Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
File:                     2nLQztquGaHsPtugRn1ZjrmRVlY.mft (raw, json)
Hash identifier:          GuMZQDVf2rqxZCwWPvepoStOPyroTb9VyXeXA3wrCTw=
Subject key identifier:   21:7A:FF:4E:97:92:C4:0A:6F:65:90:F5:CB:AD:8E:28:73:A2:92:A1
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Certificate issuer:       /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial:       B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
Manifest number:          AE
Signing time:             Mon 05 Oct 2026 07:31:26 +0000
Manifest this update:     Mon 05 Oct 2026 07:31:25 +0000
Manifest next update:     Mon 12 Oct 2026 07:31:25 +0000
Files and hashes:         1: 2nLQztquGaHsPtugRn1ZjrmRVlY.crl (hash: hTDD575/taEccP3oCsEddtda7KcTr+qmyVQZHbTni/I=)
                          2: 7D4302A0BEC811F0AE45220FC4F9AE02.roa (hash: DdCOIo33v4IDMQPtkKtDFsOxid92dMxNzutXTG46zeE=)
                          3: JzJnSdklHtqRb5n_07qN21tlKkw.asa (hash: BbSaRokX1FejlIti0bqfCe5bvM22EnMzB7ypMvPdUp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
        Validity
            Not Before: Oct  5 07:31:25 2026 GMT
            Not After : Oct 12 07:31:25 2026 GMT
        Subject: CN=6ac3524e-8036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:64:ae:f7:5d:89:09:22:7d:7b:94:b0:8e:
                    dd:c5:9d:ea:b3:1a:0d:81:5a:4a:ba:e6:f8:80:dd:
                    04:79:b5:0b:89:f7:70:b2:44:3f:52:46:72:1a:85:
                    1e:ff:0d:b5:29:f9:33:0c:b8:df:04:de:17:a9:0d:
                    6b:98:2c:6b:5f:a4:91:92:c0:24:b7:e6:98:aa:ba:
                    23:1b:19:c9:d3:1b:a6:b2:13:3c:15:a6:63:85:f0:
                    e9:fc:4d:e9:63:6f:f6:d7:f8:25:9d:1d:7b:50:3b:
                    09:ca:61:ef:f9:96:8b:5c:ce:73:e1:44:71:1f:e1:
                    d2:c8:49:0e:93:1e:e1:5d:a3:06:84:19:82:c3:26:
                    6c:48:37:fb:b7:8d:dd:0d:f9:c5:78:c2:5f:3f:b6:
                    86:76:4b:61:f3:20:ee:d3:18:27:da:26:a5:e4:44:
                    91:67:d8:f0:df:d1:51:d9:03:1a:cf:bf:4d:16:d6:
                    9e:84:d7:c3:c9:eb:d3:ea:4b:9b:7a:b3:ce:54:55:
                    8d:2f:44:0f:87:e2:10:a8:78:3f:24:32:a4:11:53:
                    93:4a:23:0f:c0:6f:d6:6a:5a:b2:67:29:43:5e:7e:
                    0c:ea:fe:31:db:8a:fe:21:d3:2a:67:af:5c:e0:7b:
                    bc:ba:a4:c3:fc:37:38:01:6a:b7:15:ac:bf:2a:9f:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7A:FF:4E:97:92:C4:0A:6F:65:90:F5:CB:AD:8E:28:73:A2:92:A1
            X509v3 Authority Key Identifier:
                keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:0b:1f:3b:52:94:36:79:08:1d:7a:df:b8:59:7e:7e:e4:81:
         47:93:d4:bb:62:da:b7:b9:ff:aa:1e:53:36:df:a1:e7:11:37:
         0f:02:0d:68:48:d9:4e:50:dc:4d:d3:2b:b7:d4:8e:d2:47:4f:
         58:ee:2e:6c:b3:a8:58:48:d0:20:ea:e2:d1:00:e3:ff:97:05:
         71:37:8c:83:e8:5a:2f:7b:d8:c3:73:49:bb:91:23:4e:0d:f2:
         77:a3:8d:c9:db:94:33:4a:40:50:21:af:c9:7f:64:13:67:d4:
         4f:4f:2b:7f:bd:0b:5c:06:2a:32:11:7c:f8:07:a0:4b:85:72:
         cb:5b:10:87:7b:9e:58:96:f2:da:42:44:8e:07:04:d6:fb:51:
         c5:c6:8d:97:aa:1d:47:0e:4c:3f:97:f7:38:eb:bc:db:31:3a:
         bb:61:5e:ac:d1:ee:5b:46:e9:b0:77:ed:5b:67:8b:c3:fb:3d:
         03:8e:56:e9:8a:ab:8a:25:18:b3:3f:08:19:c2:f3:f8:81:da:
         b3:cf:d5:71:53:30:a8:c1:04:6d:cf:26:05:1a:0f:5f:92:12:
         28:45:9d:c5:85:a8:07:e1:71:b7:89:47:7e:80:5c:86:f2:75:
         ec:d1:e9:b3:c1:80:8b:6e:f8:c4:24:54:76:a0:0f:48:51:c4:
         70:16:a0:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUxMzExMTAvBgNVBAUTKERBNzJEMENFREFBRTE5QTFFQzNFREJBMDQ2N0Q1OThF
Qjk5MTU2NTYwHhcNMjYxMDA1MDczMTI1WhcNMjYxMDEyMDczMTI1WjAYMRYwFAYD
VQQDEw02YWMzNTI0ZS04MDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbZkrvddiQkifXuUsI7dxZ3qsxoNgVpKuub4gN0EebULifdwskQ/UkZyGoUe
/w21KfkzDLjfBN4XqQ1rmCxrX6SRksAkt+aYqrojGxnJ0xumshM8FaZjhfDp/E3p
Y2/21/glnR17UDsJymHv+ZaLXM5z4URxH+HSyEkOkx7hXaMGhBmCwyZsSDf7t43d
DfnFeMJfP7aGdkth8yDu0xgn2ial5ESRZ9jw39FR2QMaz79NFtaehNfDyevT6kub
erPOVFWNL0QPh+IQqHg/JDKkEVOTSiMPwG/WalqyZylDXn4M6v4x24r+IdMqZ69c
4Hu8uqTD/Dc4AWq3Fay/Kp8UHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCF6/06X
ksQKb2WQ9cutjihzopKhMB8GA1UdIwQYMBaAFNpy0M7arhmh7D7boEZ9WY65kVZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTEzMS82NUMzOEM5OEJD
MTIxMUYwQjY5NjYwN0JDNEY5QUUwMi8ybkxRenRxdUdhSHNQdHVnUm4xWmpybVJW
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuTFF6dHF1R2FIc1B0dWdSbjFaanJtUlZsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTEzMS82NUMzOEM5OEJDMTIxMUYwQjY5NjYwN0JDNEY5QUUwMi8ybkxRenRxdUdh
SHNQdHVnUm4xWmpybVJWbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApwsfO1KUNnkIHXrfuFl+fuSBR5PUu2Lat7n/qh5TNt+h5xE3DwINaEjZTlDc
TdMrt9SO0kdPWO4ubLOoWEjQIOri0QDj/5cFcTeMg+haL3vYw3NJu5EjTg3yd6ON
yduUM0pAUCGvyX9kE2fUT08rf70LXAYqMhF8+AegS4Vyy1sQh3ueWJby2kJEjgcE
1vtRxcaNl6odRw5MP5f3OOu82zE6u2FerNHuW0bpsHftW2eLw/s9A45W6YqriiUY
sz8IGcLz+IHas8/VcVMwqMEEbc8mBRoPX5ISKEWdxYWoB+Fxt4lHfoBchvJ17NHp
s8GAi274xCRUdqAPSFHEcBagmg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:59:23 2026 by rpki-client