Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
File:                     z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json)
Hash identifier:          vVDnl7oGzYZO5kjfmohqoNwH4t4q+xlQOWYxmMvLNtQ=
Subject key identifier:   4F:1E:6B:C7:81:13:65:45:C6:49:0A:90:04:A7:E7:48:F7:BF:68:7C
Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2
Certificate issuer:       /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
Manifest number:          023D
Signing time:             Fri 25 Sep 2026 02:37:23 +0000
Manifest this update:     Fri 25 Sep 2026 02:37:23 +0000
Manifest next update:     Fri 02 Oct 2026 02:37:23 +0000
Files and hashes:         1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: GLf4F2ufJ2ocSy4VzeBkS9QjxFih7boJ63SdK5Uvdmo=)
                          2: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: DT8F2vSiTnDZ92tEugXg46ga5AYrQXf1PZTpjRK3m7c=)
                          3: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: YiI4BDI+YEuyMJJzNPPm+NOvEBL4ZLRtDOzUj0P1mAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl
                          rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2
        Validity
            Not Before: Sep 25 02:37:23 2026 GMT
            Not After : Oct  2 02:37:23 2026 GMT
        Subject: CN=6ab5de63-8f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:02:31:ab:54:d2:fc:b8:87:b1:9e:0e:7c:
                    99:76:f3:ac:89:2b:0d:cb:eb:60:7b:1c:ad:5a:b4:
                    20:d4:a1:f8:10:05:f9:92:13:74:6e:23:58:96:52:
                    eb:63:88:41:5b:fb:eb:07:ac:83:da:1d:9c:6c:b5:
                    9e:b3:11:43:78:06:8b:f8:d1:82:31:a5:46:39:5c:
                    a5:46:dc:fa:08:72:db:af:97:c1:c1:cb:06:df:db:
                    91:e9:03:b3:bd:c4:0d:a5:17:35:f2:04:19:0e:fa:
                    1a:c4:38:c3:a0:94:f6:59:99:95:53:26:5f:58:9f:
                    3d:e7:43:5b:f1:2e:8c:f7:8a:68:e4:9d:cf:06:b3:
                    d9:89:d5:22:6d:84:76:7d:12:f0:1a:bc:d0:24:61:
                    c9:fc:fc:85:a3:d8:0a:db:b9:df:dd:44:e6:e8:c8:
                    79:7b:fb:7c:b8:ab:3e:23:ed:e8:12:08:4e:c4:f4:
                    ed:d1:51:5e:5d:b2:1b:eb:13:58:95:2e:77:c2:33:
                    53:ef:81:c5:46:6b:56:ba:57:56:e4:cc:93:79:b7:
                    e3:29:71:b6:22:86:82:8f:10:a5:50:3b:f5:69:1c:
                    b7:a8:0b:df:5a:4c:03:97:c6:95:6f:d3:15:5e:fe:
                    29:2d:10:85:64:22:06:d2:01:cd:ec:dc:fa:0d:10:
                    d7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1E:6B:C7:81:13:65:45:C6:49:0A:90:04:A7:E7:48:F7:BF:68:7C
            X509v3 Authority Key Identifier:
                keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c6:83:ad:ad:89:6a:8d:56:ab:f3:95:ab:77:16:25:ba:5a:
         4c:36:70:9d:56:a7:67:76:d4:8e:d5:56:a1:2e:d0:9a:e8:7f:
         96:60:be:67:9a:01:b1:47:7f:d9:7e:94:d5:af:a7:a8:a0:34:
         fb:96:06:68:1c:da:d0:c9:b2:b1:30:10:0e:46:ce:10:23:50:
         9f:9a:0a:a0:b3:0a:1d:13:69:60:c9:ac:4c:a0:24:e2:71:44:
         67:22:59:18:27:2b:f3:ff:1a:eb:59:d0:ac:41:12:44:16:21:
         31:7d:aa:44:5d:9d:90:32:bf:56:b0:fb:83:42:47:ac:d8:a0:
         26:a7:c7:2d:c1:fc:c7:85:42:00:57:d8:d8:4b:b6:1e:41:54:
         a2:14:8a:7d:4a:52:56:94:3c:6d:75:c3:5a:73:55:41:c3:aa:
         e9:a5:e8:cc:e1:9b:23:56:4a:48:23:58:15:46:6e:44:f3:58:
         ae:91:5c:fd:32:20:e9:78:9c:56:09:60:15:6d:7e:80:49:38:
         c4:0b:40:d4:a0:e4:3b:4c:a6:06:88:e9:53:43:ec:d7:8a:1d:
         c8:b6:6a:a2:e9:62:b1:c4:07:2a:6b:f4:55:81:cc:fa:d6:fe:
         17:fe:c9:f9:e9:38:ac:32:f6:20:b7:76:2f:df:5a:d4:04:9d:
         98:ac:26:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF
RjBCOUJGQzIwHhcNMjYwOTI1MDIzNzIzWhcNMjYxMDAyMDIzNzIzWjAYMRYwFAYD
VQQDEw02YWI1ZGU2My04ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySUCMatU0vy4h7GeDnyZdvOsiSsNy+tgexytWrQg1KH4EAX5khN0biNYllLr
Y4hBW/vrB6yD2h2cbLWesxFDeAaL+NGCMaVGOVylRtz6CHLbr5fBwcsG39uR6QOz
vcQNpRc18gQZDvoaxDjDoJT2WZmVUyZfWJ8950Nb8S6M94po5J3PBrPZidUibYR2
fRLwGrzQJGHJ/PyFo9gK27nf3UTm6Mh5e/t8uKs+I+3oEghOxPTt0VFeXbIb6xNY
lS53wjNT74HFRmtWuldW5MyTebfjKXG2IoaCjxClUDv1aRy3qAvfWkwDl8aVb9MV
Xv4pLRCFZCIG0gHN7Nz6DRDX2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8ea8eB
E2VFxkkKkASn50j3v2h8MB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz
NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB
RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnsaDra2Jao1Wq/OVq3cWJbpaTDZwnVanZ3bUjtVWoS7Qmuh/lmC+Z5oBsUd/
2X6U1a+nqKA0+5YGaBza0MmysTAQDkbOECNQn5oKoLMKHRNpYMmsTKAk4nFEZyJZ
GCcr8/8a61nQrEESRBYhMX2qRF2dkDK/VrD7g0JHrNigJqfHLcH8x4VCAFfY2Eu2
HkFUohSKfUpSVpQ8bXXDWnNVQcOq6aXozOGbI1ZKSCNYFUZuRPNYrpFc/TIg6Xic
VglgFW1+gEk4xAtA1KDkO0ymBojpU0Ps14odyLZqouliscQHKmv0VYHM+tb+F/7J
+ek4rDL2ILd2L99a1ASdmKwm3A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:58:41 2026 by rpki-client