Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File:                     ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier:          VTMaenEJDkL4kQjPx0onSoLkDalP/Vw2EiFK8Go7sX4=
Subject key identifier:   0F:DC:D3:35:3A:A8:5E:35:19:AC:CF:8B:9A:5B:A6:C8:66:53:F9:44
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer:       /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number:          025A
Signing time:             Wed 07 Oct 2026 02:41:56 +0000
Manifest this update:     Wed 07 Oct 2026 02:41:55 +0000
Manifest next update:     Wed 14 Oct 2026 02:41:55 +0000
Files and hashes:         1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: 15T1y2nZOKAzNeCacy0zbLMaRJ24zILRVWdOJ5oJ4tY=)
                          2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: l6WlraQHSFxD5ZzijjCLvs/ztCHDvT/RfDgDzcuuDws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
        Validity
            Not Before: Oct  7 02:41:55 2026 GMT
            Not After : Oct 14 02:41:55 2026 GMT
        Subject: CN=6ac5b174-11a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:35:26:c2:89:66:37:5e:91:af:1a:b8:11:
                    74:69:09:ed:c0:26:a1:dd:f0:83:a4:e2:e7:cc:f0:
                    71:cb:dc:04:b3:97:62:3c:d7:75:34:3d:13:eb:00:
                    35:18:35:b2:bc:80:c0:85:58:35:93:ff:5e:13:f6:
                    75:da:69:2d:6d:53:0e:a6:3b:73:d0:6b:bc:9d:1c:
                    ac:01:e8:cd:b7:f4:95:22:9f:c6:a7:51:d3:b5:20:
                    20:9a:39:22:4e:2d:9a:24:9d:d4:6e:9f:d8:96:83:
                    9e:e8:1f:53:7d:7e:0a:02:38:54:67:cc:06:0d:96:
                    20:4b:42:3e:e8:b8:14:f6:f8:26:33:59:62:29:5b:
                    33:6b:16:20:ed:c4:f0:ed:93:d4:bd:28:0c:93:a6:
                    7e:fa:2c:1d:3d:79:05:22:9e:51:3d:13:10:20:6a:
                    c8:42:ad:10:65:ff:da:c6:22:23:b1:a0:4c:0d:6d:
                    5a:91:0e:ca:03:6d:17:66:89:46:c4:40:27:2b:b3:
                    21:da:55:b9:78:d3:c0:81:02:a7:bf:7f:2b:62:db:
                    87:21:92:c5:28:23:4a:f7:9b:6e:50:32:7d:55:35:
                    77:2e:bf:88:13:8b:b6:97:0b:94:6b:00:30:c5:d8:
                    14:ab:07:d3:0c:38:4e:c9:b8:7f:d4:ac:da:f7:1f:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DC:D3:35:3A:A8:5E:35:19:AC:CF:8B:9A:5B:A6:C8:66:53:F9:44
            X509v3 Authority Key Identifier:
                keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:86:af:6e:22:27:ee:57:e0:ab:33:b2:a8:a3:9a:77:8e:20:
         2d:e6:45:98:5a:31:15:cc:44:66:50:45:62:64:6e:a6:e4:1b:
         64:4c:d9:a1:14:eb:7f:b1:0f:ce:e8:cf:06:27:b9:e3:c0:57:
         29:ac:3c:10:4d:a7:85:d7:62:73:91:74:56:fd:77:4e:4f:61:
         2c:d2:03:97:73:e1:69:15:c2:92:f9:d6:97:02:0a:f6:67:55:
         67:45:84:f8:bd:30:96:cb:87:e5:d8:14:c8:f7:57:a0:78:3d:
         cb:54:78:47:d3:0d:a2:52:33:0f:f5:d4:88:56:e6:96:7a:35:
         76:bd:65:7c:e0:4d:d3:38:c1:d9:f3:42:89:6d:07:7a:f7:5a:
         f9:59:b7:7c:78:a5:d5:1e:5f:a2:9f:1f:67:74:3c:91:a1:ea:
         dd:2a:6f:3f:50:44:be:60:c7:c6:72:1a:29:e4:66:f7:36:c9:
         bd:d8:fa:cf:51:a5:15:b6:84:cb:07:cc:4c:0a:ad:a2:c7:3b:
         d3:fc:ff:2a:12:b3:dd:d7:65:c0:94:ad:9a:5a:10:1c:74:0f:
         19:21:90:27:9e:91:51:ad:9e:fb:93:b7:aa:9f:d3:41:de:54:
         25:e2:62:97:92:ab:e5:26:92:86:41:c1:fa:77:97:f8:83:af:
         e5:c8:47:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND
OEJGREEwRTcwHhcNMjYxMDA3MDI0MTU1WhcNMjYxMDE0MDI0MTU1WjAYMRYwFAYD
VQQDEw02YWM1YjE3NC0xMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxgE1JsKJZjdeka8auBF0aQntwCah3fCDpOLnzPBxy9wEs5diPNd1ND0T6wA1
GDWyvIDAhVg1k/9eE/Z12mktbVMOpjtz0Gu8nRysAejNt/SVIp/Gp1HTtSAgmjki
Ti2aJJ3Ubp/YloOe6B9TfX4KAjhUZ8wGDZYgS0I+6LgU9vgmM1liKVszaxYg7cTw
7ZPUvSgMk6Z++iwdPXkFIp5RPRMQIGrIQq0QZf/axiIjsaBMDW1akQ7KA20XZolG
xEAnK7Mh2lW5eNPAgQKnv38rYtuHIZLFKCNK95tuUDJ9VTV3Lr+IE4u2lwuUawAw
xdgUqwfTDDhOybh/1Kza9x8hgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/c0zU6
qF41GazPi5pbpshmU/lEMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG
NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du
MGpNcHZKa29TaVBJdjlvT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU4avbiIn7lfgqzOyqKOad44gLeZFmFoxFcxEZlBFYmRupuQbZEzZoRTrf7EP
zujPBie548BXKaw8EE2nhddic5F0Vv13Tk9hLNIDl3PhaRXCkvnWlwIK9mdVZ0WE
+L0wlsuH5dgUyPdXoHg9y1R4R9MNolIzD/XUiFbmlno1dr1lfOBN0zjB2fNCiW0H
evda+Vm3fHil1R5fop8fZ3Q8kaHq3SpvP1BEvmDHxnIaKeRm9zbJvdj6z1GlFbaE
ywfMTAqtosc70/z/KhKz3ddlwJStmloQHHQPGSGQJ56RUa2e+5O3qp/TQd5UJeJi
l5Kr5SaShkHB+neX+IOv5chHuw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 21:37:55 2026 by rpki-client