Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
File:                     D2tHILCjVyLYXzRG79R0C9NBg04.mft (raw, json)
Hash identifier:          8IDsHgAjCueg3Y5s4YhVizn1Fg2y7547XvoBsxrM42Q=
Subject key identifier:   F0:6C:8E:08:F8:56:55:9F:20:B8:57:79:31:7E:D3:61:53:84:F4:40
Authority key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E
Certificate issuer:       /CN=A91850AD/serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E
Certificate serial:       0195
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
Manifest number:          0189
Signing time:             Wed 23 Sep 2026 04:22:45 +0000
Manifest this update:     Wed 23 Sep 2026 04:22:45 +0000
Manifest next update:     Wed 30 Sep 2026 04:22:45 +0000
Files and hashes:         1: D2tHILCjVyLYXzRG79R0C9NBg04.crl (hash: gUDz95NhYWnL90gL9AoI2opQGd5vZ+6V/GsyRo6bgrw=)
                          2: CD1FB5C2643611EFA2C41948C4F9AE02.roa (hash: Oees07yYoqgn5PrN7dD6R0kAM+w8GIQPtiPs4eqC920=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl
                          rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91850AD, serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E
        Validity
            Not Before: Sep 23 04:22:45 2026 GMT
            Not After : Sep 30 04:22:45 2026 GMT
        Subject: CN=6ab35415-0711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:1f:50:17:a7:1d:bf:40:c0:0a:c8:47:c3:
                    2e:bc:d2:f6:9b:b9:70:00:45:30:8c:1c:70:d7:3a:
                    77:aa:cc:72:71:61:ba:53:dd:29:58:d3:47:30:9a:
                    cc:4b:89:d4:3d:54:df:3e:7f:cb:c4:ac:16:4b:42:
                    5a:f0:d0:4a:ca:5f:34:02:ef:9e:7e:62:90:86:02:
                    21:ee:61:4f:91:78:51:39:69:15:d7:9c:ca:e1:0d:
                    ed:2c:68:38:c8:84:fd:4d:80:96:09:f1:7b:06:eb:
                    6a:82:e5:0c:a2:b3:56:6a:97:f1:89:fb:6a:e2:70:
                    8a:da:d7:1f:31:b5:3c:9d:e3:4b:82:cf:7c:6d:91:
                    54:de:07:ea:57:11:27:7e:a7:5a:02:e8:23:d2:84:
                    94:66:9f:8c:a9:41:74:ce:c5:5a:83:a4:a2:70:07:
                    33:c0:45:ff:88:0c:1b:30:bd:ad:ff:46:cb:2a:c8:
                    69:b4:f6:fe:ed:95:5d:ed:f5:68:b2:09:74:54:cd:
                    00:2f:f3:5c:0a:95:48:46:19:d6:d9:7d:4a:d4:4b:
                    48:91:3e:2c:2b:6b:1e:19:2d:77:1e:4e:78:3f:03:
                    db:7f:29:f5:17:48:34:b8:bd:c5:d9:82:17:16:78:
                    4b:b3:03:37:54:69:13:74:bb:62:27:7b:09:88:c8:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:8E:08:F8:56:55:9F:20:B8:57:79:31:7E:D3:61:53:84:F4:40
            X509v3 Authority Key Identifier:
                keyid:0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:c7:63:bb:02:82:52:e5:49:e7:86:1a:01:de:7e:0a:fb:
         2b:f3:84:ac:d6:68:64:0e:03:ac:de:25:62:27:31:9f:93:5b:
         2f:dd:0b:0c:94:da:e0:c4:79:ed:f9:57:48:13:67:ce:60:a7:
         2e:7d:df:7f:9d:ec:98:01:99:91:42:e2:d5:67:19:6f:6d:79:
         15:14:11:08:47:57:fa:93:3b:a6:d8:b6:8e:46:86:01:c1:1a:
         e2:5c:54:93:98:07:2a:12:e2:b4:14:9f:7b:f5:cf:a0:0f:4f:
         0d:8c:21:94:cf:76:08:2d:f2:5f:80:64:ea:2f:6c:a0:d3:ae:
         b5:06:ee:0c:60:ee:c5:5b:4c:9f:a4:e4:39:2e:d8:83:a1:40:
         d2:91:32:cd:e2:10:6a:ca:93:db:b7:4a:24:b2:b6:d4:9e:ef:
         d0:2d:9c:f4:47:a2:73:b8:ae:f7:b6:c7:46:68:09:58:5c:e2:
         35:c8:8e:b5:0f:4d:ae:9e:c0:c8:72:31:79:51:94:a7:52:46:
         f7:25:ac:03:29:93:35:11:f9:b2:ab:92:fb:62:76:b9:72:9e:
         ea:6d:93:ee:23:b8:5d:bd:00:9b:08:01:cc:83:87:26:84:ae:
         01:1e:bc:8f:75:7b:97:d1:c3:b9:d5:48:9b:eb:13:68:4a:b4:
         15:e5:73:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUwQUQxMTAvBgNVBAUTKDBGNkI0NzIwQjBBMzU3MjJEODVGMzQ0NkVGRDQ3NDBC
RDM0MTgzNEUwHhcNMjYwOTIzMDQyMjQ1WhcNMjYwOTMwMDQyMjQ1WjAYMRYwFAYD
VQQDEw02YWIzNTQxNS0wNzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpkfUBenHb9AwArIR8MuvNL2m7lwAEUwjBxw1zp3qsxycWG6U90pWNNHMJrM
S4nUPVTfPn/LxKwWS0Ja8NBKyl80Au+efmKQhgIh7mFPkXhROWkV15zK4Q3tLGg4
yIT9TYCWCfF7ButqguUMorNWapfxiftq4nCK2tcfMbU8neNLgs98bZFU3gfqVxEn
fqdaAugj0oSUZp+MqUF0zsVag6SicAczwEX/iAwbML2t/0bLKshptPb+7ZVd7fVo
sgl0VM0AL/NcCpVIRhnW2X1K1EtIkT4sK2seGS13Hk54PwPbfyn1F0g0uL3F2YIX
FnhLswM3VGkTdLtiJ3sJiMgaawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPBsjgj4
VlWfILhXeTF+02FThPRAMB8GA1UdIwQYMBaAFA9rRyCwo1ci2F80Ru/UdAvTQYNO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82MEVCRTFBQzY0
MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5TFlYelJHNzlSMEM5TkJn
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0QydEhJTENqVnlMWVh6Ukc3OVIwQzlOQmcwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTBBRC82MEVCRTFBQzY0MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5
TFlYelJHNzlSMEM5TkJnMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb5jHY7sCglLlSeeGGgHefgr7K/OErNZoZA4DrN4lYicxn5NbL90LDJTa4MR5
7flXSBNnzmCnLn3ff53smAGZkULi1WcZb215FRQRCEdX+pM7pti2jkaGAcEa4lxU
k5gHKhLitBSfe/XPoA9PDYwhlM92CC3yX4Bk6i9soNOutQbuDGDuxVtMn6TkOS7Y
g6FA0pEyzeIQasqT27dKJLK21J7v0C2c9Eeic7iu97bHRmgJWFziNciOtQ9Nrp7A
yHIxeVGUp1JG9yWsAymTNRH5squS+2J2uXKe6m2T7iO4Xb0AmwgBzIOHJoSuAR68
j3V7l9HDudVIm+sTaEq0FeVzhA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:07:37 2026 by rpki-client