Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
File:                     MVUT5UqwyZuLyoQELjg1i2DbGyw.mft (raw, json)
Hash identifier:          h+wq8ZETdvsOisfmNHDsAWWL1BKorysyTA4Q9pF45Ew=
Subject key identifier:   9E:F9:B8:7D:CE:9D:7B:92:3E:16:E7:26:D6:36:FB:5F:EC:A9:E8:58
Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C
Certificate issuer:       /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
Certificate serial:       090A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
Manifest number:          0820
Signing time:             Tue 22 Sep 2026 21:33:42 +0000
Manifest this update:     Tue 22 Sep 2026 21:33:41 +0000
Manifest next update:     Tue 29 Sep 2026 21:33:41 +0000
Files and hashes:         1: MVUT5UqwyZuLyoQELjg1i2DbGyw.crl (hash: vY+eMOBMATaPfeMhynPyorGuTWN5N1OSEHsiPMibLgc=)
                          2: D0DC58F432C611ECA639A749C4F9AE02.roa (hash: 0dniEYEAw36mNTvVlYQS2kfs2pAMAFopmzzp+UPaR4U=)
                          3: B6F12A04A72E11EDA708F167C4F9AE02.roa (hash: av/zIL1P+iLu+u5jBn1T6eq8lbDkz0TtiaZvy0+7VY4=)
                          4: EDD4DB0CEDB211EFB0D2622AC4F9AE02.roa (hash: 94RDx70LG5IyD7ln6nyWmw3CJGIuGdny8kRccYnNuHk=)
                          5: DAAFB93452D811ECB51CE973C4F9AE02.roa (hash: p7G3QRM/2uhtQj3wtDMDeZf0kzeIU6oXaiulKt6wFug=)
                          6: 8D7F07D6555A11F09950400BC4F9AE02.roa (hash: F/IGtdzaHH30LYy1md+1qazZRbRKLWR7CL9cPjoh9yY=)
                          7: CEEBD0EC32C611ECA639A749C4F9AE02.roa (hash: sVwSFmALnyhxgDlohue16n5bgQSwMcWm5mXNF6xU8nc=)
                          8: D69ADE2E950811F1B4E5C4874D11F970.roa (hash: GaawGgIHoBsVIGUfplw1aAxhJXVn5iSulMWuhoxhXK4=)
                          9: 20EC686CFB8211EEAAFD740AC4F9AE02.roa (hash: E+BR0+TimYOC5eHCgMJvkbeghM62K4+PNvqm5Xd/1Us=)
                          10: E0125116A69711ED9DFF0870C4F9AE02.roa (hash: tSdYLFZCk792fEMZCExwfRV5SYB5CkGoXiLRUQRZEtU=)
                          11: 4A32E74C26D411EEA00C7C38C4F9AE02.roa (hash: 0tWj75+Ouq6RIgLCUMshdvJPzR8AsPCm9Z0jxTfe3lE=)
                          12: 35A803641F1C11ECAD024E53C4F9AE02.roa (hash: XbIp4elLJp1qu0Ppo4cUH0HSgtw5D5sigsmfPksT1oI=)
                          13: 3C30815CABB611ED8370AB5DC4F9AE02.roa (hash: s9Tnookk9z0/qDfi/1wyU61gwP1H0Q+apw5B+6I+rvg=)
                          14: 8188D300A73111ED97576186C4F9AE02.roa (hash: BCVf5yrdcKZu1AR7g0yk03w2UiroKt/ZqMtyO7z6e4c=)
                          15: D4D6F51E950811F1B4E5C4874D11F970.roa (hash: UN6dOYOMS9a/QjrZta5jmzIf7QG52rO8ukmsWXL1KOo=)
                          16: B81F8808A72E11EDA708F167C4F9AE02.roa (hash: +vK9sN/wwEHgTPgsw6vo/nMVxNjCNVxPKRzOcPHnjxI=)
                          17: 350E08F41F1C11ECAD024E53C4F9AE02.roa (hash: f5WNiir/xDutuwQ+vK6ySA/zn3JB8xNKvX/jBhoITbc=)
                          18: 8205A466A73111ED97576186C4F9AE02.roa (hash: rtjDnkP1XJTCpkI2J/yJ+McKzjgNtJldb8Vx9S87ecc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C
        Validity
            Not Before: Sep 22 21:33:41 2026 GMT
            Not After : Sep 29 21:33:41 2026 GMT
        Subject: CN=6ab2f436-753f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:93:53:8b:dc:78:d2:33:52:b0:71:2d:89:
                    0b:b2:40:8e:6d:aa:6f:02:b3:c2:07:53:28:29:f7:
                    f8:32:fb:2b:ee:4c:5e:17:ac:92:12:5b:98:aa:45:
