Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
File:                     23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json)
Hash identifier:          jt47Xy1gnekB9UgWYuIGjcpgcISrcsft01cYOMMJdpo=
Subject key identifier:   5E:62:5D:35:AC:7B:87:BA:11:08:50:18:96:C3:5C:D3:25:3A:4F:A9
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Certificate issuer:       /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
Manifest number:          102F
Signing time:             Sat 26 Sep 2026 17:43:43 +0000
Manifest this update:     Sat 26 Sep 2026 17:43:43 +0000
Manifest next update:     Sat 03 Oct 2026 17:43:43 +0000
Files and hashes:         1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: xHCp+se2Ax393kmhQCT4VxhHgyuvsKPR998fwEv+UyA=)
                          2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: 8kaLAfVElFdAC99fHwGaunXXva1K/sV7AglDy8IxEuc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
                          rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
        Validity
            Not Before: Sep 26 17:43:43 2026 GMT
            Not After : Oct  3 17:43:43 2026 GMT
        Subject: CN=6ab8044f-f454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:00:06:be:c9:8f:a2:c9:1d:09:d1:02:8a:
                    e4:c5:81:50:df:b2:c1:ac:6c:50:f1:ed:30:44:bd:
                    da:bc:a5:d5:b3:77:f2:a6:24:dc:76:56:83:90:d1:
                    d5:bd:f5:e5:ca:b3:8e:6c:fc:e8:0d:04:d1:7d:fc:
                    0a:7b:fa:e9:50:f3:b9:03:96:bd:82:af:03:6c:a1:
                    57:b5:71:2b:4f:42:df:36:35:4c:fb:b8:cb:a8:b7:
                    ca:d9:cd:4e:fe:99:88:43:16:c0:14:9a:a1:be:67:
                    76:21:34:4d:99:5f:e1:21:fd:f5:b6:b2:b8:1f:c1:
                    35:88:3f:ac:32:37:60:b9:24:8e:99:df:14:b8:0a:
                    68:a6:ce:09:9c:07:80:5a:6e:4d:04:99:55:b9:fb:
                    06:a1:2a:f6:66:3e:f6:08:d1:f5:cc:c3:9f:86:6a:
                    70:43:8d:39:3b:c1:31:c9:97:0d:18:dc:f4:af:a6:
                    00:d1:51:49:af:e2:f0:13:f0:8f:e5:2a:11:76:61:
                    c1:63:7f:fc:1a:67:65:c7:79:36:79:eb:59:d8:ed:
                    59:11:20:56:84:6e:66:5e:18:df:ad:7a:2d:d1:b6:
                    78:97:8c:f2:bc:de:7e:26:ce:39:7d:74:fe:59:53:
                    d6:11:72:31:7d:ba:9f:b0:b7:a5:91:4c:a2:83:bb:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:62:5D:35:AC:7B:87:BA:11:08:50:18:96:C3:5C:D3:25:3A:4F:A9
            X509v3 Authority Key Identifier:
                keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5c:0c:f4:18:79:e9:f3:2e:42:f3:c8:7b:11:cc:58:19:dd:
         e3:e2:38:ee:21:6c:36:ac:ee:b2:6b:23:c1:cd:25:2e:a5:7f:
         59:32:0f:e6:8d:8c:26:4d:70:52:6a:6f:65:d9:17:6c:1c:02:
         05:32:7b:db:a7:fb:27:5b:68:c3:cb:df:69:80:3b:43:b3:8a:
         60:9c:60:e2:89:73:a5:2a:80:1e:55:82:83:9e:86:d7:7c:db:
         3f:7d:56:85:25:87:86:1a:6a:66:c8:e9:b2:f4:62:f3:a5:59:
         42:53:a3:43:81:b4:ae:cd:70:ee:19:1e:56:66:50:80:87:75:
         91:78:d2:9e:4f:93:d0:d7:f0:78:92:6b:9c:7f:a1:51:6b:b0:
         80:c5:f4:2e:6d:eb:83:77:74:c9:45:3a:8f:8c:6e:24:ef:0b:
         7e:21:92:cc:2b:d1:a8:e7:66:bd:75:d5:4c:12:1e:ab:49:b8:
         98:a9:4e:c6:53:cc:95:58:ef:46:23:71:3c:77:d9:76:a2:3d:
         5d:9f:ae:fa:a9:5b:db:87:69:c4:76:f3:85:c3:76:e1:cf:ff:
         fd:fe:e1:9c:63:30:f1:f4:09:30:6c:a7:d5:9f:e0:5d:e2:ac:
         ea:19:fb:73:68:41:2d:e5:a7:41:42:f2:81:b6:9a:53:b0:ea:
         e2:41:aa:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDcyQ0MxMTAvBgNVBAUTKERCNzhEOUY5MzU4RTU2N0QzMDZFRTNCRDFFQUM3NDhF
OTYwNkJGOEYwHhcNMjYwOTI2MTc0MzQzWhcNMjYxMDAzMTc0MzQzWjAYMRYwFAYD
VQQDEw02YWI4MDQ0Zi1mNDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxqEABr7Jj6LJHQnRAorkxYFQ37LBrGxQ8e0wRL3avKXVs3fypiTcdlaDkNHV
vfXlyrOObPzoDQTRffwKe/rpUPO5A5a9gq8DbKFXtXErT0LfNjVM+7jLqLfK2c1O
/pmIQxbAFJqhvmd2ITRNmV/hIf31trK4H8E1iD+sMjdguSSOmd8UuApops4JnAeA
Wm5NBJlVufsGoSr2Zj72CNH1zMOfhmpwQ405O8ExyZcNGNz0r6YA0VFJr+LwE/CP
5SoRdmHBY3/8Gmdlx3k2eetZ2O1ZESBWhG5mXhjfrXot0bZ4l4zyvN5+Js45fXT+
WVPWEXIxfbqfsLelkUyig7vHXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF5iXTWs
e4e6EQhQGJbDXNMlOk+pMB8GA1UdIwQYMBaAFNt42fk1jlZ9MG7jvR6sdI6WBr+P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz
NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1ZuMHdidU85SHF4MGpwWUd2
NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzIzalotVFdPVm4wd2J1TzlIcXgwanBZR3Y0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1Zu
MHdidU85SHF4MGpwWUd2NDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALFwM9Bh56fMuQvPIexHMWBnd4+I47iFsNqzusmsjwc0lLqV/WTIP5o2MJk1w
UmpvZdkXbBwCBTJ726f7J1tow8vfaYA7Q7OKYJxg4olzpSqAHlWCg56G13zbP31W
hSWHhhpqZsjpsvRi86VZQlOjQ4G0rs1w7hkeVmZQgId1kXjSnk+T0NfweJJrnH+h
UWuwgMX0Lm3rg3d0yUU6j4xuJO8LfiGSzCvRqOdmvXXVTBIeq0m4mKlOxlPMlVjv
RiNxPHfZdqI9XZ+u+qlb24dpxHbzhcN24c///f7hnGMw8fQJMGyn1Z/gXeKs6hn7
c2hBLeWnQULygbaaU7Dq4kGqNg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:19:49 2026 by rpki-client