Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File:                     hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier:          gwFGsvLgfDrGgqOW1ggM0VxKc3suPpvyArH75/dAaw8=
Subject key identifier:   EC:E2:59:D2:33:00:BB:E5:E6:B8:AC:56:3B:39:D3:31:A2:55:0C:6D
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer:       /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number:          8C
Signing time:             Wed 23 Sep 2026 07:19:29 +0000
Manifest this update:     Wed 23 Sep 2026 07:19:29 +0000
Manifest next update:     Wed 30 Sep 2026 07:19:29 +0000
Files and hashes:         1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: mKy0mh9ZCuis91XFYjrrgoih5MZGSzzb6rFVsptpMnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
        Validity
            Not Before: Sep 23 07:19:29 2026 GMT
            Not After : Sep 30 07:19:29 2026 GMT
        Subject: CN=6ab37d81-c1f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:a4:e4:4d:79:f1:78:6e:8f:0a:9b:59:d3:
                    7f:ff:9b:f9:c7:96:56:e7:58:7d:bc:31:d9:74:3c:
                    f9:53:31:31:8b:36:9c:44:1c:d0:de:fd:c9:61:2c:
                    f4:bf:82:2d:b2:d5:98:05:08:ed:a2:3e:0a:78:22:
                    51:15:d6:40:c8:77:3b:5c:83:a4:9b:78:e5:b4:b5:
                    1a:3a:d2:4d:c7:88:63:e3:d1:28:93:bf:b9:e3:8c:
                    24:53:78:46:cc:27:71:38:fc:41:c7:03:f7:f0:d2:
                    1b:1f:c0:10:5c:8d:95:05:1b:eb:7d:15:2e:3b:e2:
                    3a:e6:17:d5:c4:11:c7:13:9e:fd:6e:0d:79:ea:ad:
                    ff:3f:79:b2:12:bf:76:9f:b4:43:45:84:0b:67:7f:
                    e1:a3:1b:c3:45:a6:ed:f7:21:8e:e0:06:d3:cd:20:
                    ec:ec:ec:21:79:df:37:59:7c:f1:b5:b2:ad:07:12:
                    d6:27:f7:43:c8:ab:11:53:f7:84:b1:f6:1f:be:ad:
                    29:59:03:d4:94:3a:a2:e6:15:dd:2c:87:ce:11:0e:
                    e9:35:dc:c9:11:4c:a7:cf:b0:b5:bd:b6:09:db:72:
                    2e:60:58:81:c8:98:ed:ca:f8:62:e5:c1:42:27:52:
                    76:17:a0:9e:dc:b8:1d:ee:c5:dc:59:5f:73:bc:7c:
                    79:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:59:D2:33:00:BB:E5:E6:B8:AC:56:3B:39:D3:31:A2:55:0C:6D
            X509v3 Authority Key Identifier:
                keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:8e:44:88:56:2e:97:57:0b:b6:8d:f9:e2:26:b9:45:93:25:
         b5:8c:ae:00:55:9a:b8:5c:35:6b:60:71:cb:13:aa:ca:64:df:
         8a:dd:ed:4b:62:91:30:c5:b7:1f:77:37:5c:7f:de:54:96:5d:
         dd:66:27:d4:d3:21:2d:49:6a:70:60:07:39:33:56:35:a9:c7:
         5d:f9:41:6b:79:16:66:4a:99:c3:25:01:59:2d:10:60:f8:e9:
         47:71:34:d4:93:d3:65:af:07:95:e8:cf:ca:91:77:36:85:95:
         92:09:ff:ef:16:df:b3:db:2e:35:36:59:4b:fb:c6:a7:b4:35:
         bf:2a:8a:38:b2:2d:32:e5:ca:a7:f6:fe:c4:25:30:cb:9a:49:
         0b:8d:46:46:23:14:7e:0a:ae:d7:0c:55:17:f3:20:98:45:8d:
         74:99:0e:41:69:58:1a:c2:3a:45:81:d8:fa:dc:ef:f1:36:76:
         ea:1f:d8:89:ac:44:cf:83:07:f6:fd:05:69:45:d0:cb:ea:16:
         fb:50:3c:c2:2d:53:f7:03:92:b8:e3:2e:e2:1f:b9:6a:30:84:
         5f:cd:4f:08:9a:92:37:31:6e:37:8e:6e:e2:38:6b:a4:db:c1:
         5d:d6:13:a9:5b:34:2f:c0:ba:ea:43:da:e8:78:ae:a7:e8:52:
         f8:6b:9d:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUzMzQxMTAvBgNVBAUTKDg1OEJCQzkwMkMwNzdGNkUwMzEzQUVEQzQ5REIzNkU2
RkVGMjM0QjIwHhcNMjYwOTIzMDcxOTI5WhcNMjYwOTMwMDcxOTI5WjAYMRYwFAYD
VQQDEw02YWIzN2Q4MS1jMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk+mk5E158XhujwqbWdN//5v5x5ZW51h9vDHZdDz5UzExizacRBzQ3v3JYSz0
v4ItstWYBQjtoj4KeCJRFdZAyHc7XIOkm3jltLUaOtJNx4hj49Eok7+544wkU3hG
zCdxOPxBxwP38NIbH8AQXI2VBRvrfRUuO+I65hfVxBHHE579bg156q3/P3myEr92
n7RDRYQLZ3/hoxvDRabt9yGO4AbTzSDs7Owhed83WXzxtbKtBxLWJ/dDyKsRU/eE
sfYfvq0pWQPUlDqi5hXdLIfOEQ7pNdzJEUynz7C1vbYJ23IuYFiByJjtyvhi5cFC
J1J2F6Ce3Lgd7sXcWV9zvHx5VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOziWdIz
ALvl5risVjs50zGiVQxtMB8GA1UdIwQYMBaAFIWLvJAsB39uAxOu3EnbNub+8jSy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMzNC9DNTEyNkNDRUU1
NzkxMUYwODM2RUVBQTE0MTZGNTZCQy9oWXU4a0N3SGYyNERFNjdjU2RzMjV2N3lO
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hZdThrQ3dIZjI0REU2N2NTZHMyNXY3eU5MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTMzNC9DNTEyNkNDRUU1NzkxMUYwODM2RUVBQTE0MTZGNTZCQy9oWXU4a0N3SGYy
NERFNjdjU2RzMjV2N3lOTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArY5EiFYul1cLto354ia5RZMltYyuAFWauFw1a2BxyxOqymTfit3tS2KRMMW3
H3c3XH/eVJZd3WYn1NMhLUlqcGAHOTNWNanHXflBa3kWZkqZwyUBWS0QYPjpR3E0
1JPTZa8HlejPypF3NoWVkgn/7xbfs9suNTZZS/vGp7Q1vyqKOLItMuXKp/b+xCUw
y5pJC41GRiMUfgqu1wxVF/MgmEWNdJkOQWlYGsI6RYHY+tzv8TZ26h/YiaxEz4MH
9v0FaUXQy+oW+1A8wi1T9wOSuOMu4h+5ajCEX81PCJqSNzFuN45u4jhrpNvBXdYT
qVs0L8C66kPa6Hiup+hS+GudBQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:01:29 2026 by rpki-client