Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File:                     c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier:          EIcPT97m0kflMCRjThsPqOFV59TbSP6T9EI/QgokC4E=
Subject key identifier:   70:8F:31:8A:56:0E:E8:BF:D0:5D:48:EF:91:50:C5:8F:3B:4E:0F:00
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer:       /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial:       0243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number:          0236
Signing time:             Sun 27 Sep 2026 02:59:05 +0000
Manifest this update:     Sun 27 Sep 2026 02:59:05 +0000
Manifest next update:     Sun 04 Oct 2026 02:59:05 +0000
Files and hashes:         1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: wW/fLY7Y1FlRyXUp+4Y/ZVC4pFETDPLl/VmG8dRvZCQ=)
                          2: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: BtbKwISc0o5KoYEKwJEZQMnjZhmU53NuiaoFh10O9zg=)
                          3: 71014290D87411EE97234F5CC4F9AE02.roa (hash: s/cEOGRFX0DoGdQEqZyPvpLQpf664Lfa0cHYTU7MBgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
                          rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
        Validity
            Not Before: Sep 27 02:59:05 2026 GMT
            Not After : Oct  4 02:59:05 2026 GMT
        Subject: CN=6ab88679-fd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a2:c3:64:fd:1e:72:e0:3a:97:78:0d:8f:51:
                    16:47:ab:97:0b:b0:dc:15:38:29:6b:87:fb:b9:2e:
                    49:4d:fb:87:5d:f8:82:53:cc:b0:7e:7d:8f:52:23:
                    c4:22:e9:aa:f8:b2:98:34:5d:bd:4a:66:ca:e4:1b:
                    34:1c:d4:f0:db:01:0c:60:5c:d7:4b:d3:1f:8d:04:
                    5e:a9:12:55:47:c8:5a:3e:14:07:cb:11:3a:42:39:
                    aa:cf:aa:c6:96:e1:73:6f:70:f6:f2:2d:93:69:1d:
                    73:0a:7a:91:e6:52:72:30:b2:9f:20:74:35:75:cf:
                    09:6a:b2:97:87:28:db:91:d3:61:08:54:01:e1:a3:
                    b9:55:72:52:2c:28:f3:61:bb:57:9a:93:d6:94:c3:
                    8a:fe:5f:fe:5d:73:06:f9:88:43:20:13:d5:1f:30:
                    35:0f:7e:2d:1a:73:55:8b:9a:90:b1:95:f8:f4:29:
                    fe:c4:4c:17:ca:0a:57:ce:7a:bb:de:b6:08:51:6c:
                    d6:6a:3c:28:1a:90:36:91:b8:77:cc:64:ff:e6:89:
                    bd:e0:c0:df:19:97:9d:7f:20:87:84:62:d4:25:32:
                    0d:4a:b0:81:f1:d8:63:91:45:f1:37:4c:05:aa:98:
                    46:dc:06:08:d0:a0:7c:39:8f:35:ad:4a:e2:71:16:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8F:31:8A:56:0E:E8:BF:D0:5D:48:EF:91:50:C5:8F:3B:4E:0F:00
            X509v3 Authority Key Identifier:
                keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:44:91:52:19:6c:d0:2a:5c:25:c0:e7:35:86:66:7e:4c:f8:
         d2:12:5b:03:8e:4a:7d:1f:16:80:5f:e4:a0:3e:f0:2a:9a:5c:
         50:c5:88:6d:59:39:9a:ab:ef:cb:55:63:15:bb:58:39:05:ce:
         1c:3a:af:21:0a:22:6c:4a:28:70:15:97:54:74:47:d8:fc:27:
         c3:32:97:bc:62:9e:f9:07:9e:eb:7b:44:19:74:87:7c:89:57:
         a6:87:9a:d2:e2:31:87:86:3a:04:0c:5a:48:39:2c:cf:73:22:
         bd:5d:3c:e0:3c:59:39:5d:f3:5b:74:17:2b:82:8d:6d:d3:69:
         38:91:66:6c:bb:da:21:00:c9:b4:46:08:25:06:ba:2b:6a:ad:
         be:6c:37:73:6b:6c:35:12:af:d7:67:e8:95:48:24:05:c2:8f:
         48:03:ed:e7:55:3d:68:1d:38:89:0f:b7:91:ca:f9:f5:a8:da:
         10:11:87:2f:c5:b7:8c:a0:ae:4c:5c:b4:27:c3:00:c1:a9:1e:
         01:15:fc:f1:27:f1:89:cf:6b:31:4e:f6:60:3f:02:ac:d7:09:
         a4:69:d0:36:e6:13:da:6d:e0:28:16:7e:ad:98:93:00:f8:dd:
         00:65:c9:cc:0e:ac:a2:dd:9c:21:c9:74:00:c3:b0:56:0f:4d:
         10:2f:3b:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE
Q0IyQThBNEIwHhcNMjYwOTI3MDI1OTA1WhcNMjYxMDA0MDI1OTA1WjAYMRYwFAYD
VQQDEw02YWI4ODY3OS1mZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnKLDZP0ecuA6l3gNj1EWR6uXC7DcFTgpa4f7uS5JTfuHXfiCU8ywfn2PUiPE
Iumq+LKYNF29SmbK5Bs0HNTw2wEMYFzXS9MfjQReqRJVR8haPhQHyxE6Qjmqz6rG
luFzb3D28i2TaR1zCnqR5lJyMLKfIHQ1dc8JarKXhyjbkdNhCFQB4aO5VXJSLCjz
YbtXmpPWlMOK/l/+XXMG+YhDIBPVHzA1D34tGnNVi5qQsZX49Cn+xEwXygpXznq7
3rYIUWzWajwoGpA2kbh3zGT/5om94MDfGZedfyCHhGLUJTINSrCB8dhjkUXxN0wF
qphG3AYI0KB8OY81rUricRaBOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHCPMYpW
Dui/0F1I75FQxY87Tg8AMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE
MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv
RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnkSRUhls0CpcJcDnNYZmfkz40hJbA45KfR8WgF/koD7wKppcUMWIbVk5mqvv
y1VjFbtYOQXOHDqvIQoibEoocBWXVHRH2PwnwzKXvGKe+Qee63tEGXSHfIlXpoea
0uIxh4Y6BAxaSDksz3MivV084DxZOV3zW3QXK4KNbdNpOJFmbLvaIQDJtEYIJQa6
K2qtvmw3c2tsNRKv12folUgkBcKPSAPt51U9aB04iQ+3kcr59ajaEBGHL8W3jKCu
TFy0J8MAwakeARX88Sfxic9rMU72YD8CrNcJpGnQNuYT2m3gKBZ+rZiTAPjdAGXJ
zA6sot2cIcl0AMOwVg9NEC87xA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:26:31 2026 by rpki-client