Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File:                     aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier:          ThslMzmwnZPiZAcUu4vt9dSIH2+zw49WV/ms1MOjg1Q=
Subject key identifier:   3D:10:E7:DC:5B:85:A8:09:B5:BB:31:81:98:74:AC:E7:98:72:49:EF
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer:       /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number:          0142
Signing time:             Fri 25 Sep 2026 05:31:14 +0000
Manifest this update:     Fri 25 Sep 2026 05:31:14 +0000
Manifest next update:     Fri 02 Oct 2026 05:31:14 +0000
Files and hashes:         1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: gWtcnyZSpE1IESWuj2tZS1tStoG00MDk7DYX3Vt59Hk=)
                          2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: GJJAq7Y4rDKXzfncSIrWC7/k2iyBuKfDbZCWqya2Ycc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
        Validity
            Not Before: Sep 25 05:31:14 2026 GMT
            Not After : Oct  2 05:31:14 2026 GMT
        Subject: CN=6ab60722-4221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:b2:69:af:99:dc:f9:7a:0e:3b:07:1e:4f:
                    17:ad:f1:50:8a:f1:3f:de:76:7e:2a:cd:6b:cc:54:
                    ea:44:93:70:8e:4b:b7:30:b0:2f:80:97:3b:c8:0a:
                    b5:55:88:1c:bd:b3:6d:2d:5c:d5:b2:3b:d5:de:52:
                    11:d7:aa:b0:2f:86:dc:c5:5e:ea:ce:ca:dc:76:46:
                    f8:7e:a3:7b:87:70:99:23:5c:8d:a5:3b:0d:93:34:
                    04:c3:85:a8:31:12:90:9a:5f:c4:81:52:11:ac:c9:
                    df:48:45:c4:0b:73:d4:d2:29:50:67:05:d3:1b:80:
                    38:9f:26:87:69:c9:9a:02:4b:2e:5b:f0:51:69:7c:
                    05:2f:33:0a:de:0b:52:55:ca:20:5e:73:82:33:87:
                    ef:01:4d:72:6f:88:6c:1d:5d:be:2a:9f:b5:f0:6f:
                    e8:7c:ff:03:22:52:38:33:93:4f:4f:73:79:8d:e3:
                    88:08:a0:60:df:e4:cf:b3:ac:9e:75:30:ec:51:41:
                    20:96:cc:9c:71:9e:97:33:6d:d0:6a:36:e4:88:ce:
                    df:98:9c:33:a5:fe:58:36:65:c0:81:5d:38:eb:30:
                    c5:d8:4e:4e:65:52:64:7a:ad:80:6b:eb:e0:a6:10:
                    b5:2d:b8:27:ec:11:75:66:ee:5f:3c:92:af:29:40:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:10:E7:DC:5B:85:A8:09:B5:BB:31:81:98:74:AC:E7:98:72:49:EF
            X509v3 Authority Key Identifier:
                keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:75:a6:c8:8d:81:e8:bb:2b:95:a2:01:1c:90:0f:68:fa:c3:
         c7:a6:b4:1c:c9:b4:83:b1:f7:3f:bd:69:47:75:5a:5c:d5:0c:
         83:9b:2e:5c:11:f9:97:6c:06:82:6b:8e:0f:bf:52:68:99:ed:
         d2:0a:47:5b:35:b1:7f:6e:98:5e:fa:88:0f:f7:10:6e:2e:62:
         e4:b8:b8:de:60:8c:41:b3:54:89:f1:23:0f:9c:2a:88:4a:b8:
         33:cb:c8:fd:4d:5e:3b:ca:cf:94:65:b2:83:4d:b4:6c:0d:d8:
         07:94:01:08:fd:e0:7c:93:81:aa:2f:a6:19:76:0d:4c:55:37:
         1d:d2:11:0d:02:a0:c3:e0:ff:4c:c1:07:9b:cf:9b:45:be:18:
         24:c7:61:60:5b:32:85:bf:3f:43:4c:c7:ef:5f:43:3d:9f:1a:
         1c:a0:a8:5e:82:20:28:84:ac:4e:61:66:6d:25:f8:7a:df:e4:
         e9:97:38:31:0e:f1:79:34:e4:0d:09:78:73:cc:35:a0:f5:83:
         ec:78:70:73:cb:d0:9c:8c:ad:17:7c:cc:46:d9:7f:f6:94:81:
         85:92:a3:60:ca:72:a6:d5:47:51:44:59:b6:96:aa:72:12:1c:
         9f:4e:10:5e:69:2b:6b:54:ff:35:7f:12:d7:e7:de:e3:e7:23:
         fb:67:db:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkwODMxMTAvBgNVBAUTKDY5NEY1NjFCNjNEQTdDQzU3NzkzMTYzNkQ0Nzg4QUQy
QjBCNEFFMjAwHhcNMjYwOTI1MDUzMTE0WhcNMjYxMDAyMDUzMTE0WjAYMRYwFAYD
VQQDEw02YWI2MDcyMi00MjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5ayaa+Z3Pl6DjsHHk8XrfFQivE/3nZ+Ks1rzFTqRJNwjku3MLAvgJc7yAq1
VYgcvbNtLVzVsjvV3lIR16qwL4bcxV7qzsrcdkb4fqN7h3CZI1yNpTsNkzQEw4Wo
MRKQml/EgVIRrMnfSEXEC3PU0ilQZwXTG4A4nyaHacmaAksuW/BRaXwFLzMK3gtS
VcogXnOCM4fvAU1yb4hsHV2+Kp+18G/ofP8DIlI4M5NPT3N5jeOICKBg3+TPs6ye
dTDsUUEglsyccZ6XM23QajbkiM7fmJwzpf5YNmXAgV046zDF2E5OZVJkeq2Aa+vg
phC1Lbgn7BF1Zu5fPJKvKUDh1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0Q59xb
hagJtbsxgZh0rOeYcknvMB8GA1UdIwQYMBaAFGlPVhtj2nzFd5MWNtR4itKwtK4g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTA4My9DODZDRDgwNkQx
QjAxMUVGODgzM0M5MzNDNEY5QUUwMi9hVTlXRzJQYWZNVjNreFkyMUhpSzByQzBy
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FVOVdHMlBhZk1WM2t4WTIxSGlLMHJDMHJpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTA4My9DODZDRDgwNkQxQjAxMUVGODgzM0M5MzNDNEY5QUUwMi9hVTlXRzJQYWZN
VjNreFkyMUhpSzByQzByaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtHWmyI2B6LsrlaIBHJAPaPrDx6a0HMm0g7H3P71pR3VaXNUMg5suXBH5l2wG
gmuOD79SaJnt0gpHWzWxf26YXvqID/cQbi5i5Li43mCMQbNUifEjD5wqiEq4M8vI
/U1eO8rPlGWyg020bA3YB5QBCP3gfJOBqi+mGXYNTFU3HdIRDQKgw+D/TMEHm8+b
Rb4YJMdhYFsyhb8/Q0zH719DPZ8aHKCoXoIgKISsTmFmbSX4et/k6Zc4MQ7xeTTk
DQl4c8w1oPWD7Hhwc8vQnIytF3zMRtl/9pSBhZKjYMpyptVHUURZtpaqchIcn04Q
Xmkra1T/NX8S1+fe4+cj+2fbMw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:18:16 2026 by rpki-client