Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File:                     MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier:          1fUbondlHIEdgolnuP9npEzjuO0wCvo3sPyaziYFBKY=
Subject key identifier:   B1:C4:D3:61:7F:66:A2:23:17:B5:B4:75:8A:A3:18:16:7B:3F:FD:6E
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer:       /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number:          025E
Signing time:             Thu 01 Oct 2026 03:10:18 +0000
Manifest this update:     Thu 01 Oct 2026 03:10:17 +0000
Manifest next update:     Thu 08 Oct 2026 03:10:17 +0000
Files and hashes:         1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: Lch+QAzkjz8YQjbaw3LR/jc9tp0wO9MJAvReSIzq9s0=)
                          2: E9874B2A16D011EF90793868C4F9AE02.roa (hash: StFMy3NKhkaFCNdoWKE6eyzBLd+skcdMmjgC62pSh+8=)
                          3: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: P3O7u+qRGn1bwR58h4CF4ybrJlg7WXxzi0HEWNF1wU8=)
                          4: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: kTWCQH3l0WWzLGhSEAUO4J7QO5Yg3xSjvZflpuriZzI=)
                          5: 511564A2ED2B11F08C401BDD456F56BC.roa (hash: vbQDLMrS8rOq+qQeyQoAROFt0AaGqDcf1/1F1wwGpXo=)
                          6: 7031BFB6ED2B11F083BC5EDE456F56BC.roa (hash: OsNJpFKmHPyfNeh8koHIfP2TRZRKEPMZ5UDUwZ4ntLI=)
                          7: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: iXBfomCkV4xNH1cYbzZuww9SUUgCW5qk20yC43URNok=)
                          8: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: 170jykPgfx0s5CIB7KCfpg6Av4bJnDZ6uSGDY5UfwZQ=)
                          9: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: U9Cn0ELdUyS5NVvWmDLivz50FWKKV0p0b8inagt4fog=)
                          10: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: /RmusU5UC3h4mIZxyyVvzpFaDdQyB/V1AfNpSxG2USc=)
                          11: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: V/7VSGMl5ikCm95Tbf+xqFXER+QUdiwbSFx6fNdYM2Y=)
                          12: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: VMT1xU70dE5HYB1EHd2Tb1ASm0RRDcnimQ+3IrrOZ7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 03:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
        Validity
            Not Before: Oct  1 03:10:17 2026 GMT
            Not After : Oct  8 03:10:17 2026 GMT
        Subject: CN=6abdcf19-8201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:c0:e8:ce:ef:23:66:21:46:14:09:f1:04:
                    9e:70:7f:7f:5b:c1:d3:da:b0:62:28:91:bd:c2:cb:
                    30:e3:cf:15:e4:4d:a6:66:8f:65:62:a7:19:55:c0:
                    97:5c:3d:88:a2:15:2c:e4:ee:85:ff:56:01:41:b1:
                    73:2e:a0:3a:3b:8f:b8:80:1b:21:3e:1b:a2:ee:e6:
                    69:ed:6a:17:22:a0:48:a0:86:d2:ee:94:67:d8:74:
                    83:41:b2:7b:7a:f1:a9:ab:23:52:22:1a:34:3d:54:
                    19:b2:a9:f0:26:4d:ec:55:fe:af:eb:ed:51:06:78:
                    0e:56:57:06:89:f2:6a:bf:e2:25:a3:20:5a:7a:7c:
                    87:5a:47:48:3a:3c:e4:c1:18:87:75:84:de:20:32:
                    1e:d5:7e:5c:2c:6f:cc:89:22:ab:25:09:dd:6e:d9:
                    3e:70:ab:63:07:e9:fd:39:dd:b8:5a:81:34:6d:71:
                    8d:1c:c7:14:02:f8:2c:43:0c:83:b2:6e:c1:d9:67:
                    12:8b:4c:58:1a:a5:38:82:51:68:d1:c5:61:57:89:
                    1c:51:36:8b:9e:ee:40:60:18:d4:78:05:32:e1:39:
                    d9:1f:1d:da:5d:c7:76:a2:69:2a:37:6d:9b:56:31:
                    1b:60:c5:c0:8c:7d:c4:3a:ba:82:6f:07:82:56:d0:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C4:D3:61:7F:66:A2:23:17:B5:B4:75:8A:A3:18:16:7B:3F:FD:6E
            X509v3 Authority Key Identifier:
                keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:63:ce:8d:ae:79:96:e5:b0:bf:c5:43:d0:f2:c1:fe:9b:37:
         75:67:00:86:dc:5a:ef:fa:0a:f7:a4:c3:de:bb:95:85:ac:3a:
         d1:f1:fa:ea:5d:81:4b:7a:11:05:03:72:84:38:c6:43:5d:d1:
         1a:83:e5:e1:bf:79:f1:ea:d2:3d:94:fb:12:41:e9:84:79:6f:
         59:62:da:1d:ff:74:ad:a5:84:b0:e2:a0:76:6d:fc:d5:e1:2f:
         a8:3b:31:fb:2a:0d:a4:14:86:5a:92:45:d6:8f:60:37:34:c5:
         08:a1:26:b0:de:5d:f3:92:d5:07:bd:76:da:06:93:fa:db:e4:
         5b:0e:ac:a2:67:d4:3e:a1:36:0f:5c:bb:e1:e2:b0:78:68:9a:
         6b:63:bd:81:1b:01:b8:29:3d:2a:86:e8:57:31:77:72:87:d8:
         0d:51:9c:75:e5:d7:37:b7:9e:11:d7:ea:93:66:bf:7a:c6:29:
         7e:04:87:26:39:d6:55:fc:b6:b5:f2:93:11:d5:db:21:76:1d:
         be:c0:e3:50:0c:92:a3:e8:e3:a6:6d:63:2b:38:30:44:e3:f9:
         20:72:aa:48:26:94:8e:ef:9e:4e:6a:f2:ce:45:d2:43:1f:7d:
         c4:62:31:c6:c1:03:fa:02:78:ef:e0:e1:48:77:2d:a3:ad:f8:
         55:db:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 12:39:16 2026 by rpki-client