Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
File:                     iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json)
Hash identifier:          i+xdKk0NYWfO6p+qJUV4Sn5w2128T1qs1GRBdTOy/i0=
Subject key identifier:   B2:9F:DF:71:59:01:82:F0:53:37:70:AB:CB:23:03:2B:4E:B5:15:6E
Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10
Certificate issuer:       /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
Manifest number:          0113
Signing time:             Fri 25 Sep 2026 06:03:20 +0000
Manifest this update:     Fri 25 Sep 2026 06:03:20 +0000
Manifest next update:     Fri 02 Oct 2026 06:03:20 +0000
Files and hashes:         1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: J/2rv294UEaSWx+JbrMXCFEsvN3F1KElbsjmJau/sqs=)
                          2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: SY3BwzCftGVZ3723+P2mum60QxTDJL2Satr/FIkLJnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl
                          rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810
        Validity
            Not Before: Sep 25 06:03:20 2026 GMT
            Not After : Oct  2 06:03:20 2026 GMT
        Subject: CN=6ab60ea8-69d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:d6:de:cf:78:92:43:5e:ff:8b:7f:30:3a:
                    66:78:b1:f3:52:46:b8:66:fb:06:74:55:2c:5c:ba:
                    50:b7:0f:3d:b7:bc:21:da:a3:1a:ef:28:96:3f:ce:
                    94:92:68:6a:ea:8e:34:fa:0f:46:97:9c:bf:74:2c:
                    12:e0:84:b5:75:a1:c4:f6:7b:e6:34:9f:91:fa:96:
                    1f:e5:17:7e:b4:86:7a:dc:02:46:c2:d2:bf:dd:a8:
                    3d:78:42:d5:33:f2:c9:f7:56:0a:33:74:d0:bf:dc:
                    66:1c:4d:ce:48:28:54:0a:7e:5d:c3:1d:56:50:72:
                    3e:97:05:68:39:bc:5f:67:0c:20:f7:4d:b7:aa:01:
                    46:40:65:a2:8b:a3:84:5b:f6:38:e2:4d:cb:4a:c7:
                    91:ea:1d:07:23:5f:66:ab:06:ee:f3:40:61:b3:20:
                    ba:2a:7a:b3:16:77:2f:a4:6f:6f:a8:14:13:de:e9:
                    d1:18:dd:ec:f1:bb:bf:6a:1e:98:d1:d7:47:69:76:
                    38:0e:65:88:06:b6:6d:e0:d7:49:30:e2:4a:5c:81:
                    01:01:1d:cf:e1:40:40:d5:52:48:03:14:91:66:df:
                    f1:81:3a:5d:ec:58:41:e3:d6:1b:ca:ef:74:6d:c6:
                    e9:de:b4:f3:af:6c:41:39:58:67:f2:34:e4:d7:60:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9F:DF:71:59:01:82:F0:53:37:70:AB:CB:23:03:2B:4E:B5:15:6E
            X509v3 Authority Key Identifier:
                keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7f:f0:e6:c8:b4:7a:ee:43:0c:00:f5:1b:f3:50:59:fc:45:
         77:c5:0f:63:d8:73:0f:31:00:29:5c:8c:2e:be:c5:72:db:53:
         5a:c7:66:a4:01:0f:d5:fd:8b:bf:2c:18:4c:0b:6c:c6:4f:43:
         45:ec:54:c0:7f:f0:17:d1:45:b4:fc:29:d1:da:c4:dd:83:19:
         cb:f9:83:07:c0:74:c1:47:3d:da:52:ec:0c:2f:1c:9e:a8:bc:
         ae:83:89:bd:0e:0d:cd:92:57:7c:5b:b1:f9:df:11:1f:98:8c:
         bf:9f:55:55:83:95:c2:9f:85:e7:6a:21:ac:93:d9:69:05:c1:
         04:65:b0:d0:8a:3d:e6:21:b6:21:5b:0f:12:05:03:04:ed:36:
         ea:8a:ef:23:f4:48:f0:a2:9c:64:37:0c:6f:eb:b5:6a:04:84:
         f1:ba:0b:6d:18:fe:b1:3a:37:32:b6:75:73:b0:56:7f:8f:60:
         b4:1e:1b:97:b0:08:50:68:2f:97:62:16:48:80:cf:19:a6:6f:
         d8:9b:2a:d8:a6:2b:9a:68:55:4c:10:71:4b:5d:7b:6f:bd:7e:
         c2:49:da:5b:30:f4:01:8c:ac:74:db:d1:1a:98:04:f5:be:3c:
         60:54:a0:d9:da:e3:e4:6a:53:eb:c9:06:e7:cd:93:d6:0f:9c:
         a2:3c:63:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQ0NjAxMTAvBgNVBAUTKDg4OTE5NTM4RUVERUM4MzIwRDVFQUY2QjFGMzJCMjk4
MjNBQjc4MTAwHhcNMjYwOTI1MDYwMzIwWhcNMjYxMDAyMDYwMzIwWjAYMRYwFAYD
VQQDEw02YWI2MGVhOC02OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArjbW3s94kkNe/4t/MDpmeLHzUka4ZvsGdFUsXLpQtw89t7wh2qMa7yiWP86U
kmhq6o40+g9Gl5y/dCwS4IS1daHE9nvmNJ+R+pYf5Rd+tIZ63AJGwtK/3ag9eELV
M/LJ91YKM3TQv9xmHE3OSChUCn5dwx1WUHI+lwVoObxfZwwg9023qgFGQGWii6OE
W/Y44k3LSseR6h0HI19mqwbu80BhsyC6KnqzFncvpG9vqBQT3unRGN3s8bu/ah6Y
0ddHaXY4DmWIBrZt4NdJMOJKXIEBAR3P4UBA1VJIAxSRZt/xgTpd7FhB49Ybyu90
bcbp3rTzr2xBOVhn8jTk12Cp6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLKf33FZ
AYLwUzdwq8sjAytOtRVuMB8GA1UdIwQYMBaAFIiRlTju3sgyDV6vax8yspgjq3gQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDQ2MC8wNDk4NjQ3NjE0
ODcxMUYwQTc5RUFCMjZDNEY5QUUwMi9pSkdWT083ZXlESU5YcTlySHpLeW1DT3Jl
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDQ2MC8wNDk4NjQ3NjE0ODcxMUYwQTc5RUFCMjZDNEY5QUUwMi9pSkdWT083ZXlE
SU5YcTlySHpLeW1DT3JlQkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf3/w5si0eu5DDAD1G/NQWfxFd8UPY9hzDzEAKVyMLr7FcttTWsdmpAEP1f2L
vywYTAtsxk9DRexUwH/wF9FFtPwp0drE3YMZy/mDB8B0wUc92lLsDC8cnqi8roOJ
vQ4NzZJXfFux+d8RH5iMv59VVYOVwp+F52ohrJPZaQXBBGWw0Io95iG2IVsPEgUD
BO026orvI/RI8KKcZDcMb+u1agSE8boLbRj+sTo3MrZ1c7BWf49gtB4bl7AIUGgv
l2IWSIDPGaZv2Jsq2KYrmmhVTBBxS117b71+wknaWzD0AYysdNvRGpgE9b48YFSg
2drj5GpT68kG582T1g+cojxjoA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:34:13 2026 by rpki-client