Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
File:                     2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft (raw, json)
Hash identifier:          VeSgRXxU1KheSbM+MHYU6ZYRWb9/ShXKW1e+g4E3J6w=
Subject key identifier:   E1:5A:3D:01:1D:3E:D6:97:EA:AD:02:F1:F6:AF:3D:4B:5D:E6:BD:72
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Certificate issuer:       /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
Manifest number:          B7
Signing time:             Wed 23 Sep 2026 06:48:07 +0000
Manifest this update:     Wed 23 Sep 2026 06:48:06 +0000
Manifest next update:     Wed 30 Sep 2026 06:48:06 +0000
Files and hashes:         1: 2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl (hash: o3/a6ZUB0Jid3xKj5NKKyk4+9B3E6krsYMNVwRaGmt0=)
                          2: 39FF8508738211F1B422FE586CA30FBC.roa (hash: RPhN7NCY5097529W89+5q3UwkqjueIe7ky2HFF/vGtQ=)
                          3: AE11F062738111F18BB794EF6BA30FBC.roa (hash: s9d5gC7hYaCvUgvmb9o9rutS4rMSCmVuPTuxjMy4QDw=)
                          4: 22F249F2899611F1B0B035B43911F970.roa (hash: oZYYlZ0lHZLtiZ1LM6QQKnCi3gZIOsKSkb1+bXM96No=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
                          rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
        Validity
            Not Before: Sep 23 06:48:06 2026 GMT
            Not After : Sep 30 06:48:06 2026 GMT
        Subject: CN=6ab37626-e60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:8a:4f:7d:5e:8e:a7:12:ea:73:69:e1:fa:
                    79:9e:70:b2:7f:9b:a2:66:a1:10:a6:91:14:71:db:
                    63:d3:ee:46:ac:9d:84:f7:7a:15:9a:ad:2e:76:a2:
                    a6:f7:3c:f8:11:3b:84:11:a8:ab:cb:4b:6a:ae:03:
                    95:20:8c:38:ad:bf:1e:3c:0d:91:a1:b4:28:ef:3d:
                    6d:d5:38:25:54:49:15:b4:7f:73:63:ab:3d:1e:f3:
                    80:fe:b3:5f:ec:78:92:67:3a:b0:b8:ef:4d:82:f6:
                    9d:64:0e:38:25:e4:23:b5:22:5b:2a:57:da:ec:d1:
                    1f:db:81:b0:81:08:91:bb:9f:19:eb:8e:4e:01:e0:
                    be:f9:e6:4e:65:cf:d0:db:c3:18:4a:da:8b:9e:69:
                    bb:00:b7:04:d7:48:34:98:d0:dd:a1:c2:98:70:c7:
                    3d:c3:eb:1b:1d:b6:94:f8:9d:4e:f3:3c:52:33:3f:
                    1e:d2:14:f4:a1:0f:33:25:f3:c5:73:04:25:b7:45:
                    67:7b:89:ac:2e:d6:98:2f:e9:9c:c8:ae:47:8f:37:
                    47:03:a9:4d:24:77:93:65:d6:22:02:2e:73:eb:bc:
                    6c:b2:71:4b:b5:53:9a:e5:ad:bd:7b:5a:35:ff:77:
                    83:26:93:81:31:1b:c9:c7:8a:75:14:5c:9d:06:04:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5A:3D:01:1D:3E:D6:97:EA:AD:02:F1:F6:AF:3D:4B:5D:E6:BD:72
