Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
File:                     grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json)
Hash identifier:          C2U3jMQgauhtQxcwKbf2aVpceiQ+FD/hZu7BjQ2GvB8=
Subject key identifier:   B8:B7:62:70:D8:24:9C:19:50:C1:64:DF:CD:9D:97:02:88:CB:58:1D
Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16
Certificate issuer:       /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
Manifest number:          01A2
Signing time:             Wed 23 Sep 2026 04:03:34 +0000
Manifest this update:     Wed 23 Sep 2026 04:03:34 +0000
Manifest next update:     Wed 30 Sep 2026 04:03:34 +0000
Files and hashes:         1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: 0/akkBE+xql7GSRKGZpGMPlq5vM8YdVsPuglNq+9mQg=)
                          2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: w49yHIqbKO5UQXgKCrDZvpiyw+EK/7buhVnIPU9D8V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl
                          rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516
        Validity
            Not Before: Sep 23 04:03:34 2026 GMT
            Not After : Sep 30 04:03:34 2026 GMT
        Subject: CN=6ab34f96-7153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:ca:d7:9a:09:de:6a:15:c5:bc:4b:8d:48:
                    da:9a:d9:cd:3e:3d:7b:17:bb:34:3d:bf:88:51:77:
                    6c:90:55:05:05:57:72:8b:da:a8:65:65:e0:fd:83:
                    32:34:81:75:73:93:d6:06:98:eb:42:8e:c8:b9:a7:
                    5c:f4:f5:76:1a:a2:ca:51:fe:2b:95:73:09:b6:49:
                    9a:48:f3:f9:7e:d9:a1:b4:f2:f2:da:5b:b8:4b:c4:
                    36:66:dc:e1:60:f4:fa:57:ca:25:bc:12:c5:16:35:
                    f1:57:62:5b:13:ab:a7:71:44:9a:d6:2d:00:b2:27:
                    f9:55:a3:80:97:ed:e2:13:29:a3:d4:11:c1:3d:37:
                    eb:a3:72:37:95:0c:78:20:11:15:aa:ed:2b:ed:51:
                    93:0f:0f:21:7f:b4:9b:4b:ec:47:c8:a6:f0:48:f0:
                    e1:6f:e2:ed:e3:25:99:da:55:23:9c:9b:49:a2:6a:
                    86:e9:3b:e3:4a:d9:1e:d4:4c:65:22:53:4a:14:0e:
                    ef:3c:37:f7:a5:7f:d7:c9:3e:68:d8:a1:5a:70:b6:
                    e5:9e:e4:12:bc:60:90:f4:89:5d:f1:a0:3d:b4:23:
                    f4:e0:08:8e:1c:44:33:12:4b:a9:ab:45:ad:59:a8:
                    64:6c:dc:32:d1:98:bf:04:37:32:2b:50:33:2a:d9:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B7:62:70:D8:24:9C:19:50:C1:64:DF:CD:9D:97:02:88:CB:58:1D
            X509v3 Authority Key Identifier:
                keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:eb:51:0e:3a:76:4f:ff:a0:89:32:95:93:c7:64:d9:6b:2d:
         ae:80:53:92:88:9e:8d:0f:9d:03:e6:4f:bc:58:1f:ed:ae:d4:
         c1:92:f7:ef:2c:75:91:99:a8:5b:80:cd:47:8c:87:73:f8:de:
         8e:37:e9:42:4d:16:41:34:a9:b9:d7:c5:47:30:95:5a:35:ac:
         1d:71:a2:47:db:cf:b4:79:02:3a:4b:59:e6:ad:1c:d5:48:f9:
         29:e4:6e:1a:2b:c7:86:9e:35:71:ae:89:85:d7:af:44:d0:50:
         a4:a8:cc:f2:80:ae:91:25:5e:d5:f4:4a:de:70:8d:4f:7d:29:
         f0:7b:c7:4b:c9:c0:13:70:b3:6c:0c:84:df:4a:ab:a5:b5:9c:
         66:61:b3:fc:e6:12:31:f3:3c:6b:4e:ca:10:f7:2c:c2:8a:d7:
         9f:dd:94:7c:e9:27:63:c0:14:59:0d:a8:87:52:88:6e:9b:cf:
         a3:cb:eb:c1:e5:12:f4:0c:66:d7:7c:bd:28:8b:8c:3c:d5:c1:
         e4:ea:53:f1:05:43:c7:3d:e5:08:e4:ee:ee:d2:1c:8a:4b:b8:
         26:6b:f1:81:1e:11:2a:5e:5a:ed:c5:83:88:ac:41:d6:e4:df:
         b2:47:1a:03:09:5f:28:3b:9c:5b:91:15:10:22:d5:e8:23:32:
         7d:e3:c3:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1
MDhCODM1MTYwHhcNMjYwOTIzMDQwMzM0WhcNMjYwOTMwMDQwMzM0WjAYMRYwFAYD
VQQDEw02YWIzNGY5Ni03MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1LnK15oJ3moVxbxLjUjamtnNPj17F7s0Pb+IUXdskFUFBVdyi9qoZWXg/YMy
NIF1c5PWBpjrQo7Iuadc9PV2GqLKUf4rlXMJtkmaSPP5ftmhtPLy2lu4S8Q2Ztzh
YPT6V8olvBLFFjXxV2JbE6uncUSa1i0Asif5VaOAl+3iEymj1BHBPTfro3I3lQx4
IBEVqu0r7VGTDw8hf7SbS+xHyKbwSPDhb+Lt4yWZ2lUjnJtJomqG6TvjStke1Exl
IlNKFA7vPDf3pX/XyT5o2KFacLblnuQSvGCQ9Ild8aA9tCP04AiOHEQzEkupq0Wt
WahkbNwy0Zi/BDcyK1AzKtkcZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLi3YnDY
JJwZUMFk382dlwKIy1gdMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND
RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO
UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Mzc5Ri82Rjk5RDRGMDNDRjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExn
WXpYQXRGNW1VWHRRaTROUlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKutRDjp2T/+giTKVk8dk2WstroBTkoiejQ+dA+ZPvFgf7a7UwZL37yx1kZmo
W4DNR4yHc/jejjfpQk0WQTSpudfFRzCVWjWsHXGiR9vPtHkCOktZ5q0c1Uj5KeRu
GivHhp41ca6JhdevRNBQpKjM8oCukSVe1fRK3nCNT30p8HvHS8nAE3CzbAyE30qr
pbWcZmGz/OYSMfM8a07KEPcsworXn92UfOknY8AUWQ2oh1KIbpvPo8vrweUS9Axm
13y9KIuMPNXB5OpT8QVDxz3lCOTu7tIciku4JmvxgR4RKl5a7cWDiKxB1uTfskca
AwlfKDucW5EVECLV6CMyfePDHQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:58:01 2026 by rpki-client