Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
File:                     MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft (raw, json)
Hash identifier:          Venfv0v6nFvi65Sfomnlta2GOh+xq6Ujdjj+y0WqQ4c=
Subject key identifier:   B5:57:E1:C1:18:4F:0E:B5:63:1B:64:82:EE:42:78:AF:ED:AE:B5:DA
Authority key identifier: 32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70
Certificate issuer:       /CN=A91CEBAA/serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
Certificate serial:       02C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
Manifest number:          02A8
Signing time:             Fri 11 Sep 2026 01:52:31 +0000
Manifest this update:     Fri 11 Sep 2026 01:52:31 +0000
Manifest next update:     Fri 18 Sep 2026 01:52:31 +0000
Files and hashes:         1: MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl (hash: UH8Mr0XWxc/uI7iDIl3xD+hpPKqzg07q37bCxhMBasM=)
                          2: E7BA6B5CEE3C11F08BE2E90E4D6F56BC.roa (hash: /Xmk4tz+mCwExZGnlLqC5Zkmn9dPaTMI2+1ZySEn0OI=)
                          3: ABC69EAEEE3C11F0B9A6920D4D6F56BC.roa (hash: QbYcHC8sEaaqzKI4aZ+szj1qFExhkAsjpip5wt7ACvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBAA, serialNumber=32618618244C8D6B4BA60A2FED9723B998D9A170
        Validity
            Not Before: Sep 11 01:52:31 2026 GMT
            Not After : Sep 18 01:52:31 2026 GMT
        Subject: CN=6aa35edf-b1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:21:b7:f8:49:63:8c:8b:45:a3:99:3f:a1:
                    4f:c1:6c:2e:6f:d5:bf:fc:3c:e4:ad:28:10:9b:0a:
                    71:c0:a1:e3:7f:1d:ff:20:8d:24:e0:a6:9a:25:8d:
                    e1:5b:9e:62:a8:9a:17:f8:6f:ce:a0:79:46:72:3c:
                    40:30:85:49:97:1f:41:bd:00:6b:41:a3:64:b8:a4:
                    04:80:7a:ac:bf:94:10:60:2d:0d:c2:b1:d1:25:77:
                    85:98:e3:d9:04:c7:e0:61:85:5e:cd:0c:1d:69:a0:
                    1f:67:0b:06:8d:07:f2:ab:b0:c1:3c:38:b1:0d:f1:
                    ef:55:ae:81:ff:b9:f8:13:93:61:b8:2f:fb:f0:70:
                    ce:cc:b8:8c:03:f1:8c:05:95:51:cb:9e:2c:56:b3:
                    cd:9c:45:76:be:2c:97:49:a1:49:30:ca:30:54:36:
                    e5:74:9e:1d:01:1d:19:8f:91:16:10:de:8e:34:ff:
                    89:dd:bb:84:2a:d0:1f:2b:ae:5a:16:7f:37:17:7a:
                    8d:2a:ad:48:49:c1:bb:73:5e:df:19:d9:8e:34:d5:
                    a2:51:f6:97:9a:6a:7e:d0:79:45:21:85:89:42:6e:
                    87:ee:3e:b5:01:8b:6e:07:41:3a:25:99:67:a0:15:
                    88:12:9c:ec:69:4c:62:55:7c:d7:6c:c8:a9:86:9d:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:57:E1:C1:18:4F:0E:B5:63:1B:64:82:EE:42:78:AF:ED:AE:B5:DA
            X509v3 Authority Key Identifier:
