Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
File:                     KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json)
Hash identifier:          GajQ7rnDnsj3P8f+AOG9Dbln1oKhAR5cMt5nAxjeA2M=
Subject key identifier:   02:37:AA:C3:34:E5:A2:15:7C:A9:FC:52:32:AE:3A:F9:E2:D5:3B:BF
Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
Certificate issuer:       /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Certificate serial:       0C16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
Manifest number:          0C08
Signing time:             Thu 24 Sep 2026 18:49:08 +0000
Manifest this update:     Thu 24 Sep 2026 18:49:07 +0000
Manifest next update:     Thu 01 Oct 2026 18:49:07 +0000
Files and hashes:         1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: hfNs/WC7AASONGxB8E/IcvyaIGstKKnGtV9UF3abMEM=)
                          2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: fU6jAByCtwsmVxuWyqdXtNZEjmhch8Znr65pNsBAKDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
                          rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3094 (0xc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3456, serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
        Validity
            Not Before: Sep 24 18:49:07 2026 GMT
            Not After : Oct  1 18:49:07 2026 GMT
        Subject: CN=6ab570a4-2e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:fe:5d:90:4e:eb:de:b5:ef:ab:9a:83:77:
                    e2:63:88:11:fc:12:5d:97:ad:ec:4b:75:c9:a5:b1:
                    f9:d1:14:7d:ed:74:40:93:0e:46:f7:d0:37:ed:45:
                    bb:38:1e:46:01:74:35:29:44:5a:21:a8:19:b0:f8:
                    5e:28:56:0c:ea:5d:1f:e2:1e:15:a1:06:ed:36:6e:
                    b8:a5:ac:69:1d:a7:d0:ea:e4:94:76:31:d2:db:2d:
                    c4:f5:fd:80:38:30:de:3a:26:2b:f0:35:5f:da:78:
                    de:88:0c:39:60:21:a3:90:82:70:f2:f1:79:7f:8e:
                    6f:5e:e5:65:26:b3:7c:05:bb:50:71:d2:02:ef:be:
                    f5:ae:96:51:53:23:a2:ec:45:96:69:31:10:dd:22:
                    82:da:8b:b6:9f:dc:73:44:d0:02:ab:9d:97:fe:ab:
                    b4:2f:20:16:ba:36:47:58:3b:49:bc:48:eb:ea:fd:
                    54:d8:2e:0a:b0:1e:b8:93:31:83:43:a9:74:0b:43:
                    a7:32:94:1a:0a:88:35:6a:a2:fc:ea:b2:f7:18:28:
                    a1:cf:48:99:3e:2f:71:2d:2c:2f:47:ee:c2:da:95:
                    22:eb:33:41:8c:d1:47:36:3b:52:e4:5b:14:05:d2:
                    6d:08:2a:17:be:1a:3a:77:95:00:da:a1:af:21:f5:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:37:AA:C3:34:E5:A2:15:7C:A9:FC:52:32:AE:3A:F9:E2:D5:3B:BF
            X509v3 Authority Key Identifier:
                keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:5a:cf:8a:55:53:b0:e1:f5:02:2a:01:76:d3:d7:04:bd:
         ca:5d:9e:4e:d1:00:16:cc:73:29:84:88:0e:48:47:71:d9:24:
         bf:90:30:2e:1e:e2:ae:89:a2:ac:b7:2b:65:59:36:d8:25:27:
         e7:a4:bc:8b:2c:4d:e7:5a:2a:3d:8a:87:ac:bc:56:7c:3e:c8:
         6c:41:b7:23:71:9d:1f:ee:f3:2d:17:42:71:bf:63:ca:e5:81:
         30:92:54:df:d5:0b:60:7c:a6:cc:a5:d1:e4:3f:f2:66:f6:1a:
         94:51:7c:09:2e:f9:88:eb:ae:29:43:a7:d4:a2:4b:73:90:0e:
         ae:ca:2c:37:0a:4d:02:66:c7:30:35:39:07:0b:cf:b6:7a:e5:
         b4:00:c2:f1:c9:ca:96:84:d5:3b:80:ee:85:01:3e:aa:69:3c:
         2d:80:79:8d:f1:c9:58:5d:9a:52:6c:5e:62:31:7c:bf:49:f4:
         8a:a8:2f:85:4f:bc:51:cb:60:10:33:12:d0:55:4f:cf:90:19:
         f0:cf:5e:52:e0:56:92:f4:b8:d1:c9:ec:23:ce:ec:dd:63:59:
         d0:9b:ad:dc:56:7f:56:4f:81:37:4e:5f:4a:ce:72:89:46:02:
         a7:1f:cd:f3:8d:2d:33:a5:da:00:88:60:ac:c9:5e:e2:2f:95:
         88:68:76:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM0NTYxMTAvBgNVBAUTKDI5MEM0MDEwRkFEQzQ3Njk0N0UwMDkzRjQzRjcwMDRG
MEQ3QzVDMUMwHhcNMjYwOTI0MTg0OTA3WhcNMjYxMDAxMTg0OTA3WjAYMRYwFAYD
VQQDEw02YWI1NzBhNC0yZTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAobD+XZBO696176uag3fiY4gR/BJdl63sS3XJpbH50RR97XRAkw5G99A37UW7
OB5GAXQ1KURaIagZsPheKFYM6l0f4h4VoQbtNm64paxpHafQ6uSUdjHS2y3E9f2A
ODDeOiYr8DVf2njeiAw5YCGjkIJw8vF5f45vXuVlJrN8BbtQcdIC7771rpZRUyOi
7EWWaTEQ3SKC2ou2n9xzRNACq52X/qu0LyAWujZHWDtJvEjr6v1U2C4KsB64kzGD
Q6l0C0OnMpQaCog1aqL86rL3GCihz0iZPi9xLSwvR+7C2pUi6zNBjNFHNjtS5FsU
BdJtCCoXvho6d5UA2qGvIfWK4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAI3qsM0
5aIVfKn8UjKuOvni1Tu/MB8GA1UdIwQYMBaAFCkMQBD63EdpR+AJP0P3AE8NfFwc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQ1Ni82QzI3RjI1QTQx
QTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1IybEg0QWtfUV9jQVR3MThY
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tReEFFUHJjUjJsSDRBa19RX2NBVHcxOFhCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzQ1Ni82QzI3RjI1QTQxQTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1Iy
bEg0QWtfUV9jQVR3MThYQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACiBaz4pVU7Dh9QIqAXbT1wS9yl2eTtEAFsxzKYSIDkhHcdkkv5AwLh7iromi
rLcrZVk22CUn56S8iyxN51oqPYqHrLxWfD7IbEG3I3GdH+7zLRdCcb9jyuWBMJJU
39ULYHymzKXR5D/yZvYalFF8CS75iOuuKUOn1KJLc5AOrsosNwpNAmbHMDU5BwvP
tnrltADC8cnKloTVO4DuhQE+qmk8LYB5jfHJWF2aUmxeYjF8v0n0iqgvhU+8Uctg
EDMS0FVPz5AZ8M9eUuBWkvS40cnsI87s3WNZ0Jut3FZ/Vk+BN05fSs5yiUYCpx/N
840tM6XaAIhgrMle4i+ViGh2gQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:51:21 2026 by rpki-client