Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          /QE0fQx1XDvHcAMkY2XIyig6Bl6NIjOlwOYcdraA5mQ=
Subject key identifier:   F5:C5:88:39:F5:0F:BF:78:27:90:43:07:59:CE:02:7C:4E:E7:05:EC
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0B93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0B49
Signing time:             Tue 18 Aug 2026 19:33:53 +0000
Manifest this update:     Tue 18 Aug 2026 19:33:52 +0000
Manifest next update:     Tue 25 Aug 2026 19:33:52 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: aAoXiveXWG5HErHF7Aid1YCDVQzGEr9MetXMttDSSjw=)
                          2: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=)
                          3: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=)
                          4: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=)
                          5: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=)
                          6: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=)
                          7: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=)
                          8: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=)
                          9: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=)
                          10: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=)
                          11: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY=)
                          12: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=)
                          13: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 19:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Aug 18 19:33:52 2026 GMT
            Not After : Aug 25 19:33:52 2026 GMT
        Subject: CN=6a84b3a1-7e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:d2:b8:a2:ec:c0:94:df:df:4a:d7:dd:a9:
                    86:ac:be:e2:40:45:27:55:4e:a4:91:94:9a:40:b3:
                    b6:28:42:93:45:b9:5a:5b:29:20:87:e0:ca:4f:52:
                    33:7b:12:f8:66:90:a4:bc:3f:3f:2f:f4:14:6a:87:
                    68:fa:dc:81:8d:1a:7b:1a:9d:97:8e:e0:a7:e9:8f:
                    b5:8d:d2:3d:e0:06:1b:79:4e:f0:00:d5:ff:eb:48:
                    58:41:2a:e2:db:16:8d:5b:a0:54:b3:99:b1:f3:97:
                    89:ec:96:35:80:36:69:51:e0:5b:e7:11:04:c4:4f:
                    28:ae:bc:e5:47:ce:57:26:a8:e5:4e:7f:53:67:fe:
                    14:98:bf:3c:bc:5b:fc:20:6a:eb:fe:aa:73:c2:09:
                    28:e5:58:d4:3a:42:fe:51:6d:5c:57:1e:a7:d9:84:
                    99:09:d6:34:92:39:c0:4f:cd:80:32:23:fb:b1:1c:
                    ff:27:bb:8d:70:9d:a2:32:3e:43:31:9b:57:77:d4:
                    27:8e:e5:fb:89:e2:43:5a:77:92:a0:2b:0c:96:af:
                    54:35:87:a0:0b:14:09:50:6b:13:32:14:8c:93:e5:
                    ae:6b:43:26:2d:42:0b:c4:95:1f:72:95:13:bf:30:
                    0b:96:c5:1b:bc:66:eb:17:ec:13:9c:14:00:ba:f5:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:88:39:F5:0F:BF:78:27:90:43:07:59:CE:02:7C:4E:E7:05:EC
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:52:df:b6:6d:7e:0d:b0:32:e3:eb:ab:f2:0d:bd:c7:f6:0d:
         a0:84:b3:6a:11:ce:48:12:bf:75:58:52:aa:f5:4d:08:d9:3f:
         18:bf:6a:e7:db:92:92:69:22:1d:8c:d1:83:8e:e6:03:09:c5:
         3d:85:7e:4d:36:95:bd:57:67:53:fc:4a:4a:9d:8b:6f:56:7d:
         e4:a6:6b:35:59:10:27:9a:80:fa:6d:15:33:52:df:54:ee:66:
         4a:bf:5c:7f:ae:88:b7:5d:ec:8c:a8:b5:77:16:12:3f:4b:7c:
         96:e0:32:48:23:43:ff:5c:70:1d:0a:7a:cd:c7:d3:35:8e:6b:
         d2:88:cd:18:46:28:1c:bf:59:a5:52:0f:30:7f:c2:6b:31:0c:
         e4:7f:14:d1:6a:d9:1c:aa:26:5a:7a:7f:d3:56:25:2b:bf:fc:
         f4:33:59:24:37:f9:97:a2:24:39:5f:1c:a0:a7:43:e9:9d:bf:
         58:06:39:fc:5e:bd:42:c4:25:26:1e:15:0f:7c:ef:24:19:de:
         aa:79:70:e1:50:a4:51:66:e9:1d:5d:a7:00:c9:e6:95:63:93:
         99:6b:ad:11:43:c0:cb:15:e7:c8:7a:21:57:66:2f:01:d6:2c:
         e5:eb:f6:1c:bb:0f:9b:d0:c3:13:e8:a7:53:db:70:35:db:57:
         7a:f3:f5:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4
M0NCRTE4NjcwHhcNMjYwODE4MTkzMzUyWhcNMjYwODI1MTkzMzUyWjAYMRYwFAYD
VQQDEw02YTg0YjNhMS03ZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuVjSuKLswJTf30rX3amGrL7iQEUnVU6kkZSaQLO2KEKTRblaWykgh+DKT1Iz
exL4ZpCkvD8/L/QUaodo+tyBjRp7Gp2XjuCn6Y+1jdI94AYbeU7wANX/60hYQSri
2xaNW6BUs5mx85eJ7JY1gDZpUeBb5xEExE8orrzlR85XJqjlTn9TZ/4UmL88vFv8
IGrr/qpzwgko5VjUOkL+UW1cVx6n2YSZCdY0kjnAT82AMiP7sRz/J7uNcJ2iMj5D
MZtXd9QnjuX7ieJDWneSoCsMlq9UNYegCxQJUGsTMhSMk+Wua0MmLUILxJUfcpUT
vzALlsUbvGbrF+wTnBQAuvUhJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXFiDn1
D794J5BDB1nOAnxO5wXsMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4
RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjQ5My81RkNBQjY3MjY4RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENX
MC0zWWdHRHRUWkdEeS1HR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvlLftm1+DbAy4+ur8g29x/YNoISzahHOSBK/dVhSqvVNCNk/GL9q59uSkmki
HYzRg47mAwnFPYV+TTaVvVdnU/xKSp2Lb1Z95KZrNVkQJ5qA+m0VM1LfVO5mSr9c
f66It13sjKi1dxYSP0t8luAySCND/1xwHQp6zcfTNY5r0ojNGEYoHL9ZpVIPMH/C
azEM5H8U0WrZHKomWnp/01YlK7/89DNZJDf5l6IkOV8coKdD6Z2/WAY5/F69QsQl
Jh4VD3zvJBneqnlw4VCkUWbpHV2nAMnmlWOTmWutEUPAyxXnyHohV2YvAdYs5ev2
HLsPm9DDE+inU9twNdtXevP1WQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:02:43 2026 by rpki-client