Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
File:                     ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json)
Hash identifier:          L4c+D59ceJSgwIP5Nkd8foBY/jqDQ/K5KJ0IiGF/+fg=
Subject key identifier:   47:2D:CF:02:7F:DE:D4:52:F2:82:E9:EB:6F:7C:6B:EE:60:E9:61:D1
Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7
Certificate issuer:       /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
Manifest number:          0251
Signing time:             Wed 23 Sep 2026 02:10:52 +0000
Manifest this update:     Wed 23 Sep 2026 02:10:51 +0000
Manifest next update:     Wed 30 Sep 2026 02:10:51 +0000
Files and hashes:         1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: ekpZcXpU2DsoHgQrmwMI2dqr6Y+/znDK8l7FThCJ14s=)
                          2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7
        Validity
            Not Before: Sep 23 02:10:51 2026 GMT
            Not After : Sep 30 02:10:51 2026 GMT
        Subject: CN=6ab3352c-fc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:8a:df:f8:d7:64:b9:12:c8:40:f8:8a:d2:
                    32:6d:d9:b8:57:75:68:4c:f3:c5:0d:dc:2e:05:12:
                    76:d2:bf:39:81:9f:25:b9:59:2e:58:f9:4f:48:59:
                    b2:b3:d0:bd:2f:93:a6:85:14:34:8e:bc:5d:c5:77:
                    2a:48:b1:85:b2:8e:06:a6:1e:69:c9:9a:80:04:6a:
                    b5:ac:bd:b2:20:a5:d9:d8:83:47:f8:2d:87:df:79:
                    2e:49:43:fe:e8:9a:76:c3:c0:1c:11:d9:82:ec:85:
                    73:15:5f:29:d1:8e:01:34:ab:3b:e4:bc:b4:53:bc:
                    92:11:10:60:8c:48:9d:84:68:57:48:c4:76:dc:d0:
                    4a:e6:6d:cc:a7:ef:2a:2d:8f:1a:ef:e1:96:18:7e:
                    44:01:c0:81:75:91:f0:6e:3e:1b:76:1d:2a:b8:2c:
                    d0:f9:e7:6c:37:93:e2:60:3f:be:d7:d6:2f:80:e2:
                    e6:eb:e3:c7:99:eb:a6:b1:f6:ac:e8:f4:e4:04:98:
                    65:a0:f5:f2:71:52:81:39:db:5f:2e:8b:23:6c:24:
                    28:31:eb:18:5d:8e:87:1b:e2:2c:93:d4:30:44:9a:
                    85:68:e9:b6:74:7e:ff:f0:a2:a7:4a:5e:de:59:62:
                    50:24:9e:7f:1f:39:ee:b2:2d:e6:58:83:aa:61:9a:
                    81:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2D:CF:02:7F:DE:D4:52:F2:82:E9:EB:6F:7C:6B:EE:60:E9:61:D1
            X509v3 Authority Key Identifier:
                keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3b:92:b3:cb:c7:8b:0e:17:46:9d:87:c0:df:dc:e0:f6:1a:
         b9:5c:ab:e7:cf:64:5b:3c:83:4d:a5:da:97:7e:72:20:57:c8:
         f2:0c:f6:b9:3f:c2:56:20:57:36:fb:09:0b:25:28:e2:14:a8:
         83:e0:1d:88:ca:ff:cc:ec:fc:bc:aa:a0:d7:29:49:ef:8b:a8:
         e0:68:d0:44:ac:a9:ff:c7:46:e6:4b:c4:ac:e9:02:c9:40:8d:
         db:33:69:20:7d:4e:9c:65:03:23:09:ba:0d:70:8c:31:31:ef:
         df:e8:1e:ea:9c:97:80:a6:78:3f:a5:3a:0f:23:c9:6a:4a:b6:
         27:b7:fb:08:6a:5a:63:66:66:3c:3c:68:4a:c7:b6:11:06:de:
         c1:ab:a9:b0:78:60:62:01:d0:ba:a8:7d:1e:63:12:0d:07:9a:
         6f:5f:57:c5:82:62:28:e7:22:91:9a:4c:7c:08:30:fe:96:c6:
         21:21:89:7d:dc:1c:cd:5f:07:22:89:bd:60:33:4f:6a:69:f4:
         a6:4b:2a:e5:4f:d2:34:25:b7:eb:56:e2:09:c2:3d:8e:23:f0:
         eb:44:31:a1:32:10:2d:a0:ba:3d:bc:22:a1:34:24:0e:57:31:
         61:00:37:19:10:82:bd:40:76:ee:ec:67:fb:55:ef:32:5c:16:
         50:4f:87:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND
OEJGREEwRTcwHhcNMjYwOTIzMDIxMDUxWhcNMjYwOTMwMDIxMDUxWjAYMRYwFAYD
VQQDEw02YWIzMzUyYy1mYzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqJWK3/jXZLkSyED4itIybdm4V3VoTPPFDdwuBRJ20r85gZ8luVkuWPlPSFmy
s9C9L5OmhRQ0jrxdxXcqSLGFso4Gph5pyZqABGq1rL2yIKXZ2INH+C2H33kuSUP+
6Jp2w8AcEdmC7IVzFV8p0Y4BNKs75Ly0U7ySERBgjEidhGhXSMR23NBK5m3Mp+8q
LY8a7+GWGH5EAcCBdZHwbj4bdh0quCzQ+edsN5PiYD++19YvgOLm6+PHmeumsfas
6PTkBJhloPXycVKBOdtfLosjbCQoMesYXY6HG+Isk9QwRJqFaOm2dH7/8KKnSl7e
WWJQJJ5/Hznusi3mWIOqYZqBgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEctzwJ/
3tRS8oLp6298a+5g6WHRMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG
NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv
T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du
MGpNcHZKa29TaVBJdjlvT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjTuSs8vHiw4XRp2HwN/c4PYauVyr589kWzyDTaXal35yIFfI8gz2uT/CViBX
NvsJCyUo4hSog+AdiMr/zOz8vKqg1ylJ74uo4GjQRKyp/8dG5kvErOkCyUCN2zNp
IH1OnGUDIwm6DXCMMTHv3+ge6pyXgKZ4P6U6DyPJakq2J7f7CGpaY2ZmPDxoSse2
EQbewaupsHhgYgHQuqh9HmMSDQeab19XxYJiKOcikZpMfAgw/pbGISGJfdwczV8H
Iom9YDNPamn0pksq5U/SNCW361biCcI9jiPw60QxoTIQLaC6PbwioTQkDlcxYQA3
GRCCvUB27uxn+1XvMlwWUE+HEw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:02:37 2026 by rpki-client