Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
File:                     zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft (raw, json)
Hash identifier:          gV3Rzjh9TY90/hnjcnS1rNkt5SoqknnMt9jxeewBOu8=
Subject key identifier:   37:B2:96:56:69:48:A8:E3:1F:1E:89:0D:53:4C:95:3F:7F:F6:5F:F4
Authority key identifier: CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0
Certificate issuer:       /CN=A91EBFB0/serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0
Certificate serial:       0D98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
Manifest number:          0D89
Signing time:             Wed 30 Sep 2026 18:11:12 +0000
Manifest this update:     Wed 30 Sep 2026 18:11:12 +0000
Manifest next update:     Wed 07 Oct 2026 18:11:12 +0000
Files and hashes:         1: zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl (hash: qcdkp8Urx0mBvUlUbe7zb97+/xR3nsw++1gDHMfPLU0=)
                          2: F690CAECF87D11E9A746D05BC4F9AE02.roa (hash: 9a0DmjZ9WtrPbMbEmNnoQ2iB4wOKOazyVMvcL5JNv20=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl
                          rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 18:11:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3480 (0xd98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBFB0, serialNumber=CC8509D31FB63A8DDD6BF2D3D84C7BC0B2BA3FC0
        Validity
            Not Before: Sep 30 18:11:12 2026 GMT
            Not After : Oct  7 18:11:12 2026 GMT
        Subject: CN=6abd50c0-698e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:9c:d7:d1:42:fb:e8:2c:a6:19:c9:3b:55:
                    cf:b0:91:b8:26:a0:2f:db:55:80:56:d5:52:81:fd:
                    19:fd:9a:0c:08:c5:cb:e9:85:68:da:3b:14:bd:9f:
                    ba:27:d2:ba:f0:8c:55:dd:5e:c3:40:0c:b2:6a:a0:
                    a4:6f:03:0f:a1:ef:ce:6e:27:00:29:21:e7:4b:5d:
                    e5:88:c5:11:a6:07:e2:dc:7a:3d:fb:81:51:84:4b:
                    7b:b9:24:23:61:9d:5c:82:85:76:37:e3:80:a1:5e:
                    bf:83:92:26:e7:cf:c4:17:d3:42:7a:d6:60:e1:93:
                    2b:76:76:3c:db:20:03:54:ce:7c:b9:21:66:f0:bc:
                    b5:21:59:ca:16:67:3f:f1:29:e9:7a:d4:fa:b4:be:
                    2e:61:ad:3c:94:35:11:f0:f0:17:b1:dc:4a:ff:92:
                    04:d5:c3:8a:f0:b3:18:91:24:20:cc:20:81:e6:17:
                    15:af:b2:f9:33:d2:85:3a:79:76:04:09:2c:3c:6f:
                    24:0f:18:e6:73:e9:bf:ee:27:18:c4:a0:85:f5:21:
                    de:ad:2c:1b:b5:c7:02:ba:ff:41:d5:dd:73:37:fb:
                    b9:7c:5a:e7:cc:e5:0d:64:d9:ce:69:3c:ea:50:95:
                    1c:92:94:4e:f0:ad:a2:f4:36:77:ee:58:ea:08:1d:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B2:96:56:69:48:A8:E3:1F:1E:89:0D:53:4C:95:3F:7F:F6:5F:F4
