Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
File:                     nE_-Zd6jUjPTnocCI4VlV03tRm4.mft (raw, json)
Hash identifier:          Kgz6P/uDcxt/YShqaxSwKh4q0XU/vu4KY7fIun+hlNE=
Subject key identifier:   7C:65:12:96:7E:AD:49:7E:8B:A0:8A:F9:CB:32:8F:16:E6:34:49:36
Authority key identifier: 9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E
Certificate issuer:       /CN=A91CAA4E/serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
Certificate serial:       083F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
Manifest number:          1C53
Signing time:             Thu 08 Oct 2026 16:57:18 +0000
Manifest this update:     Thu 08 Oct 2026 16:57:18 +0000
Manifest next update:     Thu 15 Oct 2026 16:57:18 +0000
Files and hashes:         1: nE_-Zd6jUjPTnocCI4VlV03tRm4.crl (hash: xRC3NOxw7wdo4hkaSPg/xKaFcyKPePaGzwlBsDjNzAE=)
                          2: C6BB442CE98B11F0A24D3E834F6F56BC.roa (hash: CEl40HqaPGOLJrz2YqF6f1GmkSjs3nuf3JPxjBNVZBo=)
                          3: C56AF018E98B11F0A24D3E834F6F56BC.roa (hash: BX6Gc1GUbhxWTmon8FP3iCan1L2uG44mZNtXxPqfU40=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl
                          rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2111 (0x83f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAA4E, serialNumber=9C4FFE65DEA35233D39E8702238565574DED466E
        Validity
            Not Before: Oct  8 16:57:18 2026 GMT
            Not After : Oct 15 16:57:18 2026 GMT
        Subject: CN=6ac7cb6e-0ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:53:3e:49:54:8e:6c:07:50:d5:3f:88:5b:
                    31:87:de:92:02:74:38:c7:7c:a9:eb:6d:2d:61:56:
                    f6:0f:48:9c:84:5e:c1:f8:6c:71:30:6b:60:fa:66:
                    0f:16:cc:b8:e4:15:29:94:85:0f:e0:dc:7b:4c:1d:
                    1c:b3:91:62:7a:5b:42:0f:a2:1c:ae:1f:70:49:66:
                    6c:b4:ab:95:d6:09:83:06:fa:ca:05:73:3b:68:78:
                    e6:c1:f3:63:4c:13:22:18:fb:3a:28:53:e0:10:87:
                    6a:76:6f:31:7f:78:3a:7e:80:5b:c5:9d:96:63:b3:
                    34:83:1c:d0:3d:b5:84:56:bf:2d:5e:99:de:b4:99:
                    45:3b:f3:79:01:7f:1d:be:71:3a:34:e6:de:74:89:
                    11:46:da:37:f4:55:ca:a9:5e:1a:b1:c2:31:5c:49:
                    6b:5c:99:70:4d:c5:13:d3:83:6c:25:82:d1:80:cf:
                    14:19:fd:d0:61:64:aa:14:a9:6a:88:bb:14:7c:e5:
                    f1:c2:32:ac:bb:15:ec:8c:14:b7:06:2c:02:de:e1:
                    4e:1e:97:31:e3:f3:75:ff:38:6b:08:0a:0f:5c:e9:
                    81:0b:f0:3c:13:a0:a2:75:3e:8f:e6:9e:27:1e:f3:
                    9b:fb:5f:3b:72:a2:18:22:69:14:fe:9a:76:05:f4:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:65:12:96:7E:AD:49:7E:8B:A0:8A:F9:CB:32:8F:16:E6:34:49:36
            X509v3 Authority Key Identifier:
