Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
File:                     A8hWADTpF_SEBrQEaVALI_OVa10.mft (raw, json)
Hash identifier:          ITNVLksmrN/B1eFpm6LajfKTBT4cn322OrNDwCzshug=
Subject key identifier:   12:AE:34:89:4D:A0:3A:86:D7:0D:02:85:F2:FA:64:6C:67:92:B8:53
Authority key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D
Certificate issuer:       /CN=A91A98E5/serialNumber=03C8560034E917F48406B40469500B23F3956B5D
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
Manifest number:          02E9
Signing time:             Fri 25 Sep 2026 02:29:17 +0000
Manifest this update:     Fri 25 Sep 2026 02:29:17 +0000
Manifest next update:     Fri 02 Oct 2026 02:29:17 +0000
Files and hashes:         1: A8hWADTpF_SEBrQEaVALI_OVa10.crl (hash: o7RMTIfJUZxhPSTkz985ZhwdhSoLrYWr70/Q69VJQYA=)
                          2: CAD00992C9C611F09C9EF018C4F9AE02.roa (hash: 1WK0pKqWk649s/jspmynYFwLv9eNrG6RsSK4CLXFtLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl
                          rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D
        Validity
            Not Before: Sep 25 02:29:17 2026 GMT
            Not After : Oct  2 02:29:17 2026 GMT
        Subject: CN=6ab5dc7d-4a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:17:06:ae:54:45:b8:49:e6:1b:1c:b4:77:e3:
                    6d:70:cc:96:7c:6d:45:10:a1:fe:24:d6:40:7b:3e:
                    25:60:60:fe:e5:1e:e8:79:f6:80:49:74:a0:23:75:
                    73:d4:6d:6c:69:e8:ca:84:d6:de:3b:b4:a0:34:18:
                    79:5e:75:14:8e:86:6d:ce:50:20:50:f5:f6:21:a7:
                    98:3a:32:1e:1b:27:70:03:d9:ee:57:b9:13:dc:39:
                    30:3c:08:de:66:29:8c:19:5f:e8:93:47:af:cb:f5:
                    06:c9:82:d7:1d:f5:95:d8:89:a3:8e:f8:06:6e:a2:
                    b0:73:86:e5:b6:5d:6e:a1:7e:b0:75:97:24:47:13:
                    ee:dc:10:ae:ab:d9:09:40:d8:cf:12:1b:b9:f4:5e:
                    48:79:1a:ca:a0:b0:71:d5:82:53:10:a6:62:3a:8a:
                    a8:a3:24:1f:38:d2:e9:f7:93:a3:0b:57:fe:71:f6:
                    22:64:08:13:5c:73:7e:51:7a:c4:7c:04:c5:6b:d2:
                    86:7e:52:9f:a8:42:32:8a:47:8a:de:2a:c8:44:9d:
                    f9:02:61:ef:07:3c:e7:7a:e2:b3:7b:2c:06:f4:0c:
                    c4:55:c9:be:f3:38:16:96:09:99:e4:60:d5:3a:6b:
                    97:d9:e4:a4:ba:fe:09:c2:b4:30:1d:ea:71:ef:b5:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AE:34:89:4D:A0:3A:86:D7:0D:02:85:F2:FA:64:6C:67:92:B8:53
            X509v3 Authority Key Identifier:
                keyid:03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d9:3c:01:25:1b:ba:c2:ea:33:b8:6e:90:c5:0e:f5:1e:46:
         fd:59:c1:7a:b4:e4:f4:5e:b0:c0:2e:0a:5f:62:db:e2:ae:fd:
         94:65:a0:b5:20:6b:24:a7:c6:9b:65:23:ab:23:2a:7c:3a:bf:
         b0:d0:31:96:8e:b0:70:80:19:cf:58:42:1b:a3:88:00:75:19:
         b1:c3:ad:6b:95:a7:a8:87:a7:95:bd:42:a5:c4:5c:33:c8:a2:
         c0:11:b5:67:7c:92:6b:30:d7:6f:45:de:a6:2f:2a:20:68:8f:
         5e:91:7f:51:dd:cb:0d:55:84:0d:f8:33:96:e7:7b:a8:3e:72:
         4b:c6:ea:f8:4b:77:5f:01:a3:4c:92:62:78:2d:1e:97:13:f2:
         1b:5a:bb:f2:7b:c2:ac:8c:43:70:12:cb:87:f9:a5:57:80:0b:
         92:1e:fb:e6:41:85:7c:05:f1:f5:ee:e5:3c:52:b0:db:7d:65:
         53:91:6a:c0:d8:15:3f:f2:1f:83:7a:d7:08:ca:2d:c3:99:2e:
         5d:c2:7a:27:2e:74:0b:ab:25:a6:4f:88:79:0f:79:fd:d3:76:
         1d:d0:16:aa:54:ba:cf:6d:17:46:d4:b6:ed:33:36:b2:3f:a8:
         1c:8f:26:4f:10:c4:6e:8d:53:09:ac:b3:68:c9:f6:af:46:0e:
         8f:ed:a0:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk4RTUxMTAvBgNVBAUTKDAzQzg1NjAwMzRFOTE3RjQ4NDA2QjQwNDY5NTAwQjIz
RjM5NTZCNUQwHhcNMjYwOTI1MDIyOTE3WhcNMjYxMDAyMDIyOTE3WjAYMRYwFAYD
VQQDEw02YWI1ZGM3ZC00YTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8xcGrlRFuEnmGxy0d+NtcMyWfG1FEKH+JNZAez4lYGD+5R7oefaASXSgI3Vz
1G1saejKhNbeO7SgNBh5XnUUjoZtzlAgUPX2IaeYOjIeGydwA9nuV7kT3DkwPAje
ZimMGV/ok0evy/UGyYLXHfWV2ImjjvgGbqKwc4bltl1uoX6wdZckRxPu3BCuq9kJ
QNjPEhu59F5IeRrKoLBx1YJTEKZiOoqooyQfONLp95OjC1f+cfYiZAgTXHN+UXrE
fATFa9KGflKfqEIyikeK3irIRJ35AmHvBzzneuKzeywG9AzEVcm+8zgWlgmZ5GDV
OmuX2eSkuv4JwrQwHepx77WI/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKuNIlN
oDqG1w0ChfL6ZGxnkrhTMB8GA1UdIwQYMBaAFAPIVgA06Rf0hAa0BGlQCyPzlWtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOThFNS8xNjg0QzA3ODQw
NDcxMUVFQUJDMEUyNENDNEY5QUUwMi9BOGhXQURUcEZfU0VCclFFYVZBTElfT1Zh
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E4aFdBRFRwRl9TRUJyUUVhVkFMSV9PVmExMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi9BOGhXQURUcEZf
U0VCclFFYVZBTElfT1ZhMTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd9k8ASUbusLqM7hukMUO9R5G/VnBerTk9F6wwC4KX2Lb4q79lGWgtSBrJKfG
m2UjqyMqfDq/sNAxlo6wcIAZz1hCG6OIAHUZscOta5WnqIenlb1CpcRcM8iiwBG1
Z3ySazDXb0Xepi8qIGiPXpF/Ud3LDVWEDfgzlud7qD5yS8bq+Et3XwGjTJJieC0e
lxPyG1q78nvCrIxDcBLLh/mlV4ALkh775kGFfAXx9e7lPFKw231lU5FqwNgVP/If
g3rXCMotw5kuXcJ6Jy50C6slpk+IeQ95/dN2HdAWqlS6z20XRtS27TM2sj+oHI8m
TxDEbo1TCayzaMn2r0YOj+2gOg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:21:58 2026 by rpki-client