Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
File:                     rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json)
Hash identifier:          NCZ4hLYg75wjUDnpb15yzExesmxQLHNxL+v+D56Krso=
Subject key identifier:   63:A9:47:7E:4D:11:B3:A4:7C:6B:91:37:1D:07:73:6D:9D:56:9F:37
Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
Certificate issuer:       /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Certificate serial:       04A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
Manifest number:          0496
Signing time:             Tue 13 Oct 2026 00:09:04 +0000
Manifest this update:     Tue 13 Oct 2026 00:09:03 +0000
Manifest next update:     Tue 20 Oct 2026 00:09:03 +0000
Files and hashes:         1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: n41n9KGMmuTNpKjI8BKROqjA60zWlDUyVwY0AjpI+fg=)
                          2: 52A7D49EC5BB11F1B6A5E9F16D11F970.roa (hash: jhPjJ978qU9WiecBJ/xTsvnjqQKPoi8BmwYSz9B2UGU=)
                          3: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: Gae8JUGPwA98nYPjIjUYmUnLgpGjlRVDRt5x96k+Igo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
                          rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 00:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
        Validity
            Not Before: Oct 13 00:09:03 2026 GMT
            Not After : Oct 20 00:09:03 2026 GMT
        Subject: CN=6acd76a0-9a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:35:6f:5c:58:63:1f:ee:4a:dd:37:d9:db:
                    b6:db:dd:30:b0:a1:30:26:28:4b:28:28:fd:9c:52:
                    ca:5e:dc:7c:0a:00:b9:3a:0c:be:a8:79:69:31:ec:
                    95:6b:59:8d:14:7d:ab:0b:47:61:14:13:4a:ca:f1:
                    c0:18:89:39:27:f9:f0:5e:51:1e:86:40:67:57:16:
                    17:43:5d:f7:9d:13:f0:4e:7d:c6:06:31:b0:1f:5f:
                    d4:a2:fc:13:1b:09:15:71:f3:4e:d2:8a:8d:a3:56:
                    3a:29:de:f7:fe:82:e6:0c:1d:79:0c:49:8b:97:e7:
                    01:75:11:ab:f8:fb:4f:55:7c:52:6f:27:a6:fb:3c:
                    82:dc:e8:1f:d8:a6:49:0e:9f:73:e9:7e:2b:4f:7e:
                    ed:de:fe:8e:0c:3c:9c:ff:71:b1:04:57:77:8d:1f:
                    11:f9:a5:9d:fa:ae:aa:e2:73:8e:e4:99:bf:4e:9a:
                    d3:fb:4b:a8:2c:79:a9:2d:66:cd:9d:ed:e0:93:28:
                    1d:e9:97:c2:f6:f2:56:4b:21:8d:f8:5d:f7:3d:30:
                    7c:24:39:6b:a0:68:a4:74:fb:15:d0:a9:c7:06:29:
                    f3:4b:2a:f7:0b:d2:b7:cb:ad:52:53:c7:ad:1f:d3:
                    5d:5d:c1:8a:fe:4f:c5:bd:a6:0a:84:94:3c:86:c1:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A9:47:7E:4D:11:B3:A4:7C:6B:91:37:1D:07:73:6D:9D:56:9F:37
            X509v3 Authority Key Identifier:
                keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f8:ce:e0:ab:b6:54:ed:a7:99:f4:1f:0b:2c:ee:26:4c:39:
         77:0e:45:a7:21:5a:3e:5c:33:d2:e8:d2:16:dd:d2:b0:07:58:
         0a:86:2c:ee:1a:5c:4d:3a:cb:69:b4:64:55:bb:2f:64:d4:90:
         da:fc:13:49:3d:69:42:b7:09:bb:b6:3e:36:09:5a:a5:33:57:
         ca:ab:5a:0f:c9:59:0d:3e:c8:2b:41:fd:8e:50:47:d3:6a:34:
         bb:ee:c2:40:f1:a9:8c:51:f8:e9:3a:61:55:a5:c2:ff:87:6e:
         c7:f6:19:4a:5a:20:3b:80:a0:47:13:5c:3b:8d:22:26:9e:7f:
         3f:af:35:6f:5c:8e:a9:bd:27:41:cf:9b:c3:26:ef:9a:ae:c9:
         c6:e6:ca:e2:cb:dc:74:0e:b2:3a:37:10:49:93:d2:ab:d8:f9:
         79:2a:38:9a:ad:c0:a9:94:e8:89:6a:30:59:d5:c6:4b:82:d9:
         6d:15:4b:da:8f:11:d9:f8:98:a8:7e:89:5e:3a:7c:63:6a:b8:
         bd:f0:99:da:56:42:ca:ca:e0:0a:7a:c2:dd:85:c9:2d:07:82:
         27:ad:d4:31:08:10:d7:f6:81:be:8f:17:41:e7:23:f9:92:f5:
         b2:5c:22:86:1b:87:85:91:a2:dc:8d:4c:92:4c:09:3d:ba:65:
         a6:fd:1e:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVGNDUxMTAvBgNVBAUTKEFDQUE2RTI2QTVGMkRDQUExNENERkM5RUNDOEU5Q0Y2
ODI5QTQwMjEwHhcNMjYxMDEzMDAwOTAzWhcNMjYxMDIwMDAwOTAzWjAYMRYwFAYD
VQQDEw02YWNkNzZhMC05YTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQM1b1xYYx/uSt032du2290wsKEwJihLKCj9nFLKXtx8CgC5Ogy+qHlpMeyV
a1mNFH2rC0dhFBNKyvHAGIk5J/nwXlEehkBnVxYXQ133nRPwTn3GBjGwH1/UovwT
GwkVcfNO0oqNo1Y6Kd73/oLmDB15DEmLl+cBdRGr+PtPVXxSbyem+zyC3Ogf2KZJ
Dp9z6X4rT37t3v6ODDyc/3GxBFd3jR8R+aWd+q6q4nOO5Jm/TprT+0uoLHmpLWbN
ne3gkygd6ZfC9vJWSyGN+F33PTB8JDlroGikdPsV0KnHBinzSyr3C9K3y61SU8et
H9NdXcGK/k/FvaYKhJQ8hsEKpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOpR35N
EbOkfGuRNx0Hc22dVp83MB8GA1UdIwQYMBaAFKyqbial8tyqFM38nsyOnPaCmkAh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUY0NS81RDhCOUI4MjlG
MkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNLb1V6Znllekk2YzlvS2FR
Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLcHVKcVh5M0tvVXpmeWV6STZjOW9LYVFDRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUY0NS81RDhCOUI4MjlGMkExMUVDQTdDRkFEMEFDNEY5QUUwMi9yS3B1SnFYeTNL
b1V6Znllekk2YzlvS2FRQ0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAivjO4Ku2VO2nmfQfCyzuJkw5dw5FpyFaPlwz0ujSFt3SsAdYCoYs7hpcTTrL
abRkVbsvZNSQ2vwTST1pQrcJu7Y+NglapTNXyqtaD8lZDT7IK0H9jlBH02o0u+7C
QPGpjFH46TphVaXC/4dux/YZSlogO4CgRxNcO40iJp5/P681b1yOqb0nQc+bwybv
mq7JxubK4svcdA6yOjcQSZPSq9j5eSo4mq3AqZToiWowWdXGS4LZbRVL2o8R2fiY
qH6JXjp8Y2q4vfCZ2lZCysrgCnrC3YXJLQeCJ63UMQgQ1/aBvo8XQecj+ZL1slwi
hhuHhZGi3I1MkkwJPbplpv0efg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:48:54 2026 by rpki-client