Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File:                     gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier:          3bqEFWXH3pkvuyE4JfL7XVFjOTIj8hG4dpNVydBrRDM=
Subject key identifier:   6E:57:E7:BD:0D:8A:18:37:2A:E1:7C:3A:86:F7:2A:EC:E0:06:07:1A
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer:       /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial:       081E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number:          0816
Signing time:             Tue 22 Sep 2026 20:57:02 +0000
Manifest this update:     Tue 22 Sep 2026 20:57:02 +0000
Manifest next update:     Tue 29 Sep 2026 20:57:02 +0000
Files and hashes:         1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: V6BaHQSLQQOWy1CeV3TlQ7C00o7XfHMcAXIM8SCovrw=)
                          2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: Zf96iP55f5Jtpq3Ou1kpv1F94L3YI94DnzVRT1WWO7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
                          rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
        Validity
            Not Before: Sep 22 20:57:02 2026 GMT
            Not After : Sep 29 20:57:02 2026 GMT
        Subject: CN=6ab2eb9e-fbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:e3:4d:53:2c:85:ae:e0:c3:3f:2f:2d:05:
                    6d:8f:c5:cd:a6:b0:bb:b0:c6:02:b2:fa:ea:eb:fc:
                    12:ea:07:18:4c:28:61:23:86:c6:a2:96:41:e7:16:
                    ea:da:de:fa:59:a4:6e:c6:18:a1:f0:32:88:a4:50:
                    43:14:99:af:f1:d6:cb:96:bc:e7:79:53:0f:56:53:
                    98:92:b0:2c:e0:a8:a1:b4:61:c2:4f:65:e5:10:7a:
                    95:77:76:8b:03:54:ba:a0:3c:ba:20:f1:40:71:39:
                    63:71:a6:80:ee:2d:1f:1a:47:4e:0d:a2:3b:74:f6:
                    16:45:ff:f0:74:16:e4:a3:45:f7:a4:b2:31:5c:81:
                    04:10:6a:e4:6a:a6:8c:02:cc:2e:1f:bf:b8:be:48:
                    5c:87:4d:d1:a9:e0:55:d5:5c:13:44:75:06:24:2c:
                    4f:85:eb:3d:c0:30:86:56:3e:67:86:8b:62:db:99:
                    66:02:17:8b:40:bf:b4:1e:f2:22:c1:70:7e:dc:a2:
                    e0:1c:56:d7:70:a7:0c:29:1b:8e:ee:77:17:3e:eb:
                    58:b2:15:13:3c:3b:46:80:5f:a9:37:f4:7a:77:26:
                    11:05:8a:4e:77:ba:cc:0f:27:1a:8a:28:ca:1e:ab:
                    d2:70:27:15:fd:b0:bf:51:eb:8a:99:93:55:e2:72:
                    45:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:57:E7:BD:0D:8A:18:37:2A:E1:7C:3A:86:F7:2A:EC:E0:06:07:1A
            X509v3 Authority Key Identifier:
                keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:30:b2:3f:75:a9:ec:0a:39:d7:45:1d:96:3d:33:ea:70:c4:
         d9:52:74:26:9f:0c:ea:90:55:7c:37:54:f0:b9:15:b2:f2:ac:
         f3:ee:88:55:0d:44:ef:47:b5:63:1a:80:64:f1:43:97:32:c9:
         4e:df:ec:c7:f6:59:8d:3e:f2:82:08:63:71:1a:2e:70:1e:5d:
         14:30:11:a5:3a:b8:11:b3:f5:d2:4a:bd:40:78:01:bb:98:ca:
         9d:e3:d4:2d:bd:1f:b0:0c:a4:50:2d:93:a2:0e:ed:14:f1:fc:
         0a:68:7e:3a:f4:50:d5:21:df:7f:70:77:27:69:a4:42:16:ca:
         86:3c:2f:0b:72:c9:2f:45:79:6b:8b:22:f2:b9:e6:8e:33:ee:
         9a:03:c1:a5:25:d9:5e:34:eb:4d:6e:66:fd:4b:37:ce:d7:a8:
         ed:05:35:e5:79:a5:c0:6b:98:0b:45:36:c4:a3:dd:e3:9a:d1:
         0c:9f:2a:89:52:ed:20:b7:63:04:ae:d6:3d:8a:4d:55:9e:a4:
         b7:f2:32:52:d6:1e:2a:c8:70:e7:9b:bf:44:88:e8:54:ab:7a:
         9a:4e:56:f3:68:72:6b:4d:73:0f:a4:cc:95:af:3d:78:b5:aa:
         00:6b:98:aa:c6:ff:40:64:26:eb:eb:f4:31:48:f7:5f:c6:b3:
         9c:98:f0:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFBRjUxMTAvBgNVBAUTKDgxNDMzQTYzQzJENzVEMDAzMjU1MkM0MjZDNDM1MzNF
Q0FDODM1MTUwHhcNMjYwOTIyMjA1NzAyWhcNMjYwOTI5MjA1NzAyWjAYMRYwFAYD
VQQDEw02YWIyZWI5ZS1mYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzbjTVMsha7gwz8vLQVtj8XNprC7sMYCsvrq6/wS6gcYTChhI4bGopZB5xbq
2t76WaRuxhih8DKIpFBDFJmv8dbLlrzneVMPVlOYkrAs4KihtGHCT2XlEHqVd3aL
A1S6oDy6IPFAcTljcaaA7i0fGkdODaI7dPYWRf/wdBbko0X3pLIxXIEEEGrkaqaM
AswuH7+4vkhch03RqeBV1VwTRHUGJCxPhes9wDCGVj5nhoti25lmAheLQL+0HvIi
wXB+3KLgHFbXcKcMKRuO7ncXPutYshUTPDtGgF+pN/R6dyYRBYpOd7rMDycaiijK
HqvScCcV/bC/UeuKmZNV4nJFZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5X570N
ihg3KuF8Oob3KuzgBgcaMB8GA1UdIwQYMBaAFIFDOmPC110AMlUsQmxDUz7KyDUV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFGNS8xNTEwRkI1QzM4
NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhRQXlWU3hDYkVOVFBzcklO
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dVTTZZOExYWFFBeVZTeENiRU5UUHNySU5SVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUFGNS8xNTEwRkI1QzM4NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhR
QXlWU3hDYkVOVFBzcklOUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhDCyP3Wp7Ao510Udlj0z6nDE2VJ0Jp8M6pBVfDdU8LkVsvKs8+6IVQ1E70e1
YxqAZPFDlzLJTt/sx/ZZjT7ygghjcRoucB5dFDARpTq4EbP10kq9QHgBu5jKnePU
Lb0fsAykUC2Tog7tFPH8Cmh+OvRQ1SHff3B3J2mkQhbKhjwvC3LJL0V5a4si8rnm
jjPumgPBpSXZXjTrTW5m/Us3zteo7QU15XmlwGuYC0U2xKPd45rRDJ8qiVLtILdj
BK7WPYpNVZ6kt/IyUtYeKshw55u/RIjoVKt6mk5W82hya01zD6TMla89eLWqAGuY
qsb/QGQm6+v0MUj3X8aznJjwkg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:13:20 2026 by rpki-client