Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
File:                     MB6kG5ONf0s895PQEveN06U5cCQ.mft (raw, json)
Hash identifier:          uRTXT16ibE+8/Py4vJvrIYXdKPrYjv9pm97xqjE+Wlc=
Subject key identifier:   41:F8:9A:73:B4:FB:23:A1:06:5B:CF:BA:8A:6C:A0:56:8B:99:63:D0
Authority key identifier: 30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24
Certificate issuer:       /CN=A91B1F4F/serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
Certificate serial:       1519
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
Manifest number:          150C
Signing time:             Sat 04 Jul 2026 16:50:46 +0000
Manifest this update:     Sat 04 Jul 2026 16:50:46 +0000
Manifest next update:     Sat 11 Jul 2026 16:50:46 +0000
Files and hashes:         1: MB6kG5ONf0s895PQEveN06U5cCQ.crl (hash: MASnd43ohVjNOec3FkAMDFXdnhxJPo460+HQP+iVxcg=)
                          2: 61574192E37A11EB8AF29A5BC4F9AE02.roa (hash: p9ON/vBF+VJhjti0OsHW+khk9UzScAaJd1Q9IQceEPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 16:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5401 (0x1519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1F4F, serialNumber=301EA41B938D7F4B3CF793D012F78DD3A5397024
        Validity
            Not Before: Jul  4 16:50:46 2026 GMT
            Not After : Jul 11 16:50:46 2026 GMT
        Subject: CN=6a4939e6-3263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6c:5f:67:92:57:41:9a:37:6a:c5:6d:6b:f0:
                    02:64:89:1a:51:a9:69:cf:89:fe:73:f1:e0:a3:63:
                    bb:28:06:e8:c6:c9:f1:68:f3:03:23:2c:6e:ee:ca:
                    e8:ed:ca:6f:d7:14:e1:13:30:ea:ee:8f:67:80:77:
                    35:0c:51:6f:a6:8c:56:18:16:88:15:0b:06:c5:c3:
                    64:29:9f:a9:65:a0:45:58:cc:10:10:d7:9e:75:d0:
                    38:09:46:e4:5a:d5:ac:88:cb:07:3a:01:f3:d8:2f:
                    19:8f:03:be:9a:dc:e8:e5:bd:f8:6e:e6:77:39:f2:
                    cf:50:ff:af:a2:c2:a9:a0:d4:f9:7d:a4:7f:e7:fe:
                    aa:28:5a:45:1a:6d:06:67:e4:6e:17:4c:c3:79:5c:
                    db:f0:c8:d9:78:fe:33:87:c5:59:25:53:f1:7c:28:
                    95:fd:33:0b:db:53:76:78:4f:32:be:67:51:9e:56:
                    a6:c0:7b:53:96:84:3f:ac:bc:ac:39:f4:ee:7e:81:
                    8e:05:90:d3:0a:b1:77:a4:af:85:d6:bb:e2:35:7c:
                    2f:b8:db:2c:d1:e5:23:52:cc:be:3f:94:a2:06:be:
                    f9:e3:85:72:e6:e6:08:8c:3f:2b:95:78:73:c9:8e:
                    f5:eb:d4:fe:1d:fc:23:49:26:02:52:33:02:38:da:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F8:9A:73:B4:FB:23:A1:06:5B:CF:BA:8A:6C:A0:56:8B:99:63:D0
            X509v3 Authority Key Identifier:
