Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
File:                     juUibgV6ZUQkIur-2cYuKQ3zJIo.mft (raw, json)
Hash identifier:          isFab+ec1xWmR88RfgnZwyoqNANoZDyrlRrDwcEKmmc=
Subject key identifier:   0D:12:B2:A5:8B:86:CF:A6:BF:1F:D1:A5:65:A8:A5:91:AA:39:9B:95
Authority key identifier: 8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A
Certificate issuer:       /CN=A91672E3/serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
Certificate serial:       02A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
Manifest number:          028A
Signing time:             Sun 27 Sep 2026 02:13:44 +0000
Manifest this update:     Sun 27 Sep 2026 02:13:43 +0000
Manifest next update:     Sun 04 Oct 2026 02:13:43 +0000
Files and hashes:         1: juUibgV6ZUQkIur-2cYuKQ3zJIo.crl (hash: 5FZGQ5fZ0OSM3dm72L6ou3BF8syD2W6CbWwSjQjghXY=)
                          2: 4798C37060C511F1938892A38247A888.roa (hash: NqECYph2+dX2EILPMOrULQRj9cohk7FoO97wfRrmrZA=)
                          3: 45399802215111F0B94CA13FC4F9AE02.roa (hash: 4GMNfCTUHQ1rV2C9XWos7Hdj0ySssxUEkLEdwlySSs0=)
                          4: FD678F40214E11F095B05918C4F9AE02.roa (hash: Vm3x4XjI71ZGXzqh/k1zDRwiOP341qe7iTCno94apNg=)
                          5: D84BF6B860C411F18C6019A18247A888.roa (hash: QIlUH1QNdLALbUbhElUoD+izhiqfEVazksdCsrI3VgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl
                          rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672E3, serialNumber=8EE5226E057A65442422EAFED9C62E290DF3248A
        Validity
            Not Before: Sep 27 02:13:43 2026 GMT
            Not After : Oct  4 02:13:43 2026 GMT
        Subject: CN=6ab87bd8-dbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:fa:9a:08:8b:8d:27:34:69:a5:dc:b5:f4:
                    60:c9:48:d9:be:4f:7a:d3:cc:cc:f1:ab:80:ca:f7:
                    c1:04:78:1d:b0:fe:a0:4e:4b:cf:59:fc:d1:6a:31:
                    cd:b4:47:37:de:a6:79:2b:86:0d:37:c5:cc:29:44:
                    1a:56:0e:0a:7b:ca:40:8e:20:ce:88:71:70:58:8d:
                    2e:ca:94:ef:7e:98:18:17:6c:80:76:f7:f4:9f:e2:
                    86:05:7a:32:70:aa:fc:b0:c3:1b:3e:77:d5:fc:03:
                    a8:49:cc:8d:7c:ef:39:d4:27:8b:2a:24:14:bf:85:
                    6a:f8:7a:f6:85:c5:30:56:ca:8d:a5:fb:94:bc:64:
                    71:d0:b1:5e:fd:6c:cd:f4:4e:ca:13:c3:a5:63:fc:
                    a6:8a:02:88:8b:bb:c6:ac:69:4a:5c:1b:06:78:4d:
                    aa:36:04:f8:42:9b:45:9d:e0:1f:d9:6c:eb:8f:75:
                    f9:e1:97:0f:91:e9:44:3e:b5:0f:42:15:8d:e2:3c:
                    3c:eb:a5:68:63:f0:15:14:db:7a:77:44:c5:bc:64:
                    5f:5d:2e:37:87:3b:db:14:81:83:6b:e2:76:37:0e:
                    52:b0:53:be:1e:e3:88:65:80:0b:37:0a:00:b6:f5:
                    f1:8d:73:98:e6:72:6a:7d:12:0b:25:7c:97:82:c1:
                    76:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:12:B2:A5:8B:86:CF:A6:BF:1F:D1:A5:65:A8:A5:91:AA:39:9B:95
