Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
File:                     TzMtwIyXR6ybyBxUfRujRWQ_drc.mft (raw, json)
Hash identifier:          9CwB25SGc2bPGVrjl5TeRJqwhigzjQrrcONb+8T2++Q=
Subject key identifier:   DD:5B:EF:81:B0:0E:98:8C:0E:FC:4E:0B:AD:E0:8E:F4:3E:78:EB:8A
Authority key identifier: 4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7
Certificate issuer:       /CN=A91E4042/serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
Certificate serial:       066D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
Manifest number:          0664
Signing time:             Fri 02 Oct 2026 22:55:12 +0000
Manifest this update:     Fri 02 Oct 2026 22:55:12 +0000
Manifest next update:     Fri 09 Oct 2026 22:55:12 +0000
Files and hashes:         1: TzMtwIyXR6ybyBxUfRujRWQ_drc.crl (hash: W1BYGTiPTUOuX3BWwDWAumN9hOHpU5BE263z86h0wu8=)
                          2: 26F1B59437A511ECB73C9852C4F9AE02.roa (hash: bWBcHaEKUgQ7gyCf6hn1djUztS6Lgf7ZTFoCzaWijUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl
                          rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1645 (0x66d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4042, serialNumber=4F332DC08C9747AC9BC81C547D1BA345643F76B7
        Validity
            Not Before: Oct  2 22:55:12 2026 GMT
            Not After : Oct  9 22:55:12 2026 GMT
        Subject: CN=6ac03650-8032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:4d:80:a0:b4:c6:92:6a:55:f0:a0:ff:7c:
                    9a:b8:85:27:bb:3c:65:6b:06:4d:87:d1:03:e0:2d:
                    b4:8e:9a:b6:8b:26:27:e9:dd:1f:90:33:8f:28:ed:
                    7c:83:da:f3:3e:e4:9a:3d:09:e5:df:a5:35:e7:cd:
                    c8:63:09:4b:fb:ef:a3:0b:80:5c:fc:00:45:65:da:
                    56:39:8b:56:40:d5:a2:5e:93:40:7f:85:0f:ad:ad:
                    15:f4:e8:9e:a5:a1:ce:a5:f1:34:25:8c:55:e2:8c:
                    d0:f0:6b:13:94:25:fd:f6:6d:32:4a:bb:88:2f:63:
                    66:2f:25:81:f9:07:ab:26:59:13:0a:d7:44:da:67:
                    ab:a1:0e:b4:bb:62:b6:c6:86:e0:d1:4c:0b:c5:68:
                    89:7f:ec:f2:9a:c8:c2:31:37:a4:2e:a8:b1:11:58:
                    09:58:df:4b:19:b9:0d:ee:2f:d1:ac:14:e8:10:f8:
                    53:68:8e:2c:c2:73:98:93:42:3a:29:2c:dd:ff:7c:
                    4e:c5:ac:b3:7f:52:5b:dc:aa:e4:ec:d5:ea:0d:48:
                    36:9a:97:ea:f0:f7:0c:43:2f:f7:96:1c:7d:5d:8c:
                    83:8a:4e:aa:67:d3:92:ff:d0:c8:a3:47:c2:f2:81:
                    bf:cc:93:d0:be:09:ac:87:bf:e0:f3:34:c0:02:a1:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5B:EF:81:B0:0E:98:8C:0E:FC:4E:0B:AD:E0:8E:F4:3E:78:EB:8A
            X509v3 Authority Key Identifier:
