Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
File:                     ipvaaFOfcVjLATcgqZNvJkuaU3s.mft (raw, json)
Hash identifier:          kVrUN2QPrw6tlIwFKjMDkjFlk0GXgNJSjkY4lyjSIG0=
Subject key identifier:   74:E0:B7:11:2C:ED:BB:F2:B3:8D:45:6F:C7:CD:EE:F8:A8:0A:C8:80
Authority key identifier: 8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B
Certificate issuer:       /CN=A91A1857/serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
Certificate serial:       0E3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
Manifest number:          0E2A
Signing time:             Tue 06 Oct 2026 17:54:32 +0000
Manifest this update:     Tue 06 Oct 2026 17:54:32 +0000
Manifest next update:     Tue 13 Oct 2026 17:54:32 +0000
Files and hashes:         1: ipvaaFOfcVjLATcgqZNvJkuaU3s.crl (hash: 5sSdoUQNn+g3cquWsAPSuKzXD/b/BEsCTdzUmN0Ltqg=)
                          2: F23EB988E9A811E9864E3674C4F9AE02.roa (hash: h8Yq1El+9tmCY/aSU/vFeXJAQYEI+HLkPqW4KvJG1Ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl
                          rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3645 (0xe3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1857, serialNumber=8A9BDA68539F7158CB013720A9936F264B9A537B
        Validity
            Not Before: Oct  6 17:54:32 2026 GMT
            Not After : Oct 13 17:54:32 2026 GMT
        Subject: CN=6ac535d8-493e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:24:1a:3e:a5:6e:bb:bf:8f:db:db:dd:90:
                    19:b4:8a:06:08:b5:2d:61:ef:5a:97:db:e5:04:cc:
                    45:e8:46:6d:e6:1d:7e:59:c2:2e:66:e4:0a:c2:3e:
                    55:af:f5:d7:50:64:c4:9f:04:1d:31:01:e0:42:34:
                    52:28:8f:3b:e9:51:17:ab:86:67:01:13:db:b9:5a:
                    e7:88:dc:fc:7b:9d:39:1a:2e:0e:70:58:03:89:a9:
                    18:13:9e:99:1a:8e:69:76:b5:86:8b:fe:f7:38:c4:
                    05:88:fd:4d:08:47:ed:e8:b6:cc:38:ce:8f:20:5a:
                    94:17:dc:4d:14:40:19:e5:cb:7c:6f:75:14:f0:90:
                    ba:44:fb:fc:d4:8a:3e:9e:e5:ac:7a:49:c8:3e:eb:
                    df:f4:83:d1:dc:da:8c:cf:8f:8a:56:6c:31:e1:ed:
                    bc:0d:48:1d:c3:ec:66:cb:55:70:50:55:3a:d5:ae:
                    af:f3:06:cc:45:cb:8b:f1:bb:99:cd:2f:51:0b:09:
                    44:2c:39:2a:37:dc:b4:61:e3:2b:8d:0d:f8:79:b7:
                    d9:d4:23:be:60:cc:1f:6e:92:5e:17:91:73:1b:d5:
                    6a:db:d2:d3:8a:21:bd:bb:8c:0b:88:7c:9e:f9:bd:
                    95:a2:c6:a9:96:38:8a:f8:5a:f7:82:36:47:30:19:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E0:B7:11:2C:ED:BB:F2:B3:8D:45:6F:C7:CD:EE:F8:A8:0A:C8:80
            X509v3 Authority Key Identifier:
