Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File:                     AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier:          lqvin5Dh64f+xzSyvMx5GNa74yyPCtHFygdLhpAIXJs=
Subject key identifier:   E5:20:6E:18:B7:3F:BF:ED:9C:AF:BE:46:9B:3B:7D:3E:FC:C9:B2:94
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer:       /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial:       0851
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number:          082C
Signing time:             Fri 16 Oct 2026 21:24:24 +0000
Manifest this update:     Fri 16 Oct 2026 21:24:24 +0000
Manifest next update:     Fri 23 Oct 2026 21:24:24 +0000
Files and hashes:         1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: cjgyIM1ItOuOOei+OvumfPVLIVhanwSYJhIus/bVx4w=)
                          2: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: ZuhRcUdP5wWWKIGm+OsKBc5cm+WWrvev341G/9NcVBk=)
                          3: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: T/CKAwe8N408GvjfoSl3NP/W24L3kVYXhNzRByIXSbo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
                          rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 21:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
        Validity
            Not Before: Oct 16 21:24:24 2026 GMT
            Not After : Oct 23 21:24:24 2026 GMT
        Subject: CN=6ad29608-8689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e9:71:d5:33:18:fa:77:1f:86:ca:3c:4c:27:
                    86:67:f1:a9:08:35:cd:bf:57:8a:03:0f:e6:52:bb:
                    5b:bd:31:10:2b:44:df:c6:f9:87:4f:61:ce:4d:e9:
                    7b:12:24:b4:11:c1:6e:a0:b9:26:63:f0:7b:88:6a:
                    5f:66:09:9b:d3:72:08:49:91:9a:88:81:a7:35:f1:
                    9f:fc:0a:0e:ad:47:fa:cb:de:11:ae:0f:ef:92:1d:
                    32:d9:5f:3b:c9:55:de:5b:ed:58:84:65:43:eb:0f:
                    8d:d7:8b:73:16:e9:74:df:3a:d9:fe:a1:86:03:01:
                    6c:ea:db:8b:eb:e6:3e:a0:1e:15:e9:b1:89:31:e1:
                    10:a0:f7:e9:49:0e:42:60:2d:19:8f:48:61:f4:15:
                    5e:5b:c8:38:b6:8f:89:d2:34:a4:90:4d:2c:5f:d2:
                    14:a9:93:a4:1e:5c:e1:29:21:7d:44:41:61:51:45:
                    c0:f6:79:8f:69:86:30:8d:69:21:88:f5:ca:30:6f:
                    bb:99:b3:39:d3:91:8a:ed:23:a6:2b:d8:e9:8b:e9:
                    9f:e3:21:6c:77:ec:2f:a3:24:03:f7:1b:48:8a:9c:
                    4d:2f:d1:05:25:c5:66:79:88:f9:16:60:1a:70:90:
                    2f:09:e7:d2:38:be:34:80:1a:46:62:f2:4b:4c:42:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:20:6E:18:B7:3F:BF:ED:9C:AF:BE:46:9B:3B:7D:3E:FC:C9:B2:94
            X509v3 Authority Key Identifier:
                keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:52:8d:93:14:fd:44:58:43:e8:26:40:c1:ec:7b:84:d4:41:
         fe:de:71:d4:52:a1:5b:75:8c:4b:5d:61:9f:51:30:73:33:71:
         a4:0a:ee:57:34:38:27:09:a9:05:25:c5:cc:e7:bb:c6:d4:e8:
         93:8e:40:a4:0c:eb:24:36:25:82:e2:49:3b:cb:cf:dd:53:d0:
         8c:c8:15:e1:f3:aa:24:a2:44:29:8a:ab:02:58:68:93:e2:f3:
         5b:f2:92:99:de:09:0c:8c:cf:de:dc:68:86:22:f9:6d:0c:15:
         8a:32:51:e3:ab:e9:0b:62:d7:01:b7:bd:91:7b:4a:55:19:dc:
         e9:db:de:96:f1:71:f2:14:1b:4b:52:56:b2:78:4e:e6:1a:52:
         c1:07:01:dc:2b:5f:3b:4f:ee:2d:b6:7f:bd:e5:be:53:7c:0a:
         8e:07:6b:69:d9:75:2e:a6:11:29:42:76:7a:60:bf:72:af:3e:
         18:9c:11:3a:7e:72:c8:ab:6f:76:4a:e5:49:de:0d:11:20:2a:
         a6:56:d3:64:58:0d:2e:f2:b8:b3:9c:00:1d:b1:e4:2b:cd:cc:
         1d:4a:10:49:ec:74:20:06:fa:fa:30:2a:f2:60:96:af:a0:ae:
         58:33:e9:1d:df:e6:43:00:63:bf:4d:f8:1f:ac:ce:59:85:64:
         c6:c1:5c:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ExQTYxMTAvBgNVBAUTKDAwMDI0MTQ5MEUzRjIwOThGNzlENUM5MzAzN0VCRkYy
Qjk1NkNGRDcwHhcNMjYxMDE2MjEyNDI0WhcNMjYxMDIzMjEyNDI0WjAYMRYwFAYD
VQQDEw02YWQyOTYwOC04Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8elx1TMY+ncfhso8TCeGZ/GpCDXNv1eKAw/mUrtbvTEQK0TfxvmHT2HOTel7
EiS0EcFuoLkmY/B7iGpfZgmb03IISZGaiIGnNfGf/AoOrUf6y94Rrg/vkh0y2V87
yVXeW+1YhGVD6w+N14tzFul03zrZ/qGGAwFs6tuL6+Y+oB4V6bGJMeEQoPfpSQ5C
YC0Zj0hh9BVeW8g4to+J0jSkkE0sX9IUqZOkHlzhKSF9REFhUUXA9nmPaYYwjWkh
iPXKMG+7mbM505GK7SOmK9jpi+mf4yFsd+wvoyQD9xtIipxNL9EFJcVmeYj5FmAa
cJAvCefSOL40gBpGYvJLTEJAcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUgbhi3
P7/tnK++Rps7fT78ybKUMB8GA1UdIwQYMBaAFAACQUkOPyCY951ckwN+v/K5Vs/X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTFBNi8zOEQ5M0UxRTNE
MzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lKajNuVnlUQTM2XzhybFd6
OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FBSkJTUTRfSUpqM25WeVRBMzZfOHJsV3o5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTFBNi8zOEQ5M0UxRTNEMzAxMUVCQjNCMkQ2NkVDNEY5QUUwMi9BQUpCU1E0X0lK
ajNuVnlUQTM2XzhybFd6OWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhVKNkxT9RFhD6CZAwex7hNRB/t5x1FKhW3WMS11hn1EwczNxpAruVzQ4Jwmp
BSXFzOe7xtTok45ApAzrJDYlguJJO8vP3VPQjMgV4fOqJKJEKYqrAlhok+LzW/KS
md4JDIzP3txohiL5bQwVijJR46vpC2LXAbe9kXtKVRnc6dvelvFx8hQbS1JWsnhO
5hpSwQcB3CtfO0/uLbZ/veW+U3wKjgdradl1LqYRKUJ2emC/cq8+GJwROn5yyKtv
dkrlSd4NESAqplbTZFgNLvK4s5wAHbHkK83MHUoQSex0IAb6+jAq8mCWr6CuWDPp
Hd/mQwBjv034H6zOWYVkxsFchQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 18:45:43 2026 by rpki-client