Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
File:                     a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json)
Hash identifier:          WTUP+OhELcjIWY9eTp6nqdbhagQQWJlgichoDWXEmG4=
Subject key identifier:   A2:8B:07:9A:99:ED:14:26:2A:A9:62:07:44:39:66:C3:6F:C2:5B:20
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Certificate issuer:       /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial:       0979
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
Manifest number:          096D
Signing time:             Mon 28 Sep 2026 20:13:59 +0000
Manifest this update:     Mon 28 Sep 2026 20:13:59 +0000
Manifest next update:     Mon 05 Oct 2026 20:13:59 +0000
Files and hashes:         1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: qHTy0S/BVJlbK5TajGfoINaABoA5l0Tvs9nzr/yeTK4=)
                          2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: CR2jSan4WVvbilZ1W676Y7qalg7FKVHGW317Tr8xfUU=)
                          3: 1FB57044282911F18EC27654C4833773.roa (hash: tvgwjpZx2kCjR2qHWsoqJbARDpqCYop4rB7GvFRI6Uk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
                          rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 20:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
        Validity
            Not Before: Sep 28 20:13:59 2026 GMT
            Not After : Oct  5 20:13:59 2026 GMT
        Subject: CN=6abaca87-dd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:ec:67:8f:11:26:cd:9f:50:1e:b3:9f:fd:
                    7f:7f:64:8c:fe:f9:57:d5:da:95:f7:86:98:73:34:
                    29:52:9c:3e:a2:70:3b:2b:3b:e8:b6:e7:d2:c0:be:
                    00:e0:6f:3b:de:9e:00:1a:f1:47:1a:53:8d:55:b8:
                    21:2f:27:30:71:a7:8f:8c:7b:21:d3:67:37:b1:ae:
                    16:6a:60:85:c8:91:ff:a4:b8:7a:68:3a:69:db:f2:
                    95:0f:f8:0a:2d:3d:1d:a2:6c:77:ea:1c:87:43:10:
                    ee:31:c5:b3:8d:f3:4b:a3:ae:39:a7:1c:a9:c2:d4:
                    63:e5:c1:6d:da:30:4c:84:05:ee:ab:58:03:f2:2f:
                    c8:02:20:84:f0:25:69:99:c7:1b:a0:b8:e3:33:6d:
                    1b:81:5d:79:7a:9a:0d:40:bc:1b:21:53:af:7c:75:
                    c8:57:b3:16:3d:62:09:bc:4f:fc:f9:a9:7b:c2:27:
                    68:54:ea:f6:55:5e:a9:a1:fa:16:d7:e4:2e:b6:05:
                    f2:5d:cf:ae:92:6b:87:76:17:2a:76:f0:99:5f:fc:
                    df:be:40:3c:7c:84:05:89:df:d2:83:c8:a2:cc:8c:
                    bf:1d:c4:86:cc:17:06:38:65:05:3b:6e:0a:f5:ca:
                    e3:22:ef:80:7a:0a:ff:03:cb:95:a3:02:a8:7f:76:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8B:07:9A:99:ED:14:26:2A:A9:62:07:44:39:66:C3:6F:C2:5B:20
            X509v3 Authority Key Identifier:
                keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:06:0c:26:28:a4:ca:fa:4a:15:ec:d0:20:b4:bc:d4:aa:e9:
         d9:1e:c7:3e:9f:a8:8a:0e:70:a5:01:65:ce:6e:a6:33:b4:77:
         8d:e0:3c:68:6c:90:00:56:3c:e4:7a:39:d8:a8:05:bf:7b:2a:
         27:1f:ed:d2:2a:59:49:e4:d0:54:c7:85:45:a7:fd:57:18:d9:
         fe:db:88:79:39:78:d4:7c:10:cb:37:cf:ad:14:ba:00:07:a8:
         98:cd:24:72:dd:fc:a5:fa:78:8d:96:91:1c:32:3f:e8:bf:e7:
         37:59:e8:76:78:ff:c1:6b:ff:5b:4d:00:5d:b0:b7:18:47:94:
         6e:e5:41:0c:08:7b:f8:39:e2:e0:65:f7:b0:bd:f6:22:38:e5:
         6e:f9:6e:5b:6c:21:60:61:0c:4b:27:29:5b:02:68:4d:e7:fd:
         8c:db:0c:56:84:7b:11:53:c9:25:1f:10:fa:89:83:b8:f9:20:
         0c:ee:e7:e4:64:4a:d9:85:83:d0:0f:3b:ef:ce:6b:75:d5:27:
         d5:ca:78:c4:4b:17:04:d6:5b:09:b9:c6:33:f8:fd:84:83:db:
         b4:89:dd:c3:e9:16:5c:1b:dd:2d:8b:c9:b7:0b:c4:9f:d1:96:
         8f:55:7a:ff:ae:5f:b1:69:cd:a7:b9:db:89:22:38:94:c4:89:
         17:44:7c:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3
RUE3QTRGMDIwHhcNMjYwOTI4MjAxMzU5WhcNMjYxMDA1MjAxMzU5WjAYMRYwFAYD
VQQDEw02YWJhY2E4Ny1kZDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwHsZ48RJs2fUB6zn/1/f2SM/vlX1dqV94aYczQpUpw+onA7KzvotufSwL4A
4G873p4AGvFHGlONVbghLycwcaePjHsh02c3sa4WamCFyJH/pLh6aDpp2/KVD/gK
LT0domx36hyHQxDuMcWzjfNLo645pxypwtRj5cFt2jBMhAXuq1gD8i/IAiCE8CVp
mccboLjjM20bgV15epoNQLwbIVOvfHXIV7MWPWIJvE/8+al7widoVOr2VV6pofoW
1+QutgXyXc+ukmuHdhcqdvCZX/zfvkA8fIQFid/Sg8iizIy/HcSGzBcGOGUFO24K
9crjIu+Aegr/A8uVowKof3ZJjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKLB5qZ
7RQmKqliB0Q5ZsNvwlsgMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0
QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU
d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw
dExwampOeUhuQXAtcDZUd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQAYMJiikyvpKFezQILS81Krp2R7HPp+oig5wpQFlzm6mM7R3jeA8aGyQAFY8
5Ho52KgFv3sqJx/t0ipZSeTQVMeFRaf9VxjZ/tuIeTl41HwQyzfPrRS6AAeomM0k
ct38pfp4jZaRHDI/6L/nN1nodnj/wWv/W00AXbC3GEeUbuVBDAh7+Dni4GX3sL32
IjjlbvluW2whYGEMSycpWwJoTef9jNsMVoR7EVPJJR8Q+omDuPkgDO7n5GRK2YWD
0A87785rddUn1cp4xEsXBNZbCbnGM/j9hIPbtIndw+kWXBvdLYvJtwvEn9GWj1V6
/65fsWnNp7nbiSI4lMSJF0R8/w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 05:31:13 2026 by rpki-client