Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
File:                     91FDq1voML6TvNd20zKw_Vt4fjs.mft (raw, json)
Hash identifier:          kk56zdeRZoBeHmR7pFwk73RGhH+lPsB702quy590lZo=
Subject key identifier:   D5:2F:69:45:37:9B:DA:D7:64:14:E2:6F:DA:46:24:B3:15:73:3F:FE
Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B
Certificate issuer:       /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B
Certificate serial:       08D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
Manifest number:          08CB
Signing time:             Thu 24 Sep 2026 20:24:57 +0000
Manifest this update:     Thu 24 Sep 2026 20:24:56 +0000
Manifest next update:     Thu 01 Oct 2026 20:24:56 +0000
Files and hashes:         1: 91FDq1voML6TvNd20zKw_Vt4fjs.crl (hash: Hk8MamMzuT2x5rxa6f3kT5wI0pJiwDu0kbcReTgxYXU=)
                          2: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (hash: y9BTyvgaU1VbrP+/g6c74FO/jdmkWItE5o2GWg/yoeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl
                          rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261 (0x8d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91717C0, serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B
        Validity
            Not Before: Sep 24 20:24:56 2026 GMT
            Not After : Oct  1 20:24:56 2026 GMT
        Subject: CN=6ab58719-c5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:bd:09:6d:7a:9b:a0:e7:d7:d6:dc:44:3a:
                    50:53:a4:5a:dd:7a:39:4e:d0:9a:e3:ae:32:62:c5:
                    f6:50:f1:fa:eb:cf:92:c2:6e:c0:67:d5:44:c5:e4:
                    e3:fa:98:d7:bb:56:4b:d6:15:ba:59:91:13:74:f2:
                    17:3d:3f:17:e2:2b:de:bd:6b:8a:58:eb:33:fd:83:
                    5a:3e:24:18:65:9c:b4:5d:79:19:8b:34:a7:f8:2b:
                    63:e2:0b:01:a7:ef:64:f1:1f:a8:46:72:af:d6:0f:
                    00:73:9a:86:6a:bc:3b:1e:44:70:1c:54:e2:b4:ac:
                    47:ed:de:6f:b1:68:3b:63:32:47:93:fc:3d:e6:04:
                    70:57:6a:78:a0:73:a4:ad:19:d7:6d:b0:77:84:32:
                    39:a6:7a:7f:39:69:25:c6:e8:1f:0f:b9:ba:47:f6:
                    7a:3a:50:f0:56:76:ff:fe:a5:cc:11:bd:ec:88:e3:
                    ef:91:ce:86:f9:34:64:a9:25:b6:cd:7a:de:c0:68:
                    5f:0d:ad:97:41:4b:2e:51:73:e2:90:15:ff:e1:57:
                    0b:eb:ff:b5:2a:bd:bf:64:45:6d:b9:e6:67:5b:93:
                    9e:f5:0a:ca:d7:ed:63:4d:b9:60:28:27:5a:96:fb:
                    a4:26:b2:b1:cb:87:c9:41:32:98:e2:45:e7:dd:80:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2F:69:45:37:9B:DA:D7:64:14:E2:6F:DA:46:24:B3:15:73:3F:FE
            X509v3 Authority Key Identifier:
                keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c8:cb:9b:86:af:78:37:03:b6:ff:fa:85:bf:7e:4f:5b:6d:
         17:79:a8:ea:f9:98:bf:65:9d:c6:3a:ad:a9:3b:ab:24:a5:79:
         9f:d4:3a:31:30:3d:f7:d4:f4:0f:9d:1a:7c:fd:a6:3c:0d:15:
         d1:df:a2:60:4e:f0:cc:bc:a2:5c:14:82:a7:e9:1f:3e:d1:17:
         4c:01:0a:a3:be:5a:91:6e:88:ab:dd:80:3d:21:e0:47:99:a3:
         69:b0:91:02:11:27:b0:58:a4:0a:c8:8d:b0:8b:4c:46:8f:ed:
         1b:3f:69:00:52:4d:ff:93:86:09:e3:ba:f8:29:3b:29:2c:8c:
         69:54:e4:10:d1:c6:52:48:1a:be:21:6a:d8:ba:d3:f8:17:10:
         83:02:4d:0a:52:c1:1c:ee:83:6e:a7:4b:6d:4a:df:a2:57:d5:
         a2:ca:04:03:61:ad:ac:f1:ab:a4:03:6c:5f:f0:2f:b4:3d:94:
         03:e5:77:00:53:79:98:46:5d:be:37:0d:e1:43:12:d0:fc:fd:
         b1:72:4d:5f:27:23:a3:4a:d3:29:93:f9:a9:ef:15:a9:3e:3c:
         e7:51:d4:89:e1:55:3c:6c:c2:4d:8d:4d:71:c5:fd:6b:d0:0d:
         7b:2d:10:1a:37:56:69:52:10:5e:24:f9:cd:05:51:7f:7e:98:
         b7:6a:f9:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE
NUI3ODdFM0IwHhcNMjYwOTI0MjAyNDU2WhcNMjYxMDAxMjAyNDU2WjAYMRYwFAYD
VQQDEw02YWI1ODcxOS1jNWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjYy9CW16m6Dn19bcRDpQU6Ra3Xo5TtCa464yYsX2UPH668+Swm7AZ9VExeTj
+pjXu1ZL1hW6WZETdPIXPT8X4ivevWuKWOsz/YNaPiQYZZy0XXkZizSn+Ctj4gsB
p+9k8R+oRnKv1g8Ac5qGarw7HkRwHFTitKxH7d5vsWg7YzJHk/w95gRwV2p4oHOk
rRnXbbB3hDI5pnp/OWklxugfD7m6R/Z6OlDwVnb//qXMEb3siOPvkc6G+TRkqSW2
zXrewGhfDa2XQUsuUXPikBX/4VcL6/+1Kr2/ZEVtueZnW5Oe9QrK1+1jTblgKCda
lvukJrKxy4fJQTKY4kXn3YC6wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUvaUU3
m9rXZBTib9pGJLMVcz/+MB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz
MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm
anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTdDMC8wMThFQkU1OEYzMUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01M
NlR2TmQyMHpLd19WdDRmanMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApMjLm4aveDcDtv/6hb9+T1ttF3mo6vmYv2WdxjqtqTurJKV5n9Q6MTA999T0
D50afP2mPA0V0d+iYE7wzLyiXBSCp+kfPtEXTAEKo75akW6Iq92APSHgR5mjabCR
AhEnsFikCsiNsItMRo/tGz9pAFJN/5OGCeO6+Ck7KSyMaVTkENHGUkgaviFq2LrT
+BcQgwJNClLBHO6DbqdLbUrfolfVosoEA2GtrPGrpANsX/AvtD2UA+V3AFN5mEZd
vjcN4UMS0Pz9sXJNXycjo0rTKZP5qe8VqT4851HUieFVPGzCTY1NccX9a9ANey0Q
GjdWaVIQXiT5zQVRf36Yt2r5Eg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:25 2026 by rpki-client