Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
File:                     sTgy_KSTRJYjasOJSZjD3VE9fAk.mft (raw, json)
Hash identifier:          lIlxOFkW5MS2UfNI5yOrtQKQfnGVail57diyFTLd6Uk=
Subject key identifier:   90:FF:B5:88:EA:C1:09:E1:06:F0:56:8E:21:77:1F:C2:FF:9B:68:F2
Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
Certificate issuer:       /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
Manifest number:          0292
Signing time:             Wed 23 Sep 2026 01:37:13 +0000
Manifest this update:     Wed 23 Sep 2026 01:37:13 +0000
Manifest next update:     Wed 30 Sep 2026 01:37:13 +0000
Files and hashes:         1: sTgy_KSTRJYjasOJSZjD3VE9fAk.crl (hash: oIfTbCwGauLd6uuWs2r4vfXEabzf0FLZ1jcYPaBj9MA=)
                          2: 61DBE422A88B11EFAF507987C4F9AE02.roa (hash: dsx+NKPNaeGu5VjwmCjHB3rJ2l0LHRp9QzffSXcc09g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
                          rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4A16, serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
        Validity
            Not Before: Sep 23 01:37:13 2026 GMT
            Not After : Sep 30 01:37:13 2026 GMT
        Subject: CN=6ab32d49-f9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:d0:32:5f:42:c3:37:1c:35:b2:6d:de:dd:
                    28:45:bf:2e:05:80:3a:b2:59:f0:40:af:b9:32:29:
                    9d:b4:2b:9d:1c:b9:36:2d:9a:06:a8:db:06:ff:68:
                    37:ee:fe:f4:ea:f4:11:07:da:49:ce:66:4a:54:f3:
                    97:33:60:65:56:7b:c5:f9:3d:dc:e5:53:2d:c2:b0:
                    d6:50:7c:18:4a:8d:5a:55:68:fa:06:db:34:fa:0d:
                    65:f0:4a:36:b5:ef:72:09:40:e6:67:1c:c8:ed:2f:
                    bd:30:07:24:7e:95:7e:cf:35:09:9b:85:41:de:55:
                    ed:f6:73:fd:11:3c:f7:27:04:a3:1b:40:c6:e3:28:
                    53:21:fb:2a:a2:3c:94:4e:20:3b:05:84:29:b6:4a:
                    18:76:53:3b:77:5a:3d:04:a5:91:8f:ea:bc:fd:38:
                    b3:32:b0:d5:64:c8:01:3c:32:b9:6f:cd:89:cc:55:
                    c3:c5:00:d1:cd:f9:96:0a:63:b0:a0:94:be:95:e8:
                    f9:ed:a1:84:81:8a:f1:d4:ed:70:78:a5:99:e8:27:
                    03:b8:37:a8:3f:ee:94:38:87:a0:b0:1a:c6:6e:7b:
                    78:47:67:f5:bc:62:29:bf:8e:ae:dc:ae:e5:61:fc:
                    11:25:e6:34:1f:9c:a9:50:40:c4:ac:64:b3:87:92:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FF:B5:88:EA:C1:09:E1:06:F0:56:8E:21:77:1F:C2:FF:9B:68:F2
            X509v3 Authority Key Identifier:
                keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:02:ba:cc:db:40:0d:b8:73:5e:27:d3:20:13:b7:6a:df:0a:
         9f:45:23:c7:a7:a7:ed:36:7e:44:e0:78:9e:85:3d:96:50:77:
         61:a9:64:09:3e:6c:ba:dd:82:b6:95:6a:88:cb:6f:01:76:81:
         5a:e1:5f:20:a3:1b:16:b7:51:2c:77:7a:50:82:14:5c:ba:15:
         22:20:7d:bb:25:a1:56:9d:98:00:29:67:7a:2f:7a:94:5e:23:
         da:b0:e8:12:5c:52:d8:bc:54:6f:8d:df:71:97:b4:04:dc:87:
         da:68:c9:96:c7:52:13:17:69:f4:65:1c:8c:66:20:3d:e4:00:
         dd:e7:ec:01:2e:86:b0:88:ec:94:15:29:bf:94:5a:1a:57:81:
         e7:e1:1f:df:13:9f:88:a0:9a:f3:a5:81:e2:6c:be:93:33:32:
         8d:36:90:ef:2d:0a:b0:74:f1:0b:16:1d:db:fd:ad:48:30:31:
         46:0a:2b:ad:c3:b0:7a:10:4d:f1:1a:74:cc:c0:d9:d8:ed:92:
         a8:e1:a8:98:18:3c:ae:db:6d:0c:89:c4:39:d6:6c:59:b6:b2:
         76:ed:10:10:d6:77:c8:90:64:92:99:29:cb:fc:4e:e0:11:60:
         19:73:95:8d:6e:64:1d:8e:dc:67:5d:2c:3b:1e:e0:1c:30:6f:
         5a:6c:8c:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRBMTYxMTAvBgNVBAUTKEIxMzgzMkZDQTQ5MzQ0OTYyMzZBQzM4OTQ5OThDM0RE
NTEzRDdDMDkwHhcNMjYwOTIzMDEzNzEzWhcNMjYwOTMwMDEzNzEzWjAYMRYwFAYD
VQQDEw02YWIzMmQ0OS1mOWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAotLQMl9CwzccNbJt3t0oRb8uBYA6slnwQK+5MimdtCudHLk2LZoGqNsG/2g3
7v706vQRB9pJzmZKVPOXM2BlVnvF+T3c5VMtwrDWUHwYSo1aVWj6Bts0+g1l8Eo2
te9yCUDmZxzI7S+9MAckfpV+zzUJm4VB3lXt9nP9ETz3JwSjG0DG4yhTIfsqojyU
TiA7BYQptkoYdlM7d1o9BKWRj+q8/TizMrDVZMgBPDK5b82JzFXDxQDRzfmWCmOw
oJS+lej57aGEgYrx1O1weKWZ6CcDuDeoP+6UOIegsBrGbnt4R2f1vGIpv46u3K7l
YfwRJeY0H5ypUEDErGSzh5Jl0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJD/tYjq
wQnhBvBWjiF3H8L/m2jyMB8GA1UdIwQYMBaAFLE4Mvykk0SWI2rDiUmYw91RPXwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEExNi9CQUU3RUZGRUND
NTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJKWWphc09KU1pqRDNWRTlm
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NUZ3lfS1NUUkpZamFzT0pTWmpEM1ZFOWZBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEExNi9CQUU3RUZGRUNDNTMxMUVEODFGNEM1MTVDNEY5QUUwMi9zVGd5X0tTVFJK
WWphc09KU1pqRDNWRTlmQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdQK6zNtADbhzXifTIBO3at8Kn0Ujx6en7TZ+ROB4noU9llB3YalkCT5sut2C
tpVqiMtvAXaBWuFfIKMbFrdRLHd6UIIUXLoVIiB9uyWhVp2YAClnei96lF4j2rDo
ElxS2LxUb43fcZe0BNyH2mjJlsdSExdp9GUcjGYgPeQA3efsAS6GsIjslBUpv5Ra
GleB5+Ef3xOfiKCa86WB4my+kzMyjTaQ7y0KsHTxCxYd2/2tSDAxRgorrcOwehBN
8Rp0zMDZ2O2SqOGomBg8rtttDInEOdZsWbaydu0QENZ3yJBkkpkpy/xO4BFgGXOV
jW5kHY7cZ10sOx7gHDBvWmyMSw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:14:59 2026 by rpki-client