            X509v3 Authority Key Identifier:
                keyid:8E:E5:22:6E:05:7A:65:44:24:22:EA:FE:D9:C6:2E:29:0D:F3:24:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/juUibgV6ZUQkIur-2cYuKQ3zJIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672E3/C6B5013CEAE911ED875A2D51C4F9AE02/juUibgV6ZUQkIur-2cYuKQ3zJIo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:11:57:92:30:bb:44:5b:2d:d8:bd:7d:2e:03:99:b1:a4:62:
         b5:aa:95:49:93:39:f6:25:42:fa:c6:c1:dd:e2:bb:88:66:19:
         f2:e7:cb:32:8a:9f:be:fa:f5:4c:b0:f4:c7:c7:c8:58:76:25:
         24:86:2a:70:81:e6:22:11:ce:1f:82:f1:45:52:51:2a:94:89:
         ca:26:1e:f8:4b:ef:44:79:c1:5b:8f:26:78:9b:92:4a:a6:8f:
         94:ea:f7:62:5b:27:a9:7f:35:21:fa:bd:44:a9:a7:63:f6:00:
         71:37:1f:da:a9:01:0b:89:77:82:38:4a:7e:b6:ce:fd:36:65:
         cd:ce:53:ff:57:41:47:bb:c1:08:e7:db:8c:8d:80:e7:63:bd:
         d9:b7:f4:46:9f:7b:6c:bb:b8:f3:5f:94:f6:30:26:ed:62:38:
         9c:a4:30:12:47:a0:19:45:23:48:21:77:33:25:a7:39:76:d3:
         db:95:35:82:35:f7:8a:e5:ca:96:d9:8a:6b:57:8b:68:5e:1c:
         5b:a3:5b:70:4f:91:2a:bd:04:66:69:f3:a3:16:79:f2:e9:bc:
         07:ed:94:df:8e:f6:c2:5d:62:ee:3c:4e:01:1d:06:71:58:26:
         c1:bb:34:17:4b:c6:8c:2a:59:9c:0e:e2:26:80:1b:07:63:8e:
         42:fc:8a:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyRTMxMTAvBgNVBAUTKDhFRTUyMjZFMDU3QTY1NDQyNDIyRUFGRUQ5QzYyRTI5
MERGMzI0OEEwHhcNMjYwOTI3MDIxMzQzWhcNMjYxMDA0MDIxMzQzWjAYMRYwFAYD
VQQDEw02YWI4N2JkOC1kYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6f6mgiLjSc0aaXctfRgyUjZvk9608zM8auAyvfBBHgdsP6gTkvPWfzRajHN
tEc33qZ5K4YNN8XMKUQaVg4Ke8pAjiDOiHFwWI0uypTvfpgYF2yAdvf0n+KGBXoy
cKr8sMMbPnfV/AOoScyNfO851CeLKiQUv4Vq+Hr2hcUwVsqNpfuUvGRx0LFe/WzN
9E7KE8OlY/ymigKIi7vGrGlKXBsGeE2qNgT4QptFneAf2Wzrj3X54ZcPkelEPrUP
QhWN4jw866VoY/AVFNt6d0TFvGRfXS43hzvbFIGDa+J2Nw5SsFO+HuOIZYALNwoA
tvXxjXOY5nJqfRILJXyXgsF25wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0SsqWL
hs+mvx/RpWWopZGqOZuVMB8GA1UdIwQYMBaAFI7lIm4FemVEJCLq/tnGLikN8ySK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJFMy9DNkI1MDEzQ0VB
RTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpVUWtJdXItMmNZdUtRM3pK
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2p1VWliZ1Y2WlVRa0l1ci0yY1l1S1EzekpJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzJFMy9DNkI1MDEzQ0VBRTkxMUVEODc1QTJENTFDNEY5QUUwMi9qdVVpYmdWNlpV
UWtJdXItMmNZdUtRM3pKSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqRFXkjC7RFst2L19LgOZsaRitaqVSZM59iVC+sbB3eK7iGYZ8ufLMoqfvvr1
TLD0x8fIWHYlJIYqcIHmIhHOH4LxRVJRKpSJyiYe+EvvRHnBW48meJuSSqaPlOr3
YlsnqX81Ifq9RKmnY/YAcTcf2qkBC4l3gjhKfrbO/TZlzc5T/1dBR7vBCOfbjI2A
52O92bf0Rp97bLu481+U9jAm7WI4nKQwEkegGUUjSCF3MyWnOXbT25U1gjX3iuXK
ltmKa1eLaF4cW6NbcE+RKr0EZmnzoxZ58um8B+2U3472wl1i7jxOAR0GcVgmwbs0
F0vGjCpZnA7iJoAbB2OOQvyKJw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:20:42 2026 by rpki-client