Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
File:                     jIdTtwqo02LsUz6Sfxlv62mbGF0.mft (raw, json)
Hash identifier:          /M5Ob0RKQKWLJvqMuIVUWDjtK1IjMAcuYRr3xFPjllI=
Subject key identifier:   DD:B1:C9:9E:D7:13:CA:CD:64:8E:2A:4D:75:65:F1:34:C0:C6:B3:22
Authority key identifier: 8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D
Certificate issuer:       /CN=A91E7BD5/serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D
Certificate serial:       0393
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
Manifest number:          0389
Signing time:             Fri 25 Sep 2026 00:33:36 +0000
Manifest this update:     Fri 25 Sep 2026 00:33:36 +0000
Manifest next update:     Fri 02 Oct 2026 00:33:36 +0000
Files and hashes:         1: jIdTtwqo02LsUz6Sfxlv62mbGF0.crl (hash: ZhFccUUwNzD4ZV2X3VmLt4rXdsERCnz0u2xEg/TOcKY=)
                          2: 15920FC8380111F08B5A444DC4F9AE02.roa (hash: 5aEKBN8i30USt9km6EoxkvVpsF/KERHDBrC2udIjD38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl
                          rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7BD5, serialNumber=8C8753B70AA8D362EC533E927F196FEB699B185D
        Validity
            Not Before: Sep 25 00:33:36 2026 GMT
            Not After : Oct  2 00:33:36 2026 GMT
        Subject: CN=6ab5c160-e978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:fa:1a:d6:be:eb:01:99:7e:66:9f:c7:89:
                    6a:28:38:c2:6d:d2:6d:1b:2d:8e:89:e3:3c:04:73:
                    02:1e:9b:c1:8b:d3:25:cd:2a:30:00:dc:92:af:be:
                    03:9d:4c:24:58:95:82:6c:9c:96:2e:b4:8e:52:28:
                    39:d4:53:73:ba:23:f7:03:0c:1e:ff:7a:90:ea:54:
                    36:15:a9:9d:6c:60:db:19:8c:8a:da:20:93:30:54:
                    ec:4d:6f:4e:98:1e:93:95:bd:70:29:3f:8d:42:fc:
                    32:43:72:b7:7e:20:5f:f4:54:22:c7:69:a4:ba:47:
                    a5:b5:5a:2b:8a:f6:d2:ea:12:e8:be:e0:8f:f3:7f:
                    eb:83:0a:70:3c:c2:7a:b6:c0:16:3d:83:2e:b3:8c:
                    97:a9:5f:cc:7f:ad:1e:3c:59:68:ea:10:23:a7:44:
                    92:cb:86:62:c8:c0:5c:fd:ab:44:20:81:9e:f0:9a:
                    e8:fb:72:19:7d:18:ec:70:4a:f9:02:af:99:89:b1:
                    21:e2:a2:61:de:07:07:0c:d6:66:c5:dd:2e:27:f5:
                    0e:cb:3d:88:2b:c1:43:89:3e:38:38:44:bb:2b:97:
                    24:8c:1d:03:cf:2b:e8:11:0a:b8:94:a9:ba:cb:6c:
                    8e:79:80:e5:74:dc:fd:ae:b6:5d:e0:dd:09:0c:db:
                    82:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B1:C9:9E:D7:13:CA:CD:64:8E:2A:4D:75:65:F1:34:C0:C6:B3:22
            X509v3 Authority Key Identifier:
