Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File:                     kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier:          Eqji0wB8UJ7mD15+5/q2P89EryyVH1fT74bAO29zuT4=
Subject key identifier:   8C:63:E1:B0:B9:D6:64:EA:C8:1D:0F:32:3A:E7:51:90:A1:C8:F1:50
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer:       /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial:       091D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number:          0914
Signing time:             Mon 28 Sep 2026 20:22:55 +0000
Manifest this update:     Mon 28 Sep 2026 20:22:54 +0000
Manifest next update:     Mon 05 Oct 2026 20:22:54 +0000
Files and hashes:         1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: Cb8znX5pU/g/cwvGVkTV2dXD8W41fWGiwIGOZafsSkg=)
                          2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: rnY6JMeUBXZyAbrqoE5qS3jLHGJ339SuOypSORwx/lg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
                          rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 20:22:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
        Validity
            Not Before: Sep 28 20:22:54 2026 GMT
            Not After : Oct  5 20:22:54 2026 GMT
        Subject: CN=6abacc9f-05cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:fc:33:6b:cc:fc:6b:78:c3:f2:c0:11:3a:
                    41:e7:a7:23:63:fd:c5:eb:b1:36:e6:14:bd:d8:32:
                    8e:d4:e0:19:fc:b7:e2:47:73:0b:da:98:9e:76:d6:
                    a5:22:49:22:99:ee:27:82:40:96:4d:ef:68:e9:e6:
                    78:ce:8b:df:5e:81:45:2e:25:98:5e:e8:09:04:a9:
                    48:33:05:f7:37:2d:73:f8:20:dc:bc:47:8d:06:a2:
                    9f:9e:91:2a:a9:bd:ad:a1:bb:5d:27:cf:56:ef:2e:
                    9b:1f:b6:e8:3c:44:e3:50:2b:81:3e:3a:fe:ce:d1:
                    36:a8:69:b3:70:ee:20:0d:49:60:e3:e5:76:fa:71:
                    a1:71:0d:9f:05:f2:17:77:ac:27:18:57:ee:b2:98:
                    65:89:87:b0:ec:d6:c1:ef:46:1a:e1:7a:1b:78:96:
                    3b:3b:84:c8:44:14:bc:b8:76:e8:e8:4e:17:1b:89:
                    6b:fa:ab:0b:5a:67:41:9e:04:e3:b7:af:2e:2e:83:
                    5b:5d:bf:c5:db:cb:f6:cc:9c:9d:65:b8:2b:a6:02:
                    8b:a8:12:54:b3:3a:ba:fc:3a:98:98:b7:09:98:71:
                    57:3d:8c:b7:d2:47:42:69:d9:51:29:4d:2f:e8:bc:
                    a1:cd:f2:cb:d6:0c:2b:ac:7c:5f:d3:a8:39:4b:dd:
                    8e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:63:E1:B0:B9:D6:64:EA:C8:1D:0F:32:3A:E7:51:90:A1:C8:F1:50
            X509v3 Authority Key Identifier:
                keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:f1:97:76:a8:3f:2b:ea:33:ff:66:d7:8f:f7:e8:cd:3b:
         4b:d0:ef:9b:07:dc:3c:5b:52:5e:5a:7c:f6:0b:45:13:d1:01:
         06:f4:30:49:67:ce:aa:8a:a0:c5:1b:3d:3d:a6:b4:82:30:2c:
         d6:63:7d:cb:ab:e7:4d:ad:1e:4a:58:95:c8:66:73:eb:4d:8f:
         09:e9:95:11:12:88:44:0e:f4:3e:c6:85:5a:5f:02:1f:85:a1:
         1d:88:c2:11:38:da:1a:8c:22:7b:a0:15:72:fa:89:03:6d:96:
         8a:1b:1a:65:c1:13:e6:f9:4c:09:35:d1:58:8e:a2:c7:23:b8:
         64:0b:0b:e7:c9:81:f5:f2:47:94:5d:e8:c7:d3:b7:6e:3e:1e:
         6c:02:aa:6b:e1:79:df:ae:41:93:57:f3:86:0b:0a:32:a9:d1:
         20:8c:df:a4:93:9b:50:e4:99:66:2c:06:df:6a:ab:16:00:65:
         0c:f8:b7:cd:fa:1e:cb:40:ee:99:29:72:c1:6e:07:43:42:c4:
         45:b4:a9:79:3e:17:52:35:89:bf:52:d4:3a:f1:34:18:ec:99:
         b5:6d:9f:86:ab:6e:48:85:c1:35:7b:81:08:3f:82:19:d6:ca:
         84:48:b4:67:d7:d0:ca:58:72:50:b6:fd:33:3d:eb:e7:df:a5:
         f5:08:5b:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc5RTExMTAvBgNVBAUTKDkzM0FDOEU3QUM0QkQzQjU4Mjk4OUZDQ0I3MkZDOTI3
RDcxNjQyNEIwHhcNMjYwOTI4MjAyMjU0WhcNMjYxMDA1MjAyMjU0WjAYMRYwFAYD
VQQDEw02YWJhY2M5Zi0wNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAng38M2vM/Gt4w/LAETpB56cjY/3F67E25hS92DKO1OAZ/LfiR3ML2piedtal
Ikkime4ngkCWTe9o6eZ4zovfXoFFLiWYXugJBKlIMwX3Ny1z+CDcvEeNBqKfnpEq
qb2tobtdJ89W7y6bH7boPETjUCuBPjr+ztE2qGmzcO4gDUlg4+V2+nGhcQ2fBfIX
d6wnGFfusphliYew7NbB70Ya4XobeJY7O4TIRBS8uHbo6E4XG4lr+qsLWmdBngTj
t68uLoNbXb/F28v2zJydZbgrpgKLqBJUszq6/DqYmLcJmHFXPYy30kdCadlRKU0v
6LyhzfLL1gwrrHxf06g5S92OtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIxj4bC5
1mTqyB0PMjrnUZChyPFQMB8GA1UdIwQYMBaAFJM6yOesS9O1gpifzLcvySfXFkJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzlFMS82NTU2RjhEQUQ3
ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3V0NtSl9NdHlfSko5Y1dR
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t6ckk1NnhMMDdXQ21KX010eV9KSjljV1Frcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzlFMS82NTU2RjhEQUQ3ODQxMUVBOUM1RDk2NDBDNEY5QUUwMi9renJJNTZ4TDA3
V0NtSl9NdHlfSko5Y1dRa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWlXxl3aoPyvqM/9m14/36M07S9DvmwfcPFtSXlp89gtFE9EBBvQwSWfOqoqg
xRs9Paa0gjAs1mN9y6vnTa0eSliVyGZz602PCemVERKIRA70PsaFWl8CH4WhHYjC
ETjaGowie6AVcvqJA22WihsaZcET5vlMCTXRWI6ixyO4ZAsL58mB9fJHlF3ox9O3
bj4ebAKqa+F5365Bk1fzhgsKMqnRIIzfpJObUOSZZiwG32qrFgBlDPi3zfoey0Du
mSlywW4HQ0LERbSpeT4XUjWJv1LUOvE0GOyZtW2fhqtuSIXBNXuBCD+CGdbKhEi0
Z9fQylhyULb9Mz3r59+l9Qhblw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:18:59 2026 by rpki-client