Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
File:                     MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft (raw, json)
Hash identifier:          gYNMZzCmQp4lA1peTn1NLVeVOtp7PpCsAKChE6PJC50=
Subject key identifier:   EB:CC:7C:59:DD:6C:0B:56:DA:45:5A:AF:82:CF:03:7B:5A:BF:E6:47
Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03
Certificate issuer:       /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
Certificate serial:       02A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
Manifest number:          0296
Signing time:             Fri 25 Sep 2026 01:47:01 +0000
Manifest this update:     Fri 25 Sep 2026 01:47:00 +0000
Manifest next update:     Fri 02 Oct 2026 01:47:00 +0000
Files and hashes:         1: MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl (hash: nO4eTmQJYYKrbTBUsUEyenhValPuBTwKDRyCunsa7LE=)
                          2: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (hash: V4nKUz61HSZwR/ee6VqkEGirGyb2lynLTCpeF4/ug/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl
                          rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303
        Validity
            Not Before: Sep 25 01:47:00 2026 GMT
            Not After : Oct  2 01:47:00 2026 GMT
        Subject: CN=6ab5d294-e6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1b:86:fd:6d:a6:d5:92:85:9a:19:00:3a:9a:
                    b6:c9:3b:7a:c2:40:8e:56:31:2c:ba:5e:41:9c:f9:
                    0f:bf:5f:6f:5a:8c:06:dd:98:df:95:82:e1:f7:be:
                    aa:c4:9b:0b:3f:71:b6:90:88:88:fc:81:3d:ff:a2:
                    be:1f:87:f2:50:c1:57:09:31:df:fe:c7:19:81:01:
                    09:a0:3f:b2:92:a8:a5:bc:b2:bf:29:fd:3e:f2:f6:
                    0a:e6:48:86:a5:33:74:c8:fd:9f:63:93:d2:e2:a7:
                    82:1b:fc:e7:84:a8:1a:68:bf:18:e6:eb:8f:23:f7:
                    9f:6e:f9:53:6b:a4:cf:ba:1c:11:1a:d9:67:0b:72:
                    37:92:57:fd:17:0c:89:51:d5:fa:3e:a9:de:c2:25:
                    db:3f:d8:bb:ce:d9:e7:27:68:cd:f2:6c:59:96:ce:
                    c8:63:17:2a:a2:74:e0:ed:e9:f5:8a:c1:0e:fa:50:
                    f5:91:7d:31:ad:3f:bb:b6:8a:f8:9c:33:14:96:06:
                    4c:61:bf:aa:cb:cc:34:67:14:3f:ca:9b:5b:f8:9f:
                    89:ea:6e:91:e8:0e:b4:78:84:d5:e2:0c:e6:c5:25:
                    60:84:e1:08:83:be:d6:f2:d5:86:a2:21:f5:b5:60:
                    7b:d5:b6:37:24:3d:95:6a:90:6c:4a:00:30:64:61:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:7C:59:DD:6C:0B:56:DA:45:5A:AF:82:CF:03:7B:5A:BF:E6:47
            X509v3 Authority Key Identifier:
                keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b5:40:92:68:d1:f7:06:af:5d:b0:86:5c:a6:99:3f:62:d8:
         fa:08:e6:64:eb:d1:4b:a7:ef:b4:32:cf:33:21:e2:e3:55:75:
         c6:4e:68:33:ed:c3:d2:52:f6:33:f8:fa:ee:43:84:2a:48:2f:
         05:9e:ed:53:66:5d:bc:e5:9b:fb:da:62:bf:05:b9:78:09:d2:
         a3:84:96:2d:c5:42:88:ce:c2:0a:76:da:34:0d:24:75:75:46:
         d6:d1:1f:da:bc:e0:1b:34:4b:49:98:fd:b2:5b:ed:a0:71:67:
         6b:c3:bc:9a:90:fc:d8:4a:f1:4a:d8:e5:5f:4a:55:6f:bc:81:
         4f:ff:85:c6:36:9a:02:f2:82:65:aa:ba:85:75:dd:a1:e7:9e:
         40:5f:00:c2:51:97:91:08:8c:2b:38:8d:05:05:b9:f8:b0:6d:
         02:ee:86:34:d5:98:0e:08:83:2d:84:2d:ee:42:0f:10:2e:42:
         17:d9:89:cf:00:07:0c:20:55:66:f5:eb:a6:d5:18:db:ea:f1:
         6e:25:9c:bf:52:40:66:11:af:b8:86:03:16:be:95:7d:23:9e:
         41:aa:9e:2c:6d:ea:63:05:8f:39:92:f5:d6:e7:bb:7d:33:99:
         2b:cb:15:bd:d5:fd:3d:9f:05:51:57:0a:d2:f1:5a:bb:b5:3b:
         b9:c6:7c:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw
MURFMDAzMDMwHhcNMjYwOTI1MDE0NzAwWhcNMjYxMDAyMDE0NzAwWjAYMRYwFAYD
VQQDEw02YWI1ZDI5NC1lNmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5huG/W2m1ZKFmhkAOpq2yTt6wkCOVjEsul5BnPkPv19vWowG3ZjflYLh976q
xJsLP3G2kIiI/IE9/6K+H4fyUMFXCTHf/scZgQEJoD+ykqilvLK/Kf0+8vYK5kiG
pTN0yP2fY5PS4qeCG/znhKgaaL8Y5uuPI/efbvlTa6TPuhwRGtlnC3I3klf9FwyJ
UdX6PqnewiXbP9i7ztnnJ2jN8mxZls7IYxcqonTg7en1isEO+lD1kX0xrT+7tor4
nDMUlgZMYb+qy8w0ZxQ/yptb+J+J6m6R6A60eITV4gzmxSVghOEIg77W8tWGoiH1
tWB71bY3JD2VapBsSgAwZGGLkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOvMfFnd
bAtW2kVar4LPA3tav+ZHMB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB
MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODFBNS9DMTU4NDNCNENBMDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEt
NGlpWWtrNHhKa3dCM2dBd00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtbVAkmjR9wavXbCGXKaZP2LY+gjmZOvRS6fvtDLPMyHi41V1xk5oM+3D0lL2
M/j67kOEKkgvBZ7tU2ZdvOWb+9pivwW5eAnSo4SWLcVCiM7CCnbaNA0kdXVG1tEf
2rzgGzRLSZj9slvtoHFna8O8mpD82ErxStjlX0pVb7yBT/+FxjaaAvKCZaq6hXXd
oeeeQF8AwlGXkQiMKziNBQW5+LBtAu6GNNWYDgiDLYQt7kIPEC5CF9mJzwAHDCBV
ZvXrptUY2+rxbiWcv1JAZhGvuIYDFr6VfSOeQaqeLG3qYwWPOZL11ue7fTOZK8sV
vdX9PZ8FUVcK0vFau7U7ucZ8kg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:05:48 2026 by rpki-client