                keyid:8C:87:53:B7:0A:A8:D3:62:EC:53:3E:92:7F:19:6F:EB:69:9B:18:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jIdTtwqo02LsUz6Sfxlv62mbGF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BD5/201EB43405A811ED83FD7484C4F9AE02/jIdTtwqo02LsUz6Sfxlv62mbGF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:dd:54:8e:ed:40:e8:a8:c8:d1:8d:9b:5b:f4:18:ae:ca:f3:
         13:9a:d5:c2:c4:58:38:03:93:27:5d:3b:c7:52:fd:0e:26:13:
         3c:8b:d4:a7:75:2e:5e:a7:23:53:83:a9:d9:85:8f:e0:1f:57:
         8b:4a:4a:c4:5b:17:ad:ee:32:c4:70:81:72:4b:e2:1c:68:84:
         3c:84:9a:b8:89:9b:bf:dc:a2:66:69:9d:e1:c0:36:11:3a:43:
         be:96:e5:2c:46:a8:c7:2b:d8:b2:96:c6:56:4c:6f:d5:ec:2e:
         e8:f1:1a:9f:21:1e:34:77:7e:ae:25:6b:7a:47:30:1e:9f:d7:
         5b:d5:28:52:57:ea:22:5a:55:80:23:99:95:01:46:56:fd:ef:
         61:6f:d2:13:66:65:b3:9d:3a:26:4d:ae:6f:fa:ef:44:7c:29:
         a0:cf:bc:47:36:be:54:73:1e:24:28:61:33:b2:29:4e:dc:78:
         5b:c2:08:2e:15:41:43:b6:77:1c:64:b8:6c:8f:e1:7f:0b:41:
         59:20:5f:95:4a:a1:be:38:21:78:c7:e8:4a:41:9f:54:44:50:
         b6:bf:97:eb:15:8e:fc:50:0d:7f:ea:5e:d4:e4:3f:ed:5c:fb:
         ff:38:66:2d:23:31:f2:7f:76:67:d5:0a:97:01:49:91:14:e1:
         45:ca:03:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdCRDUxMTAvBgNVBAUTKDhDODc1M0I3MEFBOEQzNjJFQzUzM0U5MjdGMTk2RkVC
Njk5QjE4NUQwHhcNMjYwOTI1MDAzMzM2WhcNMjYxMDAyMDAzMzM2WjAYMRYwFAYD
VQQDEw02YWI1YzE2MC1lOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAotz6Gta+6wGZfmafx4lqKDjCbdJtGy2OieM8BHMCHpvBi9MlzSowANySr74D
nUwkWJWCbJyWLrSOUig51FNzuiP3Awwe/3qQ6lQ2FamdbGDbGYyK2iCTMFTsTW9O
mB6Tlb1wKT+NQvwyQ3K3fiBf9FQix2mkukeltVorivbS6hLovuCP83/rgwpwPMJ6
tsAWPYMus4yXqV/Mf60ePFlo6hAjp0SSy4ZiyMBc/atEIIGe8Jro+3IZfRjscEr5
Aq+ZibEh4qJh3gcHDNZmxd0uJ/UOyz2IK8FDiT44OES7K5ckjB0DzyvoEQq4lKm6
y2yOeYDldNz9rrZd4N0JDNuCiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2xyZ7X
E8rNZI4qTXVl8TTAxrMiMB8GA1UdIwQYMBaAFIyHU7cKqNNi7FM+kn8Zb+tpmxhd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JENS8yMDFFQjQzNDA1
QTgxMUVEODNGRDc0ODRDNEY5QUUwMi9qSWRUdHdxbzAyTHNVejZTZnhsdjYybWJH
RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pJZFR0d3FvMDJMc1V6NlNmeGx2NjJtYkdGMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0JENS8yMDFFQjQzNDA1QTgxMUVEODNGRDc0ODRDNEY5QUUwMi9qSWRUdHdxbzAy
THNVejZTZnhsdjYybWJHRjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmt1Uju1A6KjI0Y2bW/QYrsrzE5rVwsRYOAOTJ107x1L9DiYTPIvUp3UuXqcj
U4Op2YWP4B9Xi0pKxFsXre4yxHCBckviHGiEPISauImbv9yiZmmd4cA2ETpDvpbl
LEaoxyvYspbGVkxv1ewu6PEanyEeNHd+riVrekcwHp/XW9UoUlfqIlpVgCOZlQFG
Vv3vYW/SE2Zls506Jk2ub/rvRHwpoM+8Rza+VHMeJChhM7IpTtx4W8IILhVBQ7Z3
HGS4bI/hfwtBWSBflUqhvjgheMfoSkGfVERQtr+X6xWO/FANf+pe1OQ/7Vz7/zhm
LSMx8n92Z9UKlwFJkRThRcoDaQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:05:59 2026 by rpki-client