Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft
File:                     PB_di6MB3OPbPwvMJchpTOG83H0.mft (raw, json)
Hash identifier:          SfGoAzYtGinEmxVLig6+Cw3qjB+58wyJlsGEujEVwpU=
Subject key identifier:   38:55:1E:68:24:1D:76:C9:01:A9:42:2D:84:FC:41:AC:58:80:01:DB
Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D
Certificate issuer:       /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D
Certificate serial:       0E81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft
Manifest number:          0E75
Signing time:             Fri 02 Oct 2026 17:56:13 +0000
Manifest this update:     Fri 02 Oct 2026 17:56:13 +0000
Manifest next update:     Fri 09 Oct 2026 17:56:13 +0000
Files and hashes:         1: PB_di6MB3OPbPwvMJchpTOG83H0.crl (hash: nUHf/HpnxDNZxDxcwYvaKeClk0lQ2jzNJu04Vcfp3F0=)
                          2: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (hash: yYvSgR/d3pmtKa3loQQjhww8sMlH1QWIAa+l4ZsuXaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl
                          rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3713 (0xe81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A08FD, serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D
        Validity
            Not Before: Oct  2 17:56:13 2026 GMT
            Not After : Oct  9 17:56:13 2026 GMT
        Subject: CN=6abff03d-b82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:0a:df:a7:3d:8d:8f:a7:41:7f:83:24:7a:
                    96:74:17:71:e4:44:66:65:a1:7a:f2:f3:65:3e:6c:
                    98:6e:bd:b0:1f:bc:16:a0:d6:6f:3f:a3:eb:ee:31:
                    69:e2:9b:06:26:02:8e:6b:db:50:0f:8d:20:d2:d5:
                    82:3c:9b:90:3d:90:38:07:d7:e7:70:1a:d4:8a:9f:
                    94:70:3b:0f:25:0a:cb:20:24:01:f1:11:9d:69:76:
                    8f:f4:0a:29:6c:61:46:8c:62:50:4e:83:92:7e:c7:
                    9b:1b:1e:34:3e:d6:22:50:1b:25:ed:46:14:a8:fe:
                    f4:2d:7e:5c:6b:a4:20:b7:39:9d:76:b1:37:c3:0a:
                    3d:7b:86:b4:fe:55:89:dd:22:05:95:ba:d1:39:80:
                    69:44:2e:da:ae:21:2b:5c:6d:ff:a6:32:5c:29:93:
                    51:54:02:e8:5f:96:46:87:2f:22:ba:12:08:de:74:
                    ae:53:ee:43:8e:fc:98:b3:93:06:24:1e:91:4b:11:
                    4e:37:1b:c0:bd:c1:cc:16:b2:d5:1b:87:f3:ca:17:
                    d8:12:7d:ab:84:1b:a6:ae:70:d2:bc:23:61:ef:56:
                    b3:cb:b1:91:59:10:6f:9b:a8:8b:68:a0:0a:da:5e:
                    0b:06:11:26:a5:cf:b9:15:cf:86:ac:6b:e6:70:d4:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:55:1E:68:24:1D:76:C9:01:A9:42:2D:84:FC:41:AC:58:80:01:DB
            X509v3 Authority Key Identifier:
                keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:67:6c:01:72:5f:de:92:2c:46:29:ef:82:19:ef:31:20:93:
         77:cd:0e:83:e1:d6:27:c7:b6:75:53:75:4c:65:cc:98:83:32:
         2a:6a:c1:5d:d1:4d:06:7a:a8:c5:92:84:9e:2a:a6:d2:c8:f6:
         eb:71:08:09:92:7d:6b:56:f3:f6:89:20:74:19:e6:16:3c:8c:
         69:8a:47:d1:71:ac:5a:e6:01:85:fb:bf:c7:02:db:92:cd:6c:
         28:45:79:82:4d:6b:e4:84:39:b3:e3:2d:ad:f5:61:f5:86:b0:
         77:ad:e0:26:1e:61:ba:34:6d:fb:ff:d2:15:0c:45:c7:98:58:
         41:e7:f5:6d:6e:d1:f9:bf:11:34:58:79:0b:b1:57:57:ca:28:
         14:c1:fa:1a:bf:f9:85:25:8c:14:56:f6:85:6d:6f:fb:64:ce:
         b1:aa:04:7f:66:d9:35:6f:36:95:d9:13:ee:c5:74:6b:98:43:
         1b:bd:46:60:1c:2c:25:ff:71:e3:c4:d9:a6:75:8b:d1:ca:1a:
         06:2f:dd:16:94:fa:83:1c:14:51:a6:0b:7d:90:95:c4:41:98:
         7d:12:92:f7:61:83:64:aa:18:d1:36:b9:55:c1:77:cd:4f:c3:
         e4:30:d7:d9:a4:25:b8:d9:02:f6:c6:d7:5b:5a:55:42:5f:18:
         a5:5d:2a:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA4RkQxMTAvBgNVBAUTKDNDMUZERDhCQTMwMURDRTNEQjNGMEJDQzI1Qzg2OTRD
RTFCQ0RDN0QwHhcNMjYxMDAyMTc1NjEzWhcNMjYxMDA5MTc1NjEzWjAYMRYwFAYD
VQQDEw02YWJmZjAzZC1iODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmwsK36c9jY+nQX+DJHqWdBdx5ERmZaF68vNlPmyYbr2wH7wWoNZvP6Pr7jFp
4psGJgKOa9tQD40g0tWCPJuQPZA4B9fncBrUip+UcDsPJQrLICQB8RGdaXaP9Aop
bGFGjGJQToOSfsebGx40PtYiUBsl7UYUqP70LX5ca6QgtzmddrE3wwo9e4a0/lWJ
3SIFlbrROYBpRC7ariErXG3/pjJcKZNRVALoX5ZGhy8iuhII3nSuU+5DjvyYs5MG
JB6RSxFONxvAvcHMFrLVG4fzyhfYEn2rhBumrnDSvCNh71azy7GRWRBvm6iLaKAK
2l4LBhEmpc+5Fc+GrGvmcNQJjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhVHmgk
HXbJAalCLYT8QaxYgAHbMB8GA1UdIwQYMBaAFDwf3YujAdzj2z8LzCXIaUzhvNx9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDhGRC85RjQyRUFEOEM4
QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNPUGJQd3ZNSmNocFRPRzgz
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BCX2RpNk1CM09QYlB3dk1KY2hwVE9HODNIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDhGRC85RjQyRUFEOEM4QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNP
UGJQd3ZNSmNocFRPRzgzSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA2dsAXJf3pIsRinvghnvMSCTd80Og+HWJ8e2dVN1TGXMmIMyKmrBXdFNBnqo
xZKEniqm0sj263EICZJ9a1bz9okgdBnmFjyMaYpH0XGsWuYBhfu/xwLbks1sKEV5
gk1r5IQ5s+MtrfVh9Yawd63gJh5hujRt+//SFQxFx5hYQef1bW7R+b8RNFh5C7FX
V8ooFMH6Gr/5hSWMFFb2hW1v+2TOsaoEf2bZNW82ldkT7sV0a5hDG71GYBwsJf9x
48TZpnWL0coaBi/dFpT6gxwUUaYLfZCVxEGYfRKS92GDZKoY0Ta5VcF3zU/D5DDX
2aQluNkC9sbXW1pVQl8YpV0q+w==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:37:36 2026 by rpki-client