Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
File:                     EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json)
Hash identifier:          AJsvHpZqiiKZKUfaFgCHW5Q/OVtTXRMrlO2zi7VMJF0=
Subject key identifier:   56:63:C2:72:C2:D9:13:18:E5:63:AA:5F:D8:65:21:74:DB:9A:C4:CA
Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79
Certificate issuer:       /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
Certificate serial:       0FE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
Manifest number:          0FDA
Signing time:             Tue 22 Sep 2026 17:23:22 +0000
Manifest this update:     Tue 22 Sep 2026 17:23:21 +0000
Manifest next update:     Tue 29 Sep 2026 17:23:21 +0000
Files and hashes:         1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: YhgLNL5QjGl2Dsi3hTnZwxbFYcPZf7ldz2OJzcvln0s=)
                          2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: QZTAOImU0Z2WPbI1rkI9qCfJOQspayOIo2PoVTSDncA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl
                          rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 17:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4067 (0xfe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79
        Validity
            Not Before: Sep 22 17:23:21 2026 GMT
            Not After : Sep 29 17:23:21 2026 GMT
        Subject: CN=6ab2b98a-0fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:3f:fb:22:e1:00:67:0b:f3:04:c2:70:cd:
                    7d:d4:90:00:a4:3b:e1:5c:d6:50:09:b5:73:8d:4f:
                    d7:22:f7:74:38:26:70:ed:fb:b4:47:17:e4:ae:2a:
                    e4:c3:b4:fd:f3:1b:5f:28:4a:68:30:08:0e:bb:5e:
                    21:9b:9f:04:a2:8c:84:b4:b9:4a:46:2f:55:c8:ea:
                    c0:1c:30:37:1e:73:87:97:17:0b:71:ea:17:40:ea:
                    f3:83:09:52:4b:7d:33:5e:b5:b0:06:8e:4c:9c:fc:
                    b5:a0:bc:cf:df:04:d8:8c:46:9b:5f:b4:64:e7:4f:
                    e7:3c:17:2a:3c:c1:6f:fe:ed:b7:be:10:03:00:c2:
                    a6:d9:e1:9c:62:30:ff:1b:ee:bd:25:69:0a:a1:cb:
                    0a:82:fd:76:7e:f4:aa:4e:3d:21:9c:9a:32:e3:3d:
                    97:d6:66:fb:bf:f0:0e:b3:65:b5:80:06:9c:d2:57:
                    0d:ae:0f:34:77:6c:ec:97:c1:c4:c1:20:39:a4:f5:
                    86:64:bc:d9:be:a7:41:a0:09:fb:57:e4:8f:b4:f6:
                    0d:e6:8b:50:77:96:35:e6:3f:8f:d1:98:81:78:34:
                    4b:5a:c5:8c:7b:43:42:40:0f:6b:3b:e4:4d:a0:5e:
                    6d:04:99:71:a2:76:c8:64:cd:73:6d:57:a2:bb:de:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:63:C2:72:C2:D9:13:18:E5:63:AA:5F:D8:65:21:74:DB:9A:C4:CA
            X509v3 Authority Key Identifier:
                keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:07:45:22:42:ed:3c:0d:ad:30:e5:15:ed:51:bc:6f:96:9b:
         89:b1:09:b9:6d:c3:e5:16:c3:70:4e:53:85:6a:af:a3:3c:c2:
         c1:6f:9d:ba:0d:90:51:db:47:bc:52:b4:cf:05:5f:6f:9c:f5:
         2c:57:71:67:30:fb:f8:d4:81:e3:69:ee:1d:8d:ad:e6:fc:88:
         69:bd:4a:34:b3:66:06:8e:e3:a8:38:d1:8f:f0:01:37:3a:76:
         2f:c6:fa:c2:c3:9f:81:87:1d:f2:2c:0d:29:87:40:45:89:96:
         6a:79:9b:c5:ab:b4:58:ca:45:9d:d9:26:64:cd:4d:8d:37:d0:
         f6:9c:3b:0f:40:df:58:89:a8:4f:cc:09:b6:cb:41:33:de:49:
         a3:91:fa:75:67:56:ee:67:2f:21:bb:9d:1b:37:f5:12:43:ea:
         c8:bd:79:7d:18:d1:a1:9d:ad:4d:ab:10:41:74:aa:cb:63:8f:
         68:d8:7f:28:c7:b5:b8:94:42:e9:ad:c1:fd:ca:57:f6:4a:f4:
         e2:b3:dc:6c:7b:51:2a:8b:fa:54:5e:d4:e9:8e:f0:de:f6:40:
         4a:e1:67:5b:e8:bd:53:a7:c7:96:98:50:bd:c8:28:e9:b2:bb:
         da:46:5d:b7:12:0f:ed:35:12:c0:01:ce:b7:05:c7:bf:4b:2a:
         a8:1a:91:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyRjIxMTAvBgNVBAUTKDExRDU3QTc1N0VENTY1NzVEMDQ5RTQyOUM4RUM3MzdB
NTYwNTBCNzkwHhcNMjYwOTIyMTcyMzIxWhcNMjYwOTI5MTcyMzIxWjAYMRYwFAYD
VQQDEw02YWIyYjk4YS0wZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwzM/+yLhAGcL8wTCcM191JAApDvhXNZQCbVzjU/XIvd0OCZw7fu0Rxfkrirk
w7T98xtfKEpoMAgOu14hm58EooyEtLlKRi9VyOrAHDA3HnOHlxcLceoXQOrzgwlS
S30zXrWwBo5MnPy1oLzP3wTYjEabX7Rk50/nPBcqPMFv/u23vhADAMKm2eGcYjD/
G+69JWkKocsKgv12fvSqTj0hnJoy4z2X1mb7v/AOs2W1gAac0lcNrg80d2zsl8HE
wSA5pPWGZLzZvqdBoAn7V+SPtPYN5otQd5Y15j+P0ZiBeDRLWsWMe0NCQA9rO+RN
oF5tBJlxonbIZM1zbVeiu97vSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZjwnLC
2RMY5WOqX9hlIXTbmsTKMB8GA1UdIwQYMBaAFBHVenV+1WV10EnkKcjsc3pWBQt5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJGMi9ERDhFQzFDODgw
RDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpYWFFTZVFweU94emVsWUZD
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VkVjZkWDdWWlhYUVNlUXB5T3h6ZWxZRkMzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzJGMi9ERDhFQzFDODgwRDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpY
WFFTZVFweU94emVsWUZDM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFQdFIkLtPA2tMOUV7VG8b5abibEJuW3D5RbDcE5ThWqvozzCwW+dug2QUdtH
vFK0zwVfb5z1LFdxZzD7+NSB42nuHY2t5vyIab1KNLNmBo7jqDjRj/ABNzp2L8b6
wsOfgYcd8iwNKYdARYmWanmbxau0WMpFndkmZM1NjTfQ9pw7D0DfWImoT8wJtstB
M95Jo5H6dWdW7mcvIbudGzf1EkPqyL15fRjRoZ2tTasQQXSqy2OPaNh/KMe1uJRC
6a3B/cpX9kr04rPcbHtRKov6VF7U6Y7w3vZASuFnW+i9U6fHlphQvcgo6bK72kZd
txIP7TUSwAHOtwXHv0sqqBqRMQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:09:18 2026 by rpki-client