                    27:ee:92:d3:cc:cb:b3:d4:a2:bd:42:fa:ed:18:d0:
                    fa:43:e3:70:39:65:af:f9:cc:b8:43:9b:e0:af:95:
                    24:22:06:4e:48:61:ea:71:f7:e0:fa:4b:05:a2:99:
                    4a:4a:26:df:22:45:b3:65:f3:c8:a1:e6:02:18:f5:
                    b5:bd:bc:b2:62:71:7a:e8:a7:c8:78:7f:1c:59:7d:
                    c2:0c:2c:ce:a7:6a:4a:d8:a5:87:46:22:74:f8:a6:
                    75:40:a6:47:ec:e7:fc:00:64:2d:ca:72:25:cc:6e:
                    89:96:9c:56:e8:f0:52:91:88:85:73:06:01:0e:b1:
                    47:d4:af:9b:db:7d:47:ed:a1:24:21:04:dc:d0:e6:
                    46:20:ad:c6:39:6d:24:fe:09:71:d3:ce:5d:76:27:
                    52:a7:20:0b:09:b2:ea:3a:4f:03:e1:ab:cf:7c:02:
                    b0:77:e0:79:e4:4a:4a:74:d0:a8:af:a0:df:cd:22:
                    93:46:33:70:3a:83:e5:ed:c4:8b:c7:04:a9:5c:20:
                    1d:8a:7b:38:3b:35:58:e8:06:4e:1b:4d:51:77:91:
                    6f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F9:B8:7D:CE:9D:7B:92:3E:16:E7:26:D6:36:FB:5F:EC:A9:E8:58
            X509v3 Authority Key Identifier:
                keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f8:6a:6c:7e:f3:8f:b0:99:49:cc:90:d7:32:aa:eb:7c:ad:
         b8:b7:bd:af:bb:38:fe:29:ba:05:62:84:ae:5e:cf:50:6c:63:
         be:be:f8:83:1a:00:88:57:db:5c:9c:0f:97:ba:54:0d:11:7a:
         6f:96:25:1b:8b:3c:47:2d:d5:7d:97:f5:32:5c:a1:e6:35:58:
         26:b2:9e:27:d3:8a:44:f5:5d:70:0c:8e:2c:af:8c:5c:a1:21:
         90:c1:ee:01:a8:8e:27:b4:59:b5:27:ba:90:3f:42:38:36:3e:
         c4:83:6f:33:45:f7:98:20:b6:52:9a:b8:06:05:c4:dc:5c:0a:
         72:b2:fe:fc:d0:3a:fd:c1:cd:27:eb:2b:8f:16:29:aa:c7:3a:
         45:d0:7d:78:9d:31:ac:cc:e1:e2:a2:63:ae:b3:36:d4:6c:b3:
         30:bb:c5:c3:49:d3:28:10:8e:b5:53:9e:24:4d:5f:e6:86:e5:
         60:cb:4e:cf:d9:79:3c:af:c9:ca:3e:d7:95:f9:05:08:26:92:
         d0:d3:f9:76:47:85:ce:7a:89:f5:d9:41:77:6d:0d:44:ac:61:
         30:91:1a:59:4d:b7:50:28:76:53:19:bc:22:37:b5:49:01:00:
         7b:66:88:bd:89:a4:8d:87:a9:c2:70:5a:09:f3:8f:14:8e:93:
         36:91:54:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC
NjBEQjFCMkMwHhcNMjYwOTIyMjEzMzQxWhcNMjYwOTI5MjEzMzQxWjAYMRYwFAYD
VQQDEw02YWIyZjQzNi03NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkwGTU4vceNIzUrBxLYkLskCObapvArPCB1MoKff4Mvsr7kxeF6ySEluYqkUn
7pLTzMuz1KK9QvrtGND6Q+NwOWWv+cy4Q5vgr5UkIgZOSGHqcffg+ksFoplKSibf
IkWzZfPIoeYCGPW1vbyyYnF66KfIeH8cWX3CDCzOp2pK2KWHRiJ0+KZ1QKZH7Of8
AGQtynIlzG6JlpxW6PBSkYiFcwYBDrFH1K+b231H7aEkIQTc0OZGIK3GOW0k/glx
085ddidSpyALCbLqOk8D4avPfAKwd+B55EpKdNCor6DfzSKTRjNwOoPl7cSLxwSp
XCAdins4OzVY6AZOG01Rd5FvPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ75uH3O
nXuSPhbnJtY2+1/sqehYMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDZBQS84RjVCQjRGODg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3la
dUx5b1FFTGpnMWkyRGJHeXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcfhqbH7zj7CZScyQ1zKq63ytuLe9r7s4/im6BWKErl7PUGxjvr74gxoAiFfb
XJwPl7pUDRF6b5YlG4s8Ry3VfZf1Mlyh5jVYJrKeJ9OKRPVdcAyOLK+MXKEhkMHu
AaiOJ7RZtSe6kD9CODY+xINvM0X3mCC2Upq4BgXE3FwKcrL+/NA6/cHNJ+srjxYp
qsc6RdB9eJ0xrMzh4qJjrrM21GyzMLvFw0nTKBCOtVOeJE1f5oblYMtOz9l5PK/J
yj7XlfkFCCaS0NP5dkeFznqJ9dlBd20NRKxhMJEaWU23UCh2Uxm8Ije1SQEAe2aI
vYmkjYepwnBaCfOPFI6TNpFUvg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:44:33 2026 by rpki-client