Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
File:                     5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json)
Hash identifier:          DO/QcxdUsfuYsXSS8ZZkT+uVrqnWL4Ce9Z3FEAt1ve8=
Subject key identifier:   F4:32:4E:C2:7A:E1:AE:FD:3E:63:4D:C8:9D:DD:92:2B:28:08:00:90
Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD
Certificate issuer:       /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
Manifest number:          0158
Signing time:             Wed 23 Sep 2026 05:02:18 +0000
Manifest this update:     Wed 23 Sep 2026 05:02:18 +0000
Manifest next update:     Wed 30 Sep 2026 05:02:18 +0000
Files and hashes:         1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: gtmPWT05jMFvSRA/qCqa6CKtx1mOLKQdiEGY8UpQCrQ=)
                          2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: WmeiamuyqIiXqThgaQ7WjBlL81T70JeikrMmaNzPLPQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl
                          rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD
        Validity
            Not Before: Sep 23 05:02:18 2026 GMT
            Not After : Sep 30 05:02:18 2026 GMT
        Subject: CN=6ab35d5a-f1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:97:5c:cf:48:84:86:d6:a5:7a:82:d6:62:
                    5c:88:7f:23:46:64:42:03:06:40:fc:fe:78:4f:12:
                    40:84:a1:d5:6c:07:2f:71:5a:cb:ac:9e:77:49:0a:
                    ce:4d:e4:e9:c8:aa:5d:14:7d:3d:11:f8:92:c6:4b:
                    30:d3:9d:c5:dc:02:fe:ca:56:ed:28:df:9f:27:c6:
                    67:0c:1c:dd:1a:94:c9:01:0b:e0:d9:2d:ec:bc:0c:
                    1f:3a:e1:43:2c:ee:73:c8:49:b5:f4:24:af:53:c3:
                    5b:60:1d:1f:cb:9d:06:38:51:a8:79:1f:c3:c8:eb:
                    c4:4e:08:cd:fd:dc:4e:37:f8:3c:7d:63:03:1d:8d:
                    ca:0f:87:fc:79:92:4b:e6:4c:08:35:0b:99:15:1e:
                    1d:f2:c5:3b:f4:fb:b4:b1:88:4a:21:00:2a:bc:22:
                    b6:ef:5d:98:77:2f:08:96:f6:dd:c2:44:d3:b2:63:
                    f2:fa:2d:ea:51:6d:5c:e7:2e:b0:01:bc:ef:14:c7:
                    1d:16:f4:e9:9d:d8:b8:ea:ab:96:76:d5:af:f0:95:
                    c5:08:2b:b1:5c:ac:bf:8c:55:f9:2c:c1:03:db:0a:
                    48:c7:3e:cc:69:59:59:61:24:74:f5:85:b4:72:a8:
                    66:98:5d:7a:4b:f9:47:96:1d:6e:f3:5b:65:93:31:
                    b5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:32:4E:C2:7A:E1:AE:FD:3E:63:4D:C8:9D:DD:92:2B:28:08:00:90
            X509v3 Authority Key Identifier:
                keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:04:3f:21:91:b4:56:64:80:5d:79:8d:af:65:45:e5:09:
         ff:70:7e:fe:7c:10:8f:c6:71:7b:ac:cd:ed:cd:58:2c:31:80:
         2d:66:77:f1:e7:77:29:48:f3:4c:10:d9:cc:a9:61:ae:7e:73:
         e5:c5:cd:30:ab:00:38:aa:6b:ae:e6:07:b2:5f:63:bf:b6:f2:
         b2:81:da:16:0b:b5:38:e6:34:05:bb:79:de:1a:53:c1:a3:3a:
         b2:29:40:fe:f0:96:a6:97:00:a3:bf:c8:ff:66:4d:40:4f:6a:
         11:16:34:f5:38:13:8c:87:e0:22:72:76:de:d4:c1:1b:10:37:
         6c:88:fc:ef:6c:6b:ac:43:fd:28:a3:cf:13:ce:ed:83:2e:1b:
         3f:1c:39:73:0c:0e:2d:61:1f:14:5d:02:a9:80:94:78:43:29:
         b2:c8:c0:9b:b2:93:6d:00:63:9a:7a:f1:83:f1:83:42:ea:76:
         91:48:f6:cc:24:e7:9f:23:a5:d1:34:b0:8b:69:dd:1d:36:f4:
         14:42:53:8d:ae:07:61:79:52:ee:6b:32:23:2f:dd:0f:d5:5d:
         9f:f2:4d:89:7d:98:9b:ff:29:f2:c7:77:79:e3:70:64:c4:4c:
         71:42:21:05:57:cf:0a:8a:54:a8:d4:7d:5b:01:9c:8d:92:91:
         ab:43:3d:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhBQzgxMTAvBgNVBAUTKEU0QzU4OUI4OTNEMjcyODlDRjg0NkRGMDVBREZCNTk2
MDM2NDI4RkQwHhcNMjYwOTIzMDUwMjE4WhcNMjYwOTMwMDUwMjE4WjAYMRYwFAYD
VQQDEw02YWIzNWQ1YS1mMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYCXXM9IhIbWpXqC1mJciH8jRmRCAwZA/P54TxJAhKHVbAcvcVrLrJ53SQrO
TeTpyKpdFH09EfiSxksw053F3AL+ylbtKN+fJ8ZnDBzdGpTJAQvg2S3svAwfOuFD
LO5zyEm19CSvU8NbYB0fy50GOFGoeR/DyOvETgjN/dxON/g8fWMDHY3KD4f8eZJL
5kwINQuZFR4d8sU79Pu0sYhKIQAqvCK2712Ydy8IlvbdwkTTsmPy+i3qUW1c5y6w
AbzvFMcdFvTpndi46quWdtWv8JXFCCuxXKy/jFX5LMED2wpIxz7MaVlZYSR09YW0
cqhmmF16S/lHlh1u81tlkzG1/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQyTsJ6
4a79PmNNyJ3dkisoCACQMB8GA1UdIwQYMBaAFOTFibiT0nKJz4Rt8FrftZYDZCj9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FMTJEMTA1MkIx
M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2NvblBoRzN3V3QtMWxnTmtL
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEFDOC9FMTJEMTA1MkIxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2Nv
blBoRzN3V3QtMWxnTmtLUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsFkEPyGRtFZkgF15ja9lReUJ/3B+/nwQj8Zxe6zN7c1YLDGALWZ38ed3KUjz
TBDZzKlhrn5z5cXNMKsAOKprruYHsl9jv7bysoHaFgu1OOY0Bbt53hpTwaM6silA
/vCWppcAo7/I/2ZNQE9qERY09TgTjIfgInJ23tTBGxA3bIj872xrrEP9KKPPE87t
gy4bPxw5cwwOLWEfFF0CqYCUeEMpssjAm7KTbQBjmnrxg/GDQup2kUj2zCTnnyOl
0TSwi2ndHTb0FEJTja4HYXlS7msyIy/dD9Vdn/JNiX2Ym/8p8sd3eeNwZMRMcUIh
BVfPCopUqNR9WwGcjZKRq0M9Tw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:18:48 2026 by rpki-client