Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
File:                     5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json)
Hash identifier:          LOHJEkUpo6SqIwiUrEdnDT/zQ77mmrft7XsRO7Bp7hg=
Subject key identifier:   37:62:65:51:BA:13:73:F8:C1:00:10:06:E4:D0:9A:F3:2F:B8:75:23
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
Manifest number:          0244
Signing time:             Fri 25 Sep 2026 02:30:56 +0000
Manifest this update:     Fri 25 Sep 2026 02:30:55 +0000
Manifest next update:     Fri 02 Oct 2026 02:30:55 +0000
Files and hashes:         1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: 4mSzP9AzAt++sa5SdsMXjHS0QEJ5pb3RO2jZ4fd0Yqo=)
                          2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: bSvC5EUhsAfmDzVmgucGYFQBCurrkXi4UpC3IDQOZ70=)
                          3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: 6zxbQD4gzRXvOfYhZXYB2uRI1fOm5dIZfKC/EQTi2Js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: Sep 25 02:30:55 2026 GMT
            Not After : Oct  2 02:30:55 2026 GMT
        Subject: CN=6ab5dce0-ccf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:56:37:96:85:7a:06:81:a4:c6:2a:63:7a:
                    8d:36:26:5b:d4:43:d6:ce:aa:bd:51:64:c4:c2:67:
                    55:78:14:cd:37:a1:47:88:3f:b8:9b:47:9c:55:99:
                    51:f0:08:47:21:0c:50:48:a8:96:51:a6:f8:af:99:
                    24:a0:11:8d:1d:39:76:75:2c:80:82:92:ee:74:1d:
                    b1:ca:ca:9a:6a:90:5b:ea:09:e1:e3:94:d5:36:f2:
                    a3:0b:07:63:d5:31:40:29:f1:c4:aa:c4:be:3d:e1:
                    a8:41:55:55:ad:e5:69:e0:b8:74:fb:7f:53:29:33:
                    9b:9d:2c:31:fe:e5:20:6d:24:ab:09:51:e2:10:13:
                    89:09:dc:04:53:c4:db:e1:17:1a:cd:e3:d8:8e:74:
                    3f:53:9a:c1:49:c7:ec:1f:d4:d2:0f:fd:a6:67:da:
                    76:7f:08:07:2f:a6:8b:06:62:1c:d0:3b:fd:14:48:
                    f2:db:c0:d5:e3:16:cf:07:1e:a9:83:e4:37:8b:49:
                    48:a2:9a:e6:88:17:6c:71:f4:ae:21:15:84:ac:c3:
                    7e:7f:73:b6:c7:06:2d:90:63:bf:0d:f5:15:0f:06:
                    84:4f:79:ee:5b:56:b5:95:db:a2:a8:71:c0:54:3e:
                    78:87:e0:93:79:78:66:e8:c8:37:3e:26:7e:77:22:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:62:65:51:BA:13:73:F8:C1:00:10:06:E4:D0:9A:F3:2F:B8:75:23
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:35:e0:5c:e7:38:56:f3:f0:1f:d0:e4:cb:07:67:cd:bf:
         10:a8:69:2a:15:e9:20:27:06:b7:04:a6:91:5f:02:c7:3a:d9:
         6a:7d:35:a3:fe:91:4d:73:68:31:7c:c8:3a:31:9e:85:22:72:
         7d:7d:2e:0a:97:66:11:38:6b:7f:39:d0:d9:8c:ae:c9:a6:67:
         63:08:02:37:f4:9c:c9:4a:91:7e:94:6c:5a:ae:04:76:f1:15:
         7a:e0:50:a4:3d:9f:ae:d7:a1:27:6f:9d:07:b5:ad:37:14:6a:
         85:d5:a6:ec:8e:7d:95:c5:ac:b7:dd:2f:be:cb:98:9b:97:88:
         df:c0:ec:8b:82:04:6d:02:2a:c4:c3:65:8b:76:9f:2d:26:d3:
         53:26:40:98:ae:27:b7:7c:c7:6b:75:a2:a2:52:46:64:d9:15:
         58:a0:17:88:91:43:9c:ec:a2:c4:c3:3f:d2:3c:fd:80:ca:ab:
         17:ff:29:7f:17:da:bb:3a:c4:14:c2:ab:ce:b0:c9:1a:2b:4e:
         af:db:e1:96:84:22:d3:08:14:14:77:0d:f5:04:65:a5:7c:bc:
         70:8e:17:86:b8:92:6b:a3:fa:bc:c2:f0:5d:0e:ae:06:85:72:
         61:c0:e0:5d:f7:51:1f:2c:f1:60:c3:88:73:98:ad:f4:e4:3c:
         72:00:f9:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz
MTgxQzI4MTgwHhcNMjYwOTI1MDIzMDU1WhcNMjYxMDAyMDIzMDU1WjAYMRYwFAYD
VQQDEw02YWI1ZGNlMC1jY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsrBWN5aFegaBpMYqY3qNNiZb1EPWzqq9UWTEwmdVeBTNN6FHiD+4m0ecVZlR
8AhHIQxQSKiWUab4r5kkoBGNHTl2dSyAgpLudB2xysqaapBb6gnh45TVNvKjCwdj
1TFAKfHEqsS+PeGoQVVVreVp4Lh0+39TKTObnSwx/uUgbSSrCVHiEBOJCdwEU8Tb
4RcazePYjnQ/U5rBScfsH9TSD/2mZ9p2fwgHL6aLBmIc0Dv9FEjy28DV4xbPBx6p
g+Q3i0lIoprmiBdscfSuIRWErMN+f3O2xwYtkGO/DfUVDwaET3nuW1a1lduiqHHA
VD54h+CTeXhm6Mg3PiZ+dyIISQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdiZVG6
E3P4wQAQBuTQmvMvuHUjMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1
OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v
UGNtZUxfa3hWMW94Z2NLQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIP814FznOFbz8B/Q5MsHZ82/EKhpKhXpICcGtwSmkV8CxzrZan01o/6RTXNo
MXzIOjGehSJyfX0uCpdmEThrfznQ2YyuyaZnYwgCN/ScyUqRfpRsWq4EdvEVeuBQ
pD2frtehJ2+dB7WtNxRqhdWm7I59lcWst90vvsuYm5eI38Dsi4IEbQIqxMNli3af
LSbTUyZAmK4nt3zHa3WiolJGZNkVWKAXiJFDnOyixMM/0jz9gMqrF/8pfxfauzrE
FMKrzrDJGitOr9vhloQi0wgUFHcN9QRlpXy8cI4XhriSa6P6vMLwXQ6uBoVyYcDg
XfdRHyzxYMOIc5it9OQ8cgD5jg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:55:44 2026 by rpki-client