Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
File:                     aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft (raw, json)
Hash identifier:          pGS6+8QlRfSh4I04BKBjWEAXRQ1ehWUyoBKpeYtH0gk=
Subject key identifier:   EA:77:33:65:35:74:B9:71:A7:BC:4A:CC:C1:FB:40:8D:44:7F:DE:87
Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A
Certificate issuer:       /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
Certificate serial:       04BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
Manifest number:          04B0
Signing time:             Wed 19 Aug 2026 00:17:52 +0000
Manifest this update:     Wed 19 Aug 2026 00:17:52 +0000
Manifest next update:     Wed 26 Aug 2026 00:17:52 +0000
Files and hashes:         1: aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl (hash: vl/Wscb/UjnQkXqwDglZjYSuzxjgIRm1WftgosDR5tQ=)
                          2: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (hash: fjG3+8ZC22UxCMS8177A/y6FTGhegxZaMx8Kk6yByAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl
                          rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A
        Validity
            Not Before: Aug 19 00:17:52 2026 GMT
            Not After : Aug 26 00:17:52 2026 GMT
        Subject: CN=6a84f630-47aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:93:fd:8f:45:22:1a:64:7e:93:0d:45:99:
                    76:a9:92:c4:49:93:2c:46:70:e6:c7:96:5a:d5:6b:
                    8e:c5:ba:df:55:00:f0:cb:5e:56:4d:c2:93:9b:cc:
                    a9:6e:74:90:e0:e3:d8:dc:72:9b:e1:f9:9e:20:de:
                    f7:21:16:13:bc:f3:9d:4d:6b:43:bc:23:74:c0:80:
                    43:73:d8:99:54:78:c8:d8:ad:50:26:1a:2f:80:0e:
                    be:62:a7:3d:92:49:1c:da:8b:91:c8:52:c2:a2:d2:
                    57:76:76:10:01:4d:09:5c:e2:fd:44:57:2b:00:3f:
                    2b:b6:a1:a5:3f:46:ea:cb:1f:6f:85:df:f7:aa:a4:
                    34:99:aa:ec:1e:2e:0c:ff:c9:d8:7f:8c:14:df:c5:
                    c6:57:e6:d7:7a:96:3a:96:a3:cc:7c:37:d0:c5:9e:
                    2a:5c:76:83:ac:64:c0:3b:91:fd:96:af:a1:ce:e7:
                    ff:7e:b7:0a:54:b4:a4:d1:d7:29:47:bd:99:e4:5a:
                    1c:32:bc:43:d6:70:f7:58:dc:d0:74:66:aa:93:bc:
                    2f:58:9d:66:14:23:0b:21:c7:13:a0:3a:19:76:b5:
                    65:1d:90:66:14:8d:b7:8d:3c:b4:e4:c7:2a:21:50:
                    86:c1:39:13:e0:07:10:12:ce:d9:6b:f3:c4:8b:15:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:77:33:65:35:74:B9:71:A7:BC:4A:CC:C1:FB:40:8D:44:7F:DE:87
            X509v3 Authority Key Identifier:
                keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:bf:b5:ae:74:91:5d:bc:10:dc:3e:65:10:36:c6:1c:2e:
         58:9c:0e:09:0f:cf:d4:41:db:b1:63:aa:69:4f:40:59:49:1d:
         8e:08:17:ce:de:e1:f5:7d:3a:dd:3b:10:fd:ff:9a:37:7d:cd:
         df:ba:47:27:f7:f6:d2:7d:f5:72:36:2f:5a:1a:e7:41:27:aa:
         1f:ee:fe:13:76:dc:ce:b5:af:47:d8:b5:fd:57:1c:46:d2:a4:
         f2:f1:8b:6c:2c:73:03:28:e3:99:2a:c8:54:f4:66:64:27:ea:
         33:87:d1:97:ed:91:45:e9:2d:31:c2:9c:9f:d1:5c:0b:d6:77:
         b7:b8:08:3a:21:52:0a:2d:ab:55:2e:43:41:cc:0b:da:cb:85:
         32:fa:61:75:95:7d:0f:f8:6f:04:20:df:e8:51:6a:ed:65:a6:
         10:43:13:7c:bd:e2:89:3f:7c:bd:0f:eb:01:f2:38:d4:00:25:
         fa:0c:7f:04:44:ef:a3:3f:52:5c:50:55:4b:ce:e9:78:da:1b:
         1a:84:6e:d7:57:c4:5d:57:0a:57:bf:56:55:6d:71:bf:79:6a:
         61:5f:df:ac:e9:09:2a:46:d4:f2:53:eb:50:05:c7:53:34:d7:
         49:82:5b:aa:f1:84:f3:51:27:7e:26:59:86:8b:bf:8b:42:9d:
         03:e4:66:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB
MUE2RkVBM0EwHhcNMjYwODE5MDAxNzUyWhcNMjYwODI2MDAxNzUyWjAYMRYwFAYD
VQQDEw02YTg0ZjYzMC00N2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg6+T/Y9FIhpkfpMNRZl2qZLESZMsRnDmx5Za1WuOxbrfVQDwy15WTcKTm8yp
bnSQ4OPY3HKb4fmeIN73IRYTvPOdTWtDvCN0wIBDc9iZVHjI2K1QJhovgA6+Yqc9
kkkc2ouRyFLCotJXdnYQAU0JXOL9RFcrAD8rtqGlP0bqyx9vhd/3qqQ0marsHi4M
/8nYf4wU38XGV+bXepY6lqPMfDfQxZ4qXHaDrGTAO5H9lq+hzuf/frcKVLSk0dcp
R72Z5FocMrxD1nD3WNzQdGaqk7wvWJ1mFCMLIccToDoZdrVlHZBmFI23jTy05Mcq
IVCGwTkT4AcQEs7Za/PEixWWeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOp3M2U1
dLlxp7xKzMH7QI1Ef96HMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF
NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODlBMi9GQjUyRjY0RThFNjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFR
b0RlQkJTcmQ0dXlocHY2am8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbk+/ta50kV28ENw+ZRA2xhwuWJwOCQ/P1EHbsWOqaU9AWUkdjggXzt7h9X06
3TsQ/f+aN33N37pHJ/f20n31cjYvWhrnQSeqH+7+E3bczrWvR9i1/VccRtKk8vGL
bCxzAyjjmSrIVPRmZCfqM4fRl+2RRektMcKcn9FcC9Z3t7gIOiFSCi2rVS5DQcwL
2suFMvphdZV9D/hvBCDf6FFq7WWmEEMTfL3iiT98vQ/rAfI41AAl+gx/BETvoz9S
XFBVS87peNobGoRu11fEXVcKV79WVW1xv3lqYV/frOkJKkbU8lPrUAXHUzTXSYJb
qvGE81EnfiZZhou/i0KdA+RmyQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:27 2026 by rpki-client