Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/mEdEkvAn3159bLvPI3d1E6xMwZg.mft
File:                     mEdEkvAn3159bLvPI3d1E6xMwZg.mft (raw, json)
Hash identifier:          ly90aJPGx7yFraQylkng5mo55BNKtgoiJi0xnPuU1nc=
Subject key identifier:   C8:47:66:63:8F:55:B3:D6:2D:C4:BF:18:CB:3D:5D:45:34:57:6A:FC
Authority key identifier: 98:47:44:92:F0:27:DF:5E:7D:6C:BB:CF:23:77:75:13:AC:4C:C1:98
Certificate issuer:       /CN=A91A26B4/serialNumber=98474492F027DF5E7D6CBBCF23777513AC4CC198
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mEdEkvAn3159bLvPI3d1E6xMwZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/mEdEkvAn3159bLvPI3d1E6xMwZg.mft
Manifest number:          42
Signing time:             Wed 23 Sep 2026 08:14:36 +0000
Manifest this update:     Wed 23 Sep 2026 08:14:35 +0000
Manifest next update:     Wed 30 Sep 2026 08:14:35 +0000
Files and hashes:         1: mEdEkvAn3159bLvPI3d1E6xMwZg.crl (hash: UKa0sp0tWaS09VRAooy7BSL5V9eK5cS9F5l5D1jTxO0=)
                          2: FA1D51067F2811F1807AD3CB8BA30FBC.roa (hash: bjLnEaV6ZdvCMTV1x0/WmPRHr9MHe7NbSXZlk9CwxhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/mEdEkvAn3159bLvPI3d1E6xMwZg.crl
                          rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/mEdEkvAn3159bLvPI3d1E6xMwZg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mEdEkvAn3159bLvPI3d1E6xMwZg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A26B4, serialNumber=98474492F027DF5E7D6CBBCF23777513AC4CC198
        Validity
            Not Before: Sep 23 08:14:35 2026 GMT
            Not After : Sep 30 08:14:35 2026 GMT
        Subject: CN=6ab38a6b-3680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:04:19:fd:41:ad:9d:da:e4:27:3e:e0:a4:ed:
                    77:b0:6e:ac:f1:93:24:cd:9c:9b:f5:78:2d:69:75:
                    8a:8d:85:88:a3:d3:fa:07:cf:7e:50:cd:ac:d9:5a:
                    2e:7d:4b:62:f9:80:ee:aa:dc:65:97:f0:9e:68:3b:
                    00:f9:5a:55:8c:8d:1e:17:bd:35:d0:24:8c:85:63:
                    73:38:4b:27:3a:ba:50:14:6f:2e:87:e2:07:5d:3d:
                    9a:2c:8e:a9:39:c8:e7:67:33:f3:66:28:76:32:b7:
                    2e:00:e4:00:63:e7:db:0d:a0:e9:bf:68:cb:05:3d:
                    83:65:e5:77:c4:74:6c:d2:c2:1c:49:a1:ab:dc:16:
                    fc:9d:aa:05:6f:da:34:6b:53:77:ea:0f:a3:0e:0b:
                    cb:cb:c5:73:80:c9:6f:38:ed:16:d4:63:2a:16:51:
                    78:ea:49:0b:67:dc:44:3a:2e:52:33:25:1a:8d:30:
                    38:50:96:5f:56:de:94:ad:ac:67:94:4b:04:7d:bb:
                    08:4c:0a:d2:08:19:33:36:d1:77:3b:57:c0:48:8b:
                    e3:66:2a:c4:68:02:15:05:e6:68:7f:7e:2a:1a:fd:
                    df:4f:2f:1a:a0:db:10:86:51:64:75:c5:fe:76:d4:
                    3c:cd:11:c7:87:8c:4d:6d:67:90:c7:55:74:9a:bd:
                    b6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:47:66:63:8F:55:B3:D6:2D:C4:BF:18:CB:3D:5D:45:34:57:6A:FC
