Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
File:                     kJUWWXx2-jz_qxUgjArpiGY0qgM.mft (raw, json)
Hash identifier:          k3guuSB9LCNOw7VSfdbVrXE9mN8sCKES4LHPXc56Jpc=
Subject key identifier:   00:E9:AE:74:6C:4E:C9:0F:10:14:3B:D9:71:46:05:3F:B2:A6:30:0A
Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03
Certificate issuer:       /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
Certificate serial:       0BA6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
Manifest number:          0B9C
Signing time:             Thu 24 Sep 2026 19:05:14 +0000
Manifest this update:     Thu 24 Sep 2026 19:05:13 +0000
Manifest next update:     Thu 01 Oct 2026 19:05:13 +0000
Files and hashes:         1: kJUWWXx2-jz_qxUgjArpiGY0qgM.crl (hash: 1CySqRrm2Id6qqP/4QEIps5RSMv2NQkrSFoDbcO1mwo=)
                          2: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (hash: U8LPi0ztG0viQT8FjnrvYf4D9AeaJJe8T9chhBCJepM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl
                          rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2982 (0xba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91847A2, serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03
        Validity
            Not Before: Sep 24 19:05:13 2026 GMT
            Not After : Oct  1 19:05:13 2026 GMT
        Subject: CN=6ab57469-bd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:f7:8a:3b:0e:95:ce:b8:df:6d:a2:e7:54:
                    a1:fc:b9:0a:d4:28:75:50:2a:c5:95:9e:ef:9f:e5:
                    e0:e9:0c:d3:ba:46:8b:b8:bc:9c:96:b6:be:a8:49:
                    84:4a:1b:d4:e4:1f:db:15:1d:c3:7c:98:b1:1f:b5:
                    2a:a9:4f:59:3f:22:10:10:45:45:9b:73:80:04:c4:
                    9b:cc:eb:37:17:58:96:e7:40:99:0d:6c:b2:ff:5a:
                    93:67:81:3e:00:45:8e:1b:7e:00:f8:79:bc:85:28:
                    d7:48:44:6b:a3:e7:de:7d:23:ba:ee:ab:e5:b9:9a:
                    d9:08:76:9c:fb:24:db:e9:b3:b4:df:7a:bf:74:32:
                    dc:55:83:68:74:53:4c:b5:51:2b:c8:6e:9f:98:b7:
                    1b:36:e9:26:a1:de:03:1b:c9:95:f9:2c:fb:4b:ff:
                    1f:da:fe:0e:ad:91:a4:47:b6:0a:f9:c5:f1:09:2e:
                    b8:80:06:56:f7:77:08:dc:74:f6:6e:9e:d2:71:83:
                    ee:24:8a:09:a9:87:06:f5:e2:33:7a:20:7e:e2:24:
                    0d:dd:0d:ee:0a:86:ab:97:c2:f0:08:0a:2c:cc:26:
                    f6:3b:74:50:ee:5d:81:92:ce:9f:19:11:08:b7:32:
                    90:8b:73:06:9e:2b:ee:2c:03:3c:d0:52:12:fc:f3:
                    96:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E9:AE:74:6C:4E:C9:0F:10:14:3B:D9:71:46:05:3F:B2:A6:30:0A
            X509v3 Authority Key Identifier:
                keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ec:11:ac:a2:16:dd:e0:c8:f8:fe:37:71:c8:56:5f:48:61:
         4b:00:25:1b:e1:eb:e5:fe:3a:dd:92:de:9a:6b:d5:ec:34:95:
         6d:d2:44:dd:55:dd:8a:ec:f9:8a:c0:d3:3f:a0:fd:b0:4d:53:
         d6:da:e7:ff:31:9f:26:91:ea:54:17:93:be:8a:a1:98:41:86:
         3f:42:b2:38:de:2b:c9:47:8d:cd:c0:26:8f:56:2d:03:59:ad:
         c0:2a:4d:82:fe:e7:77:36:59:ef:af:70:a9:ba:61:b8:a9:99:
         57:2d:77:fb:10:74:0b:18:1e:3a:1b:85:f3:34:50:45:aa:32:
         15:11:a3:e6:0b:f3:97:76:4b:a4:e1:da:d4:8d:dc:08:22:ad:
         b2:72:31:99:47:1b:00:23:72:23:5e:8b:e6:4e:40:7d:9c:85:
         9b:1b:7d:88:d6:7c:12:18:42:ff:5a:05:43:60:56:1b:07:22:
         83:e9:6e:6d:3b:7a:0b:a3:18:3d:2a:ea:4d:e9:26:7c:eb:41:
         c4:cd:81:ef:fc:ae:e0:db:41:ce:83:0a:2a:3e:00:c7:89:68:
         27:ef:39:43:c4:cb:cf:07:06:a0:b1:07:52:b0:4e:1e:3d:2f:
         76:cd:00:09:9b:4f:c2:8f:fe:0f:ca:0f:f3:91:7e:03:8d:b9:
         0f:87:37:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4
NjYzNEFBMDMwHhcNMjYwOTI0MTkwNTEzWhcNMjYxMDAxMTkwNTEzWjAYMRYwFAYD
VQQDEw02YWI1NzQ2OS1iZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZ73ijsOlc64322i51Sh/LkK1Ch1UCrFlZ7vn+Xg6QzTukaLuLyclra+qEmE
ShvU5B/bFR3DfJixH7UqqU9ZPyIQEEVFm3OABMSbzOs3F1iW50CZDWyy/1qTZ4E+
AEWOG34A+Hm8hSjXSERro+fefSO67qvluZrZCHac+yTb6bO033q/dDLcVYNodFNM
tVEryG6fmLcbNukmod4DG8mV+Sz7S/8f2v4OrZGkR7YK+cXxCS64gAZW93cI3HT2
bp7ScYPuJIoJqYcG9eIzeiB+4iQN3Q3uCoarl8LwCAoszCb2O3RQ7l2Bks6fGREI
tzKQi3MGnivuLAM80FIS/POWDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADprnRs
TskPEBQ72XFGBT+ypjAKMB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5
NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx
Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDdBMi9BRUQzRDM1RTU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1q
el9xeFVnakFycGlHWTBxZ00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfOwRrKIW3eDI+P43cchWX0hhSwAlG+Hr5f463ZLemmvV7DSVbdJE3VXdiuz5
isDTP6D9sE1T1trn/zGfJpHqVBeTvoqhmEGGP0KyON4ryUeNzcAmj1YtA1mtwCpN
gv7ndzZZ769wqbphuKmZVy13+xB0CxgeOhuF8zRQRaoyFRGj5gvzl3ZLpOHa1I3c
CCKtsnIxmUcbACNyI16L5k5AfZyFmxt9iNZ8EhhC/1oFQ2BWGwcig+lubTt6C6MY
PSrqTekmfOtBxM2B7/yu4NtBzoMKKj4Ax4loJ+85Q8TLzwcGoLEHUrBOHj0vds0A
CZtPwo/+D8oP85F+A425D4c3Pg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:33:55 2026 by rpki-client