Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
File:                     aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json)
Hash identifier:          oCijm5FkwkVYgzaWN9xSGlrIPwdOFIZCNUehRnDrm4o=
Subject key identifier:   D4:A3:3D:36:D6:4F:E4:04:70:74:59:A0:D3:15:36:FC:AB:EE:6A:F9
Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Certificate issuer:       /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Certificate serial:       082A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
Manifest number:          0821
Signing time:             Fri 04 Sep 2026 21:01:19 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:18 +0000
Manifest next update:     Fri 11 Sep 2026 21:01:18 +0000
Files and hashes:         1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: jv4yuJ/FnQB3t/J0k+JiwB8mPqjaobaXRbFkObxQArk=)
                          2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: +dqj5dUwvw+xC7YK9g1ktDdByBUDI++m9TD2lt9C0Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl
                          rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 21:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090 (0x82a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
        Validity
            Not Before: Sep  4 21:01:18 2026 GMT
            Not After : Sep 11 21:01:18 2026 GMT
        Subject: CN=6a9b319e-e001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:55:75:95:f5:5f:31:48:b7:b5:7b:28:7a:
                    a5:fe:a8:a1:4b:58:be:c9:58:11:99:63:d0:fd:10:
                    c6:0d:dc:81:61:8c:50:f4:65:cb:89:3d:ca:0f:fa:
                    9f:e8:60:14:a0:97:51:74:1d:15:c2:4e:dd:4e:b7:
                    01:72:0a:52:a9:a9:9d:05:8d:00:57:0f:b0:da:b3:
                    d7:8a:f8:47:ef:d6:57:53:dc:93:06:97:3d:42:39:
                    96:49:38:bd:e1:36:a8:bb:6c:8b:4b:b4:a2:17:a1:
                    cb:3b:55:a9:c2:ed:8a:d2:ff:7d:40:7b:ab:7a:3a:
                    42:ef:4f:79:52:3e:6c:3d:eb:33:bf:42:e2:f4:33:
                    35:64:8f:02:8a:72:f0:ae:42:f4:03:94:4d:6a:8f:
                    c9:e4:37:76:c3:a2:33:dc:7e:b7:46:1c:d9:d8:9f:
                    83:b0:8e:d1:ee:a9:a2:70:69:ed:f4:0a:08:40:0a:
                    15:e4:32:19:b7:3c:5a:18:1f:6c:e5:ec:32:64:00:
                    d7:17:11:17:4a:01:df:2b:6a:0b:4d:b0:8a:4d:94:
                    5b:7d:78:83:b0:4d:6c:e6:02:a4:39:75:ff:22:e4:
                    7e:44:6b:c3:30:b4:27:ba:ef:d1:f5:83:6f:ed:03:
                    ec:0d:3f:d4:a9:55:67:f3:1a:a4:24:e2:a4:07:69:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A3:3D:36:D6:4F:E4:04:70:74:59:A0:D3:15:36:FC:AB:EE:6A:F9
            X509v3 Authority Key Identifier:
                keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9a:b8:6a:d9:3c:ee:97:fc:55:d1:9d:c5:79:f2:34:48:5c:
         7d:5d:0d:1c:30:24:23:57:cd:37:de:ff:d5:01:73:37:7a:a5:
         62:89:b4:17:a5:8e:49:4c:cd:32:ac:fa:c0:65:ac:10:97:82:
         7b:07:58:e8:0a:ae:eb:18:3c:55:ad:b4:63:75:d8:0a:9b:20:
         19:a3:65:19:fe:56:da:c1:e4:0f:98:d4:90:8a:cb:60:96:5b:
         c2:32:12:14:be:30:8f:21:36:fc:2b:53:9f:0b:2c:4b:43:f9:
         e6:fb:5e:25:66:a0:c3:6d:1b:7f:f1:40:fd:ba:1e:a7:60:a6:
         df:f3:a5:c3:b6:c4:36:c2:90:16:aa:4c:19:cb:f8:70:c7:2b:
         d8:ac:10:99:2a:e5:3c:91:bb:7f:45:96:e9:f1:eb:0b:22:c1:
         fd:67:87:5d:a6:70:b9:88:ce:41:e2:9a:81:b5:bb:56:6f:30:
         54:73:38:9b:3c:7d:aa:76:31:53:a9:f2:5d:d6:91:50:de:d4:
         f7:5e:da:82:00:b1:ba:66:d7:6d:3d:ca:46:7d:d3:2b:77:49:
         92:02:c9:e0:30:98:a2:2e:2d:29:44:50:a3:ea:2c:a1:0f:28:
         34:fd:97:ab:67:ae:74:e6:6a:51:7b:2d:df:7d:66:52:5b:58:
         bd:18:1e:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0
MjY1QTI2N0IwHhcNMjYwOTA0MjEwMTE4WhcNMjYwOTExMjEwMTE4WjAYMRYwFAYD
VQQDEw02YTliMzE5ZS1lMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs99VdZX1XzFIt7V7KHql/qihS1i+yVgRmWPQ/RDGDdyBYYxQ9GXLiT3KD/qf
6GAUoJdRdB0Vwk7dTrcBcgpSqamdBY0AVw+w2rPXivhH79ZXU9yTBpc9QjmWSTi9
4Taou2yLS7SiF6HLO1Wpwu2K0v99QHurejpC7095Uj5sPeszv0Li9DM1ZI8CinLw
rkL0A5RNao/J5Dd2w6Iz3H63RhzZ2J+DsI7R7qmicGnt9AoIQAoV5DIZtzxaGB9s
5ewyZADXFxEXSgHfK2oLTbCKTZRbfXiDsE1s5gKkOXX/IuR+RGvDMLQnuu/R9YNv
7QPsDT/UqVVn8xqkJOKkB2kYvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSjPTbW
T+QEcHRZoNMVNvyr7mr5MB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw
RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK
bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0Ukht
bngzM25Nb2hITXRDWmFKbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlpq4atk87pf8VdGdxXnyNEhcfV0NHDAkI1fNN97/1QFzN3qlYom0F6WOSUzN
Mqz6wGWsEJeCewdY6Aqu6xg8Va20Y3XYCpsgGaNlGf5W2sHkD5jUkIrLYJZbwjIS
FL4wjyE2/CtTnwssS0P55vteJWagw20bf/FA/boep2Cm3/Olw7bENsKQFqpMGcv4
cMcr2KwQmSrlPJG7f0WW6fHrCyLB/WeHXaZwuYjOQeKagbW7Vm8wVHM4mzx9qnYx
U6nyXdaRUN7U917aggCxumbXbT3KRn3TK3dJkgLJ4DCYoi4tKURQo+osoQ8oNP2X
q2eudOZqUXst331mUltYvRgeKg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:54:26 2026 by rpki-client