Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
File:                     MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json)
Hash identifier:          hjllwGzE8nFfvabeViqEEOi59PAnoeKBFSZhUrUGr1M=
Subject key identifier:   E4:70:34:AC:6F:28:B9:28:98:AD:8D:79:C5:D5:BC:4D:B8:73:4D:FB
Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC
Certificate issuer:       /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
Certificate serial:       1A11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
Manifest number:          1A03
Signing time:             Tue 22 Sep 2026 16:17:43 +0000
Manifest this update:     Tue 22 Sep 2026 16:17:42 +0000
Manifest next update:     Tue 29 Sep 2026 16:17:42 +0000
Files and hashes:         1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: h8JFHbZfObr3QW/HWuXRWsTdrdBw/pWTHHE2UqSc8F0=)
                          2: AE929D88823711E782F9A440C4F9AE02.roa (hash: 4QvDkkcufgwUo4jkhq66G8p+VgeOgchdcUijfjmg00c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6673 (0x1a11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
        Validity
            Not Before: Sep 22 16:17:42 2026 GMT
            Not After : Sep 29 16:17:42 2026 GMT
        Subject: CN=6ab2aa27-850e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:cf:fd:7f:f0:65:6c:19:a4:12:74:b2:8a:
                    eb:1c:87:5a:10:b6:30:f4:56:c5:21:39:37:28:cc:
                    68:36:d0:df:65:a8:50:97:ae:3a:d2:49:09:bb:e1:
                    81:e0:ed:38:f7:c6:d5:9d:42:7b:9a:bc:02:1f:fc:
                    0d:74:9f:33:d6:bc:be:23:eb:40:23:d8:89:fb:82:
                    cd:27:14:9c:2f:fe:53:55:d3:ec:ec:ee:2c:b8:5b:
                    13:ae:09:bd:a6:29:7f:c6:6f:af:aa:52:0f:87:8e:
                    d2:e9:9d:e2:b2:d3:13:fc:42:11:31:70:a0:8e:aa:
                    9c:55:c6:67:44:0a:cc:89:09:c4:df:ad:b2:52:72:
                    41:41:55:ad:63:eb:ed:42:21:53:af:22:72:e0:10:
                    f9:f4:02:ea:a2:54:23:63:98:8c:6d:34:63:fc:a3:
                    e9:be:5f:58:9b:2a:17:e9:e0:89:c9:d3:ca:d3:d2:
                    37:9c:3d:7c:01:17:6c:17:da:ff:34:24:aa:11:c6:
                    84:d8:89:ff:69:02:16:61:24:0c:97:97:8b:b0:69:
                    9c:94:d6:1a:07:9a:fc:4d:d3:a2:42:01:5e:43:f7:
                    51:54:e5:4f:d4:55:45:0e:32:8b:84:aa:7a:a8:f8:
                    71:f4:35:5c:43:24:f7:d9:29:8e:bb:49:ef:46:b7:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:70:34:AC:6F:28:B9:28:98:AD:8D:79:C5:D5:BC:4D:B8:73:4D:FB
            X509v3 Authority Key Identifier:
                keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:70:cb:10:4c:d5:91:c4:6b:c0:3f:24:30:2b:df:55:a6:8b:
         61:a5:67:32:4a:b5:ab:ff:45:74:fb:6e:bb:a2:cf:63:ea:91:
         ab:33:16:fe:29:b7:9c:8c:6c:12:9d:57:a9:6c:80:a6:1e:58:
         cc:4c:d4:23:1e:ff:06:90:84:9b:8c:3e:07:49:26:87:e0:ec:
         12:44:24:c1:4b:1c:4c:b2:93:22:11:3d:92:6f:e7:55:fb:e2:
         d2:bb:6b:3a:6d:24:e0:5f:fc:74:2f:24:fa:d8:a8:61:8a:dd:
         1d:dc:51:af:5f:2a:09:3d:0a:25:87:3e:6d:fc:42:74:8d:b8:
         fd:5d:45:c1:c5:49:9d:c8:1d:54:1e:0e:f9:7b:d2:e8:69:dc:
         3b:8d:16:02:aa:92:1d:5e:78:3f:1b:a0:c5:db:14:1b:11:f2:
         6a:7c:28:0a:ce:e7:e2:1e:bd:f0:64:66:6e:13:95:c3:8e:f0:
         e7:e0:40:53:cb:b6:23:d6:8c:e6:cf:9c:33:c1:b7:7a:84:40:
         9b:3c:2a:65:8c:85:11:2b:41:13:55:6e:9a:d0:57:d5:65:4d:
         32:84:49:2e:88:bc:13:ff:1a:a3:62:ed:f3:93:3d:a7:78:92:
         56:9c:23:0c:dd:76:74:98:f4:b6:dc:67:eb:c4:a4:af:cb:5a:
         8b:b8:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:48:49 2026 by rpki-client