Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
File:                     gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json)
Hash identifier:          lhruec/z0uoZBsrFZm9Xp4yAZfVdHo4WFhdl4x2w/TM=
Subject key identifier:   F5:D3:38:04:1E:0F:C9:F8:23:32:2E:19:E8:B4:D0:E3:A5:89:1B:FC
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Certificate issuer:       /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial:       03CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
Manifest number:          03C4
Signing time:             Fri 25 Sep 2026 00:22:56 +0000
Manifest this update:     Fri 25 Sep 2026 00:22:56 +0000
Manifest next update:     Fri 02 Oct 2026 00:22:56 +0000
Files and hashes:         1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: wOEShPWVkGtbTMV5Pd4f47KAqnFE94iGMH5zyyi+qOQ=)
                          2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: WrdIWda3W8S8jJROIBH2MCwLp3pmbzVsg8gReUa0lSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
                          rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
        Validity
            Not Before: Sep 25 00:22:56 2026 GMT
            Not After : Oct  2 00:22:56 2026 GMT
        Subject: CN=6ab5bee0-ca4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:51:e2:c2:ce:a5:9e:9a:44:e5:94:2f:ab:
                    0a:de:5e:cd:0f:ba:39:48:98:9d:07:f1:eb:68:4e:
                    bb:9c:d5:cf:8b:59:4e:79:55:2d:e8:e1:04:c3:9e:
                    1b:e0:75:d9:b3:79:3f:09:46:16:58:df:f4:e0:f3:
                    0a:8f:6f:05:13:c4:62:73:71:b9:ca:7c:ae:18:6c:
                    71:e6:60:cf:26:26:bf:ff:12:f1:61:4e:5c:f4:fc:
                    0d:11:5d:6b:a8:a7:d9:be:5f:c1:07:51:6b:46:04:
                    a0:ae:2b:8d:8d:b3:b6:c9:f6:45:2c:ed:f3:1f:26:
                    f2:aa:d9:a2:82:03:f7:81:97:1d:0f:5f:8f:92:44:
                    7f:04:7a:3c:d7:36:8a:90:db:44:e1:2d:4f:72:bd:
                    1f:5e:8f:b6:e0:ef:6a:c1:5e:e4:fc:08:30:ad:a6:
                    87:62:21:22:7d:42:29:44:a0:a6:b7:7b:31:c8:a1:
                    b3:69:8d:c8:f2:b9:97:f8:d7:d4:12:2b:47:2b:ee:
                    8f:61:8d:5e:d0:98:4d:34:e1:55:73:41:20:08:f7:
                    a6:f1:98:6b:9c:71:fa:5f:50:49:81:2e:bb:33:b2:
                    dc:5e:51:7d:2a:c9:3c:d5:c1:a4:82:59:4b:c9:2e:
                    7b:85:e3:61:ac:1f:de:93:6c:70:bb:22:08:20:43:
                    32:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D3:38:04:1E:0F:C9:F8:23:32:2E:19:E8:B4:D0:E3:A5:89:1B:FC
            X509v3 Authority Key Identifier:
                keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f7:be:0e:9e:56:dd:ef:87:b9:6b:5a:ac:5d:26:c3:3a:92:
         ac:ba:6b:46:c1:63:5c:3e:ec:57:36:9d:0b:3b:32:4d:89:85:
         9e:47:23:14:8b:b0:61:e5:15:6d:2f:3e:9b:ea:1a:c3:9d:3a:
         ee:f9:85:f9:f0:05:ff:ff:b1:3e:8f:cc:64:54:3d:43:a0:09:
         f3:bb:fc:65:47:e7:f4:77:29:43:88:48:df:36:b0:dd:77:0d:
         09:be:d0:b9:93:e0:bd:a6:50:2b:ac:1e:fd:f1:50:b7:0d:89:
         dd:90:76:15:0e:8e:67:92:cd:39:59:04:2b:b7:cf:c5:d9:f2:
         fa:fa:52:10:f8:14:36:3c:8b:1b:05:8e:42:4b:52:5f:dc:ff:
         b9:39:0c:89:2a:ef:c0:b2:d6:d1:0c:31:4d:32:05:59:10:89:
         6d:22:1d:ed:33:3b:7e:2d:82:3f:5d:a2:61:cb:a5:fc:7e:5f:
         7a:0e:49:8a:de:3b:38:e5:28:27:3f:16:7a:40:4a:ec:ea:c8:
         f0:1d:73:85:c6:62:18:3c:ac:74:e3:59:d0:cc:0a:86:21:70:
         aa:32:bd:63:fe:1e:1a:4e:e7:f2:6b:a7:2a:5f:4a:b4:1a:92:
         fd:8e:64:1a:7a:a2:d8:d3:69:3a:e1:cc:8d:6a:e4:41:0b:0c:
         36:3a:ec:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ5RTYxMTAvBgNVBAUTKDgxNUJGMEVFMjBBNURDQkEzMDU3QzNEMzVCNThFQzE0
NzcyRThGRUYwHhcNMjYwOTI1MDAyMjU2WhcNMjYxMDAyMDAyMjU2WjAYMRYwFAYD
VQQDEw02YWI1YmVlMC1jYTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3RR4sLOpZ6aROWUL6sK3l7ND7o5SJidB/HraE67nNXPi1lOeVUt6OEEw54b
4HXZs3k/CUYWWN/04PMKj28FE8Ric3G5ynyuGGxx5mDPJia//xLxYU5c9PwNEV1r
qKfZvl/BB1FrRgSgriuNjbO2yfZFLO3zHybyqtmiggP3gZcdD1+PkkR/BHo81zaK
kNtE4S1Pcr0fXo+24O9qwV7k/AgwraaHYiEifUIpRKCmt3sxyKGzaY3I8rmX+NfU
EitHK+6PYY1e0JhNNOFVc0EgCPem8ZhrnHH6X1BJgS67M7LcXlF9Ksk81cGkgllL
yS57heNhrB/ek2xwuyIIIEMykQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXTOAQe
D8n4IzIuGei00OOliRv8MB8GA1UdIwQYMBaAFIFb8O4gpdy6MFfD01tY7BR3Lo/v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlFNi8zMjQ2RkU2RUVE
NDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNMb3dWOFBUVzFqc0ZIY3Vq
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dWdnc3aUNsM0xvd1Y4UFRXMWpzRkhjdWotOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDlFNi8zMjQ2RkU2RUVENDgxMUVDQjVERTEwODJDNEY5QUUwMi9nVnZ3N2lDbDNM
b3dWOFBUVzFqc0ZIY3VqLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAW/e+Dp5W3e+HuWtarF0mwzqSrLprRsFjXD7sVzadCzsyTYmFnkcjFIuwYeUV
bS8+m+oaw5067vmF+fAF//+xPo/MZFQ9Q6AJ87v8ZUfn9HcpQ4hI3zaw3XcNCb7Q
uZPgvaZQK6we/fFQtw2J3ZB2FQ6OZ5LNOVkEK7fPxdny+vpSEPgUNjyLGwWOQktS
X9z/uTkMiSrvwLLW0QwxTTIFWRCJbSId7TM7fi2CP12iYcul/H5feg5Jit47OOUo
Jz8WekBK7OrI8B1zhcZiGDysdONZ0MwKhiFwqjK9Y/4eGk7n8munKl9KtBqS/Y5k
Gnqi2NNpOuHMjWrkQQsMNjrsrw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 04:42:51 2026 by rpki-client