            X509v3 Authority Key Identifier:
                keyid:CC:85:09:D3:1F:B6:3A:8D:DD:6B:F2:D3:D8:4C:7B:C0:B2:BA:3F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFB0/A3AB43B2F87C11E9AA2CF158C4F9AE02/zIUJ0x-2Oo3da_LT2Ex7wLK6P8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:a7:d8:c9:0c:80:e0:d5:cd:8e:39:94:72:20:a4:7b:6a:
         0d:04:88:95:b6:6e:b6:33:da:c1:7b:21:fe:54:5a:e5:97:e7:
         e4:28:e6:33:b1:d0:03:9e:5e:3c:86:06:b5:77:c2:5a:13:8b:
         b5:3d:ed:fc:18:0a:69:70:32:88:4e:c4:f5:4d:b9:9b:a4:53:
         c3:f5:eb:fd:33:78:6b:96:4d:df:7b:5d:95:e4:df:2a:f5:c4:
         6d:c0:2c:ee:d0:38:b9:02:d4:53:22:68:29:45:02:3d:91:2b:
         79:61:bb:ac:6b:48:d9:4b:6e:af:28:02:d0:62:56:9c:2b:46:
         59:20:9e:46:0d:a0:85:1b:30:43:93:7c:60:28:6d:3e:ff:ad:
         7d:51:45:bc:2b:33:7b:60:e6:7c:45:40:4e:56:77:61:67:1f:
         11:18:ac:98:08:94:0a:51:2b:a1:35:ee:c0:06:b9:e5:41:24:
         b2:29:d8:ee:50:48:27:72:35:af:a3:34:26:5f:4d:7d:84:b9:
         59:fd:60:e6:db:7c:19:fc:0e:b5:5d:53:7a:b2:6a:47:e2:23:
         a1:e3:f3:45:c2:14:8d:33:0b:6d:2c:e7:53:c3:03:58:9c:7e:
         59:14:7f:07:ac:ed:b5:26:8d:1f:78:a5:a5:f6:4e:eb:cd:28:
         64:54:1f:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJGQjAxMTAvBgNVBAUTKENDODUwOUQzMUZCNjNBOERERDZCRjJEM0Q4NEM3QkMw
QjJCQTNGQzAwHhcNMjYwOTMwMTgxMTEyWhcNMjYxMDA3MTgxMTEyWjAYMRYwFAYD
VQQDEw02YWJkNTBjMC02OThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmc2c19FC++gsphnJO1XPsJG4JqAv21WAVtVSgf0Z/ZoMCMXL6YVo2jsUvZ+6
J9K68IxV3V7DQAyyaqCkbwMPoe/ObicAKSHnS13liMURpgfi3Ho9+4FRhEt7uSQj
YZ1cgoV2N+OAoV6/g5Im58/EF9NCetZg4ZMrdnY82yADVM58uSFm8Ly1IVnKFmc/
8SnpetT6tL4uYa08lDUR8PAXsdxK/5IE1cOK8LMYkSQgzCCB5hcVr7L5M9KFOnl2
BAksPG8kDxjmc+m/7icYxKCF9SHerSwbtccCuv9B1d1zN/u5fFrnzOUNZNnOaTzq
UJUckpRO8K2i9DZ37ljqCB25ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDeyllZp
SKjjHx6JDVNMlT9/9l/0MB8GA1UdIwQYMBaAFMyFCdMftjqN3Wvy09hMe8Cyuj/A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZCMC9BM0FCNDNCMkY4
N0MxMUU5QUEyQ0YxNThDNEY5QUUwMi96SVVKMHgtMk9vM2RhX0xUMkV4N3dMSzZQ
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pJVUoweC0yT28zZGFfTFQyRXg3d0xLNlA4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkZCMC9BM0FCNDNCMkY4N0MxMUU5QUEyQ0YxNThDNEY5QUUwMi96SVVKMHgtMk9v
M2RhX0xUMkV4N3dMSzZQOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfD6n2MkMgODVzY45lHIgpHtqDQSIlbZutjPawXsh/lRa5Zfn5CjmM7HQA55e
PIYGtXfCWhOLtT3t/BgKaXAyiE7E9U25m6RTw/Xr/TN4a5ZN33tdleTfKvXEbcAs
7tA4uQLUUyJoKUUCPZEreWG7rGtI2UturygC0GJWnCtGWSCeRg2ghRswQ5N8YCht
Pv+tfVFFvCsze2DmfEVATlZ3YWcfERismAiUClEroTXuwAa55UEksinY7lBIJ3I1
r6M0Jl9NfYS5Wf1g5tt8GfwOtV1TerJqR+IjoePzRcIUjTMLbSznU8MDWJx+WRR/
B6zttSaNH3ilpfZO680oZFQfxg==
-----END CERTIFICATE-----
Generated at Fri Oct 2 18:55:41 2026 by rpki-client