Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
File:                     DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft (raw, json)
Hash identifier:          ok4Qib1ThC3eqdSA4rixVadHIepGTWkmYi1qOAYkzBc=
Subject key identifier:   F2:DD:B4:08:0E:46:D6:1F:C1:9A:BC:49:84:CE:C5:97:5E:6F:E2:B4
Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
Certificate issuer:       /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
Manifest number:          010C
Signing time:             Fri 25 Sep 2026 06:06:50 +0000
Manifest this update:     Fri 25 Sep 2026 06:06:50 +0000
Manifest next update:     Fri 02 Oct 2026 06:06:50 +0000
Files and hashes:         1: DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl (hash: nHQdIDPrbBx7LKVIckBIoek21tRIIAa5ryi9e5lTKfY=)
                          2: 6028335E86F911F084A9FF7FC4F9AE02.roa (hash: HfdNS1wfsXQ4sTjOLl19fnJyOg1OOpPzzn+pHOB9tDs=)
                          3: FDD4FA341E6111F0B8D45B79C4F9AE02.roa (hash: 3rUSEOVje0nxOIJndSfYAE6nSv8tZDCQx4I/9OfatPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
        Validity
            Not Before: Sep 25 06:06:50 2026 GMT
            Not After : Oct  2 06:06:50 2026 GMT
        Subject: CN=6ab60f7a-af31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:78:47:d3:61:fe:60:28:9f:99:6e:e7:ca:
                    34:80:39:65:0f:25:f1:9a:c7:41:86:34:da:43:75:
                    37:ee:9a:76:5a:44:c4:63:23:99:95:50:d3:c9:b7:
                    c4:4e:8c:f3:59:63:b4:72:3e:06:6d:5b:46:f6:47:
                    03:59:32:0e:d5:42:66:dd:85:68:e1:ce:83:b4:96:
                    aa:21:05:87:b0:65:fc:d5:9d:36:6c:9f:b7:54:93:
                    ae:09:0e:f6:2c:9a:3b:3a:e2:69:79:d4:67:63:1a:
                    61:3c:a6:f6:6b:48:a4:8b:64:4e:39:b7:fd:19:c9:
                    10:8a:14:09:80:58:6b:0f:60:24:96:67:29:e0:75:
                    3e:79:6f:ca:91:20:a5:78:b0:c6:74:af:d2:51:43:
                    17:10:6b:28:b7:d7:53:d5:f8:04:cc:4d:99:9c:d6:
                    ea:b1:04:71:a4:51:57:d3:48:30:e4:6d:67:86:47:
                    90:48:d3:fe:37:de:f9:6e:13:84:1a:af:c6:49:16:
                    2d:b7:6b:a0:c2:43:0d:64:6c:c0:e9:52:7d:d8:60:
                    52:b5:8d:4a:f3:bb:7c:28:dd:5b:4b:b7:5a:21:61:
                    6a:96:a5:cc:b6:52:32:e8:ec:09:d6:b2:60:57:4a:
                    0b:ca:d6:ff:48:4c:9b:29:49:8e:c0:f8:04:af:cc:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:B4:08:0E:46:D6:1F:C1:9A:BC:49:84:CE:C5:97:5E:6F:E2:B4
            X509v3 Authority Key Identifier:
                keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:d7:28:f1:e6:80:a7:dd:86:71:b0:9a:14:ff:76:a4:e5:
         d2:b5:4f:51:53:2d:88:24:b1:ed:8a:20:4b:4d:c1:de:ec:d9:
         f1:74:ab:d9:6e:0b:0b:b5:77:3f:e3:2e:87:db:f8:ed:5a:c9:
         8c:5d:38:92:c9:01:7c:83:1c:9c:db:a3:33:b9:08:78:93:03:
         ee:dc:0e:76:92:b3:ba:9e:01:0f:ed:21:92:1d:cf:bc:3b:d2:
         f5:70:83:01:6c:2d:83:db:e9:45:b7:7f:d4:55:cc:d5:3e:68:
         30:94:7b:9e:ac:a5:cb:b4:a1:27:06:86:3b:70:f9:93:79:8f:
         db:46:d9:9d:88:a5:a8:85:74:83:43:8e:27:e9:5d:4e:b0:9c:
         55:b2:70:21:b7:cc:5e:e7:35:46:69:55:d4:4d:4d:76:c6:f0:
         1d:24:60:8b:36:40:d5:fd:45:6e:35:7d:e7:d9:0a:f8:18:a7:
         0a:09:87:76:01:0e:ac:12:1d:28:48:1b:c3:e5:7e:57:0c:fd:
         10:09:c6:d9:8c:80:08:8c:ab:60:c8:68:15:f9:e4:ee:89:b6:
         3b:30:3e:71:ad:ab:02:08:c4:57:2e:fa:0f:e5:e4:19:95:39:
         1c:57:48:0e:f1:84:2e:c9:f2:30:65:72:20:f5:1b:37:64:fa:
         22:5d:25:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJDMDcxMTAvBgNVBAUTKDBDRTA2MEMyRTQzMEREODUxODEwQzlGMjBGRUMxQkEy
MTE5OUUzRDYwHhcNMjYwOTI1MDYwNjUwWhcNMjYxMDAyMDYwNjUwWjAYMRYwFAYD
VQQDEw02YWI2MGY3YS1hZjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApSZ4R9Nh/mAon5lu58o0gDllDyXxmsdBhjTaQ3U37pp2WkTEYyOZlVDTybfE
TozzWWO0cj4GbVtG9kcDWTIO1UJm3YVo4c6DtJaqIQWHsGX81Z02bJ+3VJOuCQ72
LJo7OuJpedRnYxphPKb2a0iki2ROObf9GckQihQJgFhrD2Aklmcp4HU+eW/KkSCl
eLDGdK/SUUMXEGsot9dT1fgEzE2ZnNbqsQRxpFFX00gw5G1nhkeQSNP+N975bhOE
Gq/GSRYtt2ugwkMNZGzA6VJ92GBStY1K87t8KN1bS7daIWFqlqXMtlIy6OwJ1rJg
V0oLytb/SEybKUmOwPgEr8wTfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLdtAgO
RtYfwZq8SYTOxZdeb+K0MB8GA1UdIwQYMBaAFAzgYMLkMN2FGBDJ8g/sG6IRmePW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkMwNy9BNzc0QTlDRTFF
NjAxMUYwQjdEQzc2NTRDNEY5QUUwMi9ET0Jnd3VRdzNZVVlFTW55RC13Ym9oR1o0
OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RPQmd3dVF3M1lVWUVNbnlELXdib2hHWjQ5WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkMwNy9BNzc0QTlDRTFFNjAxMUYwQjdEQzc2NTRDNEY5QUUwMi9ET0Jnd3VRdzNZ
VVlFTW55RC13Ym9oR1o0OVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAePPXKPHmgKfdhnGwmhT/dqTl0rVPUVMtiCSx7YogS03B3uzZ8XSr2W4LC7V3
P+Muh9v47VrJjF04kskBfIMcnNujM7kIeJMD7twOdpKzup4BD+0hkh3PvDvS9XCD
AWwtg9vpRbd/1FXM1T5oMJR7nqyly7ShJwaGO3D5k3mP20bZnYilqIV0g0OOJ+ld
TrCcVbJwIbfMXuc1RmlV1E1NdsbwHSRgizZA1f1FbjV959kK+BinCgmHdgEOrBId
KEgbw+V+Vwz9EAnG2YyACIyrYMhoFfnk7om2OzA+ca2rAgjEVy76D+XkGZU5HFdI
DvGELsnyMGVyIPUbN2T6Il0lbA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:14:10 2026 by rpki-client