                keyid:9C:4F:FE:65:DE:A3:52:33:D3:9E:87:02:23:85:65:57:4D:ED:46:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nE_-Zd6jUjPTnocCI4VlV03tRm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA4E/55E9795AA94F11E8AA0C900EC4F9AE02/nE_-Zd6jUjPTnocCI4VlV03tRm4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:24:d2:3a:99:89:a5:1e:98:31:0b:fd:5c:d7:16:3c:f7:94:
         b2:6e:bc:69:ee:ab:5f:07:2d:e1:7e:21:6e:45:a1:a8:ed:f1:
         0f:1b:26:d2:d1:ab:c1:eb:90:24:d3:a8:b9:e4:8a:6d:77:57:
         8b:80:1d:14:59:a6:55:41:6e:e7:4d:70:ad:ad:8e:61:7b:b3:
         54:02:a0:97:eb:1f:e7:29:da:0e:ab:0d:1f:d9:3c:73:a7:56:
         00:89:0e:23:45:8a:3d:ba:87:59:ae:db:bc:4c:d1:db:8b:4e:
         ed:b8:36:76:a9:80:f9:c2:ae:91:f4:69:62:6a:12:24:fe:31:
         f0:7f:95:93:e5:73:4c:42:3b:2e:6a:9c:71:65:7f:83:44:ca:
         fb:4c:78:1a:6d:c2:b8:cb:0a:40:40:0e:83:ad:68:b5:00:a9:
         24:bb:43:3d:33:99:31:a5:24:67:72:8f:2a:d0:d9:fe:8a:d7:
         3c:e4:07:2c:a5:77:9f:a0:93:dd:9b:83:b5:dd:ba:a4:80:80:
         7e:c2:af:69:27:db:8c:f7:77:49:70:1b:11:8c:1a:8e:52:ce:
         12:16:42:df:d6:e8:fd:16:37:41:4b:13:9e:13:26:1f:6c:52:
         60:27:ff:be:e4:c0:2d:4e:1f:bd:10:d9:86:01:75:16:21:79:
         49:10:8a:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0FBNEUxMTAvBgNVBAUTKDlDNEZGRTY1REVBMzUyMzNEMzlFODcwMjIzODU2NTU3
NERFRDQ2NkUwHhcNMjYxMDA4MTY1NzE4WhcNMjYxMDE1MTY1NzE4WjAYMRYwFAYD
VQQDEw02YWM3Y2I2ZS0wZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4vFTPklUjmwHUNU/iFsxh96SAnQ4x3yp620tYVb2D0ichF7B+GxxMGtg+mYP
Fsy45BUplIUP4Nx7TB0cs5FieltCD6Icrh9wSWZstKuV1gmDBvrKBXM7aHjmwfNj
TBMiGPs6KFPgEIdqdm8xf3g6foBbxZ2WY7M0gxzQPbWEVr8tXpnetJlFO/N5AX8d
vnE6NObedIkRRto39FXKqV4ascIxXElrXJlwTcUT04NsJYLRgM8UGf3QYWSqFKlq
iLsUfOXxwjKsuxXsjBS3BiwC3uFOHpcx4/N1/zhrCAoPXOmBC/A8E6CidT6P5p4n
HvOb+187cqIYImkU/pp2BfTH3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHxlEpZ+
rUl+i6CK+csyjxbmNEk2MB8GA1UdIwQYMBaAFJxP/mXeo1Iz056HAiOFZVdN7UZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE0RS81NUU5Nzk1QUE5
NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVqUFRub2NDSTRWbFYwM3RS
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25FXy1aZDZqVWpQVG5vY0NJNFZsVjAzdFJtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QUE0RS81NUU5Nzk1QUE5NEYxMUU4QUEwQzkwMEVDNEY5QUUwMi9uRV8tWmQ2alVq
UFRub2NDSTRWbFYwM3RSbTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2iTSOpmJpR6YMQv9XNcWPPeUsm68ae6rXwct4X4hbkWhqO3xDxsm0tGrweuQ
JNOoueSKbXdXi4AdFFmmVUFu501wra2OYXuzVAKgl+sf5ynaDqsNH9k8c6dWAIkO
I0WKPbqHWa7bvEzR24tO7bg2dqmA+cKukfRpYmoSJP4x8H+Vk+VzTEI7LmqccWV/
g0TK+0x4Gm3CuMsKQEAOg61otQCpJLtDPTOZMaUkZ3KPKtDZ/orXPOQHLKV3n6CT
3ZuDtd26pICAfsKvaSfbjPd3SXAbEYwajlLOEhZC39bo/RY3QUsTnhMmH2xSYCf/
vuTALU4fvRDZhgF1FiF5SRCKJA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:08:47 2026 by rpki-client