Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
File:                     1cgQTMoJtQwAk-50IwWIXbT_N9M.mft (raw, json)
Hash identifier:          BR1UHkwQ7I5Vvuw3EzpfWCFBhtdMEZ23uk/BRgApTKc=
Subject key identifier:   23:6C:82:6C:38:9B:5E:25:BC:39:39:8D:20:F5:59:20:5B:CF:81:6C
Authority key identifier: D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3
Certificate issuer:       /CN=A91FDC31/serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
Manifest number:          4F
Signing time:             Sun 27 Sep 2026 08:58:16 +0000
Manifest this update:     Sun 27 Sep 2026 08:58:16 +0000
Manifest next update:     Sun 04 Oct 2026 08:58:16 +0000
Files and hashes:         1: 1cgQTMoJtQwAk-50IwWIXbT_N9M.crl (hash: 5x7Tda/h+oOmzY6ZBKRM5nPPW9bvDNohkpe8coYr2RA=)
                          2: C25C2A1A4A3211F1BD5DF90392833773.roa (hash: 6EW9oyrc2THGvuQYeyC3+cEZ3GaEIxha4d/V0/xHUxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC31, serialNumber=D5C8104CCA09B50C0093EE742305885DB4FF37D3
        Validity
            Not Before: Sep 27 08:58:16 2026 GMT
            Not After : Oct  4 08:58:16 2026 GMT
        Subject: CN=6ab8daa8-4596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:79:00:0a:da:7c:bd:c4:25:6e:4d:66:ad:a5:
                    1c:cf:95:66:ef:08:e6:24:0a:e2:bc:f6:d4:17:04:
                    8e:c2:e7:39:aa:19:71:80:8b:04:02:b8:b2:0d:6d:
                    18:c2:87:fa:3e:22:de:51:59:0b:11:f1:25:fc:f7:
                    3c:10:ad:48:88:23:5f:b6:93:15:87:f0:fd:f3:23:
                    c3:5a:ca:34:12:61:34:bb:dc:fd:d0:a3:3e:20:2a:
                    e6:ce:d7:fd:19:18:22:93:e8:e6:73:bc:7f:a1:19:
                    7f:8d:1e:12:79:03:41:59:6d:27:de:94:39:53:15:
                    ab:db:80:1e:46:84:11:f7:c6:4d:d4:ed:b9:87:fa:
                    b3:92:ed:77:0d:77:e7:91:94:30:0c:1a:d3:73:87:
                    04:49:68:5e:e7:f1:c4:a6:11:8c:cc:bb:c9:33:13:
                    6b:c1:f8:36:c5:40:35:74:84:f7:fd:d5:00:c2:70:
                    98:b5:14:4e:d7:d0:be:fe:94:32:1e:f8:8c:38:1e:
                    30:6f:d8:4c:8b:bb:26:b0:de:12:88:13:6d:bd:1b:
                    a3:87:59:8e:1a:86:b1:ea:05:24:ce:17:9a:53:2f:
                    af:4e:b0:3c:10:43:75:61:8d:b3:b4:f2:d2:9f:30:
                    ee:02:e9:5f:12:c7:0f:c7:58:5b:89:bc:c0:40:43:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6C:82:6C:38:9B:5E:25:BC:39:39:8D:20:F5:59:20:5B:CF:81:6C
            X509v3 Authority Key Identifier:
