Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
File:                     wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft (raw, json)
Hash identifier:          O835zT/Rq1D7FBYfMWXVyAT2Pnw2ynq4zZZl69qfpWY=
Subject key identifier:   21:54:E2:9C:AB:F1:D4:D6:DB:A2:28:D6:5D:D3:49:02:5E:0E:7E:57
Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD
Certificate issuer:       /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
Manifest number:          0104
Signing time:             Mon 05 Oct 2026 06:31:36 +0000
Manifest this update:     Mon 05 Oct 2026 06:31:35 +0000
Manifest next update:     Mon 12 Oct 2026 06:31:35 +0000
Files and hashes:         1: wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl (hash: J8AufRt6Vx+vF5lJXNbLDqHNargHmcdgh/OTQYl7x7k=)
                          2: C317D9BA341A11F0B6835730C4F9AE02.roa (hash: Itw7i5+3Ys3+W27Y/T74jWFCuSjUgD4+TPQJCWUevdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl
                          rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
        Validity
            Not Before: Oct  5 06:31:35 2026 GMT
            Not After : Oct 12 06:31:35 2026 GMT
        Subject: CN=6ac34448-766a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:a2:ad:e6:8c:67:f1:e0:a3:3d:58:99:5f:
                    cc:18:29:ec:63:a1:3a:b5:34:85:d2:1f:e9:ac:42:
                    0c:34:9e:58:ca:72:d3:ac:3d:ed:77:29:8c:ce:eb:
                    47:f7:24:e4:17:9d:83:8e:b5:14:60:40:ca:c3:53:
                    7f:15:af:f9:fd:6b:dd:95:9c:4f:6a:23:f1:31:a1:
                    ff:b8:28:c8:46:ac:b1:2e:69:9d:e1:1c:87:98:88:
                    21:0f:20:a1:d5:d7:40:98:43:9e:43:95:f8:c2:6f:
                    5c:d2:a9:85:b0:68:f4:1f:fa:e3:54:d3:a5:6c:06:
                    8b:95:41:0e:ca:ac:46:a7:fe:8f:cc:54:da:d7:d4:
                    10:b4:44:40:62:86:ab:84:fc:28:d8:3e:01:c0:44:
                    21:e4:99:26:f8:1b:6d:27:7f:5e:d8:33:1a:40:3a:
                    94:52:a7:4a:7d:4e:d5:db:8f:65:35:82:98:28:e7:
                    16:3b:7e:99:06:57:aa:54:f7:7f:44:74:f8:3e:43:
                    90:03:be:10:8a:7f:0c:52:46:f9:89:79:ed:b0:e6:
                    6c:0e:62:6f:82:6c:c2:75:b1:b3:a7:c0:62:64:0c:
                    50:a5:ad:4c:31:ab:cb:61:c4:d3:6c:d1:1a:bc:bc:
                    cf:01:1e:b1:55:5b:97:8e:36:62:c8:9c:c8:95:be:
                    6e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:54:E2:9C:AB:F1:D4:D6:DB:A2:28:D6:5D:D3:49:02:5E:0E:7E:57
            X509v3 Authority Key Identifier:
                keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d9:2e:65:db:88:55:d1:db:43:11:83:5e:93:c2:f5:bb:e4:
         99:2d:96:86:2e:e7:a0:dc:c6:4a:a9:c6:5c:e5:66:52:9b:07:
         7d:64:f4:31:f6:8f:bb:7e:c2:b6:00:63:11:f6:46:57:7e:aa:
         dc:53:58:f6:d5:d4:e0:c5:a9:a4:f0:33:ed:a2:61:f5:0d:39:
         c6:42:bb:47:fe:34:ad:5d:46:1c:60:1b:45:c9:20:6c:f7:53:
         0e:cc:d7:48:5c:c9:66:ef:a1:ec:a6:10:5c:09:fb:87:b9:06:
         69:dd:bf:a2:cc:b9:05:15:43:55:9d:fe:a3:06:a8:af:7b:6f:
         4f:ec:f1:e3:f5:03:06:2a:51:a1:de:25:ea:86:1d:a6:8d:d8:
         31:db:5a:1a:04:95:a3:86:01:68:9d:63:04:26:fd:d4:28:9c:
         69:45:54:60:28:4a:b2:4a:85:fa:72:0a:d8:0b:f5:44:36:e7:
         e1:71:c5:25:a6:35:4b:73:76:f9:f7:47:d2:04:ee:c8:9d:39:
         9e:38:78:18:42:27:b4:23:3d:a7:fa:8e:61:cc:87:72:2e:68:
         e0:84:00:df:36:ef:1d:98:45:f9:30:da:6e:34:13:c3:4b:b1:
         6f:fe:99:b5:47:bb:55:f3:cd:24:53:11:a8:a0:de:0a:b4:50:
         a7:f9:3d:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgzOUUxMTAvBgNVBAUTKEMxMjEwOUY1NUM1NTg3M0E0MUMzNzc4MzcyRkIwOUEw
Qjc0MEQyQ0QwHhcNMjYxMDA1MDYzMTM1WhcNMjYxMDEyMDYzMTM1WjAYMRYwFAYD
VQQDEw02YWMzNDQ0OC03NjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzZyireaMZ/Hgoz1YmV/MGCnsY6E6tTSF0h/prEIMNJ5YynLTrD3tdymMzutH
9yTkF52DjrUUYEDKw1N/Fa/5/WvdlZxPaiPxMaH/uCjIRqyxLmmd4RyHmIghDyCh
1ddAmEOeQ5X4wm9c0qmFsGj0H/rjVNOlbAaLlUEOyqxGp/6PzFTa19QQtERAYoar
hPwo2D4BwEQh5Jkm+BttJ39e2DMaQDqUUqdKfU7V249lNYKYKOcWO36ZBleqVPd/
RHT4PkOQA74Qin8MUkb5iXntsOZsDmJvgmzCdbGzp8BiZAxQpa1MMavLYcTTbNEa
vLzPAR6xVVuXjjZiyJzIlb5uIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFU4pyr
8dTW26Io1l3TSQJeDn5XMB8GA1UdIwQYMBaAFMEhCfVcVYc6QcN3g3L7CaC3QNLN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODM5RS8zNDVEMDU4NjMz
NjgxMUYwQjFCNTZENkNDNEY5QUUwMi93U0VKOVZ4Vmh6cEJ3M2VEY3ZzSm9MZEEw
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dTRUo5VnhWaHpwQnczZURjdnNKb0xkQTBzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODM5RS8zNDVEMDU4NjMzNjgxMUYwQjFCNTZENkNDNEY5QUUwMi93U0VKOVZ4Vmh6
cEJ3M2VEY3ZzSm9MZEEwczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARdkuZduIVdHbQxGDXpPC9bvkmS2Whi7noNzGSqnGXOVmUpsHfWT0MfaPu37C
tgBjEfZGV36q3FNY9tXU4MWppPAz7aJh9Q05xkK7R/40rV1GHGAbRckgbPdTDszX
SFzJZu+h7KYQXAn7h7kGad2/osy5BRVDVZ3+owaor3tvT+zx4/UDBipRod4l6oYd
po3YMdtaGgSVo4YBaJ1jBCb91CicaUVUYChKskqF+nIK2Av1RDbn4XHFJaY1S3N2
+fdH0gTuyJ05njh4GEIntCM9p/qOYcyHci5o4IQA3zbvHZhF+TDabjQTw0uxb/6Z
tUe7VfPNJFMRqKDeCrRQp/k9EA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 21:18:58 2026 by rpki-client