Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
File:                     l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json)
Hash identifier:          +mCIZUjiZUOFF2I8IRpUosjN+wABJaicDC7uV+/prJs=
Subject key identifier:   78:FB:C7:F2:5C:54:63:E7:1D:D8:8D:13:A1:01:26:2D:2E:32:D1:05
Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5
Certificate issuer:       /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
Manifest number:          0108
Signing time:             Mon 21 Sep 2026 06:07:14 +0000
Manifest this update:     Mon 21 Sep 2026 06:07:13 +0000
Manifest next update:     Mon 28 Sep 2026 06:07:13 +0000
Files and hashes:         1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: otrfu2Su1ZS57at4LE51cmbuLKgzCaWvSwS2NkjZ7nU=)
                          2: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: wKpTIdTIZRF8pzS9lUnHOrHkh5HchxQFgkek0jpSD6Q=)
                          3: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: F55zjQnFvkTNeRw59Rc/nAQUDsOUxPNiEUce26KcKVc=)
                          4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: 5ZDy+q95r5zdw+R7DnGV36oaHIDbY23gtfzUTt//mwc=)
                          5: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: ouIXTA7nbMIsAmF3ndS+L28s40QPvKUpIo7ArtiHIu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl
                          rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5
        Validity
            Not Before: Sep 21 06:07:13 2026 GMT
            Not After : Sep 28 06:07:13 2026 GMT
        Subject: CN=6ab0c992-2b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:3a:fb:c6:aa:6f:5d:96:43:75:bd:6d:a6:
                    a6:90:16:93:64:df:ca:cb:91:0a:15:e3:c1:8b:19:
                    d6:97:50:9b:47:7a:03:be:40:de:8e:0d:7d:8e:89:
                    99:dd:83:a9:ea:49:3f:e9:cf:17:f9:b8:8a:52:7f:
                    6d:a2:a2:f6:d6:e8:9a:dd:92:32:b8:ec:a7:cf:5e:
                    e1:cc:2a:4c:ed:71:97:f4:2f:f4:a2:07:0d:a2:fb:
                    47:f5:19:d2:9f:14:73:53:4c:83:81:89:fb:ff:db:
                    d3:c5:06:3e:3f:fb:0b:47:81:f1:43:11:c6:88:61:
                    c8:e9:4f:22:0b:39:b3:99:ca:4f:f8:be:f0:aa:e7:
                    cb:62:50:de:3c:70:4a:75:3d:3d:64:db:2a:49:35:
                    e6:18:6d:de:82:ce:56:95:b7:1a:25:64:34:08:21:
                    e7:f7:f2:a6:f2:a2:f2:4d:91:f1:89:39:97:8d:0c:
                    9f:24:fd:f9:26:c1:d3:b2:f0:0e:d1:1e:78:4e:ff:
                    87:97:3c:f0:de:cd:5e:6e:8d:33:38:05:c6:c8:ea:
                    0b:f7:5a:99:a5:0a:89:5f:b9:4a:b3:32:11:60:a2:
                    be:14:0e:db:a1:30:92:8c:0f:ab:e8:56:44:bb:93:
