Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
File:                     ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json)
Hash identifier:          vF5SZ5ouRLjpT4Ybs4HYEdIeBULeRJH8+u+vy7reV2Q=
Subject key identifier:   AD:8E:76:02:E1:BD:6B:48:4E:D1:10:68:F6:BE:15:2A:6A:73:E7:CD
Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
Certificate issuer:       /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
Manifest number:          D7
Signing time:             Wed 23 Sep 2026 06:29:07 +0000
Manifest this update:     Wed 23 Sep 2026 06:29:07 +0000
Manifest next update:     Wed 30 Sep 2026 06:29:07 +0000
Files and hashes:         1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: zHPUgE1mal7t2QcBs0jno/SPmfREvKs7rYx1woL1+Fc=)
                          2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: XmAkdXljY7ifS/FL8KMXbXDPOHdCBlE7app0ObsezBk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
        Validity
            Not Before: Sep 23 06:29:07 2026 GMT
            Not After : Sep 30 06:29:07 2026 GMT
        Subject: CN=6ab371b3-b8a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:8f:46:a0:fa:fd:f3:60:cb:3d:a9:a1:dc:
                    c2:de:d7:d8:8e:0f:33:48:9a:5b:6e:01:32:3f:6a:
                    4f:97:5a:07:37:8b:6c:aa:f8:bd:22:ff:90:b4:e6:
                    25:bc:54:0a:34:df:61:55:c1:b2:ea:f2:a3:82:49:
                    6f:ca:b5:a1:34:37:9b:93:06:25:51:90:02:a3:c8:
                    24:38:3f:3f:3d:bd:b9:1f:2e:68:bb:98:46:e0:43:
                    a3:5c:c4:37:53:30:45:04:15:e8:dc:bc:60:4c:53:
                    fe:aa:a8:34:82:92:df:fb:2b:b3:94:e4:ce:3c:36:
                    2a:47:d5:52:10:5e:2c:b3:30:0b:38:39:34:dc:06:
                    af:21:1f:76:7a:a4:17:00:ed:79:d6:49:bc:c7:a1:
                    9c:21:40:fc:04:da:a9:89:55:be:23:f0:bd:66:e1:
                    b4:f9:3a:0f:cd:03:28:f5:9e:76:6b:15:22:af:f5:
                    b7:cb:05:65:50:f4:6e:25:fb:36:91:53:6e:a2:55:
                    50:cf:dd:cb:33:13:93:70:c9:a7:96:8f:49:92:4f:
                    78:d0:11:c9:ef:77:18:ab:d1:8b:74:f8:84:28:b9:
                    d5:82:08:b4:3c:d7:04:86:30:00:a3:0f:5c:31:9b:
                    f2:f8:a3:2b:a6:28:32:de:0a:f6:f3:6f:b2:0a:af:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8E:76:02:E1:BD:6B:48:4E:D1:10:68:F6:BE:15:2A:6A:73:E7:CD
            X509v3 Authority Key Identifier:
                keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:09:21:e7:9c:9e:0c:41:10:e3:dd:fc:4a:97:96:39:e1:67:
         2e:73:58:3a:a3:d5:de:df:04:29:6c:e4:ef:5b:72:ba:b0:3a:
         93:7d:a2:89:d8:6b:17:0d:31:a5:e7:08:b2:57:ab:98:29:97:
         b5:ee:08:da:77:9d:38:48:be:3c:37:10:3d:73:d5:a4:16:bd:
         48:8a:f6:12:9e:61:8b:49:5b:54:0a:3a:4f:f9:b9:52:1f:28:
         5a:d5:65:58:49:5c:9c:e2:ad:a0:f0:b6:c7:61:7f:c0:6c:4d:
         ad:98:13:50:21:6f:51:d3:05:30:77:2f:23:05:64:60:7e:30:
         17:08:96:12:e9:cc:0d:aa:ad:bb:58:77:46:65:f7:1c:58:51:
         96:e2:53:17:cc:21:e7:0d:fd:af:56:78:4b:52:26:51:03:9f:
         5c:01:d6:3a:1f:6c:ef:ca:a9:d4:09:3a:ed:67:d9:02:7d:32:
         74:06:3d:11:24:43:49:55:ed:a2:ca:10:71:44:71:8c:7f:b6:
         b2:42:33:7d:d3:be:fe:0a:d0:2b:8d:a7:06:6c:46:f8:1c:f0:
         ce:22:29:28:a0:26:e9:b5:96:a9:90:b6:52:6e:09:48:16:3b:
         48:0c:0a:84:76:eb:7d:be:00:3d:61:07:34:ab:4b:ca:a2:fb:
         f0:db:cd:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZBQkUxMTAvBgNVBAUTKDZCMjJGOTA3OTEwNUE0REVCQ0IwOUNDMUI5MDA5NjA4
NUM2NjJENDQwHhcNMjYwOTIzMDYyOTA3WhcNMjYwOTMwMDYyOTA3WjAYMRYwFAYD
VQQDEw02YWIzNzFiMy1iOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArvCPRqD6/fNgyz2podzC3tfYjg8zSJpbbgEyP2pPl1oHN4tsqvi9Iv+QtOYl
vFQKNN9hVcGy6vKjgklvyrWhNDebkwYlUZACo8gkOD8/Pb25Hy5ou5hG4EOjXMQ3
UzBFBBXo3LxgTFP+qqg0gpLf+yuzlOTOPDYqR9VSEF4sszALODk03AavIR92eqQX
AO151km8x6GcIUD8BNqpiVW+I/C9ZuG0+ToPzQMo9Z52axUir/W3ywVlUPRuJfs2
kVNuolVQz93LMxOTcMmnlo9Jkk940BHJ73cYq9GLdPiEKLnVggi0PNcEhjAAow9c
MZvy+KMrpigy3gr282+yCq+IywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2OdgLh
vWtITtEQaPa+FSpqc+fNMB8GA1UdIwQYMBaAFGsi+QeRBaTevLCcwbkAlghcZi1E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkFCRS8xNUY1QzEwQzc0
M0UxMUYwOTRBN0JGMDlDNEY5QUUwMi9heUw1QjVFRnBONjhzSnpCdVFDV0NGeG1M
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F5TDVCNUVGcE42OHNKekJ1UUNXQ0Z4bUxVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkFCRS8xNUY1QzEwQzc0M0UxMUYwOTRBN0JGMDlDNEY5QUUwMi9heUw1QjVFRnBO
NjhzSnpCdVFDV0NGeG1MVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVwkh55yeDEEQ4938SpeWOeFnLnNYOqPV3t8EKWzk71tyurA6k32iidhrFw0x
pecIslermCmXte4I2nedOEi+PDcQPXPVpBa9SIr2Ep5hi0lbVAo6T/m5Uh8oWtVl
WElcnOKtoPC2x2F/wGxNrZgTUCFvUdMFMHcvIwVkYH4wFwiWEunMDaqtu1h3RmX3
HFhRluJTF8wh5w39r1Z4S1ImUQOfXAHWOh9s78qp1Ak67WfZAn0ydAY9ESRDSVXt
osoQcURxjH+2skIzfdO+/grQK42nBmxG+BzwziIpKKAm6bWWqZC2Um4JSBY7SAwK
hHbrfb4APWEHNKtLyqL78NvNDA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:07:40 2026 by rpki-client