Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File:                     i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier:          ZHVFmTUoI49BTHE/J4Ofq1zPKwIyZ8HwhfQ+c7AT2O8=
Subject key identifier:   7E:F1:71:57:B6:28:99:79:0B:A2:E1:15:24:2D:DA:FE:10:E0:03:23
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer:       /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial:       030E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number:          0300
Signing time:             Mon 21 Sep 2026 00:57:07 +0000
Manifest this update:     Mon 21 Sep 2026 00:57:07 +0000
Manifest next update:     Mon 28 Sep 2026 00:57:07 +0000
Files and hashes:         1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: VXycZetrZ3dZhG5MKRCZTQV3uu6oltyf01gC5yBTWfc=)
                          2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: vysf+JOpL7OvntYiYikMIsDz8nEsAs8IBD8OzimL+Fg=)
                          3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: QQORdPKkCBGXWBMZkno+T8u87+gp990frsFu1rUngIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:57:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
        Validity
            Not Before: Sep 21 00:57:07 2026 GMT
            Not After : Sep 28 00:57:07 2026 GMT
        Subject: CN=6ab080e3-0c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:50:b1:5d:5b:03:68:f3:34:d4:3b:42:f5:
                    02:d5:73:7e:0d:bb:78:af:ff:18:ca:55:90:ae:98:
                    e8:d8:74:f7:89:46:14:98:e0:f7:92:7b:f0:63:a3:
                    6a:d1:b4:26:f9:3b:52:7a:16:f4:05:e8:4d:1e:08:
                    49:23:6e:56:98:91:26:20:f3:02:f3:45:42:c4:e0:
                    1b:50:4a:0d:14:5e:d2:cc:08:b6:f2:6a:9f:e6:61:
                    a4:10:c2:5d:2e:ef:3c:27:2c:98:0e:c3:cd:52:89:
                    9f:48:9f:cb:73:1f:55:76:0b:22:42:17:65:53:cd:
                    1b:fb:b9:fb:ad:0d:e9:5c:23:55:ad:7f:ae:88:2b:
                    28:8c:cb:db:b4:fe:60:96:41:ba:02:e2:29:a1:5e:
                    06:73:8d:67:e7:6d:4c:12:8e:1f:54:25:b8:b1:6a:
                    8a:4c:d8:91:74:1e:02:93:74:c8:0e:dd:3e:58:f1:
                    b3:72:d3:22:bc:59:c4:06:a4:1e:ce:30:20:13:2e:
                    38:a3:2c:da:10:a9:ba:06:75:34:11:3c:e1:60:03:
                    1c:47:35:5d:6c:19:a5:7d:74:30:65:16:a0:6e:bf:
                    9d:5a:04:f7:a9:d1:87:a4:ba:7c:56:83:e7:c9:fd:
                    4d:a6:f7:58:77:69:dd:82:7c:52:f9:49:7e:99:9c:
                    48:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F1:71:57:B6:28:99:79:0B:A2:E1:15:24:2D:DA:FE:10:E0:03:23
            X509v3 Authority Key Identifier:
                keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:44:59:27:3e:f6:da:ca:71:9a:45:7c:92:a0:42:5e:23:
         16:e7:0f:44:39:ff:4c:34:85:0e:51:50:58:18:01:be:23:c3:
         a8:12:2c:81:41:7b:a5:34:f7:7c:22:38:7d:f7:24:e2:39:92:
         c2:f5:e5:7a:bb:e7:32:69:f6:6b:2a:2b:51:02:b3:63:09:b9:
         84:75:b0:71:5a:66:08:99:76:df:48:63:4a:76:20:16:4c:5e:
         8e:17:87:2a:c8:0a:e9:4b:b8:51:5c:86:5a:6c:c4:1b:bb:66:
         26:ac:97:37:a7:e5:28:db:b0:ef:a5:ec:24:68:e7:c8:5d:47:
         ef:7f:5f:55:26:4b:9d:70:37:24:a5:fb:e4:12:29:40:e5:49:
         46:9c:f8:48:30:f7:e7:96:1b:e8:7b:c9:bd:1b:b5:9f:c9:47:
         49:a3:a1:b1:cb:fa:88:2e:77:1c:5c:28:70:b8:05:c3:3c:e9:
         49:33:7a:8a:f6:08:6e:b6:e7:98:10:54:c9:0c:79:e3:b5:d1:
         53:fc:2b:48:9a:b6:9f:eb:b8:f2:cf:67:3d:94:2a:ea:10:28:
         ba:e0:43:30:6c:af:9b:c3:f1:84:d1:55:b3:6e:83:4a:30:11:
         af:0f:99:04:28:37:19:43:4d:46:89:1c:50:54:da:53:ad:12:
         db:87:f5:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB
MTk3QjlEN0MwHhcNMjYwOTIxMDA1NzA3WhcNMjYwOTI4MDA1NzA3WjAYMRYwFAYD
VQQDEw02YWIwODBlMy0wYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApERQsV1bA2jzNNQ7QvUC1XN+Dbt4r/8YylWQrpjo2HT3iUYUmOD3knvwY6Nq
0bQm+TtSehb0BehNHghJI25WmJEmIPMC80VCxOAbUEoNFF7SzAi28mqf5mGkEMJd
Lu88JyyYDsPNUomfSJ/Lcx9VdgsiQhdlU80b+7n7rQ3pXCNVrX+uiCsojMvbtP5g
lkG6AuIpoV4Gc41n521MEo4fVCW4sWqKTNiRdB4Ck3TIDt0+WPGzctMivFnEBqQe
zjAgEy44oyzaEKm6BnU0ETzhYAMcRzVdbBmlfXQwZRagbr+dWgT3qdGHpLp8VoPn
yf1NpvdYd2ndgnxS+Ul+mZxInwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7xcVe2
KJl5C6LhFSQt2v4Q4AMjMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB
MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq
VUpua2hEUElKSmVobDduWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgxtEWSc+9trKcZpFfJKgQl4jFucPRDn/TDSFDlFQWBgBviPDqBIsgUF7pTT3
fCI4ffck4jmSwvXlervnMmn2ayorUQKzYwm5hHWwcVpmCJl230hjSnYgFkxejheH
KsgK6Uu4UVyGWmzEG7tmJqyXN6flKNuw76XsJGjnyF1H739fVSZLnXA3JKX75BIp
QOVJRpz4SDD355Yb6HvJvRu1n8lHSaOhscv6iC53HFwocLgFwzzpSTN6ivYIbrbn
mBBUyQx547XRU/wrSJq2n+u48s9nPZQq6hAouuBDMGyvm8PxhNFVs26DSjARrw+Z
BCg3GUNNRokcUFTaU60S24f1Ug==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:42:32 2026 by rpki-client