Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File:                     c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier:          +4d5uVhqFLnjlS4sIsHjz4uGLGHBjcFG8/fFCMz+kB0=
Subject key identifier:   35:34:D7:9C:7F:56:A4:41:A0:FC:E1:3F:31:94:8E:6B:20:E9:15:B1
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer:       /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number:          0218
Signing time:             Wed 23 Sep 2026 02:58:25 +0000
Manifest this update:     Wed 23 Sep 2026 02:58:24 +0000
Manifest next update:     Wed 30 Sep 2026 02:58:24 +0000
Files and hashes:         1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: c5niF3qobc2s2SA2MtLB56cTexTbLbVXqsj/kz/pTGw=)
                          2: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: 8yTgCW80fS9RiDmTjH0LHC/3QVMaSdsaZOMAcY3WXTc=)
                          3: 69F88E142C4011F1854404C0A3833773.roa (hash: ov1naSwaJOqZ4OJeKa4jgjcNyFHiKtIVi5npQW74gUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
                          rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
        Validity
            Not Before: Sep 23 02:58:24 2026 GMT
            Not After : Sep 30 02:58:24 2026 GMT
        Subject: CN=6ab34051-552c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2a:5c:e6:17:cf:db:a0:19:30:69:5a:4f:3a:
                    19:79:f5:5e:9e:dd:f6:ae:9d:57:ff:72:8e:e8:28:
                    95:cc:42:a4:5a:8d:19:34:14:5f:b7:4c:e2:73:16:
                    7a:e7:59:28:3c:76:c4:93:7e:4a:f3:d1:da:b9:2f:
                    f7:d3:dc:47:e5:03:21:49:b6:b4:81:b7:68:7f:57:
                    88:3d:a0:9b:cc:5e:fd:d3:28:ab:04:56:1c:4e:f8:
                    09:00:f3:c1:e7:51:bd:82:cc:ab:2d:e3:a9:88:a4:
                    50:28:c6:2c:f0:71:43:4e:70:f3:51:56:39:be:91:
                    63:a8:3a:21:62:aa:8f:47:63:5b:cf:59:b7:fb:7e:
                    e8:14:10:e8:91:0f:5c:2c:ef:02:2b:71:6b:63:ea:
                    ae:d0:a1:24:d9:1e:68:59:7c:71:58:25:3b:29:d3:
                    fb:a0:ac:a2:4d:ee:98:e2:1e:c5:f4:ad:39:95:8f:
                    56:2f:34:cd:5d:f2:b1:0f:64:56:9c:3d:aa:d3:f7:
                    a2:d5:3c:1d:b9:59:b2:bd:24:82:7c:36:69:7c:5a:
                    76:f3:f3:68:8c:78:2f:aa:9b:fc:6d:75:cc:a3:1e:
                    c5:93:c7:27:22:47:78:9f:42:d8:2e:5a:28:11:03:
                    7d:e0:1a:2f:e2:de:4a:67:5c:66:66:b8:70:ec:16:
                    25:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:34:D7:9C:7F:56:A4:41:A0:FC:E1:3F:31:94:8E:6B:20:E9:15:B1
            X509v3 Authority Key Identifier:
                keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:15:c5:d5:64:96:6d:36:5f:2c:72:37:0f:db:27:e8:5f:0f:
         8a:c7:a4:63:fe:c2:ce:bf:1e:27:50:27:45:05:ac:96:6c:0a:
         a2:e6:fe:50:bd:b4:be:19:9a:cb:53:13:70:41:6e:b4:62:12:
         a6:7c:99:05:3d:fd:56:5c:64:75:77:b3:26:b5:7a:56:22:17:
         d4:e6:41:4f:2a:80:55:67:6c:7d:3c:52:5d:72:5f:0f:93:20:
         f8:21:2b:05:8f:a6:c0:9e:32:a2:af:e8:e7:c9:18:da:09:a4:
         e2:89:fd:fd:91:9a:0e:37:27:d0:34:f4:ec:91:08:b9:9c:0d:
         75:1e:65:68:bc:13:73:5e:66:f2:4f:27:90:89:48:cd:1b:2c:
         c3:dd:60:33:10:49:a9:db:3b:21:b9:24:5b:12:2d:e4:0c:9b:
         08:20:51:65:86:d2:56:19:dd:f8:c3:55:30:3d:08:39:8e:38:
         b7:21:12:5d:6f:97:46:3f:ad:b1:e9:29:01:b1:c4:b5:19:e8:
         db:ef:b5:85:5d:cc:ed:6b:a0:0b:26:21:df:7a:e3:68:2c:34:
         79:0f:28:6b:87:f6:cb:00:8d:75:e8:87:3a:8b:4b:cf:ed:0c:
         2e:53:74:da:9b:c5:9f:4b:67:c5:f1:fc:bb:59:88:e1:b5:01:
         1b:1a:6a:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4
MDgwRTk3MzAwHhcNMjYwOTIzMDI1ODI0WhcNMjYwOTMwMDI1ODI0WjAYMRYwFAYD
VQQDEw02YWIzNDA1MS01NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ypc5hfP26AZMGlaTzoZefVent32rp1X/3KO6CiVzEKkWo0ZNBRft0zicxZ6
51koPHbEk35K89HauS/309xH5QMhSba0gbdof1eIPaCbzF790yirBFYcTvgJAPPB
51G9gsyrLeOpiKRQKMYs8HFDTnDzUVY5vpFjqDohYqqPR2Nbz1m3+37oFBDokQ9c
LO8CK3FrY+qu0KEk2R5oWXxxWCU7KdP7oKyiTe6Y4h7F9K05lY9WLzTNXfKxD2RW
nD2q0/ei1TwduVmyvSSCfDZpfFp28/NojHgvqpv8bXXMox7Fk8cnIkd4n0LYLloo
EQN94Bov4t5KZ1xmZrhw7BYl0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDU015x/
VqRBoPzhPzGUjmsg6RWxMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD
RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE
eVFBUFpmY0Z5VzZBZ09sekEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdhXF1WSWbTZfLHI3D9sn6F8PisekY/7Czr8eJ1AnRQWslmwKoub+UL20vhma
y1MTcEFutGISpnyZBT39VlxkdXezJrV6ViIX1OZBTyqAVWdsfTxSXXJfD5Mg+CEr
BY+mwJ4yoq/o58kY2gmk4on9/ZGaDjcn0DT07JEIuZwNdR5laLwTc15m8k8nkIlI
zRssw91gMxBJqds7IbkkWxIt5AybCCBRZYbSVhnd+MNVMD0IOY44tyESXW+XRj+t
sekpAbHEtRno2++1hV3M7WugCyYh33rjaCw0eQ8oa4f2ywCNdeiHOotLz+0MLlN0
2pvFn0tnxfH8u1mI4bUBGxpqXQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:22:21 2026 by rpki-client