Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
File:                     N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json)
Hash identifier:          kV4zAvGDijRWZaI/pP27pVkAmRfpQ77JnVO4SU6v95c=
Subject key identifier:   E6:8F:41:EF:32:C7:4D:F7:F2:19:67:E0:8D:3C:73:42:1A:98:F3:90
Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB
Certificate issuer:       /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
Manifest number:          96
Signing time:             Wed 23 Sep 2026 07:13:31 +0000
Manifest this update:     Wed 23 Sep 2026 07:13:30 +0000
Manifest next update:     Wed 30 Sep 2026 07:13:30 +0000
Files and hashes:         1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: 7S4pfPNUwdYFa3OErH8XBEDql8VfXBeMQRy++WMk9uo=)
                          2: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: PsNugEmxb0VqmOUe342oKhYJR77dyuxdQVuRbBuOR54=)
                          3: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl
                          rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB
        Validity
            Not Before: Sep 23 07:13:30 2026 GMT
            Not After : Sep 30 07:13:30 2026 GMT
        Subject: CN=6ab37c1b-2fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:32:97:e3:68:99:3f:4b:6f:2f:69:d8:50:
                    f5:2e:d3:ea:37:81:eb:c1:a7:a4:44:12:86:be:4b:
                    86:f3:80:af:25:bc:78:b5:fc:74:da:20:4f:e0:77:
                    56:ef:cf:ff:a3:82:e5:90:46:9c:16:c0:fd:d2:b0:
                    e0:f5:f5:f0:02:57:fb:e4:42:2d:c7:81:ed:97:ea:
                    7c:7b:05:f1:56:8f:2d:4d:45:56:db:49:2c:56:5b:
                    7b:b0:50:5c:b3:07:2b:ad:3f:34:8b:5a:18:13:e0:
                    af:f4:fe:ca:23:6e:49:05:f6:dc:f7:72:b6:80:ff:
                    aa:81:7f:79:6b:c8:d9:10:c1:81:6c:d5:09:0c:ea:
                    cd:f0:1a:32:bf:1a:7e:59:ee:43:56:19:8d:52:e4:
                    ad:c7:e4:56:d2:b8:de:ac:58:43:30:8e:b2:b8:85:
                    62:55:90:67:d5:62:76:66:5d:2a:d6:6f:42:91:e2:
                    ed:91:49:66:c4:cb:f7:29:b2:fe:66:a0:62:30:da:
                    39:68:3d:47:e5:cf:ab:5d:88:74:eb:37:d9:83:24:
                    9e:a2:9e:44:83:26:06:0d:46:77:18:cf:a3:c6:d2:
                    fc:fd:cd:a2:b3:26:0f:21:a7:21:da:6f:cc:b3:f8:
                    63:4d:40:cf:dd:b8:1a:d3:5b:ad:9d:ed:90:9e:47:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8F:41:EF:32:C7:4D:F7:F2:19:67:E0:8D:3C:73:42:1A:98:F3:90
            X509v3 Authority Key Identifier:
                keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e1:d4:60:bf:79:26:1b:d3:9a:d4:f2:ea:b2:59:bb:92:4f:
         9e:d6:03:0d:4d:20:b3:5d:f9:ee:aa:a4:54:31:18:3e:77:05:
         ee:e2:18:fe:e2:6f:42:14:a8:fa:47:03:ca:ad:33:06:20:aa:
         87:eb:e3:90:25:9e:39:02:ea:92:54:86:c5:a3:fe:e8:01:8c:
         1e:0b:ee:3c:aa:45:d4:7b:93:51:63:f0:59:09:81:b5:bf:74:
         99:8c:bf:49:e6:8d:3e:db:e7:e7:3e:1a:a7:ab:3a:33:91:80:
         26:9e:d1:b9:84:82:24:3e:03:21:36:d9:29:e6:ef:b6:47:7e:
         8f:75:a0:a1:fa:dd:c7:de:29:fe:b0:ca:fc:19:ea:0a:4b:c2:
         c8:cb:e2:21:81:5f:16:a8:de:d3:ee:55:48:bb:e4:5d:59:f0:
         fa:83:7b:fd:0f:df:e3:b8:63:96:b0:3b:2b:83:59:81:63:bf:
         6a:7e:f9:32:a8:57:d9:02:f9:04:41:f0:57:1b:02:4a:aa:0c:
         25:e2:35:74:fc:c1:85:0c:47:6b:59:d1:ea:78:19:4e:66:83:
         b9:e7:14:27:27:9a:36:e6:4a:51:a0:b7:73:ad:c7:ab:b0:a0:
         b7:8f:21:09:6a:86:f5:bb:2f:92:48:df:b6:66:4f:83:c9:b7:
         f2:5b:0e:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMyNTYxMTAvBgNVBAUTKDM3Q0Q5QkIwODZFRjBBRjVBMzJCRDg4NTQ3NDY4Njgw
NkQ5MDk2RkIwHhcNMjYwOTIzMDcxMzMwWhcNMjYwOTMwMDcxMzMwWjAYMRYwFAYD
VQQDEw02YWIzN2MxYi0yZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2EEyl+NomT9Lby9p2FD1LtPqN4HrwaekRBKGvkuG84CvJbx4tfx02iBP4HdW
78//o4LlkEacFsD90rDg9fXwAlf75EItx4Htl+p8ewXxVo8tTUVW20ksVlt7sFBc
swcrrT80i1oYE+Cv9P7KI25JBfbc93K2gP+qgX95a8jZEMGBbNUJDOrN8Boyvxp+
We5DVhmNUuStx+RW0rjerFhDMI6yuIViVZBn1WJ2Zl0q1m9CkeLtkUlmxMv3KbL+
ZqBiMNo5aD1H5c+rXYh06zfZgySeop5EgyYGDUZ3GM+jxtL8/c2isyYPIach2m/M
s/hjTUDP3bga01utne2QnkcmQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaPQe8y
x0338hln4I08c0IamPOQMB8GA1UdIwQYMBaAFDfNm7CG7wr1oyvYhUdGhoBtkJb7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI1Ni8xQjU1RDczOEQ5
OUYxMUYwOTdFRkJFRjk2NkQzNjQxRC9OODJic0lidkN2V2pLOWlGUjBhR2dHMlFs
dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL044MmJzSWJ2Q3ZXaks5aUZSMGFHZ0cyUWx2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzI1Ni8xQjU1RDczOEQ5OUYxMUYwOTdFRkJFRjk2NkQzNjQxRC9OODJic0lidkN2
V2pLOWlGUjBhR2dHMlFsdnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATuHUYL95JhvTmtTy6rJZu5JPntYDDU0gs1357qqkVDEYPncF7uIY/uJvQhSo
+kcDyq0zBiCqh+vjkCWeOQLqklSGxaP+6AGMHgvuPKpF1HuTUWPwWQmBtb90mYy/
SeaNPtvn5z4ap6s6M5GAJp7RuYSCJD4DITbZKebvtkd+j3Wgofrdx94p/rDK/Bnq
CkvCyMviIYFfFqje0+5VSLvkXVnw+oN7/Q/f47hjlrA7K4NZgWO/an75MqhX2QL5
BEHwVxsCSqoMJeI1dPzBhQxHa1nR6ngZTmaDuecUJyeaNuZKUaC3c63Hq7Cgt48h
CWqG9bsvkkjftmZPg8m38lsOog==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:59:36 2026 by rpki-client