Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
File:                     MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json)
Hash identifier:          zbUIo4evuXohusW2Zz1dUj7xBQw4ssHFreRYpOyIKVA=
Subject key identifier:   CF:A6:17:4C:26:D8:13:20:05:A9:58:8C:2A:66:A6:1A:3E:3D:BD:17
Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24
Certificate issuer:       /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
Certificate serial:       1546
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
Manifest number:          1538
Signing time:             Thu 24 Sep 2026 16:46:51 +0000
Manifest this update:     Thu 24 Sep 2026 16:46:51 +0000
Manifest next update:     Thu 01 Oct 2026 16:46:51 +0000
Files and hashes:         1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: LVLficvECrZW64A/cQHMHfQwFmmQ1DayYD2QfG3aMVE=)
                          2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: CXur0G0yvZMBs57/KvbdiWzPfqrw4FPd67pyd/pUMxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5446 (0x1546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
        Validity
            Not Before: Sep 24 16:46:51 2026 GMT
            Not After : Oct  1 16:46:51 2026 GMT
        Subject: CN=6ab553fb-ab1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:92:d3:b1:11:26:6d:9e:ce:4d:bb:4a:02:
                    32:66:a6:a6:71:65:98:31:9e:a0:0d:b0:4a:05:2d:
                    02:01:ab:15:ff:65:c1:6f:66:b0:34:60:60:d2:20:
                    01:99:b1:34:0f:41:4b:a7:13:f5:bc:ae:7b:d0:63:
                    54:2d:b7:41:30:42:71:70:49:42:c5:73:4e:eb:47:
                    bc:2d:5b:af:39:4d:ad:3c:15:19:67:bc:78:f1:38:
                    f8:6b:b6:a0:97:7c:67:22:dc:2b:46:1c:de:cb:57:
                    a9:c6:cb:78:9e:54:48:95:c3:83:b3:ac:c5:64:ac:
                    a6:4d:fd:8a:b5:d1:21:98:eb:36:ea:0d:6f:3f:51:
                    16:6e:cf:f2:c5:5a:dd:7c:40:9f:43:9b:12:70:d2:
                    f9:36:93:fc:aa:f7:43:a0:95:78:49:2e:96:01:4e:
                    ff:a5:0a:f0:b8:6d:3b:63:07:13:81:ff:1a:4a:8e:
                    74:ba:1d:1f:ef:ec:0e:aa:6e:15:89:57:95:7b:c1:
                    24:e2:7d:cd:13:1a:67:0e:8a:25:7d:6a:fc:3d:97:
                    b3:02:8d:7c:48:2f:56:ba:ee:78:a2:81:02:67:ae:
                    c5:c7:fc:12:c7:dc:eb:13:46:c1:24:35:31:b5:ec:
                    02:05:70:44:84:bb:a8:ff:e4:b0:30:96:eb:83:7c:
                    f5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:17:4C:26:D8:13:20:05:A9:58:8C:2A:66:A6:1A:3E:3D:BD:17
            X509v3 Authority Key Identifier:
                keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:56:9b:25:9e:c9:23:e7:8d:24:7f:13:00:9d:3a:c8:09:7d:
         05:dd:8d:8e:99:24:e0:f8:c9:ab:78:48:35:cc:3c:1c:b9:aa:
         95:bc:af:64:c6:a2:97:9f:b4:cb:05:8f:aa:6c:8e:0b:81:b8:
         60:50:27:bc:8a:62:c0:54:57:40:ee:be:28:2f:f6:b0:50:c7:
         a1:f6:72:7b:a9:d7:cf:5b:0a:a7:1d:63:2b:7c:07:d5:40:b1:
         6a:32:7a:e9:03:be:28:5f:63:d1:81:64:ed:95:db:a7:28:b3:
         ba:a7:12:6c:b0:c3:50:8a:38:3f:0f:ad:16:06:2a:a2:9d:82:
         2a:4c:31:82:6e:08:17:04:50:81:1d:da:4c:61:4b:60:b7:24:
         47:df:2f:62:b7:ec:01:94:01:48:d8:6f:13:f7:36:d3:63:39:
         bd:ae:3c:49:ee:7e:13:a8:b6:a9:84:70:ea:e6:c0:6d:2d:0a:
         ef:fc:ba:9d:62:1c:06:61:f3:3c:16:2b:0a:4b:2b:25:60:dc:
         f0:79:4d:ff:c0:88:9d:ea:db:b4:30:c5:a6:e7:17:5e:a9:a5:
         bd:bc:f7:79:2c:e9:21:a3:2d:ee:f6:62:4f:ad:b5:59:bd:40:
         72:53:9d:30:3e:0e:76:ca:67:65:84:ca:83:ae:86:d0:7d:e3:
         fb:6b:a2:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz
QTUzOTcwMjQwHhcNMjYwOTI0MTY0NjUxWhcNMjYxMDAxMTY0NjUxWjAYMRYwFAYD
VQQDEw02YWI1NTNmYi1hYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAuS07ERJm2ezk27SgIyZqamcWWYMZ6gDbBKBS0CAasV/2XBb2awNGBg0iAB
mbE0D0FLpxP1vK570GNULbdBMEJxcElCxXNO60e8LVuvOU2tPBUZZ7x48Tj4a7ag
l3xnItwrRhzey1epxst4nlRIlcODs6zFZKymTf2KtdEhmOs26g1vP1EWbs/yxVrd
fECfQ5sScNL5NpP8qvdDoJV4SS6WAU7/pQrwuG07YwcTgf8aSo50uh0f7+wOqm4V
iVeVe8Ek4n3NExpnDoolfWr8PZezAo18SC9Wuu54ooECZ67Fx/wSx9zrE0bBJDUx
tewCBXBEhLuo/+SwMJbrg3z1mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM+mF0wm
2BMgBalYjCpmpho+Pb0XMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0
RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw
czg5NVBRRXZlTjA2VTVjQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABFabJZ7JI+eNJH8TAJ06yAl9Bd2Njpkk4PjJq3hINcw8HLmqlbyvZMail5+0
ywWPqmyOC4G4YFAnvIpiwFRXQO6+KC/2sFDHofZye6nXz1sKpx1jK3wH1UCxajJ6
6QO+KF9j0YFk7ZXbpyizuqcSbLDDUIo4Pw+tFgYqop2CKkwxgm4IFwRQgR3aTGFL
YLckR98vYrfsAZQBSNhvE/c202M5va48Se5+E6i2qYRw6ubAbS0K7/y6nWIcBmHz
PBYrCksrJWDc8HlN/8CInerbtDDFpucXXqmlvbz3eSzpIaMt7vZiT621Wb1AclOd
MD4OdspnZYTKg66G0H3j+2uiww==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:35 2026 by rpki-client