Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
File:                     9UFCkkKfU9qxhrQuVkFJWagL6gg.mft (raw, json)
Hash identifier:          RtPsRx9Z5B504tdj656p5eBzZxNhFFmk2jALOwcrSjA=
Subject key identifier:   D6:00:83:A3:E4:A7:4D:C6:16:A8:AE:4A:4A:E1:2E:32:7B:C1:53:BA
Authority key identifier: F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08
Certificate issuer:       /CN=A91FB92B/serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
Manifest number:          023D
Signing time:             Sat 03 Oct 2026 03:10:17 +0000
Manifest this update:     Sat 03 Oct 2026 03:10:17 +0000
Manifest next update:     Sat 10 Oct 2026 03:10:17 +0000
Files and hashes:         1: 9UFCkkKfU9qxhrQuVkFJWagL6gg.crl (hash: 8XY2K4aHoTN2bzRrUaIq3uSviqZzCBe6NxG7X5JZv08=)
                          2: 25B9F9C454BE11EE810E4C27C4F9AE02.roa (hash: +XblEFbHvTMWzWB5YcW4gFr8l+aiQacIHVPmD8SMV9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl
                          rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB92B, serialNumber=F5414292429F53DAB186B42E56414959A80BEA08
        Validity
            Not Before: Oct  3 03:10:17 2026 GMT
            Not After : Oct 10 03:10:17 2026 GMT
        Subject: CN=6ac07219-21c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:d5:2f:62:40:bb:ba:c1:df:54:15:3d:49:
                    b8:48:56:89:80:eb:83:7f:12:a7:6a:b5:4f:3e:27:
                    fb:92:3d:e1:83:f2:8e:a8:73:ae:23:64:00:d4:ae:
                    de:21:c9:73:c8:4b:21:38:07:c7:4f:2d:87:e7:77:
                    fc:b1:19:4d:7f:b8:16:83:79:7a:40:03:4e:ec:59:
                    c8:61:f6:a1:7d:47:22:b2:22:0f:31:6c:d4:97:4a:
                    2d:ea:75:a4:43:2f:1e:4e:3c:73:60:65:f3:0d:37:
                    ef:6b:25:fe:bd:c8:f3:b5:04:09:ce:bd:65:bb:80:
                    5a:30:4e:c4:fe:f3:9b:ff:0b:13:55:c3:80:01:fd:
                    47:91:b0:52:7c:8e:1b:0f:e8:df:22:d1:f1:25:dd:
                    46:bf:ef:d5:b9:41:23:58:fb:23:31:a1:ec:bd:20:
                    6b:54:99:d8:a9:72:f9:d0:74:c7:0f:95:04:e8:1a:
                    71:36:8f:9a:c4:10:10:b3:c9:01:7c:48:f2:1a:bb:
                    34:f3:01:e6:3d:cb:fb:43:25:7f:e5:b6:57:fb:16:
                    a3:b3:64:d1:f7:0b:85:d8:c9:a5:9d:63:8f:03:25:
                    50:f4:cf:6a:d8:c2:14:b1:cc:45:fa:4b:93:5b:23:
                    b8:86:4f:25:4b:f8:91:e0:fd:9d:7a:12:a0:95:d7:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:00:83:A3:E4:A7:4D:C6:16:A8:AE:4A:4A:E1:2E:32:7B:C1:53:BA
            X509v3 Authority Key Identifier:
