Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File:                     tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier:          qeP51ZYyTFHZOjSGhNF+QrFhN18kM1DzWg6m+o4n+1g=
Subject key identifier:   0A:31:1A:E8:8E:1E:0F:D4:2B:14:CA:30:5E:48:1F:12:25:39:07:6F
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0E0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number:          0D09
Signing time:             Wed 23 Sep 2026 12:20:21 +0000
Manifest this update:     Wed 23 Sep 2026 12:20:21 +0000
Manifest next update:     Wed 30 Sep 2026 12:20:21 +0000
Files and hashes:         1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: Q1JOX9qsun9c0Ud4G5/GhUY2o0Qw3Xhgr/T61Q2sZYE=)
                          2: 1F379CE69D2211F1A2D31D4A4411F970.roa (hash: hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=)
                          3: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: 0R8aUOkuvkxBptQCqK8x5AV36AA1pHonSA2IeVHkDK4=)
                          4: D9D9DEF8A69911F182359F0F3411F970.roa (hash: kSMdikhUB64TDDAQf33yJf5KmpRLoHxtdZFPCRUfWx0=)
                          5: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: rfIVMs6AUfnF9P9/mHach4AIencfTT3AboN2vIjJlGQ=)
                          6: 60A1565CA1F211F1993DFC693F11F970.roa (hash: RFHpBcGzcu8zc3vv4bbihIv1/WTO6k7Pot6Tojz87xo=)
                          7: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: aEhA9+ssD2dfx+1WtFOaw2FrI9zywwb1i6+vFoIN8fo=)
                          8: F04C908AA85711F18FFCAC0D4011F970.roa (hash: XQT6focf8duOylg1ZZ3HUJmMwp7Rdw/KmIis9QJeUpg=)
                          9: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: X5kHDpuuQNfIGRpaueB+R7zUfzuivixJGb6q6/nzsAU=)
                          10: D36559D68D7511F1A94DC67B3211F970.roa (hash: Fy8jBtvRVu9jhps9hbfZRQWKRAOfiyIIynpps0EdNs4=)
                          11: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: lZKpR1VVIPheOf685hGoxyJuXh0TJ+bcZ5UNcYowwXY=)
                          12: 7B0202308D7511F1B81A5A6E3211F970.roa (hash: cLjdhUjlRnZ/CysDyvE5WxC4HuYKkSjsastV+5g0hOA=)
                          13: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tLlrYfQgXxnaToikebv9ZSOJv+09BIPvjOuMTXnI+m0=)
                          14: C7BD7A22908211F1B42CEF406511F970.roa (hash: URZ1HAVsZ8gDNHs/f+Mvco7+rFhBUEkt2pK3T1DSEzw=)
                          15: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8=)
                          16: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: ECJMyzNQQdPVr4eVezuJlY7AiD6IT4ky/xg4cQ7ishs=)
                          17: 4A7E2898A5C411F19C8FF2B67011F970.roa (hash: FjThLBw2H1Vgo2XVwexsW1c+HATo1/D1xZQEZgYo2F0=)
                          18: 7CDB77C68D7511F1B81A5A6E3211F970.roa (hash: qV41HhWJkk9bGNMXnKLZx7jPUgw0pOayrAqVgkbP6uY=)
                          19: BFF3DC6A8D7511F1984B69733211F970.roa (hash: f289QnqNyHbHfv+02sdYQZ3fZtIcF9r7+WPKnhUBFuI=)
                          20: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 6JLMteJnja7+tiZnKdI5bf0UkqKb/Uh5AX2ANHa//84=)