                keyid:30:1E:A4:1B:93:8D:7F:4B:3C:F7:93:D0:12:F7:8D:D3:A5:39:70:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MB6kG5ONf0s895PQEveN06U5cCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F4F/0FDB974C74D711E8BC82D42CC4F9AE02/MB6kG5ONf0s895PQEveN06U5cCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:11:b8:4d:2c:10:89:bb:f2:10:00:9b:20:8d:6e:44:6c:65:
         4a:89:b3:62:a7:f3:c4:15:d8:af:81:09:e5:3e:86:2c:96:8a:
         41:24:ae:10:33:59:ea:76:a4:3c:08:25:5b:3f:93:9b:00:bf:
         22:fe:10:44:52:9c:f2:46:9d:9a:b4:c7:3a:59:e4:a0:60:fa:
         4a:58:3b:55:a1:90:36:79:8f:aa:a6:b3:c6:61:a4:49:6f:7e:
         8c:84:f6:1b:b2:61:6f:96:3a:ef:53:64:a9:2d:a5:e7:6c:89:
         80:42:f9:61:d4:a0:9b:5c:4e:28:82:0d:c2:aa:01:72:2f:ac:
         60:9a:e2:b8:83:9e:0d:92:8b:8f:23:c8:01:74:35:f5:4d:40:
         55:e9:cf:ad:a8:18:e5:2d:20:cb:36:6d:9a:70:73:a8:b7:0d:
         14:e3:74:13:07:ca:8e:93:91:e6:1a:f7:2f:94:57:67:ef:45:
         20:d4:c5:c0:23:90:c2:25:96:e2:af:0a:39:23:26:04:4b:75:
         7f:a6:57:92:a1:f0:1d:c8:16:56:d2:9a:aa:24:b6:bd:b4:83:
         53:c3:f5:f9:8b:78:62:a1:b1:70:9c:49:f8:17:22:6a:1b:76:
         2f:03:d7:0b:dd:25:b9:8e:d1:0c:36:50:a5:85:e0:4c:a3:41:
         77:4d:cc:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFGNEYxMTAvBgNVBAUTKDMwMUVBNDFCOTM4RDdGNEIzQ0Y3OTNEMDEyRjc4REQz
QTUzOTcwMjQwHhcNMjYwNzA0MTY1MDQ2WhcNMjYwNzExMTY1MDQ2WjAYMRYwFAYD
VQQDEw02YTQ5MzllNi0zMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3GxfZ5JXQZo3asVta/ACZIkaUalpz4n+c/Hgo2O7KAboxsnxaPMDIyxu7sro
7cpv1xThEzDq7o9ngHc1DFFvpoxWGBaIFQsGxcNkKZ+pZaBFWMwQENeeddA4CUbk
WtWsiMsHOgHz2C8ZjwO+mtzo5b34buZ3OfLPUP+vosKpoNT5faR/5/6qKFpFGm0G
Z+RuF0zDeVzb8MjZeP4zh8VZJVPxfCiV/TML21N2eE8yvmdRnlamwHtTloQ/rLys
OfTufoGOBZDTCrF3pK+F1rviNXwvuNss0eUjUsy+P5SiBr7544Vy5uYIjD8rlXhz
yY7169T+HfwjSSYCUjMCONps6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEH4mnO0
+yOhBlvPuopsoFaLmWPQMB8GA1UdIwQYMBaAFDAepBuTjX9LPPeT0BL3jdOlOXAk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUY0Ri8wRkRCOTc0Qzc0
RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYwczg5NVBRRXZlTjA2VTVj
Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01CNmtHNU9OZjBzODk1UFFFdmVOMDZVNWNDUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MUY0Ri8wRkRCOTc0Qzc0RDcxMUU4QkM4MkQ0MkNDNEY5QUUwMi9NQjZrRzVPTmYw
czg5NVBRRXZlTjA2VTVjQ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwhG4TSwQibvyEACbII1uRGxlSomzYqfzxBXYr4EJ5T6GLJaKQSSuEDNZ6nak
PAglWz+TmwC/Iv4QRFKc8kadmrTHOlnkoGD6Slg7VaGQNnmPqqazxmGkSW9+jIT2
G7Jhb5Y671NkqS2l52yJgEL5YdSgm1xOKIINwqoBci+sYJriuIOeDZKLjyPIAXQ1
9U1AVenPragY5S0gyzZtmnBzqLcNFON0EwfKjpOR5hr3L5RXZ+9FINTFwCOQwiWW
4q8KOSMmBEt1f6ZXkqHwHcgWVtKaqiS2vbSDU8P1+Yt4YqGxcJxJ+Bciaht2LwPX
C90luY7RDDZQpYXgTKNBd03MOw==
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:36 2026 by rpki-client