Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91271EA/97E9C4D8AD0E11F196DDE3D33C11F970/t692IPh1zUqOvarTATgSdar3TWw.mft
File:                     t692IPh1zUqOvarTATgSdar3TWw.mft (raw, json)
Hash identifier:          pUXIODS88Pdv3GFXlPv+1wK3mu5VPJevJEjsA58rbjc=
Subject key identifier:   84:92:90:12:F3:D7:3A:25:78:C2:6B:42:B5:86:03:B2:06:4D:99:AE
Authority key identifier: B7:AF:76:20:F8:75:CD:4A:8E:BD:AA:D3:01:38:12:75:AA:F7:4D:6C
Certificate issuer:       /CN=A91271EA/serialNumber=B7AF7620F875CD4A8EBDAAD301381275AAF74D6C
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t692IPh1zUqOvarTATgSdar3TWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91271EA/97E9C4D8AD0E11F196DDE3D33C11F970/t692IPh1zUqOvarTATgSdar3TWw.mft
Manifest number:          0F
Signing time:             Fri 25 Sep 2026 09:23:59 +0000
Manifest this update:     Fri 25 Sep 2026 09:23:58 +0000
Manifest next update:     Fri 02 Oct 2026 09:23:58 +0000
Files and hashes:         1: t692IPh1zUqOvarTATgSdar3TWw.crl (hash: 6HPsYiWFCJoDwMtbfjpWzGalxhGVSC7qbD74Vzz7bKE=)
                          2: 9EB044BCB00C11F1920EF4826A11F970.roa (hash: bSXPAQg/wfQei+1WPdG8PBRMdXPXJlltUqYsuBh2azw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91271EA/97E9C4D8AD0E11F196DDE3D33C11F970/t692IPh1zUqOvarTATgSdar3TWw.crl
                          rsync://rpki.apnic.net/member_repository/A91271EA/97E9C4D8AD0E11F196DDE3D33C11F970/t692IPh1zUqOvarTATgSdar3TWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t692IPh1zUqOvarTATgSdar3TWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91271EA, serialNumber=B7AF7620F875CD4A8EBDAAD301381275AAF74D6C
        Validity
            Not Before: Sep 25 09:23:58 2026 GMT
            Not After : Oct  2 09:23:58 2026 GMT
        Subject: CN=6ab63daf-251d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:70:0b:1c:e0:82:99:b3:e2:b3:ff:91:18:
                    24:e1:95:f1:ce:e6:f8:3a:5a:22:34:31:44:30:10:
                    f5:9d:82:a9:d4:d3:55:fa:e9:a1:0e:b5:db:13:bc:
                    45:50:49:74:86:67:3b:21:9e:ce:b6:df:c5:d0:9d:
                    2c:01:f8:06:1f:9d:d3:95:67:11:6b:65:a3:87:03:
                    d1:00:37:81:68:64:6c:f2:af:4f:bb:41:a2:04:db:
                    ea:4f:b4:72:5b:db:b1:55:60:3a:61:3e:b2:df:86:
                    4d:52:36:07:9f:fe:e0:25:78:2a:59:fa:92:fa:b4:
                    8d:62:1a:eb:db:2e:2a:24:13:52:3b:4f:42:54:0f:
                    8c:95:68:ba:0f:58:10:96:be:3c:bb:ab:b7:67:6a:
                    2c:9a:83:9a:72:7c:96:f7:27:b0:7d:fd:36:77:ca:
                    a8:35:e3:aa:be:be:6f:0b:4d:42:8a:30:42:1a:ee:
                    1e:63:d1:1e:dd:64:cf:62:5f:8a:76:b8:15:58:aa:
                    a3:24:7a:d3:f6:fd:8e:14:91:73:3c:d5:2a:c5:a3:
                    46:de:7d:52:17:fe:98:98:7c:cb:ed:c0:0b:78:27:
                    66:51:cc:4a:52:eb:6e:99:b7:75:e5:97:82:c1:1b:
                    21:92:e7:52:0d:7b:2a:53:fe:d2:2b:41:42:be:66:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:92:90:12:F3:D7:3A:25:78:C2:6B:42:B5:86:03:B2:06:4D:99:AE
