Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
File:                     MQjy14qQC-lzk3j4GKWpYcpRLEs.mft (raw, json)
Hash identifier:          Z3UfaGs6QIIASrbIptogZ6Pe7Zm7qRn62ywCj8WdNmo=
Subject key identifier:   C1:DA:5B:16:34:4E:A4:1B:8B:03:C2:0C:42:79:5C:C0:64:C3:76:31
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Certificate issuer:       /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
Manifest number:          80
Signing time:             Sun 27 Sep 2026 08:16:50 +0000
Manifest this update:     Sun 27 Sep 2026 08:16:50 +0000
Manifest next update:     Sun 04 Oct 2026 08:16:50 +0000
Files and hashes:         1: MQjy14qQC-lzk3j4GKWpYcpRLEs.crl (hash: eABbZkvqca7UmhfPHO91tGKbHlzJ2BUizlgPfyVapCs=)
                          2: B3695572FD9E11F087EE26735F6F56BC.roa (hash: GHquDvrVernkx6CK6w3aPHXc9JWjY2SOp7uJA02vMok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
                          rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
        Validity
            Not Before: Sep 27 08:16:50 2026 GMT
            Not After : Oct  4 08:16:50 2026 GMT
        Subject: CN=6ab8d0f2-f66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:d4:54:ec:58:28:2e:90:70:c2:17:0d:39:
                    cb:85:54:bb:ff:bc:e3:7d:0a:d9:ff:bf:20:98:60:
                    8d:b7:8d:1f:90:12:a3:30:ff:78:28:82:9a:ae:d7:
                    11:d9:a6:b9:43:b0:7f:15:fe:65:98:41:ee:7e:a1:
                    25:cc:59:de:80:e5:f8:bb:4d:fc:32:73:e9:b2:3e:
                    c1:0b:97:d1:1d:04:f2:5d:35:61:f4:c5:d0:d7:fe:
                    4e:b7:f2:41:85:b0:dd:cb:66:ad:81:42:bc:55:a4:
                    0c:9c:41:49:b8:10:50:3f:d0:7d:fe:9f:b0:3e:a0:
                    6f:66:00:d4:a2:fa:5b:28:80:ae:b9:ba:a0:f5:68:
                    d5:0e:24:85:e2:67:b3:d3:d9:c5:05:37:80:0b:08:
                    41:eb:bc:4c:0c:77:41:39:dd:a3:89:fb:35:ee:29:
                    71:ad:ca:4f:81:0b:42:eb:dc:91:7d:da:00:81:90:
                    5d:33:05:a6:8c:97:05:29:8a:84:f9:73:c9:e2:b3:
                    c9:86:2e:ff:ec:00:e0:2f:63:11:84:2f:bd:93:7b:
                    ab:1a:1c:13:78:e6:ab:43:9b:90:18:34:44:e8:11:
                    17:8d:c1:a6:85:55:1f:67:98:b4:a3:4b:98:b2:f5:
                    6d:7a:52:fe:cf:fa:4c:f7:99:c2:8b:50:71:06:5c:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DA:5B:16:34:4E:A4:1B:8B:03:C2:0C:42:79:5C:C0:64:C3:76:31
            X509v3 Authority Key Identifier:
                keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6e:f0:c8:fa:1b:02:9f:48:84:91:86:0c:25:c6:62:01:3c:
         04:07:63:eb:99:ed:92:1b:12:96:9d:4e:45:9c:11:88:fa:f1:
         d4:68:b6:55:78:44:d4:cc:f8:77:b9:d2:08:5c:b6:73:ff:69:
         ba:26:4c:4b:03:0c:7f:ad:0a:80:ad:58:ce:8b:88:0b:07:6b:
         ef:4b:ee:5d:c8:df:3b:bc:0a:31:fe:b1:c8:70:de:0c:b3:42:
         47:03:ce:f7:48:f2:2f:2e:18:25:15:10:e7:11:f7:e1:d4:43:
         0f:75:f3:33:56:fd:00:46:94:b9:78:eb:46:02:b0:bb:31:42:
         25:7b:18:8f:f6:1c:c2:be:83:19:a8:e0:db:7d:59:c5:9e:1c:
         74:c9:3c:c5:63:e7:02:ed:17:53:63:ba:33:55:cd:0d:5b:ef:
         d6:41:cc:28:60:20:56:33:6f:4c:8f:de:52:c6:6a:99:e0:6c:
         25:bd:46:c8:1a:d1:47:05:16:36:b2:76:f8:7e:91:d4:45:cf:
         42:8e:97:09:a4:2e:ae:3b:10:5e:58:21:24:a6:2d:e0:b7:f2:
         b8:2d:73:2a:12:a9:7b:45:98:1e:a5:1f:94:9a:2a:93:30:9e:
         d9:07:ee:c2:ed:c8:0a:56:68:69:da:91:3d:64:a8:6e:db:1c:
         11:c1:76:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA0RTExMTAvBgNVBAUTKDMxMDhGMkQ3OEE5MDBCRTk3MzkzNzhGODE4QTVBOTYx
Q0E1MTJDNEIwHhcNMjYwOTI3MDgxNjUwWhcNMjYxMDA0MDgxNjUwWjAYMRYwFAYD
VQQDEw02YWI4ZDBmMi1mNjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw37UVOxYKC6QcMIXDTnLhVS7/7zjfQrZ/78gmGCNt40fkBKjMP94KIKartcR
2aa5Q7B/Ff5lmEHufqElzFnegOX4u038MnPpsj7BC5fRHQTyXTVh9MXQ1/5Ot/JB
hbDdy2atgUK8VaQMnEFJuBBQP9B9/p+wPqBvZgDUovpbKICuubqg9WjVDiSF4mez
09nFBTeACwhB67xMDHdBOd2jifs17ilxrcpPgQtC69yRfdoAgZBdMwWmjJcFKYqE
+XPJ4rPJhi7/7ADgL2MRhC+9k3urGhwTeOarQ5uQGDRE6BEXjcGmhVUfZ5i0o0uY
svVtelL+z/pM95nCi1BxBlxkZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHaWxY0
TqQbiwPCDEJ5XMBkw3YxMB8GA1UdIwQYMBaAFDEI8teKkAvpc5N4+BilqWHKUSxL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRFMS8xQzQ4RDhFOEZE
OUUxMUYwQkZDOTYyNzE1RjZGNTZCQy9NUWp5MTRxUUMtbHprM2o0R0tXcFljcFJM
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01RankxNHFRQy1semszajRHS1dwWWNwUkxFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDRFMS8xQzQ4RDhFOEZEOUUxMUYwQkZDOTYyNzE1RjZGNTZCQy9NUWp5MTRxUUMt
bHprM2o0R0tXcFljcFJMRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUG7wyPobAp9IhJGGDCXGYgE8BAdj65ntkhsSlp1ORZwRiPrx1Gi2VXhE1Mz4
d7nSCFy2c/9puiZMSwMMf60KgK1YzouICwdr70vuXcjfO7wKMf6xyHDeDLNCRwPO
90jyLy4YJRUQ5xH34dRDD3XzM1b9AEaUuXjrRgKwuzFCJXsYj/Ycwr6DGajg231Z
xZ4cdMk8xWPnAu0XU2O6M1XNDVvv1kHMKGAgVjNvTI/eUsZqmeBsJb1GyBrRRwUW
NrJ2+H6R1EXPQo6XCaQurjsQXlghJKYt4LfyuC1zKhKpe0WYHqUflJoqkzCe2Qfu
wu3IClZoadqRPWSobtscEcF2lw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 05:07:55 2026 by rpki-client