Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File:                     mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier:          RfB+ob8ZgiibPZF5EcjeDSfZ/enrdzwIhJTbNWDP64c=
Subject key identifier:   BF:8C:B9:75:EF:F8:D8:31:D6:2F:A3:32:B7:04:B6:78:66:64:92:AD
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer:       /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number:          0221
Signing time:             Mon 31 Aug 2026 03:13:44 +0000
Manifest this update:     Mon 31 Aug 2026 03:13:44 +0000
Manifest next update:     Mon 07 Sep 2026 03:13:44 +0000
Files and hashes:         1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: eVHfYvTFrsOH7e7L7s4vSA7LGjf+1cKG+hAGbPVImC8=)
                          2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=)
                          3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 1bLjvUFKAie+LhFsglKp4ujOu6m4XQrp7oBF2mMsatU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 03:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
        Validity
            Not Before: Aug 31 03:13:44 2026 GMT
            Not After : Sep  7 03:13:44 2026 GMT
        Subject: CN=6a94f168-e071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:65:a8:ef:01:2f:bb:f8:3c:bb:d4:f5:7c:
                    59:4a:b8:8c:d5:82:b2:3f:d7:4d:da:4a:1a:6b:5b:
                    9a:58:30:79:06:7e:35:32:28:8b:19:57:2f:1c:95:
                    1b:72:2c:fa:99:a3:a9:dd:86:52:de:fd:2d:08:b1:
                    a0:db:1c:05:28:b4:7c:a8:22:6e:cd:b7:e5:d3:d4:
                    6d:a6:18:d7:66:b4:26:ff:33:7d:ec:31:55:7f:a6:
                    ca:3d:8a:36:2f:8d:8b:2f:13:04:10:05:76:34:2c:
                    b4:8e:38:b4:99:f8:40:0b:34:de:e5:de:cd:f9:d2:
                    82:46:7c:d0:de:f0:19:9e:15:d5:1c:9b:7b:c0:b3:
                    5b:5d:0f:53:8f:0a:b0:a4:66:20:d4:82:3d:3f:a6:
                    ce:0b:67:76:c0:28:89:13:ce:95:3c:37:c3:28:6a:
                    a7:30:6b:74:d6:5b:bb:f4:0b:d2:c1:3e:3e:d4:84:
                    e4:3d:21:83:4a:7d:b9:73:0e:74:28:6c:3f:fe:e4:
                    1e:02:50:5d:91:c9:91:5a:bb:f4:30:6c:24:74:5e:
                    b9:18:51:cb:c6:7f:3b:25:bc:d3:90:0b:e2:b5:ad:
                    4a:fc:3c:a4:6d:82:a4:77:d7:da:ea:c5:8b:28:2a:
                    8a:86:50:4a:9d:5d:7d:0f:ba:19:ff:00:82:a3:90:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:B9:75:EF:F8:D8:31:D6:2F:A3:32:B7:04:B6:78:66:64:92:AD
            X509v3 Authority Key Identifier:
                keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:97:9b:2d:e1:f6:3f:13:7f:1a:5d:7c:19:e9:c2:d6:b2:f5:
         f1:53:5b:36:0a:99:d2:bf:bc:c5:29:4b:ac:4d:6a:9a:c2:fb:
         81:9d:f6:04:cd:f9:5f:ce:3d:92:4e:0a:f7:d1:13:97:0f:0b:
         7f:be:28:4c:cf:f2:23:1f:ae:b7:1a:77:24:e1:b3:39:f7:01:
         a5:53:6e:f2:7d:9d:52:71:f0:86:99:a8:44:91:25:c0:38:ba:
         fe:2f:87:c0:f7:ab:4b:47:a6:cc:42:51:64:c3:c4:c7:49:1f:
         71:c0:30:fe:54:20:07:a4:9b:77:83:99:50:19:81:b6:b5:fc:
         22:ad:79:d1:30:b4:19:a2:82:20:c2:b3:74:fd:76:de:bc:c6:
         f0:6d:ae:bc:ed:68:09:64:93:40:82:d7:e6:3b:83:ee:da:8f:
         51:99:f5:2f:a7:3f:aa:4b:f0:ca:a9:08:98:ef:0c:38:b9:9d:
         30:51:fa:f3:61:3a:5c:61:96:15:c1:40:93:ee:3d:e6:3b:13:
         31:33:01:cd:e7:ae:a0:91:02:6d:2f:f9:48:5f:30:5c:5e:f1:
         da:f8:dd:d7:9e:24:2f:ed:1e:6f:8b:95:2e:c9:50:50:5a:b0:
         21:d5:e4:0e:c3:34:3a:ef:a6:2b:f6:20:93:93:84:4f:ff:ce:
         74:0c:c4:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1
QTc0NDA5OUQwHhcNMjYwODMxMDMxMzQ0WhcNMjYwOTA3MDMxMzQ0WjAYMRYwFAYD
VQQDEw02YTk0ZjE2OC1lMDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBNlqO8BL7v4PLvU9XxZSriM1YKyP9dN2koaa1uaWDB5Bn41MiiLGVcvHJUb
ciz6maOp3YZS3v0tCLGg2xwFKLR8qCJuzbfl09RtphjXZrQm/zN97DFVf6bKPYo2
L42LLxMEEAV2NCy0jji0mfhACzTe5d7N+dKCRnzQ3vAZnhXVHJt7wLNbXQ9Tjwqw
pGYg1II9P6bOC2d2wCiJE86VPDfDKGqnMGt01lu79AvSwT4+1ITkPSGDSn25cw50
KGw//uQeAlBdkcmRWrv0MGwkdF65GFHLxn87JbzTkAvita1K/DykbYKkd9fa6sWL
KCqKhlBKnV19D7oZ/wCCo5CmrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+MuXXv
+Ngx1i+jMrcEtnhmZJKtMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3
MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu
NUVWVWswbGJScnBhZEVDWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYpebLeH2PxN/Gl18GenC1rL18VNbNgqZ0r+8xSlLrE1qmsL7gZ32BM35X849
kk4K99ETlw8Lf74oTM/yIx+utxp3JOGzOfcBpVNu8n2dUnHwhpmoRJElwDi6/i+H
wPerS0emzEJRZMPEx0kfccAw/lQgB6Sbd4OZUBmBtrX8Iq150TC0GaKCIMKzdP12
3rzG8G2uvO1oCWSTQILX5juD7tqPUZn1L6c/qkvwyqkImO8MOLmdMFH682E6XGGW
FcFAk+495jsTMTMBzeeuoJECbS/5SF8wXF7x2vjd154kL+0eb4uVLslQUFqwIdXk
DsM0Ou+mK/Ygk5OET//OdAzEHw==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:47:48 2026 by rpki-client