Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
File:                     T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft (raw, json)
Hash identifier:          cvNGL4pma17HMojpsi3eRjQ5bEIMLH8NgY7o1RkFERw=
Subject key identifier:   9F:E9:D2:A9:20:43:41:FF:A5:CA:B3:60:56:CA:C1:59:E1:6C:FE:12
Authority key identifier: 4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A
Certificate issuer:       /CN=A91FDEFE/serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
Manifest number:          0168
Signing time:             Sat 03 Oct 2026 05:43:05 +0000
Manifest this update:     Sat 03 Oct 2026 05:43:04 +0000
Manifest next update:     Sat 10 Oct 2026 05:43:04 +0000
Files and hashes:         1: T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl (hash: 5tO375a161B7vyFaGAhT5f1hLTe0NZ1yBK1+zluN14M=)
                          2: 12B6D40E37C511F19788E36ABE833773.roa (hash: f5bzM7j+pO8fCnEBI50cYrv56JA2HlZHuSFXp1GJx88=)
                          3: 669FD05EA53911EFBE261371C4F9AE02.roa (hash: iXPPbRwODBTS92FzdfuvK5J3jl/IZyMATy+kQwe/++Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl
                          rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDEFE, serialNumber=4FE1B35F9AD8281B66F47031F507E0EE7D54211A
        Validity
            Not Before: Oct  3 05:43:04 2026 GMT
            Not After : Oct 10 05:43:04 2026 GMT
        Subject: CN=6ac095e9-d7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:91:10:cc:2c:a8:45:19:ea:b3:e6:97:b8:
                    a5:86:02:4a:2e:d2:81:ff:9f:4c:87:bf:20:53:e0:
                    c3:f1:36:83:ca:3f:48:85:ce:3a:61:1a:0c:4a:24:
                    9b:13:1c:1a:ef:9d:dd:c6:1a:6d:ae:33:5c:75:a4:
                    79:78:2d:71:c2:27:87:24:8d:9b:71:c4:a7:36:7f:
                    0f:40:23:97:85:fe:92:f7:95:d4:5e:d7:92:56:7f:
                    95:aa:93:62:20:93:82:5a:e5:ac:54:f0:1b:7d:3e:
                    0e:4c:66:46:76:14:7b:db:64:c0:95:ed:a5:db:d4:
                    25:d9:cd:ce:3f:00:65:b2:aa:f1:b9:7c:c1:4e:48:
                    ad:7e:c6:b6:43:80:fc:52:5a:33:ba:b8:b7:d3:1a:
                    e2:1a:3f:bf:56:eb:6b:0f:f8:46:9c:95:a1:43:74:
                    e4:55:31:91:e3:6d:cf:53:dc:99:d5:27:39:03:8c:
                    6f:67:cd:21:4d:9a:ec:b5:da:13:b5:f0:b3:14:84:
                    98:32:10:95:d1:29:9c:b7:72:53:64:18:fa:87:e9:
                    55:21:03:e2:6a:3a:30:3b:0d:07:b1:88:b2:c7:c9:
                    16:3c:04:ea:46:32:32:8e:1a:7d:eb:2a:07:73:f3:
                    ab:a2:25:d3:4a:07:32:91:96:3b:cc:8f:1c:53:a0:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E9:D2:A9:20:43:41:FF:A5:CA:B3:60:56:CA:C1:59:E1:6C:FE:12
            X509v3 Authority Key Identifier:
