Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
File:                     sJELB8hrD_owClKsfDH8tSwFMtc.mft (raw, json)
Hash identifier:          IDJDuCY+RMEQnaOzfFxiw2vvCxaZICjEJZxTvXWgl8U=
Subject key identifier:   89:AF:20:92:19:21:6A:01:81:AE:A4:3F:0E:13:B4:FA:0C:A2:18:B3
Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7
Certificate issuer:       /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
Certificate serial:       06E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
Manifest number:          06D9
Signing time:             Mon 31 Aug 2026 22:13:17 +0000
Manifest this update:     Mon 31 Aug 2026 22:13:17 +0000
Manifest next update:     Mon 07 Sep 2026 22:13:17 +0000
Files and hashes:         1: sJELB8hrD_owClKsfDH8tSwFMtc.crl (hash: GQ7KBdbQv7GYvK3TZaGqUjl7WaGEBuUHukBhOL/Q4HU=)
                          2: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (hash: xZwoqxfOayEV992muPvVHQ2Q6o2AK6AHasTqY2PsFBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl
                          rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B777C, serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7
        Validity
            Not Before: Aug 31 22:13:17 2026 GMT
            Not After : Sep  7 22:13:17 2026 GMT
        Subject: CN=6a95fc7d-039f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:a0:08:6c:bf:1b:2e:68:93:36:b2:c6:30:
                    f1:fd:c7:7c:31:6a:7f:76:bd:a7:ae:20:72:e9:d8:
                    59:1d:ca:a1:80:56:f1:cd:35:2e:af:a2:fb:46:62:
                    fc:ab:8a:e3:a7:d5:fc:19:72:60:0d:fe:2e:96:6b:
                    d5:a7:81:05:64:75:f6:16:98:56:21:5f:b1:95:f5:
                    f2:16:e9:50:8f:00:98:a8:19:9c:66:80:83:f2:8b:
                    fa:ff:15:40:c8:41:2c:d0:ac:54:72:cf:c8:e4:82:
                    74:db:3c:23:c0:1d:44:06:ab:3c:e3:04:8d:37:ed:
                    9d:ba:bd:b3:79:e7:31:e2:9b:ff:16:0b:f9:3e:da:
                    b5:89:37:e3:37:29:c8:15:be:e1:0f:f7:15:3e:1a:
                    39:73:4f:57:bd:91:3a:9c:8c:32:2e:3a:d8:d2:c8:
                    1a:d4:d2:97:96:13:2c:f9:19:0f:42:8f:cb:5f:9a:
                    49:f0:62:be:b8:eb:4f:9d:86:8a:32:1c:f0:61:e7:
                    36:c5:73:e4:46:02:de:db:ad:3f:40:8d:55:d0:82:
                    1a:88:31:7f:11:18:38:42:4b:d7:9f:89:af:1b:1a:
                    9f:03:2f:5b:d1:a2:fa:d8:4a:d4:64:6c:d3:b2:36:
                    e5:54:92:36:cd:18:bf:1f:13:03:6a:3a:60:ce:fa:
                    c7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AF:20:92:19:21:6A:01:81:AE:A4:3F:0E:13:B4:FA:0C:A2:18:B3
            X509v3 Authority Key Identifier:
                keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:a1:30:ad:0f:65:d3:d9:81:4f:87:80:d3:ae:c7:67:69:
         7f:6b:46:f6:99:7b:13:ca:2f:88:54:e2:c5:8e:9b:ed:83:ad:
         b7:a6:6a:ca:41:7f:31:57:4c:6c:dd:97:ad:a9:ff:68:34:d2:
         d7:06:e0:c5:a9:ed:98:69:1b:59:17:ab:47:f1:c2:59:59:bf:
         00:af:8a:42:2a:fb:27:3e:0e:29:d4:6b:77:69:c2:c4:fb:25:
         92:6d:8a:ad:3e:af:ea:d9:8a:92:46:35:bd:d0:46:e3:ba:03:
         32:a3:0b:57:2b:84:8a:24:6c:cb:b5:46:e3:ab:33:12:6c:64:
         3f:28:b4:34:a5:50:cc:99:88:aa:a6:2d:d6:9d:1a:73:52:65:
         e7:d5:84:05:0c:25:96:8c:f8:60:70:b5:d7:9c:c4:91:de:cb:
         71:a4:e1:74:6b:35:1b:1d:55:d4:d0:7d:84:c2:4e:74:c6:30:
         d7:78:a9:9e:ce:1f:06:72:09:6c:84:67:5b:2a:aa:5a:78:55:
         fa:db:54:3b:1d:58:14:1c:fe:9f:b8:33:59:86:d4:7f:c0:55:
         90:97:24:a6:f9:89:4c:94:20:64:74:6e:51:c4:92:9a:64:42:
         e0:18:7b:89:db:2a:f2:f4:a7:5f:4d:9a:48:60:50:96:f1:93:
         8e:84:b6:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1
MkMwNTMyRDcwHhcNMjYwODMxMjIxMzE3WhcNMjYwOTA3MjIxMzE3WjAYMRYwFAYD
VQQDEw02YTk1ZmM3ZC0wMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiRagCGy/Gy5okzayxjDx/cd8MWp/dr2nriBy6dhZHcqhgFbxzTUur6L7RmL8
q4rjp9X8GXJgDf4ulmvVp4EFZHX2FphWIV+xlfXyFulQjwCYqBmcZoCD8ov6/xVA
yEEs0KxUcs/I5IJ02zwjwB1EBqs84wSNN+2dur2zeecx4pv/Fgv5Ptq1iTfjNynI
Fb7hD/cVPho5c09XvZE6nIwyLjrY0sga1NKXlhMs+RkPQo/LX5pJ8GK+uOtPnYaK
MhzwYec2xXPkRgLe260/QI1V0IIaiDF/ERg4QkvXn4mvGxqfAy9b0aL62ErUZGzT
sjblVJI2zRi/HxMDajpgzvrH/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImvIJIZ
IWoBga6kPw4TtPoMohizMB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy
REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Nzc3Qy82MkQwM0U4Q0IyREExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRf
b3dDbEtzZkRIOHRTd0ZNdGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH1KhMK0PZdPZgU+HgNOux2dpf2tG9pl7E8oviFTixY6b7YOtt6ZqykF/MVdM
bN2Xran/aDTS1wbgxantmGkbWRerR/HCWVm/AK+KQir7Jz4OKdRrd2nCxPslkm2K
rT6v6tmKkkY1vdBG47oDMqMLVyuEiiRsy7VG46szEmxkPyi0NKVQzJmIqqYt1p0a
c1Jl59WEBQwlloz4YHC115zEkd7LcaThdGs1Gx1V1NB9hMJOdMYw13ipns4fBnIJ
bIRnWyqqWnhV+ttUOx1YFBz+n7gzWYbUf8BVkJckpvmJTJQgZHRuUcSSmmRC4Bh7
idsq8vSnX02aSGBQlvGTjoS26A==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:31 2026 by rpki-client