                keyid:4F:33:2D:C0:8C:97:47:AC:9B:C8:1C:54:7D:1B:A3:45:64:3F:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzMtwIyXR6ybyBxUfRujRWQ_drc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4042/EFC98DE6E53611EB9926556BC4F9AE02/TzMtwIyXR6ybyBxUfRujRWQ_drc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:14:e0:60:9f:cc:b7:59:d9:03:c8:4e:71:97:42:b1:f3:6d:
         12:ad:2c:d8:41:89:35:2a:88:3b:9d:1d:91:3b:ea:9c:14:3f:
         48:df:b1:54:06:00:8f:60:6a:07:cb:03:47:1c:47:f5:62:14:
         97:8b:a9:22:b9:75:35:c4:0a:ae:b7:7c:59:8a:bb:a3:9d:3f:
         f4:a6:2b:e8:14:2a:c0:58:c0:a1:63:87:e5:82:98:fa:33:cc:
         7a:90:e1:1a:3f:d1:e6:31:d2:6d:f6:34:6f:55:96:91:5d:ce:
         7f:98:93:05:ca:8d:c2:28:b5:6b:c5:b2:21:ed:ba:bb:be:e8:
         b8:b7:93:f5:ac:f4:65:41:16:5e:fe:7c:53:71:52:27:07:87:
         f3:ed:1b:eb:bc:e9:9a:3e:d9:b1:1a:41:ec:ea:dc:7b:ac:df:
         87:04:4e:29:8d:31:d9:5b:c9:83:98:26:00:81:c0:fe:6d:da:
         87:3f:ac:ac:51:11:ba:27:a1:ed:f7:4c:10:e4:ad:3d:a5:6a:
         eb:33:12:8a:c2:1e:ac:df:d2:10:6a:90:e9:d4:e7:68:2a:13:
         30:7b:05:a4:45:7d:c9:80:43:80:52:e0:5e:73:e2:67:6e:f1:
         71:97:bf:aa:20:d9:75:35:2b:5e:8d:c3:af:af:d8:94:7f:82:
         8e:2a:7d:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQwNDIxMTAvBgNVBAUTKDRGMzMyREMwOEM5NzQ3QUM5QkM4MUM1NDdEMUJBMzQ1
NjQzRjc2QjcwHhcNMjYxMDAyMjI1NTEyWhcNMjYxMDA5MjI1NTEyWjAYMRYwFAYD
VQQDEw02YWMwMzY1MC04MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8pNgKC0xpJqVfCg/3yauIUnuzxlawZNh9ED4C20jpq2iyYn6d0fkDOPKO18
g9rzPuSaPQnl36U1583IYwlL+++jC4Bc/ABFZdpWOYtWQNWiXpNAf4UPra0V9Oie
paHOpfE0JYxV4ozQ8GsTlCX99m0ySruIL2NmLyWB+QerJlkTCtdE2meroQ60u2K2
xobg0UwLxWiJf+zymsjCMTekLqixEVgJWN9LGbkN7i/RrBToEPhTaI4swnOYk0I6
KSzd/3xOxayzf1Jb3Krk7NXqDUg2mpfq8PcMQy/3lhx9XYyDik6qZ9OS/9DIo0fC
8oG/zJPQvgmsh7/g8zTAAqFuQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN1b74Gw
DpiMDvxOC63gjvQ+eOuKMB8GA1UdIwQYMBaAFE8zLcCMl0esm8gcVH0bo0VkP3a3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDA0Mi9FRkM5OERFNkU1
MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2eWJ5QnhVZlJ1alJXUV9k
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R6TXR3SXlYUjZ5YnlCeFVmUnVqUldRX2RyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDA0Mi9FRkM5OERFNkU1MzYxMUVCOTkyNjU1NkJDNEY5QUUwMi9Uek10d0l5WFI2
eWJ5QnhVZlJ1alJXUV9kcmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZhTgYJ/Mt1nZA8hOcZdCsfNtEq0s2EGJNSqIO50dkTvqnBQ/SN+xVAYAj2Bq
B8sDRxxH9WIUl4upIrl1NcQKrrd8WYq7o50/9KYr6BQqwFjAoWOH5YKY+jPMepDh
Gj/R5jHSbfY0b1WWkV3Of5iTBcqNwii1a8WyIe26u77ouLeT9az0ZUEWXv58U3FS
JweH8+0b67zpmj7ZsRpB7Orce6zfhwROKY0x2VvJg5gmAIHA/m3ahz+srFERuieh
7fdMEOStPaVq6zMSisIerN/SEGqQ6dTnaCoTMHsFpEV9yYBDgFLgXnPiZ27xcZe/
qiDZdTUrXo3Dr6/YlH+Cjip9Vg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:58:21 2026 by rpki-client