                keyid:4F:E1:B3:5F:9A:D8:28:1B:66:F4:70:31:F5:07:E0:EE:7D:54:21:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/194B7920A51611EF890ECD3EC4F9AE02/T-GzX5rYKBtm9HAx9Qfg7n1UIRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:00:20:8a:0b:64:ac:d2:74:cf:b4:7d:d8:8d:1e:d8:17:
         64:69:41:df:46:15:6d:37:3c:41:b5:bb:72:82:0a:23:03:88:
         9a:34:3d:12:ad:01:b1:d1:68:a2:e7:12:c1:b8:33:e1:ce:f3:
         66:cc:65:cf:dc:bf:93:ff:8b:e8:7a:c7:e5:b8:b7:a5:3f:ff:
         97:22:67:48:36:21:7a:d2:2e:90:43:dd:41:b9:26:c1:30:a2:
         f5:9c:80:36:e9:e5:f7:aa:a3:60:c5:ef:eb:6d:c8:ab:1b:ef:
         3d:9c:6b:27:56:f3:c1:03:1b:e8:5e:1b:be:65:02:8a:05:e1:
         2b:bf:f6:0a:7d:7a:38:a3:d1:27:b9:7d:d1:30:3a:96:80:4b:
         08:b7:25:0b:30:80:2b:49:0a:74:d0:e0:33:70:e9:37:10:6c:
         30:05:ad:c3:c5:c4:32:d4:9f:03:2d:2c:f2:dc:a4:a2:9e:56:
         4e:df:32:2f:ab:a4:81:87:f4:22:2f:65:f0:28:8c:dd:5f:b4:
         8c:36:8a:b9:f4:74:8b:df:9e:f5:f0:4e:46:32:ab:9c:b3:1f:
         e3:7b:b0:8f:63:cd:7c:d0:e4:89:06:ac:57:6b:91:1a:df:bf:
         77:d6:63:c8:f9:6d:5d:2d:2e:2d:0a:2e:9d:c7:68:f6:8e:f6:
         bf:15:fd:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRFRkUxMTAvBgNVBAUTKDRGRTFCMzVGOUFEODI4MUI2NkY0NzAzMUY1MDdFMEVF
N0Q1NDIxMUEwHhcNMjYxMDAzMDU0MzA0WhcNMjYxMDEwMDU0MzA0WjAYMRYwFAYD
VQQDEw02YWMwOTVlOS1kN2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApCaREMwsqEUZ6rPml7ilhgJKLtKB/59Mh78gU+DD8TaDyj9Ihc46YRoMSiSb
Exwa753dxhptrjNcdaR5eC1xwieHJI2bccSnNn8PQCOXhf6S95XUXteSVn+VqpNi
IJOCWuWsVPAbfT4OTGZGdhR722TAle2l29Ql2c3OPwBlsqrxuXzBTkitfsa2Q4D8
Ulozuri30xriGj+/VutrD/hGnJWhQ3TkVTGR423PU9yZ1Sc5A4xvZ80hTZrstdoT
tfCzFISYMhCV0Smct3JTZBj6h+lVIQPiajowOw0HsYiyx8kWPATqRjIyjhp96yoH
c/OroiXTSgcykZY7zI8cU6C51QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/p0qkg
Q0H/pcqzYFbKwVnhbP4SMB8GA1UdIwQYMBaAFE/hs1+a2CgbZvRwMfUH4O59VCEa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREVGRS8xOTRCNzkyMEE1
MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtCdG05SEF4OVFmZzduMVVJ
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1QtR3pYNXJZS0J0bTlIQXg5UWZnN24xVUlSby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REVGRS8xOTRCNzkyMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9ULUd6WDVyWUtC
dG05SEF4OVFmZzduMVVJUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB50AIIoLZKzSdM+0fdiNHtgXZGlB30YVbTc8QbW7coIKIwOImjQ9Eq0BsdFo
oucSwbgz4c7zZsxlz9y/k/+L6HrH5bi3pT//lyJnSDYhetIukEPdQbkmwTCi9ZyA
Nunl96qjYMXv623IqxvvPZxrJ1bzwQMb6F4bvmUCigXhK7/2Cn16OKPRJ7l90TA6
loBLCLclCzCAK0kKdNDgM3DpNxBsMAWtw8XEMtSfAy0s8tykop5WTt8yL6ukgYf0
Ii9l8CiM3V+0jDaKufR0i9+e9fBORjKrnLMf43uwj2PNfNDkiQasV2uRGt+/d9Zj
yPltXS0uLQouncdo9o72vxX9PQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:47:02 2026 by rpki-client