Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
File:                     PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json)
Hash identifier:          Sp+qQELXxzMULWlkJqeSmgQSQSioNaMJ/A/d3C7F+XM=
Subject key identifier:   D6:EC:DA:78:28:1F:A3:20:A1:84:27:89:01:E7:48:6F:F6:02:41:DD
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Certificate issuer:       /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial:       0CFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
Manifest number:          0CF1
Signing time:             Thu 24 Sep 2026 18:22:19 +0000
Manifest this update:     Thu 24 Sep 2026 18:22:19 +0000
Manifest next update:     Thu 01 Oct 2026 18:22:19 +0000
Files and hashes:         1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: 1VtSz7aIpwOjGo+UhvOAchtyl29VMKy93ByfN7NQ81c=)
                          2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: 2QGfkxbn7M0/GCnbZiSq9uZzzvvClpW7C4zygip+ABU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3324 (0xcfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
        Validity
            Not Before: Sep 24 18:22:19 2026 GMT
            Not After : Oct  1 18:22:19 2026 GMT
        Subject: CN=6ab56a5b-cef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:a3:3b:b5:c7:87:04:96:1f:4f:11:01:72:
                    f1:63:55:ba:cd:0f:f3:40:e6:52:7c:d3:fa:4e:10:
                    ea:be:48:03:26:28:52:d3:71:2b:87:86:62:6e:9d:
                    15:ac:31:12:d9:50:03:fc:b9:95:7a:db:87:28:bf:
                    d8:25:e6:57:48:03:79:25:75:56:b3:09:13:a6:9c:
                    fb:86:af:42:9b:27:0c:48:e5:7a:a5:98:20:33:8c:
                    a0:cf:c4:12:6a:7e:9b:3b:da:bb:5a:d6:b7:9d:88:
                    09:89:04:9c:48:fc:b6:f8:a5:aa:b7:18:61:fe:b4:
                    72:7c:2b:24:de:92:50:b2:48:74:4c:bf:d9:0e:60:
                    ff:3b:af:d9:90:80:12:ca:b1:97:cf:45:77:3e:96:
                    03:b6:f8:af:5a:52:86:27:59:a2:ca:3d:ea:79:8e:
                    8d:98:bb:75:8b:ad:e3:f5:b5:be:39:aa:10:1a:bd:
                    8f:54:f5:f9:f3:b7:33:29:26:84:72:68:59:62:74:
                    62:c5:c1:4a:70:d2:6c:ee:ba:10:5e:29:02:7e:20:
                    f9:ad:5b:87:94:b5:e3:4b:93:64:a1:fa:3a:5b:cb:
                    6f:25:e2:f4:35:49:6c:eb:63:fb:c9:97:de:7c:2f:
                    af:fb:ab:43:ae:b6:21:df:3b:1a:51:37:74:f7:09:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EC:DA:78:28:1F:A3:20:A1:84:27:89:01:E7:48:6F:F6:02:41:DD
            X509v3 Authority Key Identifier:
                keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f9:2d:78:95:fc:28:c6:e9:44:6d:59:78:7b:c7:02:d9:63:
         2d:1f:d4:a7:0e:5f:92:83:97:29:37:14:33:ee:ae:3f:a5:d4:
         94:db:bf:d6:aa:4a:f6:7a:63:e2:e4:da:90:af:1b:70:f3:a4:
         19:44:d4:ae:d8:1d:c0:c9:b2:86:b5:c0:d8:67:f4:bf:82:d0:
         4d:6f:5e:3a:38:9f:ab:52:6e:a9:4d:8a:e0:75:66:e4:97:bb:
         3b:f4:66:3f:0c:91:bf:09:5d:88:38:8c:d1:cc:ee:90:b5:54:
         98:44:6f:98:f1:55:50:f8:35:40:4f:49:ed:2d:2a:98:31:97:
         f0:b6:9b:3a:8b:16:16:94:70:dd:b3:69:44:f7:39:ac:11:e7:
         27:01:95:52:01:e8:ad:55:4c:4d:f7:3d:6f:59:82:8c:0d:ba:
         18:f2:92:01:b8:3a:4e:88:78:11:7b:e5:22:eb:09:70:6b:9a:
         19:e8:64:d6:f0:ce:80:30:e5:af:04:09:52:5f:03:6c:8b:22:
         46:f5:3e:19:a9:09:06:48:be:8d:9d:0d:61:59:2e:be:96:ab:
         93:25:71:c5:47:90:f8:9e:1d:09:a0:92:04:d0:37:9c:62:29:
         84:d4:83:9d:62:53:eb:2a:84:48:eb:14:18:a7:4d:cf:c9:8c:
         83:5c:cd:d1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5
OEExMjExM0YwHhcNMjYwOTI0MTgyMjE5WhcNMjYxMDAxMTgyMjE5WjAYMRYwFAYD
VQQDEw02YWI1NmE1Yi1jZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsd2jO7XHhwSWH08RAXLxY1W6zQ/zQOZSfNP6ThDqvkgDJihS03Erh4Zibp0V
rDES2VAD/LmVetuHKL/YJeZXSAN5JXVWswkTppz7hq9CmycMSOV6pZggM4ygz8QS
an6bO9q7Wta3nYgJiQScSPy2+KWqtxhh/rRyfCsk3pJQskh0TL/ZDmD/O6/ZkIAS
yrGXz0V3PpYDtvivWlKGJ1miyj3qeY6NmLt1i63j9bW+OaoQGr2PVPX587czKSaE
cmhZYnRixcFKcNJs7roQXikCfiD5rVuHlLXjS5Nkofo6W8tvJeL0NUls62P7yZfe
fC+v+6tDrrYh3zsaUTd09wn+hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbs2ngo
H6MgoYQniQHnSG/2AkHdMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz
RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkJGNS85RDBCNDIyMjEzRjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3
dkNvUVlUQ0plZmVZb1NFVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEvkteJX8KMbpRG1ZeHvHAtljLR/Upw5fkoOXKTcUM+6uP6XUlNu/1qpK9npj
4uTakK8bcPOkGUTUrtgdwMmyhrXA2Gf0v4LQTW9eOjifq1JuqU2K4HVm5Je7O/Rm
PwyRvwldiDiM0czukLVUmERvmPFVUPg1QE9J7S0qmDGX8LabOosWFpRw3bNpRPc5
rBHnJwGVUgHorVVMTfc9b1mCjA26GPKSAbg6Toh4EXvlIusJcGuaGehk1vDOgDDl
rwQJUl8DbIsiRvU+GakJBki+jZ0NYVkuvparkyVxxUeQ+J4dCaCSBNA3nGIphNSD
nWJT6yqESOsUGKdNz8mMg1zN0Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:01:46 2026 by rpki-client