Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft
File:                     Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json)
Hash identifier:          auQlGJ33Kpm6L0kQSiFAxApbX+sBE5tP4X5vOdFkRhI=
Subject key identifier:   B3:C3:A5:8E:38:EE:74:48:37:74:DD:20:98:28:33:68:F1:D6:98:80
Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59
Certificate issuer:       /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659
Certificate serial:       07B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft
Manifest number:          07A7
Signing time:             Thu 24 Sep 2026 21:24:02 +0000
Manifest this update:     Thu 24 Sep 2026 21:24:01 +0000
Manifest next update:     Thu 01 Oct 2026 21:24:01 +0000
Files and hashes:         1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: TyN9vIvHKvQO1tB2vi4K0FGSZHOjLVOTRUUMJdL5Avc=)
                          2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: cplABQjxlJ11YdC+WxCvMkXI5GKd9TK39yV5NN7/ezw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl
                          rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969 (0x7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659
        Validity
            Not Before: Sep 24 21:24:01 2026 GMT
            Not After : Oct  1 21:24:01 2026 GMT
        Subject: CN=6ab594f1-42b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:2c:2f:3e:88:45:05:d5:de:bc:0a:69:18:
                    fc:41:05:14:c7:f4:68:18:6b:24:6f:57:c2:e3:9c:
                    49:19:92:a7:48:98:24:65:ac:ed:45:7e:b6:26:8c:
                    07:f3:48:9f:e5:fc:4f:9a:44:02:36:99:ec:a5:da:
                    13:05:6d:09:ef:36:b3:83:51:d4:d4:df:58:5a:51:
                    74:58:53:37:66:75:68:f4:41:cd:50:03:ff:65:f7:
                    c5:bb:e0:60:4c:c5:65:c4:79:d9:2c:e5:07:74:0d:
                    ee:a5:b1:b8:1c:6f:4e:91:69:73:dd:a6:dd:c6:ef:
                    20:b4:ba:80:d5:1c:ac:7f:8c:0b:3b:e0:16:4c:e1:
                    7e:0b:0c:c9:af:c3:d0:e8:ca:08:0a:30:7f:7b:bb:
                    ae:e7:79:95:6c:a1:58:61:99:12:5f:40:f6:65:38:
                    0a:fa:41:09:8e:a4:41:6f:9b:a4:8e:9a:d2:67:66:
                    82:3f:1a:05:d9:12:36:c8:88:9e:51:87:48:c2:21:
                    55:92:17:dd:43:8d:3e:5e:54:48:5e:b3:b6:c2:a7:
                    18:16:80:8e:a1:e0:07:39:0c:8e:b7:b5:90:62:07:
                    af:8e:24:ba:7a:57:79:08:06:4d:86:66:02:0d:e8:
                    e0:22:a9:66:b2:17:d5:1d:db:be:93:43:14:56:d3:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C3:A5:8E:38:EE:74:48:37:74:DD:20:98:28:33:68:F1:D6:98:80
            X509v3 Authority Key Identifier:
                keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d9:db:40:bc:40:1d:72:0c:ee:0e:61:ea:a1:69:2a:af:9a:
         a6:6c:f8:e4:23:b1:5e:25:18:ac:aa:fe:c7:71:2a:69:bb:59:
         ef:46:ef:e6:fb:ca:cc:69:dc:27:c9:3b:97:8d:92:d5:05:de:
         df:d0:96:e1:08:5c:6d:ae:42:cd:3d:51:f8:73:e7:21:d7:b2:
         0b:87:63:16:cc:d1:1b:1a:8c:45:ca:17:ae:b4:d1:17:37:2f:
         0d:7b:ff:14:ea:60:86:f6:fa:98:20:cc:a6:57:13:d1:35:be:
         46:2a:05:87:54:3a:cb:58:5c:3f:5b:f7:89:14:4c:f8:f2:da:
         b4:8b:7c:dd:47:ef:81:85:eb:6e:7d:4d:ff:42:af:02:79:0a:
         57:eb:17:71:8f:bd:b5:fc:4d:13:9e:4a:a8:aa:28:31:b7:57:
         86:63:6d:d6:32:37:50:30:71:3f:0a:0e:d0:d8:66:32:8c:cf:
         57:64:d3:e6:bc:34:2b:fd:6a:37:4f:a6:c4:0d:fb:47:1f:0b:
         15:bf:d5:ae:75:9b:15:95:a3:9b:96:48:72:48:64:6b:90:02:
         fb:56:ca:67:a2:a9:ef:a9:a0:5f:8f:f6:d6:82:28:76:e5:1a:
         12:12:ef:03:0d:a5:30:3b:db:3a:55:6a:0c:cf:78:dd:9e:99:
         8f:55:43:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy
ODY2QkU2NTkwHhcNMjYwOTI0MjEyNDAxWhcNMjYxMDAxMjEyNDAxWjAYMRYwFAYD
VQQDEw02YWI1OTRmMS00MmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmtwsLz6IRQXV3rwKaRj8QQUUx/RoGGskb1fC45xJGZKnSJgkZaztRX62JowH
80if5fxPmkQCNpnspdoTBW0J7zazg1HU1N9YWlF0WFM3ZnVo9EHNUAP/ZffFu+Bg
TMVlxHnZLOUHdA3upbG4HG9OkWlz3abdxu8gtLqA1Rysf4wLO+AWTOF+CwzJr8PQ
6MoICjB/e7uu53mVbKFYYZkSX0D2ZTgK+kEJjqRBb5ukjprSZ2aCPxoF2RI2yIie
UYdIwiFVkhfdQ40+XlRIXrO2wqcYFoCOoeAHOQyOt7WQYgevjiS6eld5CAZNhmYC
DejgIqlmshfVHdu+k0MUVtO1QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLPDpY44
7nRIN3TdIJgoM2jx1piAMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1
MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ
Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYtnbQLxAHXIM7g5h6qFpKq+apmz45COxXiUYrKr+x3EqabtZ70bv5vvKzGnc
J8k7l42S1QXe39CW4Qhcba5CzT1R+HPnIdeyC4djFszRGxqMRcoXrrTRFzcvDXv/
FOpghvb6mCDMplcT0TW+RioFh1Q6y1hcP1v3iRRM+PLatIt83UfvgYXrbn1N/0Kv
AnkKV+sXcY+9tfxNE55KqKooMbdXhmNt1jI3UDBxPwoO0NhmMozPV2TT5rw0K/1q
N0+mxA37Rx8LFb/VrnWbFZWjm5ZIckhka5AC+1bKZ6Kp76mgX4/21oIoduUaEhLv
Aw2lMDvbOlVqDM943Z6Zj1VD+g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:09:56 2026 by rpki-client