Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
File:                     cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json)
Hash identifier:          AaRdljHnvUac7KWJn+/1YTZBlM/62K6hrICiTcDUIx4=
Subject key identifier:   71:4C:87:0F:DE:4E:B9:48:1C:6A:1C:C8:26:26:AB:5A:8D:CA:5D:0C
Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB
Certificate issuer:       /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
Certificate serial:       0498
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
Manifest number:          0491
Signing time:             Tue 29 Sep 2026 00:06:55 +0000
Manifest this update:     Tue 29 Sep 2026 00:06:54 +0000
Manifest next update:     Tue 06 Oct 2026 00:06:54 +0000
Files and hashes:         1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: Y+M1JJVnvX9CFC3sux9oJjPIk93EgbH19ThB9gSNkEw=)
                          2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: N5pLAxbLKv/PfC6YhIk0Oi5t9BhybE4dFuDmSAT9hEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl
                          rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 00:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
        Validity
            Not Before: Sep 29 00:06:54 2026 GMT
            Not After : Oct  6 00:06:54 2026 GMT
        Subject: CN=6abb011e-fd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:17:98:29:97:58:03:b7:3a:b4:dd:dc:47:
                    bc:a2:d6:8f:b5:04:ca:23:43:b5:56:aa:d9:4a:a3:
                    32:13:ec:cb:b6:c0:8b:b1:9f:c9:4f:c7:65:9c:e8:
                    ef:82:af:0e:85:77:15:ab:1f:4f:9c:12:cf:9c:77:
                    d0:42:b9:4e:6e:01:e6:f3:7a:81:a0:9b:76:28:74:
                    aa:5e:82:96:65:7c:cb:c0:b3:26:7c:41:de:04:03:
                    5c:b2:8c:6d:ac:db:7e:8a:dc:98:2d:06:d5:ba:62:
                    b9:de:3e:3d:6d:79:77:ec:2a:5c:f4:74:6a:96:c8:
                    2b:67:94:d5:d9:06:17:dd:93:50:9b:73:4e:e2:12:
                    be:62:01:3d:f4:60:e4:a5:c0:70:21:6e:ed:6c:df:
                    b9:70:17:5a:4a:90:e5:f5:24:e3:d6:dc:b1:40:c8:
                    a1:98:4f:fd:62:14:cf:b8:fb:a4:fe:4f:45:6f:37:
                    dd:30:e6:49:72:93:46:6c:45:52:e9:25:83:ad:75:
                    a8:73:58:15:71:de:c4:df:b2:f5:a9:b7:99:6a:a5:
                    86:c0:48:f2:f6:55:ef:1c:e3:a2:99:a8:4f:d8:af:
                    55:d5:b7:92:fa:57:7c:27:1b:5e:59:ff:d9:fa:cd:
                    08:89:7a:43:fe:39:e9:2d:1e:91:3e:6a:d8:9a:c4:
                    76:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4C:87:0F:DE:4E:B9:48:1C:6A:1C:C8:26:26:AB:5A:8D:CA:5D:0C
            X509v3 Authority Key Identifier:
                keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:69:f7:92:31:bf:8f:7e:a9:88:a4:ba:47:94:86:7b:bb:d8:
         3f:bf:1e:18:29:29:8d:1f:82:7f:eb:5e:74:a3:c9:fb:ce:b0:
         0c:4d:d9:13:48:18:04:f1:f0:fd:b6:22:a6:0c:da:de:d6:3a:
         03:66:a7:10:ad:ef:f4:17:c8:af:e8:5b:c4:a7:82:4e:96:14:
         0d:ec:91:51:a8:23:da:6a:ca:60:1b:90:6f:3c:81:e1:3c:5c:
         f3:10:ba:10:e5:19:d2:c8:ba:d7:28:0a:5e:b3:c2:5b:2a:e7:
         26:15:fc:e6:f8:3c:b4:15:a4:1a:95:2b:ec:cd:53:9d:dd:6e:
         46:eb:cc:36:4d:ff:6e:d0:8d:0f:21:7f:5e:fd:00:21:c0:b5:
         1b:ff:e0:71:42:63:23:de:5e:93:92:8e:20:4c:54:8d:a9:a4:
         ad:17:49:71:61:1a:8b:5f:e3:6b:fa:18:5a:5c:d2:b3:be:e5:
         27:2b:58:55:54:d6:8d:13:9e:51:9e:12:2f:f8:9c:da:e8:5c:
         45:a5:dd:94:8c:41:f0:98:39:27:fe:aa:30:3a:dd:4b:46:a9:
         ab:2b:73:4d:49:1c:e2:9c:95:3c:8f:03:ff:57:84:c9:3f:31:
         99:93:65:46:1d:b2:cb:ab:bd:e2:2d:75:66:b9:11:91:44:df:
         5e:80:37:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx
QTQzMkY0REIwHhcNMjYwOTI5MDAwNjU0WhcNMjYxMDA2MDAwNjU0WjAYMRYwFAYD
VQQDEw02YWJiMDExZS1mZDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsMIXmCmXWAO3OrTd3Ee8otaPtQTKI0O1VqrZSqMyE+zLtsCLsZ/JT8dlnOjv
gq8OhXcVqx9PnBLPnHfQQrlObgHm83qBoJt2KHSqXoKWZXzLwLMmfEHeBANcsoxt
rNt+ityYLQbVumK53j49bXl37Cpc9HRqlsgrZ5TV2QYX3ZNQm3NO4hK+YgE99GDk
pcBwIW7tbN+5cBdaSpDl9STj1tyxQMihmE/9YhTPuPuk/k9FbzfdMOZJcpNGbEVS
6SWDrXWoc1gVcd7E37L1qbeZaqWGwEjy9lXvHOOimahP2K9V1beS+ld8JxteWf/Z
+s0IiXpD/jnpLR6RPmrYmsR2DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFMhw/e
TrlIHGocyCYmq1qNyl0MMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF
MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E
UTU2YUhrc0RnWWdhUXk5TnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF2n3kjG/j36piKS6R5SGe7vYP78eGCkpjR+Cf+tedKPJ+86wDE3ZE0gYBPHw
/bYipgza3tY6A2anEK3v9BfIr+hbxKeCTpYUDeyRUagj2mrKYBuQbzyB4Txc8xC6
EOUZ0si61ygKXrPCWyrnJhX85vg8tBWkGpUr7M1Tnd1uRuvMNk3/btCNDyF/Xv0A
IcC1G//gcUJjI95ek5KOIExUjamkrRdJcWEai1/ja/oYWlzSs77lJytYVVTWjROe
UZ4SL/ic2uhcRaXdlIxB8Jg5J/6qMDrdS0apqytzTUkc4pyVPI8D/1eEyT8xmZNl
Rh2yy6u94i11ZrkRkUTfXoA3VA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:04:00 2026 by rpki-client