                keyid:32:61:86:18:24:4C:8D:6B:4B:A6:0A:2F:ED:97:23:B9:98:D9:A1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmGGGCRMjWtLpgov7ZcjuZjZoXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBAA/2CFD3712CCD011ED98252E75C4F9AE02/MmGGGCRMjWtLpgov7ZcjuZjZoXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:5f:b0:48:f4:9e:14:d2:b9:12:b2:cf:46:31:ef:c3:1c:94:
         d6:0a:02:1d:57:82:aa:a0:6c:00:74:3d:b0:7d:ec:24:58:d7:
         ef:0e:20:6e:b4:3a:e0:47:40:10:3c:7c:fa:60:8a:50:db:6a:
         f7:fc:91:e4:ca:14:3d:fd:34:98:2d:27:09:f0:d6:06:44:02:
         24:af:06:ac:ce:2e:df:18:50:2b:b7:8e:b7:1a:24:74:74:8f:
         32:5b:2f:9e:1c:33:6e:8f:a5:61:a0:1f:da:53:8e:29:d8:20:
         fe:95:86:2f:2a:32:d7:80:e5:1f:09:d6:6d:44:16:a7:9f:d0:
         68:72:1b:98:e4:f7:c1:4c:41:b3:46:25:c4:28:a3:92:7a:15:
         72:59:b4:3d:bc:db:0e:fe:ab:fd:7d:c4:74:37:5d:23:8c:62:
         f5:db:7a:7d:ed:59:46:7f:fe:65:f7:4e:d0:1d:84:14:93:ad:
         dd:44:ae:3f:0f:56:89:a0:93:60:47:5d:f2:b3:fa:5c:c8:e9:
         04:16:4b:d9:2f:7f:28:d5:5f:5e:44:88:da:a3:ef:9f:4d:04:
         36:04:66:46:f5:5f:b6:aa:11:3f:8b:d8:44:aa:e8:d0:e2:19:
         75:f5:55:f0:3f:cd:4d:fd:7f:f3:41:5a:35:71:5d:6c:fe:07:
         09:d9:c5:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VCQUExMTAvBgNVBAUTKDMyNjE4NjE4MjQ0QzhENkI0QkE2MEEyRkVEOTcyM0I5
OThEOUExNzAwHhcNMjYwOTExMDE1MjMxWhcNMjYwOTE4MDE1MjMxWjAYMRYwFAYD
VQQDEw02YWEzNWVkZi1iMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtMht/hJY4yLRaOZP6FPwWwub9W//DzkrSgQmwpxwKHjfx3/II0k4KaaJY3h
W55iqJoX+G/OoHlGcjxAMIVJlx9BvQBrQaNkuKQEgHqsv5QQYC0NwrHRJXeFmOPZ
BMfgYYVezQwdaaAfZwsGjQfyq7DBPDixDfHvVa6B/7n4E5NhuC/78HDOzLiMA/GM
BZVRy54sVrPNnEV2viyXSaFJMMowVDbldJ4dAR0Zj5EWEN6ONP+J3buEKtAfK65a
Fn83F3qNKq1IScG7c17fGdmONNWiUfaXmmp+0HlFIYWJQm6H7j61AYtuB0E6JZln
oBWIEpzsaUxiVXzXbMiphp1zRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVX4cEY
Tw61Yxtkgu5CeK/trrXaMB8GA1UdIwQYMBaAFDJhhhgkTI1rS6YKL+2XI7mY2aFw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJBQS8yQ0ZEMzcxMkND
RDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpXdExwZ292N1pjanVaalpv
WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01tR0dHQ1JNald0THBnb3Y3WmNqdVpqWm9YQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUJBQS8yQ0ZEMzcxMkNDRDAxMUVEOTgyNTJFNzVDNEY5QUUwMi9NbUdHR0NSTWpX
dExwZ292N1pjanVaalpvWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtl+wSPSeFNK5ErLPRjHvwxyU1goCHVeCqqBsAHQ9sH3sJFjX7w4gbrQ64EdA
EDx8+mCKUNtq9/yR5MoUPf00mC0nCfDWBkQCJK8GrM4u3xhQK7eOtxokdHSPMlsv
nhwzbo+lYaAf2lOOKdgg/pWGLyoy14DlHwnWbUQWp5/QaHIbmOT3wUxBs0YlxCij
knoVclm0PbzbDv6r/X3EdDddI4xi9dt6fe1ZRn/+ZfdO0B2EFJOt3USuPw9WiaCT
YEdd8rP6XMjpBBZL2S9/KNVfXkSI2qPvn00ENgRmRvVftqoRP4vYRKro0OIZdfVV
8D/NTf1/80FaNXFdbP4HCdnFJQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:23 2026 by rpki-client