            X509v3 Authority Key Identifier:
                keyid:98:47:44:92:F0:27:DF:5E:7D:6C:BB:CF:23:77:75:13:AC:4C:C1:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/mEdEkvAn3159bLvPI3d1E6xMwZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mEdEkvAn3159bLvPI3d1E6xMwZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A26B4/750F6CAE55A911F18E92BC479B833773/mEdEkvAn3159bLvPI3d1E6xMwZg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a1:bf:5b:b3:41:b9:a9:bc:a7:06:e3:0f:b2:f4:ab:75:50:
         d0:68:af:7b:ed:4d:0e:13:f1:0a:d8:14:ea:4d:75:e0:c9:f6:
         e0:da:48:5b:f5:5d:79:ef:dc:ad:14:45:60:3e:04:ce:a3:eb:
         1a:d0:2f:7b:71:96:bc:50:17:51:15:d4:e5:b9:be:b3:bf:44:
         a1:50:59:39:74:19:6c:af:a4:9f:6e:f4:26:8c:c9:20:f7:ff:
         be:74:c6:dc:98:05:71:a2:b1:1c:fc:3e:8e:ae:2e:bc:76:56:
         29:35:79:51:8e:26:f7:2e:f2:e3:a8:ad:f3:18:74:2b:dd:b6:
         dc:3b:f0:b4:05:2d:1b:19:cf:e2:03:b2:47:52:8a:72:4c:31:
         fd:c8:58:56:f0:c3:ff:1a:e3:1c:e7:d4:a5:66:26:2d:0c:33:
         71:19:b6:bd:a3:a3:ed:b9:23:6d:8a:54:b9:77:bd:1c:ea:46:
         f7:b1:68:a6:12:15:2d:b3:fb:76:8e:52:ab:68:6e:a2:d9:af:
         6f:6c:81:81:bb:19:63:2c:64:ad:e5:b6:76:de:93:7e:e2:6c:
         a0:dd:e0:85:13:0b:96:43:2b:55:b6:3e:df:03:bc:6e:b1:85:
         40:b5:35:b3:e0:86:c5:e5:fc:ff:98:c9:36:f7:5d:52:1e:35:
         a4:c3:c5:8a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MjZCNDExMC8GA1UEBRMoOTg0NzQ0OTJGMDI3REY1RTdENkNCQkNGMjM3Nzc1MTNB
QzRDQzE5ODAeFw0yNjA5MjMwODE0MzVaFw0yNjA5MzAwODE0MzVaMBgxFjAUBgNV
BAMTDTZhYjM4YTZiLTM2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDrBBn9Qa2d2uQnPuCk7XewbqzxkyTNnJv1eC1pdYqNhYij0/oHz35QzazZWi59
S2L5gO6q3GWX8J5oOwD5WlWMjR4XvTXQJIyFY3M4Syc6ulAUby6H4gddPZosjqk5
yOdnM/NmKHYyty4A5ABj59sNoOm/aMsFPYNl5XfEdGzSwhxJoavcFvydqgVv2jRr
U3fqD6MOC8vLxXOAyW847RbUYyoWUXjqSQtn3EQ6LlIzJRqNMDhQll9W3pStrGeU
SwR9uwhMCtIIGTM20Xc7V8BIi+NmKsRoAhUF5mh/fioa/d9PLxqg2xCGUWR1xf52
1DzNEceHjE1tZ5DHVXSavbbtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyEdmY49V
s9YtxL8Yyz1dRTRXavwwHwYDVR0jBBgwFoAUmEdEkvAn3159bLvPI3d1E6xMwZgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyNkI0Lzc1MEY2Q0FFNTVB
OTExRjE4RTkyQkM0NzlCODMzNzczL21FZEVrdkFuMzE1OWJMdlBJM2QxRTZ4TXda
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbUVkRWt2QW4zMTU5Ykx2UEkzZDFFNnhNd1pnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy
NkI0Lzc1MEY2Q0FFNTVBOTExRjE4RTkyQkM0NzlCODMzNzczL21FZEVrdkFuMzE1
OWJMdlBJM2QxRTZ4TXdaZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQARob9bs0G5qbynBuMPsvSrdVDQaK977U0OE/EK2BTqTXXgyfbg2khb9V1579yt
FEVgPgTOo+sa0C97cZa8UBdRFdTlub6zv0ShUFk5dBlsr6SfbvQmjMkg9/++dMbc
mAVxorEc/D6Ori68dlYpNXlRjib3LvLjqK3zGHQr3bbcO/C0BS0bGc/iA7JHUopy
TDH9yFhW8MP/GuMc59SlZiYtDDNxGba9o6PtuSNtilS5d70c6kb3sWimEhUts/t2
jlKraG6i2a9vbIGBuxljLGSt5bZ23pN+4myg3eCFEwuWQytVtj7fA7xusYVAtTWz
4IbF5fz/mMk2911SHjWkw8WK
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:08:21 2026 by rpki-client