                    38:2a:c6:14:da:cb:48:3d:48:f2:e6:df:29:4b:9f:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FB:C7:F2:5C:54:63:E7:1D:D8:8D:13:A1:01:26:2D:2E:32:D1:05
            X509v3 Authority Key Identifier:
                keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:4e:71:3d:a4:7a:01:bc:24:b8:9f:4e:04:56:84:07:32:
         2a:e8:51:1f:76:87:2f:36:6d:7b:82:d8:f8:3b:aa:ed:8b:ca:
         78:27:bd:66:8a:9e:0e:11:6b:86:eb:50:4d:2c:00:51:88:bf:
         cf:76:83:3c:33:c8:89:35:6d:9f:cc:2a:73:4e:0d:87:c9:34:
         eb:76:b6:22:5a:d5:26:9e:28:f9:17:5e:b1:b1:59:d0:a7:2e:
         4f:79:33:0d:4d:73:33:d8:76:c6:2f:b9:df:fd:96:c6:85:81:
         47:0d:50:54:f6:c4:dd:f8:83:5f:00:43:03:07:dd:5a:9f:c6:
         e8:da:89:04:97:88:5a:62:69:9f:64:e1:9b:c2:1d:16:cf:52:
         3a:29:4b:23:f8:e5:0b:d2:32:0f:34:6a:67:8b:c1:b0:7d:7c:
         32:6a:6a:d4:ea:d9:ce:54:d0:d0:fe:db:a2:2d:cf:39:79:41:
         ac:35:a8:25:2c:14:5d:e3:80:e8:d3:bc:54:af:9e:8b:28:74:
         08:15:2a:15:b6:e7:e1:c4:36:7a:b5:24:60:e4:aa:02:7c:23:
         41:65:b6:33:e5:6f:e4:b0:65:ea:bd:b8:6e:a2:e6:9d:90:ec:
         76:45:b4:c7:b2:41:e8:73:55:77:52:84:da:3a:f8:05:2d:93:
         eb:e1:4d:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdBNzUxMTAvBgNVBAUTKDk3QUNEREUyOTExQTA5RjM5MzVGMTg2MERCMDU3RDRD
RkY0NkIyQzUwHhcNMjYwOTIxMDYwNzEzWhcNMjYwOTI4MDYwNzEzWjAYMRYwFAYD
VQQDEw02YWIwYzk5Mi0yYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0mI6+8aqb12WQ3W9baamkBaTZN/Ky5EKFePBixnWl1CbR3oDvkDejg19jomZ
3YOp6kk/6c8X+biKUn9toqL21uia3ZIyuOynz17hzCpM7XGX9C/0ogcNovtH9RnS
nxRzU0yDgYn7/9vTxQY+P/sLR4HxQxHGiGHI6U8iCzmzmcpP+L7wqufLYlDePHBK
dT09ZNsqSTXmGG3egs5WlbcaJWQ0CCHn9/Km8qLyTZHxiTmXjQyfJP35JsHTsvAO
0R54Tv+Hlzzw3s1ebo0zOAXGyOoL91qZpQqJX7lKszIRYKK+FA7boTCSjA+r6FZE
u5M4KsYU2stIPUjy5t8pS59arQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHj7x/Jc
VGPnHdiNE6EBJi0uMtEFMB8GA1UdIwQYMBaAFJes3eKRGgnzk18YYNsFfUz/RrLF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E3NS9FNkY0QjZEQTI3
NTExMUYwQUNGMEFGMjRDNEY5QUUwMi9sNnpkNHBFYUNmT1RYeGhnMndWOVRQOUdz
c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3NzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0E3NS9FNkY0QjZEQTI3NTExMUYwQUNGMEFGMjRDNEY5QUUwMi9sNnpkNHBFYUNm
T1RYeGhnMndWOVRQOUdzc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQG1OcT2kegG8JLifTgRWhAcyKuhRH3aHLzZte4LY+Duq7YvKeCe9ZoqeDhFr
hutQTSwAUYi/z3aDPDPIiTVtn8wqc04Nh8k063a2IlrVJp4o+RdesbFZ0KcuT3kz
DU1zM9h2xi+53/2WxoWBRw1QVPbE3fiDXwBDAwfdWp/G6NqJBJeIWmJpn2Thm8Id
Fs9SOilLI/jlC9IyDzRqZ4vBsH18Mmpq1OrZzlTQ0P7boi3POXlBrDWoJSwUXeOA
6NO8VK+eiyh0CBUqFbbn4cQ2erUkYOSqAnwjQWW2M+Vv5LBl6r24bqLmnZDsdkW0
x7JB6HNVd1KE2jr4BS2T6+FNYA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:33:22 2026 by rpki-client