                keyid:D5:C8:10:4C:CA:09:B5:0C:00:93:EE:74:23:05:88:5D:B4:FF:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cgQTMoJtQwAk-50IwWIXbT_N9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/10C7AFF04A3111F19BD3103690833773/1cgQTMoJtQwAk-50IwWIXbT_N9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f2:0e:65:50:e7:8d:b8:5e:cf:21:f2:84:3a:59:45:23:d4:
         59:d1:53:92:04:88:0a:91:23:e6:84:bb:7f:25:2e:73:8f:35:
         12:7e:f4:88:6a:62:6d:71:b2:37:31:85:f7:79:5d:81:76:c1:
         c0:e2:f3:f9:03:fe:48:8b:f2:0d:5a:41:fe:76:c7:28:7f:ae:
         7c:c6:94:fc:a6:e7:35:e5:8f:97:87:60:eb:b9:bb:2a:a6:bc:
         6e:b1:2d:8f:db:bf:f5:cf:a0:70:da:50:38:83:b3:6b:6a:08:
         d5:e7:df:0c:da:43:a4:fe:92:0b:44:d9:50:43:72:94:2b:f3:
         3f:c6:48:23:2a:53:43:2a:81:b7:f4:a5:5d:1a:98:2c:0c:92:
         cf:43:26:6b:b5:40:59:60:27:1c:5d:70:29:82:fc:54:96:5b:
         b5:c0:24:88:e7:e5:c6:80:0e:92:54:6b:8b:cd:89:ec:b4:32:
         8c:4b:1d:c6:ed:05:5a:57:ec:23:63:96:5c:03:74:78:77:c0:
         ec:90:fd:84:2f:fb:75:3a:c3:1e:c0:ce:7b:17:c5:dd:80:df:
         be:1c:ea:60:7c:9f:70:8a:1c:c9:db:ca:6d:d0:62:63:c1:0f:
         70:fc:fa:cf:4a:f1:a9:df:5b:af:77:9e:65:59:6f:4a:ba:dd:
         d1:31:33:64
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
REMzMTExMC8GA1UEBRMoRDVDODEwNENDQTA5QjUwQzAwOTNFRTc0MjMwNTg4NURC
NEZGMzdEMzAeFw0yNjA5MjcwODU4MTZaFw0yNjEwMDQwODU4MTZaMBgxFjAUBgNV
BAMTDTZhYjhkYWE4LTQ1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdeQAK2ny9xCVuTWatpRzPlWbvCOYkCuK89tQXBI7C5zmqGXGAiwQCuLINbRjC
h/o+It5RWQsR8SX89zwQrUiII1+2kxWH8P3zI8NayjQSYTS73P3Qoz4gKubO1/0Z
GCKT6OZzvH+hGX+NHhJ5A0FZbSfelDlTFavbgB5GhBH3xk3U7bmH+rOS7XcNd+eR
lDAMGtNzhwRJaF7n8cSmEYzMu8kzE2vB+DbFQDV0hPf91QDCcJi1FE7X0L7+lDIe
+Iw4HjBv2EyLuyaw3hKIE229G6OHWY4ahrHqBSTOF5pTL69OsDwQQ3VhjbO08tKf
MO4C6V8Sxw/HWFuJvMBAQ3PtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUI2yCbDib
XiW8OTmNIPVZIFvPgWwwHwYDVR0jBBgwFoAU1cgQTMoJtQwAk+50IwWIXbT/N9Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzMxLzEwQzdBRkYwNEEz
MTExRjE5QkQzMTAzNjkwODMzNzczLzFjZ1FUTW9KdFF3QWstNTBJd1dJWGJUX045
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMWNnUVRNb0p0UXdBay01MEl3V0lYYlRfTjlNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE
QzMxLzEwQzdBRkYwNEEzMTExRjE5QkQzMTAzNjkwODMzNzczLzFjZ1FUTW9KdFF3
QWstNTBJd1dJWGJUX045TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBT8g5lUOeNuF7PIfKEOllFI9RZ0VOSBIgKkSPmhLt/JS5zjzUSfvSIamJtcbI3
MYX3eV2BdsHA4vP5A/5Ii/INWkH+dscof658xpT8puc15Y+Xh2DrubsqprxusS2P
27/1z6Bw2lA4g7NragjV598M2kOk/pILRNlQQ3KUK/M/xkgjKlNDKoG39KVdGpgs
DJLPQyZrtUBZYCccXXApgvxUllu1wCSI5+XGgA6SVGuLzYnstDKMSx3G7QVaV+wj
Y5ZcA3R4d8DskP2EL/t1OsMewM57F8XdgN++HOpgfJ9wihzJ28pt0GJjwQ9w/PrP
SvGp31uvd55lWW9Kut3RMTNk
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:16:08 2026 by rpki-client