Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
File:                     iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft (raw, json)
Hash identifier:          pxPyfLlfUy5Y/EbmO8AfODVuVdByva35i6agC53Iuaw=
Subject key identifier:   00:D1:1E:79:53:7A:76:22:1F:2F:92:25:68:42:78:6B:46:46:1E:E7
Authority key identifier: 8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
Certificate issuer:       /CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E
Certificate serial:       0B95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
Manifest number:          2D94
Signing time:             Thu 24 Sep 2026 15:52:37 +0000
Manifest this update:     Thu 24 Sep 2026 15:52:37 +0000
Manifest next update:     Thu 01 Oct 2026 15:52:37 +0000
Files and hashes:         1: iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl (hash: cA7Iw1na5SrSPzoH1CECC7osB1eVB0OrvqpPN3wwrV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl
                          rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2965 (0xb95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4413, serialNumber=8AA8786526852346839372631DFB09984BC3005E
        Validity
            Not Before: Sep 24 15:52:37 2026 GMT
            Not After : Oct  1 15:52:37 2026 GMT
        Subject: CN=6ab54745-aaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:0d:49:b5:81:10:36:9d:e3:e5:91:88:0c:
                    02:d8:9b:07:a3:67:de:39:cb:93:0b:b4:fb:b9:d8:
                    23:6a:db:42:a3:45:3b:82:89:18:66:05:26:bd:ef:
                    9d:eb:8f:f0:b6:ad:89:08:07:e3:a5:f1:b1:02:a5:
                    2a:4c:2b:79:05:ee:31:63:f5:f8:4f:ca:0c:b7:05:
                    22:f7:a3:b6:10:56:ed:54:d0:b0:f4:2e:6c:aa:d1:
                    29:ed:12:c7:35:ce:69:c1:b1:b5:f1:bc:f1:27:e1:
                    37:8e:87:5b:23:50:7e:46:1c:92:23:ba:e6:22:07:
                    db:9f:7b:1c:d3:ab:28:db:84:07:6f:17:7f:b3:d2:
                    b6:bb:09:cf:1e:2f:8f:fd:62:a8:98:db:ac:a2:96:
                    9c:90:f2:ab:69:eb:22:36:92:d6:67:73:48:4e:6e:
                    8a:d9:cc:09:33:09:2a:2d:6f:fb:35:77:b2:aa:e2:
                    d9:d9:40:8c:85:f2:57:75:1b:bc:b5:cb:43:09:25:
                    77:f0:06:e5:51:bb:6a:7d:aa:03:c2:26:50:cd:94:
                    9a:a2:10:9f:c3:40:4d:b2:97:55:e8:63:8c:f0:91:
                    80:d4:13:8f:d2:f4:ac:cb:e6:c2:8f:72:ec:14:4e:
                    0c:62:bc:1c:83:7e:c1:4b:72:55:f7:4d:95:34:9f:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D1:1E:79:53:7A:76:22:1F:2F:92:25:68:42:78:6B:46:46:1E:E7
            X509v3 Authority Key Identifier:
                keyid:8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:14:f2:c8:5c:b7:1e:33:29:cf:f1:8e:44:8b:ac:43:af:2c:
         83:ea:72:58:2e:c2:18:b3:aa:44:04:24:71:ba:da:b6:63:53:
         29:68:d0:a6:1b:b6:eb:e0:e5:c4:a9:14:be:c7:cd:0e:c3:bd:
         e8:92:02:e4:33:d9:61:f7:0d:a5:f5:54:2f:15:0f:c9:3f:74:
         15:75:08:97:c5:c8:ae:b6:2f:cc:a2:5a:33:e6:c6:9f:c3:11:
         f2:17:2e:4b:80:65:30:65:43:67:43:6f:3d:fb:63:ac:6f:8c:
         20:20:72:e4:a9:02:4b:01:39:88:98:cc:4f:38:e3:ae:93:ce:
         1f:26:ea:59:52:58:ff:88:8a:56:0d:09:20:9f:23:98:50:4a:
         62:0d:0b:f3:64:32:2e:42:04:e7:f9:b6:c1:f3:53:cb:ca:c9:
         60:48:26:06:62:07:10:ff:3a:b5:d7:27:37:d7:9a:6f:9d:8d:
         52:ae:d0:9e:79:b6:01:14:92:18:05:c4:15:76:6c:dd:d1:e0:
         89:65:60:39:9c:44:31:d2:cc:c4:3b:03:cf:3c:11:76:cb:3b:
         e6:01:6e:2d:66:5a:48:18:6d:52:bf:33:25:40:26:4c:0f:c6:
         ce:f4:3a:9d:9b:e8:79:84:d7:b4:1e:c5:26:42:23:4b:7c:a1:
         43:98:3e:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ0MTMxMTAvBgNVBAUTKDhBQTg3ODY1MjY4NTIzNDY4MzkzNzI2MzFERkIwOTk4
NEJDMzAwNUUwHhcNMjYwOTI0MTU1MjM3WhcNMjYxMDAxMTU1MjM3WjAYMRYwFAYD
VQQDEw02YWI1NDc0NS1hYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv2QNSbWBEDad4+WRiAwC2JsHo2feOcuTC7T7udgjattCo0U7gokYZgUmve+d
64/wtq2JCAfjpfGxAqUqTCt5Be4xY/X4T8oMtwUi96O2EFbtVNCw9C5sqtEp7RLH
Nc5pwbG18bzxJ+E3jodbI1B+RhySI7rmIgfbn3sc06so24QHbxd/s9K2uwnPHi+P
/WKomNusopackPKraesiNpLWZ3NITm6K2cwJMwkqLW/7NXeyquLZ2UCMhfJXdRu8
tctDCSV38AblUbtqfaoDwiZQzZSaohCfw0BNspdV6GOM8JGA1BOP0vSsy+bCj3Ls
FE4MYrwcg37BS3JV902VNJ/HAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADRHnlT
enYiHy+SJWhCeGtGRh7nMB8GA1UdIwQYMBaAFIqoeGUmhSNGg5NyYx37CZhLwwBe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG
QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9pcWg0WlNhRkkwYURrM0pqSGZzSm1FdkRB
RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lxaDRaU2FGSTBhRGszSmpIZnNKbUV2REFGNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9pcWg0WlNhRkkw
YURrM0pqSGZzSm1FdkRBRjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmxTyyFy3HjMpz/GORIusQ68sg+pyWC7CGLOqRAQkcbratmNTKWjQphu26+Dl
xKkUvsfNDsO96JIC5DPZYfcNpfVULxUPyT90FXUIl8XIrrYvzKJaM+bGn8MR8hcu
S4BlMGVDZ0NvPftjrG+MICBy5KkCSwE5iJjMTzjjrpPOHybqWVJY/4iKVg0JIJ8j
mFBKYg0L82QyLkIE5/m2wfNTy8rJYEgmBmIHEP86tdcnN9eab52NUq7Qnnm2ARSS
GAXEFXZs3dHgiWVgOZxEMdLMxDsDzzwRdss75gFuLWZaSBhtUr8zJUAmTA/GzvQ6
nZvoeYTXtB7FJkIjS3yhQ5g+1Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:44:04 2026 by rpki-client