Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft
File:                     vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json)
Hash identifier:          kLW0HKLXO0OoCoYCF4IusYxkCYtBssnpY4equTIS4yM=
Subject key identifier:   C9:E6:D3:4F:90:87:80:4C:D3:03:FC:C6:50:F5:B3:E4:24:F1:D9:0C
Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C
Certificate issuer:       /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft
Manifest number:          01B0
Signing time:             Fri 25 Sep 2026 04:03:28 +0000
Manifest this update:     Fri 25 Sep 2026 04:03:27 +0000
Manifest next update:     Fri 02 Oct 2026 04:03:27 +0000
Files and hashes:         1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: uKYS80j0poyvpVmtoJKojcsP+1tfgnkiMvn8aVJvrx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl
                          rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C
        Validity
            Not Before: Sep 25 04:03:27 2026 GMT
            Not After : Oct  2 04:03:27 2026 GMT
        Subject: CN=6ab5f290-ca58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b8:ef:2d:4f:7f:49:41:da:81:e7:0f:99:27:
                    c7:0b:a2:81:ec:c9:c8:28:af:96:19:8f:f7:89:f5:
                    78:80:d0:1f:f7:11:c4:1e:6c:c0:c1:aa:cf:7f:9c:
                    a8:fa:ff:cb:c3:4d:74:6a:84:6e:1d:ce:3c:38:ac:
                    43:05:b6:7d:af:53:d2:b0:7b:18:78:cf:11:31:7a:
                    37:f0:ed:a3:10:8a:59:83:7e:2d:7e:2d:8f:d4:96:
                    f9:1e:cc:d7:fc:6b:7c:16:14:59:48:b2:0e:95:0d:
                    e0:ae:92:79:b4:17:61:cf:dd:fb:f1:7a:38:47:63:
                    8e:a3:16:16:b3:79:52:82:09:e0:d8:8e:87:dc:6d:
                    87:bd:8c:2c:79:af:a0:13:88:d3:57:3e:15:8a:16:
                    f3:df:45:65:22:f6:ae:e3:03:36:76:28:2a:dd:b2:
                    dc:a1:16:56:bc:e5:df:94:02:c5:1a:25:be:98:15:
                    3f:a4:fb:a3:85:81:61:57:5e:99:b7:3e:f9:1f:7a:
                    5b:66:5f:13:3f:8f:af:b5:31:06:74:46:ec:7b:90:
                    bf:f2:5d:46:b1:5b:0b:08:5e:ee:a3:18:f7:92:f1:
                    b7:fb:1e:14:46:37:41:dd:a5:42:84:3d:c0:58:44:
                    e3:dd:c0:52:3f:25:c3:44:ff:37:0b:19:8c:ae:59:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E6:D3:4F:90:87:80:4C:D3:03:FC:C6:50:F5:B3:E4:24:F1:D9:0C
            X509v3 Authority Key Identifier:
                keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6b:38:d7:89:99:0a:56:b3:41:5d:54:80:82:74:84:a2:65:
         18:eb:c1:09:0d:15:b5:34:76:05:10:f2:aa:0b:26:0f:9a:99:
         4a:1e:04:ac:92:48:05:47:c6:53:5e:3d:12:56:94:78:02:80:
         19:ea:4a:69:85:e7:9a:4d:61:92:d7:26:60:91:bd:83:fe:95:
         1f:bd:7c:79:8c:10:c3:33:06:d8:ab:b5:b2:6c:61:66:34:a4:
         c8:40:94:f3:63:5e:6b:9f:70:26:c4:cd:2a:71:8e:fe:0a:f9:
         d6:0f:93:8e:0f:c1:af:f3:eb:34:6d:48:e8:fd:e7:61:22:3c:
         d3:a0:a8:55:d2:4e:81:13:f0:a9:d6:3f:dd:89:40:31:c2:74:
         a6:4f:05:5f:cd:f1:30:e6:43:cc:27:12:fd:31:0c:40:1f:4c:
         5a:4f:3a:eb:7c:23:97:dc:3d:0a:43:aa:e6:29:f4:55:b8:80:
         82:40:8d:55:f8:42:f2:a8:81:37:86:c3:0e:8e:84:9e:8a:7a:
         7a:f9:a1:18:e4:56:15:0f:ec:f4:c0:47:c3:4f:a5:2a:be:bb:
         21:4a:07:e8:82:75:ad:cc:cc:2e:b2:5d:ad:d4:a8:44:43:5a:
         6c:9d:7c:01:0c:32:da:c4:97:c1:bf:38:b3:41:8e:cd:c8:e6:
         2b:d3:9a:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjRCMzMxMTAvBgNVBAUTKEJDRUUxMjgwNTM4OUI1NzhDMzVGRDhCNDI1NUE2MDgx
RDI2ODNGN0MwHhcNMjYwOTI1MDQwMzI3WhcNMjYxMDAyMDQwMzI3WjAYMRYwFAYD
VQQDEw02YWI1ZjI5MC1jYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxrjvLU9/SUHagecPmSfHC6KB7MnIKK+WGY/3ifV4gNAf9xHEHmzAwarPf5yo
+v/Lw010aoRuHc48OKxDBbZ9r1PSsHsYeM8RMXo38O2jEIpZg34tfi2P1Jb5HszX
/Gt8FhRZSLIOlQ3grpJ5tBdhz9378Xo4R2OOoxYWs3lSggng2I6H3G2HvYwsea+g
E4jTVz4Vihbz30VlIvau4wM2digq3bLcoRZWvOXflALFGiW+mBU/pPujhYFhV16Z
tz75H3pbZl8TP4+vtTEGdEbse5C/8l1GsVsLCF7uoxj3kvG3+x4URjdB3aVChD3A
WETj3cBSPyXDRP83CxmMrlnJEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMnm00+Q
h4BM0wP8xlD1s+Qk8dkMMB8GA1UdIwQYMBaAFLzuEoBTibV4w1/YtCVaYIHSaD98
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8yNDRGODQ5QTIy
MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRYakRYOWkwSlZwZ2dkSm9Q
M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZPNFNnRk9KdFhqRFg5aTBKVnBnZ2RKb1Azdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NEIzMy8yNDRGODQ5QTIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi92TzRTZ0ZPSnRY
akRYOWkwSlZwZ2dkSm9QM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsWs414mZClazQV1UgIJ0hKJlGOvBCQ0VtTR2BRDyqgsmD5qZSh4ErJJIBUfG
U149ElaUeAKAGepKaYXnmk1hktcmYJG9g/6VH718eYwQwzMG2Ku1smxhZjSkyECU
82Nea59wJsTNKnGO/gr51g+Tjg/Br/PrNG1I6P3nYSI806CoVdJOgRPwqdY/3YlA
McJ0pk8FX83xMOZDzCcS/TEMQB9MWk8663wjl9w9CkOq5in0VbiAgkCNVfhC8qiB
N4bDDo6Enop6evmhGORWFQ/s9MBHw0+lKr67IUoH6IJ1rczMLrJdrdSoRENabJ18
AQwy2sSXwb84s0GOzcjmK9Oa5w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:05:26 2026 by rpki-client