Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
File:                     A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json)
Hash identifier:          50IpZ7c51PjB2vIhbD/F2wVrmj4nWUT0F1+126aW4to=
Subject key identifier:   2D:DC:52:71:31:30:64:E3:20:FE:DF:1D:9D:F4:02:7E:71:D0:7C:E5
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Certificate issuer:       /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial:       03C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
Manifest number:          039F
Signing time:             Mon 05 Oct 2026 00:45:41 +0000
Manifest this update:     Mon 05 Oct 2026 00:45:40 +0000
Manifest next update:     Mon 12 Oct 2026 00:45:40 +0000
Files and hashes:         1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: 1u3yumrshlAuW9xzz9zdEtUgcaQEO75ZYUwPm2Kmwng=)
                          2: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: ocfm0632GkIQFqFPtClJ7d+H9AJy5vbW5Lcs0qelByk=)
                          3: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: pu6SoMWB6txH7Ha4WwK43mwzGqVFweaoNNhIGVki79Y=)
                          4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: MI7imB1oUQ+nBhE/F9pWSqwhaGqPvMCUwnO5mooHgWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
        Validity
            Not Before: Oct  5 00:45:40 2026 GMT
            Not After : Oct 12 00:45:40 2026 GMT
        Subject: CN=6ac2f335-a219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:73:7e:a9:a4:c7:6d:8d:39:91:f6:60:95:
                    f7:95:81:cf:e5:26:08:c0:3b:16:e6:9f:89:36:23:
                    6f:98:cc:52:c3:eb:c6:45:10:04:e8:4c:c3:78:23:
                    47:52:70:9b:96:4c:ae:b5:80:d6:fb:03:6a:60:bb:
                    53:bb:63:42:d7:65:31:b3:70:7c:b8:42:12:32:59:
                    78:c3:02:85:81:5f:af:1c:62:aa:2d:51:88:d8:a3:
                    81:5e:ab:a4:cf:2b:a8:be:1e:83:7a:ce:42:53:ec:
                    1e:68:62:00:92:db:39:98:2e:53:a4:b1:96:10:7e:
                    ec:ab:7f:ee:9c:55:41:2b:da:97:0b:20:0f:be:6e:
                    a4:4a:b9:e0:0a:8e:3a:71:72:e3:66:f4:b5:f7:f2:
                    d1:e9:2b:99:7b:f7:72:e4:24:96:ae:06:d2:47:7d:
                    08:8a:b6:0c:54:00:d4:23:c8:34:bd:8c:00:1f:90:
                    3f:d6:2d:8d:28:c0:89:a7:fc:98:c5:8b:83:ff:08:
                    11:f6:88:3d:db:db:20:f3:66:b8:7a:a5:47:af:f4:
                    12:9f:7c:0f:69:c6:93:c2:be:6b:3e:0e:e9:cc:47:
                    b3:d7:aa:5b:ee:e3:e6:f6:18:2a:f2:31:af:eb:3d:
                    52:5c:d0:f0:0e:62:92:6d:94:76:c0:4b:bd:2f:bd:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DC:52:71:31:30:64:E3:20:FE:DF:1D:9D:F4:02:7E:71:D0:7C:E5
            X509v3 Authority Key Identifier:
                keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:55:b4:3a:5e:5f:5c:68:9e:79:56:30:c8:96:c5:b7:99:e9:
         dc:04:bf:c6:d8:e0:5b:74:49:41:21:54:a7:8b:71:b5:df:28:
         2c:30:cf:ca:df:64:0e:0d:92:50:f5:af:fd:6a:ce:08:64:cc:
         cc:61:35:37:68:69:4b:80:89:25:ee:23:bc:90:3d:0f:9a:bc:
         73:8d:cd:02:79:65:97:be:b3:54:58:25:3c:e5:3b:5c:bc:ac:
         d7:39:71:a6:04:2b:f6:fb:0f:f5:01:36:43:17:f9:df:9e:f2:
         d9:a7:25:db:b6:b6:dc:da:8d:a8:a0:25:91:78:f0:f7:6d:64:
         92:b6:08:fe:b2:c2:da:6f:1b:ed:1e:3b:82:01:b0:43:1e:a9:
         d1:4c:d0:13:6e:8f:ac:63:b9:5b:57:79:10:dc:16:27:38:72:
         fa:ce:9c:45:6d:93:09:ef:92:d6:c9:0a:53:9e:dc:de:17:4d:
         d3:9b:58:c3:ed:82:14:f5:dc:fe:4b:ab:0a:58:72:56:c0:19:
         0a:7e:32:eb:2b:1f:f7:fc:de:71:b0:5f:a7:4f:a0:9b:17:ea:
         43:4f:4a:3f:ed:14:c8:de:b0:fe:07:72:c1:45:f0:fb:84:ac:
         71:45:5c:67:5d:18:cb:05:8e:a3:7e:98:7e:02:0c:36:e4:6e:
         bf:48:11:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB
QTIyNUIwRUUwHhcNMjYxMDA1MDA0NTQwWhcNMjYxMDEyMDA0NTQwWjAYMRYwFAYD
VQQDEw02YWMyZjMzNS1hMjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAucpzfqmkx22NOZH2YJX3lYHP5SYIwDsW5p+JNiNvmMxSw+vGRRAE6EzDeCNH
UnCblkyutYDW+wNqYLtTu2NC12Uxs3B8uEISMll4wwKFgV+vHGKqLVGI2KOBXquk
zyuovh6Des5CU+weaGIAkts5mC5TpLGWEH7sq3/unFVBK9qXCyAPvm6kSrngCo46
cXLjZvS19/LR6SuZe/dy5CSWrgbSR30IirYMVADUI8g0vYwAH5A/1i2NKMCJp/yY
xYuD/wgR9og929sg82a4eqVHr/QSn3wPacaTwr5rPg7pzEez16pb7uPm9hgq8jGv
6z1SXNDwDmKSbZR2wEu9L70ouQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3cUnEx
MGTjIP7fHZ30An5x0HzlMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4
QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF
dEcyaVdhdC10bUtxSWxzTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOlW0Ol5fXGieeVYwyJbFt5np3AS/xtjgW3RJQSFUp4txtd8oLDDPyt9kDg2S
UPWv/WrOCGTMzGE1N2hpS4CJJe4jvJA9D5q8c43NAnlll76zVFglPOU7XLys1zlx
pgQr9vsP9QE2Qxf5357y2acl27a23NqNqKAlkXjw921kkrYI/rLC2m8b7R47ggGw
Qx6p0UzQE26PrGO5W1d5ENwWJzhy+s6cRW2TCe+S1skKU57c3hdN05tYw+2CFPXc
/kurClhyVsAZCn4y6ysf9/zecbBfp0+gmxfqQ09KP+0UyN6w/gdywUXw+4SscUVc
Z10YywWOo36YfgIMNuRuv0gRNg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:31:51 2026 by rpki-client