                keyid:F5:41:42:92:42:9F:53:DA:B1:86:B4:2E:56:41:49:59:A8:0B:EA:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UFCkkKfU9qxhrQuVkFJWagL6gg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB92B/C46081F254BD11EE8102F07FC4F9AE02/9UFCkkKfU9qxhrQuVkFJWagL6gg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:9e:c7:85:52:39:16:11:8b:4d:ff:92:d4:c3:02:34:b2:
         ad:6a:00:1c:73:4a:67:a5:f3:67:57:2e:0f:be:79:3b:cc:0b:
         0c:8d:41:a5:a7:b9:6d:30:06:3a:47:4e:b2:d4:4f:ca:1d:1a:
         ff:e2:f9:d9:d5:91:b7:f6:ff:77:bb:d3:7e:82:a8:36:de:5d:
         05:c0:92:ca:92:0f:d0:9b:67:56:25:22:60:1a:37:8f:17:55:
         84:75:9a:87:bf:37:54:f9:1e:8d:d1:36:a4:6f:38:06:8e:a5:
         e4:18:6f:6a:a4:22:8b:9d:e3:b9:c2:0d:a1:af:6c:44:ed:3c:
         bb:c0:33:d7:ec:15:17:9a:7a:13:92:83:50:a0:58:77:4b:e8:
         97:d8:a6:be:fb:54:e5:36:dd:fc:7d:f6:81:42:40:b3:1c:ad:
         89:ad:8a:0c:3a:51:29:98:11:15:40:24:af:db:fb:20:a4:d6:
         ce:61:c2:9f:0f:fa:b3:49:06:f1:26:0b:60:1a:61:8a:be:b2:
         b5:20:cc:aa:7f:bd:14:cb:12:ae:0f:31:2c:9d:05:cf:d8:b2:
         11:27:da:46:4e:82:66:7f:d1:43:32:97:a5:e2:0f:59:f8:d7:
         01:0a:08:ee:f2:29:ec:1b:56:75:ba:3a:6a:ef:f2:dd:b0:6f:
         87:00:24:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkI5MkIxMTAvBgNVBAUTKEY1NDE0MjkyNDI5RjUzREFCMTg2QjQyRTU2NDE0OTU5
QTgwQkVBMDgwHhcNMjYxMDAzMDMxMDE3WhcNMjYxMDEwMDMxMDE3WjAYMRYwFAYD
VQQDEw02YWMwNzIxOS0yMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+bVL2JAu7rB31QVPUm4SFaJgOuDfxKnarVPPif7kj3hg/KOqHOuI2QA1K7e
IclzyEshOAfHTy2H53f8sRlNf7gWg3l6QANO7FnIYfahfUcisiIPMWzUl0ot6nWk
Qy8eTjxzYGXzDTfvayX+vcjztQQJzr1lu4BaME7E/vOb/wsTVcOAAf1HkbBSfI4b
D+jfItHxJd1Gv+/VuUEjWPsjMaHsvSBrVJnYqXL50HTHD5UE6BpxNo+axBAQs8kB
fEjyGrs08wHmPcv7QyV/5bZX+xajs2TR9wuF2MmlnWOPAyVQ9M9q2MIUscxF+kuT
WyO4hk8lS/iR4P2dehKgldf3iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNYAg6Pk
p03GFqiuSkrhLjJ7wVO6MB8GA1UdIwQYMBaAFPVBQpJCn1PasYa0LlZBSVmoC+oI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjkyQi9DNDYwODFGMjU0
QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5cXhoclF1VmtGSldhZ0w2
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlVRkNra0tmVTlxeGhyUXVWa0ZKV2FnTDZnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjkyQi9DNDYwODFGMjU0QkQxMUVFODEwMkYwN0ZDNEY5QUUwMi85VUZDa2tLZlU5
cXhoclF1VmtGSldhZ0w2Z2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdyuex4VSORYRi03/ktTDAjSyrWoAHHNKZ6XzZ1cuD755O8wLDI1Bpae5bTAG
OkdOstRPyh0a/+L52dWRt/b/d7vTfoKoNt5dBcCSypIP0JtnViUiYBo3jxdVhHWa
h783VPkejdE2pG84Bo6l5BhvaqQii53jucINoa9sRO08u8Az1+wVF5p6E5KDUKBY
d0vol9imvvtU5Tbd/H32gUJAsxytia2KDDpRKZgRFUAkr9v7IKTWzmHCnw/6s0kG
8SYLYBphir6ytSDMqn+9FMsSrg8xLJ0Fz9iyESfaRk6CZn/RQzKXpeIPWfjXAQoI
7vIp7BtWdbo6au/y3bBvhwAkgA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:35 2026 by rpki-client