Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
File:                     bCaeUzC71Mculn7D40rmph7kR_Y.mft (raw, json)
Hash identifier:          7tfxQYe9ux1roT6uTmr0KVNM0l6wwx6/vHZ89VNC0nQ=
Subject key identifier:   6F:A1:1B:66:F6:AB:8D:4A:93:B5:CE:BB:B1:EA:35:7B:0B:C2:61:59
Authority key identifier: 6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6
Certificate issuer:       /CN=A91FAB2C/serialNumber=6C269E5330BBD4C72E967EC3E34AE6A61EE447F6
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
Manifest number:          15
Signing time:             Mon 21 Sep 2026 09:01:56 +0000
Manifest this update:     Mon 21 Sep 2026 09:01:55 +0000
Manifest next update:     Mon 28 Sep 2026 09:01:55 +0000
Files and hashes:         1: bCaeUzC71Mculn7D40rmph7kR_Y.crl (hash: eLP29W2jPO5itTVCkEWYDjIstbIBDd8cwG2vhK4XDJg=)
                          2: j3bbIV2LwQIIAV2cBaTJoUMwJQ0.asa (hash: UDvm2B9kpdtbUUsMkxX9LmulUfS/+9q42P8eoBdZzoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAB2C, serialNumber=6C269E5330BBD4C72E967EC3E34AE6A61EE447F6
        Validity
            Not Before: Sep 21 09:01:55 2026 GMT
            Not After : Sep 28 09:01:55 2026 GMT
        Subject: CN=6ab0f284-056b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:3a:87:29:8b:05:cf:30:67:a8:33:ac:fc:
                    e9:cb:eb:6f:10:1d:b7:a2:7e:0f:ab:ff:b5:26:85:
                    b2:c7:c5:72:fa:98:cb:ab:d1:79:92:42:11:28:97:
                    8d:c0:cb:4e:68:38:2d:bc:61:f7:05:c3:74:0c:27:
                    72:b0:ef:f3:8a:9c:19:fb:76:43:a3:13:e3:cb:60:
                    a0:4f:9e:6e:c5:bb:bf:20:77:6a:9a:c1:7e:74:ae:
                    76:01:8c:33:25:be:0f:ec:f7:71:f9:98:61:98:33:
                    9e:d1:5e:39:4c:ae:b3:8e:5c:cf:aa:24:48:9f:7b:
                    c6:0a:62:f1:0f:fd:5f:ed:07:34:e4:1d:6f:cf:bd:
                    94:36:03:3a:07:cb:fb:68:db:23:72:f2:88:21:56:
                    68:c7:56:4b:b9:2b:6a:0f:30:78:16:cc:94:de:fb:
                    a0:39:e2:0e:7f:66:e4:b9:73:84:21:25:6e:fb:68:
                    e1:f2:74:f4:de:c4:43:2a:b5:72:87:75:f0:0b:40:
                    9f:db:c4:3d:9d:51:fe:a4:bd:52:f2:9a:45:48:d5:
                    20:14:94:80:15:14:ed:e2:d3:6c:49:00:2b:f4:1b:
                    8a:e4:e7:9e:5a:0a:63:fe:92:96:ea:2a:4a:89:6c:
                    72:c1:79:61:c1:ca:8e:19:a7:e6:df:92:d4:d1:1b:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A1:1B:66:F6:AB:8D:4A:93:B5:CE:BB:B1:EA:35:7B:0B:C2:61:59
            X509v3 Authority Key Identifier:
