Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
File:                     cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json)
Hash identifier:          vYfmSfcxs5z+ydluxtsrf5OKxL9Cw+sxoZ3n77E1RVI=
Subject key identifier:   BC:7B:A4:68:03:A9:08:2F:E5:78:77:49:B3:3E:B0:02:4D:93:A7:C5
Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D
Certificate issuer:       /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
Manifest number:          01FB
Signing time:             Sat 03 Oct 2026 03:59:42 +0000
Manifest this update:     Sat 03 Oct 2026 03:59:41 +0000
Manifest next update:     Sat 10 Oct 2026 03:59:41 +0000
Files and hashes:         1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: uGPJ5lNXsxnQPUKmi/4k34BAq+qLWx+UYrDcmPTIMs8=)
                          2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: 4MonzweCLEnl+TnK4Sp/6IiK94a2qiwQ1O3fFdo89mM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D
        Validity
            Not Before: Oct  3 03:59:41 2026 GMT
            Not After : Oct 10 03:59:41 2026 GMT
        Subject: CN=6ac07dad-ed60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:34:15:4a:43:6e:72:fa:50:7f:e1:c8:f9:
                    cf:a0:00:79:7b:74:e0:71:68:fb:78:b5:f0:03:17:
                    f4:7f:27:1d:c3:f9:5e:95:4e:a9:7c:1c:ce:90:9f:
                    90:ed:d1:c3:62:73:cd:ce:b4:31:4a:3f:d7:03:1e:
                    c2:42:20:7a:94:8c:25:86:68:ea:08:cc:5d:7d:e1:
                    b7:6a:9e:7d:03:c4:62:0c:7f:21:f9:d0:1b:68:cf:
                    b6:4a:0f:34:15:81:6a:0d:2e:ee:13:a2:07:1d:52:
                    d2:f9:13:d6:5b:13:13:c0:ba:c0:70:88:35:89:aa:
                    77:e6:f5:7e:d6:42:ec:5e:f9:3a:76:ee:9a:f9:6c:
                    ba:fc:48:62:6e:0b:3a:a6:17:52:98:e3:8a:84:36:
                    40:46:91:9b:f8:eb:67:4a:c4:68:ef:08:56:35:95:
                    ef:32:ee:1e:6b:c4:a0:0e:9a:d5:92:e0:9d:41:16:
                    bb:36:8c:53:00:02:e8:05:26:50:23:2c:69:8e:ec:
                    ee:0e:0a:d3:fb:dd:f9:ab:e1:e5:51:ab:f6:f5:4a:
                    46:16:01:56:aa:04:0e:85:e5:d4:8a:3c:8e:89:9e:
                    32:13:97:17:0d:e7:5a:35:7c:42:62:b2:74:67:5c:
                    29:68:6e:d1:47:86:80:09:52:9a:80:63:c0:47:c0:
                    2d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7B:A4:68:03:A9:08:2F:E5:78:77:49:B3:3E:B0:02:4D:93:A7:C5
            X509v3 Authority Key Identifier:
                keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:8c:18:79:28:3a:54:ce:81:b3:7e:b1:75:05:24:f9:53:
         eb:a4:6a:a8:6d:1e:d0:04:55:ac:33:86:7e:18:8b:fc:ec:59:
         82:74:f4:eb:34:39:da:2c:d0:ad:6a:a6:94:e9:73:9b:00:9a:
         d5:bf:27:6e:7a:ae:99:28:6b:97:81:7c:b5:f6:87:a2:3b:b8:
         c1:36:99:4b:fc:73:02:29:ab:0a:e1:e0:67:d0:4b:49:f2:41:
         88:99:e2:d9:6f:0c:1d:f4:8d:90:a8:f4:de:29:d6:ad:5d:13:
         92:59:5e:b3:71:9a:d8:1b:86:a6:ee:60:2e:c4:9e:c4:04:d5:
         5d:fa:c4:a7:12:46:99:32:f7:92:a2:09:d5:b0:8e:f4:ce:8a:
         7f:54:63:31:8a:74:97:62:16:67:58:65:29:70:4f:78:02:30:
         9d:e2:eb:a8:46:2e:84:72:eb:23:cf:24:e6:86:7e:20:a4:2e:
         85:07:73:bf:ce:ef:b2:83:73:4b:64:25:fa:f7:33:af:2e:3c:
         25:b9:36:44:8c:81:a3:ec:29:ef:57:4f:15:21:6c:7c:47:19:
         b2:18:80:9d:0b:ae:7c:6b:ff:43:44:40:75:75:64:7f:32:f6:
         d5:69:3d:c5:61:01:c7:b7:70:03:65:77:7b:b1:23:04:ac:23:
         5b:9f:be:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0
MjhCQjE5NUQwHhcNMjYxMDAzMDM1OTQxWhcNMjYxMDEwMDM1OTQxWjAYMRYwFAYD
VQQDEw02YWMwN2RhZC1lZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBE0FUpDbnL6UH/hyPnPoAB5e3TgcWj7eLXwAxf0fycdw/lelU6pfBzOkJ+Q
7dHDYnPNzrQxSj/XAx7CQiB6lIwlhmjqCMxdfeG3ap59A8RiDH8h+dAbaM+2Sg80
FYFqDS7uE6IHHVLS+RPWWxMTwLrAcIg1iap35vV+1kLsXvk6du6a+Wy6/Ehibgs6
phdSmOOKhDZARpGb+OtnSsRo7whWNZXvMu4ea8SgDprVkuCdQRa7NoxTAALoBSZQ
IyxpjuzuDgrT+935q+HlUav29UpGFgFWqgQOheXUijyOiZ4yE5cXDedaNXxCYrJ0
Z1wpaG7RR4aACVKagGPAR8AtWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLx7pGgD
qQgv5Xh3SbM+sAJNk6fFMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3
MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N
MF9qbkpLdGVlcjlDaTdHVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALHeMGHkoOlTOgbN+sXUFJPlT66RqqG0e0ARVrDOGfhiL/OxZgnT06zQ52izQ
rWqmlOlzmwCa1b8nbnqumShrl4F8tfaHoju4wTaZS/xzAimrCuHgZ9BLSfJBiJni
2W8MHfSNkKj03inWrV0Tklles3Ga2BuGpu5gLsSexATVXfrEpxJGmTL3kqIJ1bCO
9M6Kf1RjMYp0l2IWZ1hlKXBPeAIwneLrqEYuhHLrI88k5oZ+IKQuhQdzv87vsoNz
S2Ql+vczry48Jbk2RIyBo+wp71dPFSFsfEcZshiAnQuufGv/Q0RAdXVkfzL21Wk9
xWEBx7dwA2V3e7EjBKwjW5++7A==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:02:32 2026 by rpki-client