                          21: 6ACD5ACC227711F1A91DCF18A4833773.roa (hash: TJMnHoqNrDu0s7s8nY8tdFhEqoWxtnw6hx5yIb/HoEo=)
                          22: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: 4C096ArVcesRWHBQTftG7NRJZ0QLoRJXsJlu3Awv0GU=)
                          23: 3486A02AA5C311F19BC95E547011F970.roa (hash: vs7sa5NS68Qk8KNYKrQf+y7MRMvUgeeC0OfnYx4e6O4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 12:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3597 (0xe0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Sep 23 12:20:21 2026 GMT
            Not After : Sep 30 12:20:21 2026 GMT
        Subject: CN=6ab3c405-7457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:ca:18:91:6e:05:0b:f6:bc:fb:c5:8a:38:
                    c3:de:3c:fa:4e:61:9f:54:b5:52:da:87:f4:84:24:
                    86:f5:3d:46:9b:5b:5b:96:62:5a:ec:59:00:a1:4c:
                    f5:34:df:b3:97:89:8b:0f:8d:53:02:1e:45:41:2c:
                    44:ee:be:90:a9:16:be:e7:84:37:be:53:f9:e5:f3:
                    56:31:91:0a:04:bf:66:08:bb:f4:1c:3a:9b:b3:d6:
                    98:3e:fb:c9:c6:05:13:6e:88:2d:d9:b0:ec:56:1d:
                    04:c8:be:26:18:8d:ce:c7:33:ba:7f:4f:5b:80:b4:
                    9e:5a:be:fa:f7:69:9b:36:d0:84:2c:ea:aa:55:ff:
                    ab:ed:94:9a:24:a2:79:b5:4e:a8:df:06:d5:86:b6:
                    4e:e0:95:c3:a7:83:a8:ad:bf:0c:bd:97:0f:da:d1:
                    20:e1:0f:bd:77:90:76:69:18:d1:ee:dd:d0:16:f3:
                    6d:31:c4:fb:ad:8b:09:a8:fa:b7:42:81:b6:48:69:
                    50:41:b1:d6:18:47:1a:b5:8c:83:b5:64:c5:e1:63:
                    9f:bf:42:ef:a9:50:ee:9b:f9:c2:e7:cb:37:dd:77:
                    80:43:64:c4:2b:39:52:f7:e4:e9:c8:80:fa:62:f6:
                    c8:ec:7d:84:23:d8:5f:a2:90:07:a3:ed:7a:22:4e:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:31:1A:E8:8E:1E:0F:D4:2B:14:CA:30:5E:48:1F:12:25:39:07:6F
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f8:c3:b6:4d:d3:d0:75:87:77:b8:c5:31:c4:c2:2e:c9:2d:
         9b:04:00:1c:4c:22:ac:c7:f0:2d:bd:61:46:77:10:53:a8:45:
         b7:6f:ed:c6:c8:06:19:f3:b4:34:73:7e:78:a3:5c:94:03:ac:
         26:f1:02:3a:76:f8:e4:23:38:b3:da:fa:9b:0b:2d:5e:3a:cc:
         bb:ca:fe:a9:0c:66:65:aa:88:34:18:d0:7c:66:cf:0b:12:02:
         2e:6a:0c:66:02:fc:dd:34:99:90:2e:dd:3d:d6:bf:6e:99:63:
         08:5d:71:1d:49:d0:40:c4:f2:4c:34:9c:04:cc:53:1e:8a:01:
         ed:83:65:0a:24:27:ba:9d:a5:a3:a4:9b:f7:e5:90:da:95:d5:
         1c:d0:6d:aa:c8:87:33:2c:88:4f:5a:9b:dd:d4:e9:f4:46:72:
         90:3a:2e:09:d4:67:c6:a7:8d:e4:23:53:b0:98:e7:47:1a:56:
         4b:b6:78:a2:49:24:70:51:52:dd:19:2d:d6:80:3f:0a:c3:53:
         37:8e:bc:cb:06:f4:cc:c2:c8:58:cc:ad:1d:86:d8:47:dc:4c:
         eb:bc:2d:c7:a5:e8:b6:8a:ad:32:cc:ed:ce:ac:32:b5:20:39:
         9c:52:09:c3:47:de:56:5c:2f:1b:50:ee:46:ad:b9:c7:dd:40:
         72:5c:21:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:53:36 2026 by rpki-client