Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          Ew7TPac+JXtuEYbEVNd9iCJAXsuB1RorAY/RFXDQ1IQ=
Subject key identifier:   9A:A5:3F:75:74:01:AB:83:C2:E6:80:2E:2C:F7:11:27:AA:12:16:99
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0E0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0D0A
Signing time:             Thu 24 Sep 2026 18:45:36 +0000
Manifest this update:     Thu 24 Sep 2026 18:45:35 +0000
Manifest next update:     Thu 01 Oct 2026 18:45:35 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: 4i11VNwTsCC4PfLGq5xbmqEO7eEjRcke0goJUrY9Tw8=)
                          2: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=)
                          3: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
                          4: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
                          5: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY=)
                          6: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
                          7: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
                          8: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
                          9: D9D9DEF8A69911F182359F0F3411F970.roa (hash: kSMdikhUB64TDDAQf33yJf5KmpRLoHxtdZFPCRUfWx0=)
                          10: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
                          11: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: ECJMyzNQQdPVr4eVezuJlY7AiD6IT4ky/xg4cQ7ishs=)
                          12: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
                          13: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          14: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
                          15: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          16: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0=)
                          17: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
                          18: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          19: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: cLjdhUjlRnZ/CysDyvE5WxC4HuYKkSjsastV+5g0hOA=)
                          20: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
                          21: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
                          22: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
                          23: 60A1565CA1F211F1993DFC693F11F970.roa (hash: RFHpBcGzcu8zc3vv4bbihIv1/WTO6k7Pot6Tojz87xo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3598 (0xe0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Sep 24 18:45:35 2026 GMT
            Not After : Oct  1 18:45:35 2026 GMT
        Subject: CN=6ab56fd0-4a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:29:02:26:9a:83:31:b9:f9:e6:9a:a0:a4:
                    22:fa:64:da:3d:20:05:06:69:c9:b7:83:9f:71:95:
                    33:ad:e9:3f:a5:cd:d5:d5:60:f4:94:25:db:20:7c:
                    6c:c2:bd:e3:2c:8e:b6:47:5f:cc:a4:d1:c0:4c:e7:
                    30:ea:8b:f9:7f:de:d5:a4:22:ec:3f:26:c7:c0:95:
                    89:a2:ae:bb:94:fe:34:15:8f:cb:d8:b7:45:9f:9b:
                    7c:2d:03:f8:1d:c6:4a:3b:f3:d8:54:dc:af:e9:dc:
                    73:12:4f:ff:2f:83:c2:d7:40:90:de:be:39:0b:f3:
                    e9:8c:55:0d:5b:2b:d7:f4:8d:4b:b3:1e:7b:8f:e1:
                    04:f2:c7:a5:e1:db:e7:37:75:3d:3c:bd:dc:ab:73:
                    cb:62:6f:40:da:ac:3c:0d:30:82:d0:cf:dc:d8:68:
                    39:1a:39:da:19:8c:93:9f:fb:85:b6:2a:c6:0c:50:
                    25:c9:7c:47:fd:69:88:c6:e5:94:8e:8e:31:b5:00:
                    7c:3a:9c:bd:49:63:a4:08:76:02:a1:7d:0f:b0:91:
                    d9:87:56:94:25:90:a4:99:d9:68:6c:d7:ba:2f:3c:
                    dc:ea:b8:86:90:af:70:41:29:15:30:9d:8c:c6:9b:
                    75:ad:c1:0a:c7:02:d8:70:ff:5f:f2:68:96:b7:c4:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A5:3F:75:74:01:AB:83:C2:E6:80:2E:2C:F7:11:27:AA:12:16:99
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ca:6b:1c:88:c6:bd:cd:3f:15:b8:84:a9:5b:ec:1a:19:95:
         d0:e8:25:3c:2b:29:b1:44:b1:51:5f:dd:10:c1:64:43:58:3b:
         f4:69:82:09:76:71:d3:09:5c:8f:ee:d6:a9:d3:47:f8:0b:07:
         70:40:7c:97:20:90:48:b7:2f:24:c0:9a:d5:4a:dc:6d:ca:a3:
         45:19:7a:1c:87:d5:50:45:98:93:af:fc:b0:64:82:ef:2b:7f:
         61:75:d4:c4:8e:04:e8:42:6c:70:8e:ca:88:c8:2f:7c:62:59:
         37:ec:61:a9:d0:d8:84:61:71:20:3f:27:09:ae:12:01:2c:74:
         2a:4b:89:ae:3d:7c:c9:dc:e0:fd:2e:3b:41:0d:2f:1e:6b:37:
         be:c9:bf:f2:81:72:60:04:57:fd:9b:14:af:6d:7d:68:3c:5f:
         b6:31:e6:59:74:10:ee:d9:25:6a:ef:49:90:0c:a6:5f:8f:ee:
         ca:75:e7:f3:51:13:0d:c4:8e:3e:5f:12:2c:59:37:42:96:a8:
         d3:3c:47:b7:03:69:b1:f7:dd:09:18:36:f8:c9:d0:97:a9:6d:
         4e:6d:a6:58:42:3c:27:cd:f8:5a:69:c5:9e:36:e2:45:e0:dc:
         17:7d:e5:68:72:4e:99:b5:d9:41:23:0c:5a:68:23:2e:63:c5:
         09:b5:47:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG
NjlDQkE4NDYwHhcNMjYwOTI0MTg0NTM1WhcNMjYxMDAxMTg0NTM1WjAYMRYwFAYD
VQQDEw02YWI1NmZkMC00YTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAopAiaagzG5+eaaoKQi+mTaPSAFBmnJt4OfcZUzrek/pc3V1WD0lCXbIHxs
wr3jLI62R1/MpNHATOcw6ov5f97VpCLsPybHwJWJoq67lP40FY/L2LdFn5t8LQP4
HcZKO/PYVNyv6dxzEk//L4PC10CQ3r45C/PpjFUNWyvX9I1Lsx57j+EE8sel4dvn
N3U9PL3cq3PLYm9A2qw8DTCC0M/c2Gg5GjnaGYyTn/uFtirGDFAlyXxH/WmIxuWU
jo4xtQB8Opy9SWOkCHYCoX0PsJHZh1aUJZCkmdlobNe6Lzzc6riGkK9wQSkVMJ2M
xpt1rcEKxwLYcP9f8miWt8ToEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqlP3V0
AauDwuaALiz3ESeqEhaZMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE
OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx
RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDQwMi9GREJGRDAyMDNEOTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtm
M1BjV0p1ZS1vUl8ybkxxRVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATcprHIjGvc0/FbiEqVvsGhmV0OglPCspsUSxUV/dEMFkQ1g79GmCCXZx0wlc
j+7WqdNH+AsHcEB8lyCQSLcvJMCa1UrcbcqjRRl6HIfVUEWYk6/8sGSC7yt/YXXU
xI4E6EJscI7KiMgvfGJZN+xhqdDYhGFxID8nCa4SASx0KkuJrj18ydzg/S47QQ0v
Hms3vsm/8oFyYARX/ZsUr219aDxftjHmWXQQ7tklau9JkAymX4/uynXn81ETDcSO
Pl8SLFk3Qpao0zxHtwNpsffdCRg2+MnQl6ltTm2mWEI8J834WmnFnjbiReDcF33l
aHJOmbXZQSMMWmgjLmPFCbVH8g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:28:42 2026 by rpki-client