Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
File:                     D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json)
Hash identifier:          5trx69ScD9ul4SzxMSPuKHzgHrt8QzzI1e6gS2LuF4U=
Subject key identifier:   D1:B8:65:F3:2A:D0:CF:59:AA:74:A6:F7:61:E1:DA:9E:A3:D9:98:66
Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93
Certificate issuer:       /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
Manifest number:          0101
Signing time:             Wed 23 Sep 2026 05:58:33 +0000
Manifest this update:     Wed 23 Sep 2026 05:58:32 +0000
Manifest next update:     Wed 30 Sep 2026 05:58:32 +0000
Files and hashes:         1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: SHBuuVC8ISi+JVEJwgxaXCEju0bqdGuyyqqAhMIfzOo=)
                          2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: QDtioVWIhSQHKs0Tk+R/fmPWRMMOJ24+WyiTZJLSleU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl
                          rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
        Validity
            Not Before: Sep 23 05:58:32 2026 GMT
            Not After : Sep 30 05:58:32 2026 GMT
        Subject: CN=6ab36a89-1018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:20:f5:bd:d9:31:54:05:34:3c:80:0b:b6:
                    ce:7a:07:1f:21:04:31:8d:b7:ca:10:0a:03:45:e0:
                    67:cc:2a:33:4e:ec:b1:0b:cf:00:27:8b:e3:ad:2d:
                    db:b7:02:ff:37:22:40:48:49:68:2d:74:14:6e:7a:
                    ec:7f:f1:67:15:b7:e5:43:4f:f7:48:a7:39:6f:71:
                    7d:0d:e0:db:81:1a:1f:72:64:a9:24:8a:cd:f6:ac:
                    4b:a3:e2:c8:52:aa:09:0a:12:1f:6a:5a:f3:c6:0d:
                    fb:2b:4a:de:1a:0d:bb:30:b9:c6:b2:61:a8:a5:5d:
                    61:bd:bf:6f:a4:ba:ef:2a:c5:3b:80:ea:46:21:d1:
                    ff:46:9e:12:79:2a:58:11:fa:26:09:d8:ce:7f:3c:
                    b4:2a:bc:16:5e:d7:c5:48:8f:f1:fa:45:04:d7:b2:
                    1b:ff:6e:f7:b6:c9:7f:27:e8:1b:e8:e4:5c:80:62:
                    3d:40:0b:c1:43:5b:91:0a:35:ff:5a:6c:7e:41:10:
                    39:7b:95:3a:aa:17:61:76:9e:b6:87:96:ea:9d:15:
                    ab:5f:16:96:8d:a9:33:d8:dd:ee:e7:09:6c:1a:04:
                    6f:93:32:a1:09:6d:75:40:a9:74:c6:92:4a:71:26:
                    57:bf:3f:93:8f:8a:4e:2f:5d:99:4a:f1:f7:10:67:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B8:65:F3:2A:D0:CF:59:AA:74:A6:F7:61:E1:DA:9E:A3:D9:98:66
            X509v3 Authority Key Identifier:
                keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f5:6f:a5:95:b5:0e:45:ff:0f:c7:fb:0d:9d:75:85:ea:66:
         c4:24:10:c4:15:70:8f:a4:d5:98:f1:9f:81:da:f4:31:6e:f8:
         9e:b8:f5:56:3f:fa:2f:cc:12:84:fd:fc:89:f5:3b:8c:09:27:
         fe:f4:7e:51:7a:5a:3b:16:5f:4e:b7:d7:8e:52:c3:2b:da:4f:
         03:77:4d:88:4d:82:f7:4e:c6:5e:f8:bd:e1:60:0a:94:24:ab:
         e6:f1:55:c1:96:25:40:6f:89:c0:04:2f:9a:9a:e9:95:ab:97:
         c9:8c:f1:2e:5f:cd:77:73:c3:85:d2:0d:61:3b:b5:0b:b8:1c:
         39:8a:6a:f0:59:fe:c2:b3:77:18:df:69:10:d3:07:5a:cb:ce:
         82:56:8d:89:8d:99:a6:74:28:7e:c8:6f:11:95:02:70:8e:4b:
         e7:e4:ba:79:2d:87:4a:50:21:93:f0:cd:bb:5f:35:5b:dd:03:
         1c:aa:0e:ac:e5:29:50:d5:95:ad:00:44:dc:80:d1:5a:4f:a1:
         02:6d:a3:5c:cf:4a:3b:2b:56:78:46:27:5f:e4:2e:f0:ec:e7:
         b9:b1:25:09:6b:cc:85:58:26:37:82:cd:f9:b8:43:a7:7d:ca:
         97:80:03:d2:76:74:db:c5:7b:ad:0a:d4:00:af:ca:d6:1c:ba:
         b9:14:ee:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU2Q0YxMTAvBgNVBAUTKDBGRkY3MTc5ODJEOUUxRDk2RjREN0ZDNTMxMUVEMzIz
MjM2QkEwOTMwHhcNMjYwOTIzMDU1ODMyWhcNMjYwOTMwMDU1ODMyWjAYMRYwFAYD
VQQDEw02YWIzNmE4OS0xMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyHAg9b3ZMVQFNDyAC7bOegcfIQQxjbfKEAoDReBnzCozTuyxC88AJ4vjrS3b
twL/NyJASEloLXQUbnrsf/FnFbflQ0/3SKc5b3F9DeDbgRofcmSpJIrN9qxLo+LI
UqoJChIfalrzxg37K0reGg27MLnGsmGopV1hvb9vpLrvKsU7gOpGIdH/Rp4SeSpY
EfomCdjOfzy0KrwWXtfFSI/x+kUE17Ib/273tsl/J+gb6ORcgGI9QAvBQ1uRCjX/
Wmx+QRA5e5U6qhdhdp62h5bqnRWrXxaWjakz2N3u5wlsGgRvkzKhCW11QKl0xpJK
cSZXvz+Tj4pOL12ZSvH3EGe1KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNG4ZfMq
0M9ZqnSm92Hh2p6j2ZhmMB8GA1UdIwQYMBaAFA//cXmC2eHZb01/xTEe0yMja6CT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZDRi8wMTM5MzQ5NjMx
MkQxMUYwOTZDRUVBNUVDNEY5QUUwMi9EXzl4ZVlMWjRkbHZUWF9GTVI3VEl5TnJv
Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9KTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTZDRi8wMTM5MzQ5NjMxMkQxMUYwOTZDRUVBNUVDNEY5QUUwMi9EXzl4ZVlMWjRk
bHZUWF9GTVI3VEl5TnJvSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdvVvpZW1DkX/D8f7DZ11hepmxCQQxBVwj6TVmPGfgdr0MW74nrj1Vj/6L8wS
hP38ifU7jAkn/vR+UXpaOxZfTrfXjlLDK9pPA3dNiE2C907GXvi94WAKlCSr5vFV
wZYlQG+JwAQvmprplauXyYzxLl/Nd3PDhdINYTu1C7gcOYpq8Fn+wrN3GN9pENMH
WsvOglaNiY2ZpnQofshvEZUCcI5L5+S6eS2HSlAhk/DNu181W90DHKoOrOUpUNWV
rQBE3IDRWk+hAm2jXM9KOytWeEYnX+Qu8OznubElCWvMhVgmN4LN+bhDp33Kl4AD
0nZ028V7rQrUAK/K1hy6uRTuZA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:14:55 2026 by rpki-client