Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File:                     c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier:          h9ImmKgcDD45PDQmSKOLoOYsojU8JTFxN4yk7JiXyIg=
Subject key identifier:   2B:49:8C:4D:88:85:EC:12:46:78:AE:A8:39:8D:CB:16:FC:1F:B8:79
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer:       /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial:       2520
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number:          496E
Signing time:             Mon 28 Sep 2026 15:47:07 +0000
Manifest this update:     Mon 28 Sep 2026 15:47:07 +0000
Manifest next update:     Mon 05 Oct 2026 15:47:07 +0000
Files and hashes:         1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: eYwcvr+oNdCKRuno5iFib/P1dx6u2SWTNZ4YJj7x1oY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 15:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9504 (0x2520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
        Validity
            Not Before: Sep 28 15:47:07 2026 GMT
            Not After : Oct  5 15:47:07 2026 GMT
        Subject: CN=6aba8bfb-5fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:09:d8:04:78:da:c7:85:49:93:06:97:09:
                    27:e6:8d:a7:52:c9:7a:bd:b1:0c:83:12:ca:cc:81:
                    89:fb:e4:84:c5:c4:41:93:f6:46:54:c7:65:01:5a:
                    11:0a:a2:fc:18:da:48:f1:c0:1f:59:0a:61:da:47:
                    df:07:69:ca:df:df:53:7d:f3:48:2c:de:80:59:c5:
                    2b:e3:7a:8d:c3:f9:f3:4c:63:a5:e7:be:c7:fd:cf:
                    d1:78:ef:7e:86:02:42:f7:cc:2e:a0:1f:54:2f:dd:
                    0b:d9:6a:93:6d:7b:08:38:28:c9:98:d9:d0:99:44:
                    5e:65:3a:32:e6:50:04:c3:3c:4c:1d:57:e5:12:97:
                    cf:db:72:69:3c:20:8e:7b:cf:4e:90:e5:13:dc:54:
                    13:71:d7:b5:67:ad:ff:ad:8d:c0:df:80:47:da:93:
                    14:47:0e:71:f8:f0:43:91:2f:47:1d:20:52:b6:e9:
                    e4:52:5a:2f:3c:df:dc:ad:b5:2c:de:1b:8b:6f:75:
                    a7:4c:85:b0:1a:6b:80:8b:59:00:ad:3d:45:90:86:
                    ef:a5:96:79:da:fd:40:95:d2:01:71:99:a3:09:ef:
                    35:eb:49:3b:75:27:bf:bf:d8:8c:7f:29:84:6c:6e:
                    c9:b9:8b:1b:75:25:5c:50:26:50:89:d6:e6:1f:f5:
                    08:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:49:8C:4D:88:85:EC:12:46:78:AE:A8:39:8D:CB:16:FC:1F:B8:79
            X509v3 Authority Key Identifier:
                keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:48:b8:42:a5:47:e2:cc:1d:d4:f4:22:2e:c2:16:15:cd:8c:
         7a:63:d1:10:a4:f0:93:7c:d5:4e:d4:46:98:b9:2f:c6:72:7c:
         a8:28:ca:86:dd:48:90:2d:3a:46:0e:2f:67:0d:b4:cd:4e:ce:
         bf:7b:52:3e:95:58:46:54:1a:60:8d:9e:8b:c2:c5:00:4d:89:
         f9:5e:16:a7:c4:ca:8e:42:63:4d:88:c1:b6:a0:1f:99:5e:f6:
         63:c5:46:6e:4e:b8:2b:6b:2e:1d:bf:02:ec:3d:0b:e2:c1:08:
         83:4a:0d:20:82:c5:98:fd:44:fb:06:47:9a:2d:b3:18:87:93:
         7f:ee:bd:a1:33:22:af:c8:c0:c9:5d:9d:84:89:57:34:b3:90:
         c7:2c:d4:26:d5:2b:a4:09:df:0a:8c:29:99:36:5d:d5:84:71:
         81:f4:b1:6e:7e:93:d2:f2:45:b2:07:a6:58:ea:15:f3:dd:a9:
         b6:47:9b:67:89:1c:8f:62:83:80:b7:46:fc:4a:96:f5:90:e6:
         7c:b5:6c:c5:8d:bb:2e:dc:3a:c7:98:86:a1:9a:6f:ee:ae:68:
         6c:f8:ea:75:5e:32:18:75:c8:e2:22:25:19:e1:ef:c7:e1:19:
         73:41:06:f1:cb:ea:91:16:57:94:00:53:00:ce:66:cb:d9:7c:
         89:10:9f:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJEMjkxMTAvBgNVBAUTKDczOEMyM0FBNENFNzU1NUVFQTJGQzhDMkJFRDhGNDZB
NDg4REM5M0QwHhcNMjYwOTI4MTU0NzA3WhcNMjYxMDA1MTU0NzA3WjAYMRYwFAYD
VQQDEw02YWJhOGJmYi01ZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmeEJ2AR42seFSZMGlwkn5o2nUsl6vbEMgxLKzIGJ++SExcRBk/ZGVMdlAVoR
CqL8GNpI8cAfWQph2kffB2nK399TffNILN6AWcUr43qNw/nzTGOl577H/c/ReO9+
hgJC98wuoB9UL90L2WqTbXsIOCjJmNnQmUReZToy5lAEwzxMHVflEpfP23JpPCCO
e89OkOUT3FQTcde1Z63/rY3A34BH2pMURw5x+PBDkS9HHSBStunkUlovPN/crbUs
3huLb3WnTIWwGmuAi1kArT1FkIbvpZZ52v1AldIBcZmjCe8160k7dSe/v9iMfymE
bG7JuYsbdSVcUCZQidbmH/UIJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtJjE2I
hewSRniuqDmNyxb8H7h5MB8GA1UdIwQYMBaAFHOMI6pM51Ve6i/Iwr7Y9GpIjck9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1
MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZWN3FMOGpDdnRqMGFraU55
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M0d2pxa3puVlY3cUw4akN2dGowYWtpTnlUMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9jNHdqcWt6blZW
N3FMOGpDdnRqMGFraU55VDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASUi4QqVH4swd1PQiLsIWFc2MemPREKTwk3zVTtRGmLkvxnJ8qCjKht1IkC06
Rg4vZw20zU7Ov3tSPpVYRlQaYI2ei8LFAE2J+V4Wp8TKjkJjTYjBtqAfmV72Y8VG
bk64K2suHb8C7D0L4sEIg0oNIILFmP1E+wZHmi2zGIeTf+69oTMir8jAyV2dhIlX
NLOQxyzUJtUrpAnfCowpmTZd1YRxgfSxbn6T0vJFsgemWOoV892ptkebZ4kcj2KD
gLdG/EqW9ZDmfLVsxY27Ltw6x5iGoZpv7q5obPjqdV4yGHXI4iIlGeHvx+EZc0EG
8cvqkRZXlABTAM5my9l8iRCf4A==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:28:18 2026 by rpki-client