Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          +hGVSIPOecVYnJoL7Wi/rCWf66hMJZMKrcL5b1jhcUs=
Subject key identifier:   04:49:AE:FC:DD:5A:2A:44:C7:C5:AB:97:1E:7B:CA:E1:76:58:C6:FF
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0BA5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0B5B
Signing time:             Tue 22 Sep 2026 19:05:30 +0000
Manifest this update:     Tue 22 Sep 2026 19:05:29 +0000
Manifest next update:     Tue 29 Sep 2026 19:05:29 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: GPLtsLcV4Dqe0Grwv4iDIw+nyr9xQCrKMfbE01McbtI=)
                          2: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=)
                          3: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=)
                          4: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=)
                          5: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=)
                          6: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=)
                          7: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=)
                          8: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=)
                          9: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=)
                          10: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY=)
                          11: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=)
                          12: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=)
                          13: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2981 (0xba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Sep 22 19:05:29 2026 GMT
            Not After : Sep 29 19:05:29 2026 GMT
        Subject: CN=6ab2d17a-a47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:aa:c1:b4:6f:24:9d:ae:c1:d7:98:18:a9:51:
                    ea:ad:69:e1:ed:04:0c:91:44:aa:39:3c:42:e5:dc:
                    9b:21:c3:34:d0:c7:d1:f2:53:71:fe:71:34:e4:0e:
                    f8:b2:02:d9:26:4d:84:a0:8d:5d:22:cc:47:fe:a1:
                    9e:4f:78:4f:fd:63:93:be:59:a3:47:f9:f1:e6:5e:
                    e6:67:77:bc:ed:72:22:ce:73:a9:15:15:ea:89:a1:
                    18:d2:9d:16:08:48:30:16:42:08:ec:fd:95:3b:0a:
                    be:ea:37:a0:06:71:cd:63:01:40:c1:a2:e6:bf:e3:
                    e6:e9:9b:82:21:7f:36:9b:4f:7a:35:ad:bd:cc:12:
                    fb:0a:f1:a5:bd:8a:3c:e1:bb:28:32:37:4e:c2:7b:
                    53:7c:d7:32:f5:9d:49:fe:55:1d:81:20:7d:ea:67:
                    e4:c5:5b:76:34:e9:58:e8:c7:e9:a0:9c:3b:cb:9c:
                    2e:a1:c8:8f:c9:4d:3d:b9:b0:58:ed:19:cd:d2:1b:
                    56:21:59:18:41:90:03:62:ac:f9:f1:3e:0a:c5:c8:
                    21:c3:b2:76:43:fb:f6:f9:d7:fb:83:54:d4:73:b7:
                    8b:a0:a1:44:d7:48:1f:ee:60:32:10:0c:6b:cd:60:
                    b9:a9:f4:44:c2:91:a6:7a:43:d5:e5:d2:be:e8:72:
                    2d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:49:AE:FC:DD:5A:2A:44:C7:C5:AB:97:1E:7B:CA:E1:76:58:C6:FF
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:86:22:ee:6e:06:46:0e:39:4b:49:56:30:22:1c:90:71:
         5d:b9:85:8d:f8:6f:b2:de:d5:c4:b0:8d:92:16:d7:3f:5f:f7:
         45:a4:93:d5:f7:eb:59:d8:63:bb:69:d4:b4:06:c2:70:a3:af:
         4e:dd:3d:5d:87:85:bf:d1:75:12:98:f4:85:b9:3f:1c:64:c5:
         e4:f1:de:08:93:d0:cb:09:d2:4b:8e:7b:44:a1:d2:8f:ce:7f:
         3a:5b:22:5c:a8:c3:23:34:03:65:de:9c:5b:25:fa:db:5e:f4:
         be:4e:12:62:a0:5b:18:65:b1:a4:73:e5:1f:ff:7f:2a:40:0a:
         74:6e:41:21:46:da:37:ab:f3:d2:dd:ba:a0:5f:b4:83:aa:df:
         04:31:81:41:f4:e7:dc:83:a6:84:ca:da:dc:d6:15:ca:d4:5c:
         64:17:e7:98:85:b8:6c:ef:a6:9f:d9:12:a5:d2:81:5d:46:41:
         9f:d8:d5:28:47:02:4f:db:a7:6e:5f:be:a8:3b:7a:66:67:9f:
         61:97:a0:00:ca:7e:58:43:c6:6c:3b:48:0d:bb:83:21:6e:ed:
         7b:35:2f:c9:bb:eb:ff:02:a7:8f:65:52:15:e5:61:63:c2:1e:
         f9:c4:1d:33:19:a3:ed:58:2a:b9:43:f2:84:51:fe:33:f8:2a:
         3d:8f:d7:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4
M0NCRTE4NjcwHhcNMjYwOTIyMTkwNTI5WhcNMjYwOTI5MTkwNTI5WjAYMRYwFAYD
VQQDEw02YWIyZDE3YS1hNDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA56rBtG8kna7B15gYqVHqrWnh7QQMkUSqOTxC5dybIcM00MfR8lNx/nE05A74
sgLZJk2EoI1dIsxH/qGeT3hP/WOTvlmjR/nx5l7mZ3e87XIiznOpFRXqiaEY0p0W
CEgwFkII7P2VOwq+6jegBnHNYwFAwaLmv+Pm6ZuCIX82m096Na29zBL7CvGlvYo8
4bsoMjdOwntTfNcy9Z1J/lUdgSB96mfkxVt2NOlY6MfpoJw7y5wuociPyU09ubBY
7RnN0htWIVkYQZADYqz58T4Kxcghw7J2Q/v2+df7g1TUc7eLoKFE10gf7mAyEAxr
zWC5qfREwpGmekPV5dK+6HItQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFARJrvzd
WipEx8Wrlx57yuF2WMb/MB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4
RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjQ5My81RkNBQjY3MjY4RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENX
MC0zWWdHRHRUWkdEeS1HR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApAqGIu5uBkYOOUtJVjAiHJBxXbmFjfhvst7VxLCNkhbXP1/3RaST1ffrWdhj
u2nUtAbCcKOvTt09XYeFv9F1Epj0hbk/HGTF5PHeCJPQywnSS457RKHSj85/Olsi
XKjDIzQDZd6cWyX62170vk4SYqBbGGWxpHPlH/9/KkAKdG5BIUbaN6vz0t26oF+0
g6rfBDGBQfTn3IOmhMra3NYVytRcZBfnmIW4bO+mn9kSpdKBXUZBn9jVKEcCT9un
bl++qDt6ZmefYZegAMp+WEPGbDtIDbuDIW7tezUvybvr/wKnj2VSFeVhY8Ie+cQd
Mxmj7VgquUPyhFH+M/gqPY/XbQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:35:40 2026 by rpki-client