            X509v3 Authority Key Identifier:
                keyid:B7:AF:76:20:F8:75:CD:4A:8E:BD:AA:D3:01:38:12:75:AA:F7:4D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91271EA/97E9C4D8AD0E11F196DDE3D33C11F970/t692IPh1zUqOvarTATgSdar3TWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t692IPh1zUqOvarTATgSdar3TWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91271EA/97E9C4D8AD0E11F196DDE3D33C11F970/t692IPh1zUqOvarTATgSdar3TWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:b3:85:8b:d0:1c:3b:a3:7e:2c:82:3e:74:69:d0:82:0b:
         57:23:91:a8:98:fe:7d:99:9e:5d:0f:9d:e7:a8:fc:bd:1d:c1:
         c4:3e:4e:60:1a:e6:ee:39:15:c6:71:de:69:9e:e7:7f:ff:e9:
         82:5d:e8:e8:f0:01:c1:18:eb:ee:5b:d7:b6:15:01:f9:eb:f5:
         5e:31:f1:40:ec:89:0c:1a:55:ec:ea:f7:73:c1:df:de:e4:41:
         46:07:7c:cd:55:ae:7b:45:c2:58:a6:bc:c6:4c:da:47:ba:18:
         53:59:91:f8:7d:28:cc:74:9a:69:39:19:29:2b:9b:64:7d:05:
         82:9b:1f:f8:a5:ab:83:dd:a2:63:49:e8:8d:e5:60:43:27:9b:
         58:e1:74:68:57:08:c2:a7:74:e4:17:fd:68:56:13:77:b2:a2:
         60:55:7c:84:ce:9a:20:2f:26:13:2c:48:5d:1c:b1:89:5b:70:
         3c:73:d8:ad:99:da:7b:1a:1b:b8:28:82:b6:d1:c6:45:18:60:
         07:23:46:9e:8d:8d:3d:0c:e5:3d:5f:14:88:34:df:1f:b1:92:
         59:4f:7c:d4:9f:f1:a4:c7:2c:01:6a:d0:43:50:fd:62:49:73:
         d5:b5:d6:44:9c:91:4a:e6:9e:da:28:09:a3:a4:c5:4c:de:7d:
         fb:dc:c6:bf
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NzFFQTExMC8GA1UEBRMoQjdBRjc2MjBGODc1Q0Q0QThFQkRBQUQzMDEzODEyNzVB
QUY3NEQ2QzAeFw0yNjA5MjUwOTIzNThaFw0yNjEwMDIwOTIzNThaMBgxFjAUBgNV
BAMTDTZhYjYzZGFmLTI1MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwh3ALHOCCmbPis/+RGCThlfHO5vg6WiI0MUQwEPWdgqnU01X66aEOtdsTvEVQ
SXSGZzshns6238XQnSwB+AYfndOVZxFrZaOHA9EAN4FoZGzyr0+7QaIE2+pPtHJb
27FVYDphPrLfhk1SNgef/uAleCpZ+pL6tI1iGuvbLiokE1I7T0JUD4yVaLoPWBCW
vjy7q7dnaiyag5pyfJb3J7B9/TZ3yqg146q+vm8LTUKKMEIa7h5j0R7dZM9iX4p2
uBVYqqMketP2/Y4UkXM81SrFo0befVIX/piYfMvtwAt4J2ZRzEpS626Zt3Xll4LB
GyGS51INeypT/tIrQUK+Zs/NAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhJKQEvPX
OiV4wmtCtYYDsgZNma4wHwYDVR0jBBgwFoAUt692IPh1zUqOvarTATgSdar3TWww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3MUVBLzk3RTlDNEQ4QUQw
RTExRjE5NkRERTNEMzNDMTFGOTcwL3Q2OTJJUGgxelVxT3ZhclRBVGdTZGFyM1RX
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdDY5MklQaDF6VXFPdmFyVEFUZ1NkYXIzVFd3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
MUVBLzk3RTlDNEQ4QUQwRTExRjE5NkRERTNEMzNDMTFGOTcwL3Q2OTJJUGgxelVx
T3ZhclRBVGdTZGFyM1RXdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBo4bOFi9AcO6N+LII+dGnQggtXI5GomP59mZ5dD53nqPy9HcHEPk5gGubuORXG
cd5pnud//+mCXejo8AHBGOvuW9e2FQH56/VeMfFA7IkMGlXs6vdzwd/e5EFGB3zN
Va57RcJYprzGTNpHuhhTWZH4fSjMdJppORkpK5tkfQWCmx/4pauD3aJjSeiN5WBD
J5tY4XRoVwjCp3TkF/1oVhN3sqJgVXyEzpogLyYTLEhdHLGJW3A8c9itmdp7Ghu4
KIK20cZFGGAHI0aejY09DOU9XxSINN8fsZJZT3zUn/GkxywBatBDUP1iSXPVtdZE
nJFK5p7aKAmjpMVM3n373Ma/
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:02:32 2026 by rpki-client