Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
File:                     7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json)
Hash identifier:          AIT8iXE7cbF5kpk0HbTl9PrT0VZ2l7LE0KxDSS5my3A=
Subject key identifier:   78:8F:A2:27:3A:24:85:88:70:30:62:D1:EF:D3:C3:48:32:D0:9E:3A
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Certificate issuer:       /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial:       029E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
Manifest number:          0287
Signing time:             Fri 25 Sep 2026 02:05:16 +0000
Manifest this update:     Fri 25 Sep 2026 02:05:15 +0000
Manifest next update:     Fri 02 Oct 2026 02:05:15 +0000
Files and hashes:         1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: +enoNB4jDyYJ7FnegRCbh9uB5TH/UxbBMrCe9hpBMyU=)
                          2: bWGJXuuqJMcQM-lFvXq-3Lg6wr8.asa (hash: RfLYtZj4X5BF1ZyAY4I1p9QAM2RVSMuSfbxQ5HpibCY=)
                          3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: oXr+vmkmATSoU0utBEAVuOzrUcdZ9gNuCzhDxhz21iY=)
                          4: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: V6SrxQGUuxMhaHjz0uz3/Z2ziHbiF2Bwsg8Gikl9lKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
                          rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
        Validity
            Not Before: Sep 25 02:05:15 2026 GMT
            Not After : Oct  2 02:05:15 2026 GMT
        Subject: CN=6ab5d6dc-aeac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:20:cd:d1:11:ca:aa:39:b6:e9:26:08:77:
                    6f:6a:00:30:16:b3:87:27:0a:e6:8f:5a:aa:fb:da:
                    7a:b9:b9:01:31:89:5e:fc:d5:06:b1:73:07:34:5b:
                    7e:e2:19:90:80:0e:67:34:92:65:86:c3:0e:a1:3a:
                    ae:83:7f:c6:6f:66:15:39:88:9f:01:94:56:4d:53:
                    d5:4d:e7:78:0f:36:b3:c7:61:63:4d:a4:f1:f7:de:
                    9a:65:0f:0f:82:49:e4:fd:63:de:f8:dd:c0:ff:70:
                    17:dc:ac:a5:06:b9:f9:60:c0:a8:67:f2:76:6a:b6:
                    10:d4:05:da:f9:98:5a:d8:4f:3b:51:7c:a0:f9:87:
                    37:9c:0b:66:e0:51:8c:4a:a0:f6:6f:1f:f7:18:18:
                    a5:2c:67:86:64:9f:20:d8:99:b9:d1:8e:78:c7:42:
                    3c:c9:2d:ca:24:87:28:e3:73:e0:2c:54:10:b3:62:
                    c6:a0:5c:1f:d2:1f:b9:57:d7:97:5d:58:d4:bb:87:
                    70:a6:f6:4e:ab:97:71:8f:c5:f3:8b:8c:04:da:b4:
                    a8:b8:1c:43:5a:ab:d6:ae:97:69:97:73:d5:7a:95:
                    15:f7:3a:81:f7:34:be:a9:f6:0b:fa:db:39:07:86:
                    8d:b2:ad:75:56:79:4b:83:d1:d2:c7:b9:83:f4:b8:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8F:A2:27:3A:24:85:88:70:30:62:D1:EF:D3:C3:48:32:D0:9E:3A
            X509v3 Authority Key Identifier:
                keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:52:56:d1:f1:e0:00:a8:d5:6f:20:4b:dc:a2:aa:81:c7:
         66:a0:29:e3:fe:23:e8:13:f9:da:ac:f2:0e:f6:25:0a:7e:e3:
         7a:a9:29:4a:27:28:e8:d6:3e:47:f7:fb:0d:52:09:57:de:8d:
         80:89:44:05:f7:59:e7:27:df:ad:5a:2c:1b:58:8d:7f:24:80:
         84:72:04:f4:d0:e9:16:4f:ce:20:a2:ad:3a:9c:9b:33:14:ca:
         fd:c0:26:58:e9:91:84:2d:a3:bd:29:ef:55:9a:9e:b8:3e:51:
         5b:c3:ca:a6:0d:1c:92:c5:03:ac:ed:b3:28:cb:b5:8d:03:15:
         7b:f0:65:95:e4:81:a4:ea:20:94:02:31:08:44:6d:b5:68:8f:
         ec:b0:1f:f9:8a:fb:7c:60:17:d4:b6:48:13:dc:34:e3:5d:8b:
         a8:49:e5:96:c9:d2:e2:04:35:36:0d:a3:5b:ec:ca:72:a1:79:
         08:b9:ab:85:a7:d5:d2:44:ae:bb:b5:de:0c:58:97:77:d5:c5:
         9c:df:42:43:11:a8:aa:1e:be:58:e3:29:08:13:f2:1d:fd:00:
         a7:0e:7f:01:e1:c1:3c:6f:34:cf:ec:3e:77:e3:f4:71:99:b3:
         69:b7:52:f5:a0:c6:d3:f8:9b:0c:97:40:bc:f1:23:33:b1:ba:
         a1:82:29:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0
NzgxQzYxRkQwHhcNMjYwOTI1MDIwNTE1WhcNMjYxMDAyMDIwNTE1WjAYMRYwFAYD
VQQDEw02YWI1ZDZkYy1hZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv18gzdERyqo5tukmCHdvagAwFrOHJwrmj1qq+9p6ubkBMYle/NUGsXMHNFt+
4hmQgA5nNJJlhsMOoTqug3/Gb2YVOYifAZRWTVPVTed4Dzazx2FjTaTx996aZQ8P
gknk/WPe+N3A/3AX3KylBrn5YMCoZ/J2arYQ1AXa+Zha2E87UXyg+Yc3nAtm4FGM
SqD2bx/3GBilLGeGZJ8g2Jm50Y54x0I8yS3KJIco43PgLFQQs2LGoFwf0h+5V9eX
XVjUu4dwpvZOq5dxj8Xzi4wE2rSouBxDWqvWrpdpl3PVepUV9zqB9zS+qfYL+ts5
B4aNsq11VnlLg9HSx7mD9LigZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiPoic6
JIWIcDBi0e/Tw0gy0J46MB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw
M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ
ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ
OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU/tSVtHx4ACo1W8gS9yiqoHHZqAp4/4j6BP52qzyDvYlCn7jeqkpSico6NY+
R/f7DVIJV96NgIlEBfdZ5yffrVosG1iNfySAhHIE9NDpFk/OIKKtOpybMxTK/cAm
WOmRhC2jvSnvVZqeuD5RW8PKpg0cksUDrO2zKMu1jQMVe/BlleSBpOoglAIxCERt
tWiP7LAf+Yr7fGAX1LZIE9w0412LqEnllsnS4gQ1Ng2jW+zKcqF5CLmrhafV0kSu
u7XeDFiXd9XFnN9CQxGoqh6+WOMpCBPyHf0Apw5/AeHBPG80z+w+d+P0cZmzabdS
9aDG0/ibDJdAvPEjM7G6oYIpHA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:57:53 2026 by rpki-client