42:14:ff:96:cc:33:
                    72:a1:73:1d:d8:f6:07:25:f9:6a:8e:2f:c3:73:18:
                    2b:d4:92:ea:8e:9c:08:1e:bd:64:9d:00:2f:a0:53:
                    80:cd:95:60:e2:eb:de:65:49:82:c6:5b:61:fe:b5:
                    05:c2:93:23:71:0c:d4:1e:f3:ff:38:55:ea:8c:8e:
                    e4:4b:8e:97:e5:49:9b:cd:6c:1c:32:d1:36:be:e1:
                    27:f9:29:69:a4:fc:64:a0:b7:35:ac:a5:2f:d8:36:
                    6d:fd:e5:f4:8a:ef:a3:c1:79:61:94:a3:ba:ec:cf:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B8:13:74:0E:65:C0:45:21:E5:E0:E1:1D:C8:39:1B:CC:5B:4D:3B
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:31:4b:c3:f1:13:c0:7e:19:7e:59:b6:8e:a8:c0:3d:61:
         4e:fd:06:f9:0d:e3:f6:38:14:97:85:06:e2:8e:a0:0c:c0:c3:
         83:04:7a:15:36:a4:96:99:cc:5f:63:bd:c1:7b:98:13:4e:b3:
         87:f0:db:60:32:b3:09:3f:e1:de:4a:c1:89:87:ff:d5:ca:0c:
         cc:33:ac:98:17:37:8a:47:5b:ea:b1:14:3f:82:fd:11:5e:4d:
         9b:a1:0a:cf:18:69:ab:2f:97:63:85:9b:f4:3d:aa:43:48:91:
         2d:87:b1:58:39:83:d4:e2:36:69:76:a5:ce:89:3a:21:bf:45:
         1e:b9:a5:ab:bf:3e:7f:82:9c:4b:5e:87:6e:3e:bd:78:50:d9:
         35:73:e4:79:fa:04:2b:9e:69:24:fe:c1:d6:c4:9e:26:be:1e:
         5e:25:98:48:c3:b5:23:d9:b9:8c:35:f5:41:01:ce:45:c0:e1:
         8e:c9:85:fb:d6:72:29:bd:c8:4c:a2:de:08:00:7a:42:11:d4:
         2a:1c:7c:60:2b:49:4f:29:a4:44:fa:3e:e2:77:cd:df:71:72:
         ed:68:90:e0:93:16:89:49:3c:46:26:4c:5c:e9:c0:5a:7d:0f:
         1a:70:74:3e:72:59:41:84:ed:5e:f5:8e:8a:86:70:93:cd:4b:
         c1:18:dd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:54:37 2026 by rpki-client