Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File:                     X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier:          xFQen5xmFWAq2GFXetlzFeuTICXLdNHNzirvSe6/Lj0=
Subject key identifier:   EA:38:AF:05:9B:9D:36:7A:BA:A5:00:12:A6:79:F7:AD:EE:1C:C5:21
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer:       /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial:       1F2C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number:          1E98
Signing time:             Fri 04 Sep 2026 16:02:24 +0000
Manifest this update:     Fri 04 Sep 2026 16:02:24 +0000
Manifest next update:     Fri 11 Sep 2026 16:02:24 +0000
Files and hashes:         1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: YYNbuRa3M8Rgntv0EXb0xlUDItshpmKmhCXMOwQrgHU=)
                          2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: B88B8lhDuyvlqii7Vxfu2GVrdnxyOhGHMfrl63G06so=)
                          3: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: +XxRxDW4o+0vEop8el6czS1WqjL0cfJHtX8rBUhX9uE=)
                          4: 807395488FDD11F195BE82A73211F970.roa (hash: BU7K+VvzWJLMxSs9elkeme33blAxmlXtFe8kkWOD/8A=)
                          5: CD420BBC86EF11F19E006003A7EE528E.roa (hash: prjxQAidgmq4bIL41IJPb4DemAHY/2tYmvyzka4GluM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
                          rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7980 (0x1f2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
        Validity
            Not Before: Sep  4 16:02:24 2026 GMT
            Not After : Sep 11 16:02:24 2026 GMT
        Subject: CN=6a9aeb90-d659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:aa:c4:05:98:0b:bc:1d:bd:21:80:15:08:40:
                    36:bd:ca:50:3f:18:f5:9f:0e:c0:fc:b2:64:d5:32:
                    5c:e0:78:7b:4b:2a:ab:eb:15:85:ad:45:b0:17:41:
                    af:21:74:32:c2:a9:f0:04:04:b1:03:15:90:c3:2c:
                    31:78:c0:e8:bc:0b:ea:c3:20:81:66:85:a4:45:c8:
                    3b:54:93:64:5f:15:12:72:d0:4f:33:7e:36:3e:ae:
                    2f:90:a7:8b:9d:7a:4c:e5:f4:0a:bd:42:4b:bf:34:
                    76:86:c8:23:eb:37:07:8f:a3:a0:02:15:f6:0d:d1:
                    6d:e8:64:4d:31:ba:45:15:0c:fb:bc:2a:1f:53:ef:
                    bc:81:3a:46:9f:20:47:55:89:44:81:0d:51:69:83:
                    a6:30:9a:ad:f3:47:ef:d6:e7:39:f4:2c:46:4d:14:
                    06:96:1a:aa:f1:a2:88:6d:2e:ef:fc:eb:6a:eb:d0:
                    f3:f9:3b:14:60:68:87:72:03:a0:9c:c0:f5:5d:9a:
                    8f:fe:f7:f0:c3:61:a0:7f:73:99:73:27:f4:8d:d3:
                    3b:c7:54:36:aa:3c:df:65:82:42:a5:62:fe:ef:5e:
                    ac:54:7c:c1:38:12:6a:6c:73:f8:31:e6:ad:b9:1a:
                    da:c0:29:67:27:b7:81:83:d0:b8:53:33:5c:fa:3c:
                    96:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:AF:05:9B:9D:36:7A:BA:A5:00:12:A6:79:F7:AD:EE:1C:C5:21
            X509v3 Authority Key Identifier:
                keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f8:a6:4e:02:82:ad:f7:30:f9:77:62:fa:a2:5c:38:c6:2e:
         42:9d:e5:eb:e8:a9:04:51:ed:70:02:04:da:4a:68:5e:c5:57:
         06:62:8a:d3:13:be:d3:eb:ec:b9:c2:36:e9:af:f9:26:3e:a6:
         fd:ff:0d:70:d2:b6:2c:ed:15:db:14:4e:6c:7c:69:49:b1:81:
         d9:33:61:30:2c:81:a0:73:42:44:ba:54:61:ec:72:39:c4:6f:
         f2:d9:fd:3e:d7:19:c4:c5:31:6c:90:2f:4e:61:2c:a1:07:0a:
         55:a9:08:98:5b:56:70:bd:f8:6d:34:8a:05:84:ac:8e:c0:99:
         6c:ac:87:bf:cb:87:c6:98:6a:e5:5a:a8:9f:40:26:fc:21:12:
         0a:b9:22:97:55:6d:00:ed:e3:66:74:f8:5c:2f:e2:4d:aa:09:
         17:73:72:f1:ab:e7:56:9e:37:60:f7:2d:47:5f:9e:b0:e7:4d:
         0c:e7:40:07:66:20:98:10:17:26:11:30:e2:df:d5:de:87:08:
         3b:a2:6f:d3:94:aa:12:26:0e:cb:a1:f1:74:bf:7b:76:87:a7:
         49:3d:0d:55:2e:88:21:92:8e:d8:c3:fa:f1:ad:d9:f9:19:4c:
         d4:23:83:6f:6e:cd:cf:e6:88:8d:63:84:d6:e3:78:96:2e:0c:
         24:f8:46:e2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx
NzA3N0U2MzIwHhcNMjYwOTA0MTYwMjI0WhcNMjYwOTExMTYwMjI0WjAYMRYwFAYD
VQQDEw02YTlhZWI5MC1kNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8KrEBZgLvB29IYAVCEA2vcpQPxj1nw7A/LJk1TJc4Hh7Syqr6xWFrUWwF0Gv
IXQywqnwBASxAxWQwywxeMDovAvqwyCBZoWkRcg7VJNkXxUSctBPM342Pq4vkKeL
nXpM5fQKvUJLvzR2hsgj6zcHj6OgAhX2DdFt6GRNMbpFFQz7vCofU++8gTpGnyBH
VYlEgQ1RaYOmMJqt80fv1uc59CxGTRQGlhqq8aKIbS7v/Otq69Dz+TsUYGiHcgOg
nMD1XZqP/vfww2Ggf3OZcyf0jdM7x1Q2qjzfZYJCpWL+716sVHzBOBJqbHP4Meat
uRrawClnJ7eBg9C4UzNc+jyWSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOo4rwWb
nTZ6uqUAEqZ5963uHMUhMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1
MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf
QlJVbi1sTTlSNmtYQjM1akkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMfimTgKCrfcw+Xdi+qJcOMYuQp3l6+ipBFHtcAIE2kpoXsVXBmKK0xO+0+vs
ucI26a/5Jj6m/f8NcNK2LO0V2xRObHxpSbGB2TNhMCyBoHNCRLpUYexyOcRv8tn9
PtcZxMUxbJAvTmEsoQcKVakImFtWcL34bTSKBYSsjsCZbKyHv8uHxphq5Vqon0Am
/CESCrkil1VtAO3jZnT4XC/iTaoJF3Ny8avnVp43YPctR1+esOdNDOdAB2YgmBAX
JhEw4t/V3ocIO6Jv05SqEiYOy6HxdL97doenST0NVS6IIZKO2MP68a3Z+RlM1COD
b27Nz+aIjWOE1uN4li4MJPhG4g==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:18:12 2026 by rpki-client