                keyid:8A:9B:DA:68:53:9F:71:58:CB:01:37:20:A9:93:6F:26:4B:9A:53:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ipvaaFOfcVjLATcgqZNvJkuaU3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1857/F1307B74DAD711E99F8CAC78C4F9AE02/ipvaaFOfcVjLATcgqZNvJkuaU3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:3c:2e:0f:43:91:d5:6b:0c:30:71:fb:25:0e:5c:f4:42:69:
         30:60:6f:71:ff:e1:d7:0c:96:a6:40:e9:5f:29:ba:e1:d6:fc:
         37:1f:c9:56:7f:2d:73:81:48:30:35:81:70:b6:0b:b6:ab:50:
         a5:80:6b:66:3b:c8:d2:d3:54:f6:e6:40:c7:0c:3e:65:b3:f9:
         dd:bb:40:91:e4:a5:72:82:14:57:14:32:53:ab:3c:70:d3:2c:
         f5:12:8e:ed:7d:f0:89:2a:54:42:76:d3:a4:02:3e:11:eb:69:
         b0:5c:0e:af:87:fc:b1:dd:d9:3d:39:72:81:9f:cb:a2:8a:fc:
         3c:f2:8f:af:4b:ec:d8:80:eb:e3:6a:c7:3d:db:1f:e9:09:60:
         b8:80:ef:87:e0:1a:97:3d:aa:7c:a6:15:2b:c7:80:b3:89:81:
         a6:42:1b:23:5f:d5:87:32:c3:07:16:e5:23:98:aa:71:60:b2:
         a2:2c:6d:b8:a0:26:d4:00:e6:69:4e:ec:3c:bc:d9:d9:67:c8:
         d6:99:4b:b5:31:57:cd:a1:12:a5:8c:09:45:3c:c0:d6:11:7d:
         8f:8f:b5:f6:88:fb:e8:a4:c3:98:63:95:52:34:7e:3b:ce:f7:
         4a:ad:69:99:1b:4d:28:03:12:8c:96:27:5a:48:14:6e:4d:58:
         03:82:22:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE4NTcxMTAvBgNVBAUTKDhBOUJEQTY4NTM5RjcxNThDQjAxMzcyMEE5OTM2RjI2
NEI5QTUzN0IwHhcNMjYxMDA2MTc1NDMyWhcNMjYxMDEzMTc1NDMyWjAYMRYwFAYD
VQQDEw02YWM1MzVkOC00OTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBwkGj6lbru/j9vb3ZAZtIoGCLUtYe9al9vlBMxF6EZt5h1+WcIuZuQKwj5V
r/XXUGTEnwQdMQHgQjRSKI876VEXq4ZnARPbuVrniNz8e505Gi4OcFgDiakYE56Z
Go5pdrWGi/73OMQFiP1NCEft6LbMOM6PIFqUF9xNFEAZ5ct8b3UU8JC6RPv81Io+
nuWseknIPuvf9IPR3NqMz4+KVmwx4e28DUgdw+xmy1VwUFU61a6v8wbMRcuL8buZ
zS9RCwlELDkqN9y0YeMrjQ34ebfZ1CO+YMwfbpJeF5FzG9Vq29LTiiG9u4wLiHye
+b2VosapljiK+Fr3gjZHMBnz7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTgtxEs
7bvys41Fb8fN7vioCsiAMB8GA1UdIwQYMBaAFIqb2mhTn3FYywE3IKmTbyZLmlN7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTg1Ny9GMTMwN0I3NERB
RDcxMUU5OUY4Q0FDNzhDNEY5QUUwMi9pcHZhYUZPZmNWakxBVGNncVpOdkprdWFV
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lwdmFhRk9mY1ZqTEFUY2dxWk52Smt1YVUzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTg1Ny9GMTMwN0I3NERBRDcxMUU5OUY4Q0FDNzhDNEY5QUUwMi9pcHZhYUZPZmNW
akxBVGNncVpOdkprdWFVM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvzwuD0OR1WsMMHH7JQ5c9EJpMGBvcf/h1wyWpkDpXym64db8Nx/JVn8tc4FI
MDWBcLYLtqtQpYBrZjvI0tNU9uZAxww+ZbP53btAkeSlcoIUVxQyU6s8cNMs9RKO
7X3wiSpUQnbTpAI+EetpsFwOr4f8sd3ZPTlygZ/Loor8PPKPr0vs2IDr42rHPdsf
6QlguIDvh+Aalz2qfKYVK8eAs4mBpkIbI1/VhzLDBxblI5iqcWCyoixtuKAm1ADm
aU7sPLzZ2WfI1plLtTFXzaESpYwJRTzA1hF9j4+19oj76KTDmGOVUjR+O873Sq1p
mRtNKAMSjJYnWkgUbk1YA4IieQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 01:08:01 2026 by rpki-client