            X509v3 Authority Key Identifier:
                keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:e2:ae:79:2e:c5:97:4a:78:dd:2a:7d:60:04:8a:12:2f:18:
         12:0c:9c:1a:32:51:86:b0:ff:8c:3b:4c:65:d0:36:97:ec:77:
         14:4a:22:18:f1:51:62:f2:3a:ef:97:b2:79:63:ae:c4:fe:df:
         71:d3:20:d4:f3:31:e9:cf:47:92:54:87:8c:b9:f5:23:ba:0b:
         c0:8d:60:0b:80:1d:40:be:c5:b4:fd:ca:76:ed:d4:9f:2d:43:
         67:aa:76:27:79:1e:98:40:ec:44:71:c5:81:26:96:b0:be:38:
         e6:c4:4b:de:4c:21:1c:69:73:c5:8a:30:af:fe:e5:3f:fb:82:
         7b:f3:ee:f4:41:05:cc:d7:c4:a0:46:54:ac:21:41:74:35:58:
         5d:47:fc:ad:37:58:44:2a:7b:7d:b1:20:71:22:81:e0:20:6a:
         6f:35:f4:1a:ed:52:02:b3:2b:a0:be:8b:0d:7b:07:a6:e2:74:
         00:9f:31:0c:0a:c2:6e:13:c4:b4:a4:e1:19:2f:b6:8b:d7:e4:
         d6:72:ec:88:67:01:8e:f1:73:db:c5:82:c2:61:81:c5:88:b3:
         8f:99:92:71:83:c5:fa:ea:2a:5d:fd:03:8a:44:a4:27:7c:1d:
         af:ae:60:7a:9f:8d:04:c0:85:3e:8b:d8:eb:ea:35:d2:bb:02:
         fa:99:0b:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgwMkMxMTAvBgNVBAUTKERBMEE1MUJBMjYzMTU3NzlCRjZGODNFRkYwMzRGMjYw
MTA1QzUxMTkwHhcNMjYwOTIzMDY0ODA2WhcNMjYwOTMwMDY0ODA2WjAYMRYwFAYD
VQQDEw02YWIzNzYyNi1lNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoceKT31ejqcS6nNp4fp5nnCyf5uiZqEQppEUcdtj0+5GrJ2E93oVmq0udqKm
9zz4ETuEEairy0tqrgOVIIw4rb8ePA2RobQo7z1t1TglVEkVtH9zY6s9HvOA/rNf
7HiSZzqwuO9NgvadZA44JeQjtSJbKlfa7NEf24GwgQiRu58Z645OAeC++eZOZc/Q
28MYStqLnmm7ALcE10g0mNDdocKYcMc9w+sbHbaU+J1O8zxSMz8e0hT0oQ8zJfPF
cwQlt0Vne4msLtaYL+mcyK5HjzdHA6lNJHeTZdYiAi5z67xssnFLtVOa5a29e1o1
/3eDJpOBMRvJx4p1FFydBgRJYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFaPQEd
PtaX6q0C8favPUtd5r1yMB8GA1UdIwQYMBaAFNoKUbomMVd5v2+D7/A08mAQXFEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODAyQy8wMjM0NUY5NEE5
QkMxMUYwOTc1NjREMUJDNEY5QUUwMi8yZ3BSdWlZeFYzbV9iNFB2OERUeVlCQmNV
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJncFJ1aVl4VjNtX2I0UHY4RFR5WUJCY1VSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODAyQy8wMjM0NUY5NEE5QkMxMUYwOTc1NjREMUJDNEY5QUUwMi8yZ3BSdWlZeFYz
bV9iNFB2OERUeVlCQmNVUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1OKueS7Fl0p43Sp9YASKEi8YEgycGjJRhrD/jDtMZdA2l+x3FEoiGPFRYvI6
75eyeWOuxP7fcdMg1PMx6c9HklSHjLn1I7oLwI1gC4AdQL7FtP3Kdu3Uny1DZ6p2
J3kemEDsRHHFgSaWsL445sRL3kwhHGlzxYowr/7lP/uCe/Pu9EEFzNfEoEZUrCFB
dDVYXUf8rTdYRCp7fbEgcSKB4CBqbzX0Gu1SArMroL6LDXsHpuJ0AJ8xDArCbhPE
tKThGS+2i9fk1nLsiGcBjvFz28WCwmGBxYizj5mScYPF+uoqXf0DikSkJ3wdr65g
ep+NBMCFPovY6+o10rsC+pkLYQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:32:11 2026 by rpki-client