                keyid:6C:26:9E:53:30:BB:D4:C7:2E:96:7E:C3:E3:4A:E6:A6:1E:E4:47:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCaeUzC71Mculn7D40rmph7kR_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB2C/399BF5FA9AA211F1A860336D3E11F970/bCaeUzC71Mculn7D40rmph7kR_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:21:4c:19:27:ab:04:7e:dc:1e:b4:92:b2:4d:b2:d9:c6:16:
         ef:4a:32:ef:3f:45:e1:d7:7f:f0:05:8c:08:a8:f9:5c:cd:e8:
         64:0f:8d:a5:7b:c9:62:46:e4:8e:ab:dc:62:fc:7e:ba:36:b0:
         0f:ed:da:9d:47:19:fe:77:b4:0f:c7:31:a3:4c:85:53:10:43:
         2c:34:2c:1a:09:2e:f8:c1:8e:63:b9:40:b7:10:94:d1:61:b6:
         79:7f:87:1f:81:fc:64:c3:92:dc:b8:d6:e2:bc:85:b7:74:a6:
         ce:82:41:86:09:1b:3d:95:c0:89:64:9a:99:32:20:03:25:d0:
         3c:23:20:e4:88:b1:31:a4:a4:fd:34:7c:55:82:d6:6f:49:d1:
         ad:ff:e4:25:fc:a9:dd:a8:f5:03:a1:c1:3a:36:1a:92:18:88:
         ac:47:f6:33:04:5c:9e:c0:6b:13:8a:87:0f:8a:53:68:47:d4:
         df:7c:8d:35:ed:a6:dd:39:fa:ba:99:9b:f2:a0:75:49:9d:fa:
         d6:b5:b2:25:fa:cd:d2:17:11:3a:66:96:14:a3:46:be:2c:d3:
         f7:c2:1e:9a:d4:18:87:52:96:4c:c6:06:d5:8f:58:4b:21:d2:
         cc:b6:a3:39:6a:ba:bc:3f:94:4d:dc:68:b3:eb:f2:a3:22:71:
         42:55:b2:49
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QUIyQzExMC8GA1UEBRMoNkMyNjlFNTMzMEJCRDRDNzJFOTY3RUMzRTM0QUU2QTYx
RUU0NDdGNjAeFw0yNjA5MjEwOTAxNTVaFw0yNjA5MjgwOTAxNTVaMBgxFjAUBgNV
BAMTDTZhYjBmMjg0LTA1NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxJTqHKYsFzzBnqDOs/OnL628QHbeifg+r/7UmhbLHxXL6mMur0XmSQhEol43A
y05oOC28YfcFw3QMJ3Kw7/OKnBn7dkOjE+PLYKBPnm7Fu78gd2qawX50rnYBjDMl
vg/s93H5mGGYM57RXjlMrrOOXM+qJEife8YKYvEP/V/tBzTkHW/PvZQ2AzoHy/to
2yNy8oghVmjHVku5K2oPMHgWzJTe+6A54g5/ZuS5c4QhJW77aOHydPTexEMqtXKH
dfALQJ/bxD2dUf6kvVLymkVI1SAUlIAVFO3i02xJACv0G4rk555aCmP+kpbqKkqJ
bHLBeWHByo4Zp+bfktTRG0mrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUb6EbZvar
jUqTtc67seo1ewvCYVkwHwYDVR0jBBgwFoAUbCaeUzC71Mculn7D40rmph7kR/Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBQjJDLzM5OUJGNUZBOUFB
MjExRjFBODYwMzM2RDNFMTFGOTcwL2JDYWVVekM3MU1jdWxuN0Q0MHJtcGg3a1Jf
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYkNhZVV6QzcxTWN1bG43RDQwcm1waDdrUl9ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZB
QjJDLzM5OUJGNUZBOUFBMjExRjFBODYwMzM2RDNFMTFGOTcwL2JDYWVVekM3MU1j
dWxuN0Q0MHJtcGg3a1JfWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCWIUwZJ6sEftwetJKyTbLZxhbvSjLvP0Xh13/wBYwIqPlczehkD42le8liRuSO
q9xi/H66NrAP7dqdRxn+d7QPxzGjTIVTEEMsNCwaCS74wY5juUC3EJTRYbZ5f4cf
gfxkw5LcuNbivIW3dKbOgkGGCRs9lcCJZJqZMiADJdA8IyDkiLExpKT9NHxVgtZv
SdGt/+Ql/KndqPUDocE6NhqSGIisR/YzBFyewGsTiocPilNoR9TffI017abdOfq6
mZvyoHVJnfrWtbIl+s3SFxE6ZpYUo0a+LNP3wh6a1BiHUpZMxgbVj1hLIdLMtqM5
arq8P5RN3Giz6/KjInFCVbJJ
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:09:50 2026 by rpki-client