Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File:                     zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier:          dsUcgeh9hm+IPhs9UKRhvU2kF0HNX43C+g9948fTP5c=
Subject key identifier:   25:42:B5:DD:2D:DF:F1:83:01:E7:7A:F6:8A:24:8B:38:A2:3A:E0:A5
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number:          01EE
Signing time:             Sun 27 Sep 2026 03:54:30 +0000
Manifest this update:     Sun 27 Sep 2026 03:54:29 +0000
Manifest next update:     Sun 04 Oct 2026 03:54:29 +0000
Files and hashes:         1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: iRAzhcPwBSX3XmQTsCVe1XAEM4pzb7XbNjRnBhmcV2E=)
                          2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: eRA3ggdDb9SZ/usM83jI/rG8aFaHS14k+X9wZnX4XR0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:54:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: Sep 27 03:54:29 2026 GMT
            Not After : Oct  4 03:54:29 2026 GMT
        Subject: CN=6ab89375-70a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:c8:63:66:ef:e9:8a:ab:7c:a8:9d:2b:71:
                    97:ac:fe:a3:22:2f:6f:b7:ab:76:79:58:cd:b0:eb:
                    00:8d:a1:14:21:bb:bb:94:52:82:a3:17:39:1b:1a:
                    81:d8:73:42:31:2b:47:a0:79:06:8a:36:6a:68:d3:
                    d0:cf:23:db:31:e0:20:f3:12:e9:f4:9e:36:b6:97:
                    14:e0:73:96:53:d3:05:24:70:bf:fa:73:41:fd:c8:
                    50:a1:e4:24:8b:42:39:6e:ca:15:01:b3:37:89:79:
                    34:53:df:2d:e9:24:e6:53:fa:f4:51:22:b0:dc:5f:
                    8d:10:8f:de:23:98:85:06:6e:e0:bf:08:01:18:0c:
                    a3:2e:c0:85:c3:3e:d5:ab:de:42:92:4b:dc:e8:12:
                    6c:60:05:1b:2a:3a:90:9b:23:5d:38:4d:85:20:d4:
                    1a:0a:e7:9f:14:7e:1d:4a:81:aa:39:8d:fa:e9:8b:
                    0a:51:36:c2:e2:41:75:6a:fc:ab:5d:b2:db:e5:22:
                    6b:54:d3:41:f4:21:5b:1c:33:41:78:a1:09:b4:6b:
                    a6:e9:be:88:e7:ca:97:d8:de:10:98:e9:6a:06:14:
                    db:82:23:2d:86:5d:9a:d6:d8:e9:61:72:0c:82:22:
                    eb:3d:95:47:76:ed:bc:bf:b6:4b:f4:29:30:ec:b6:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:42:B5:DD:2D:DF:F1:83:01:E7:7A:F6:8A:24:8B:38:A2:3A:E0:A5
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:67:c0:bc:8f:53:b0:41:bb:af:37:31:22:bc:42:5d:87:25:
         5d:f5:47:37:33:b5:a8:23:7a:a4:1d:34:8c:3d:19:48:10:0f:
         89:e9:31:10:ce:ec:52:13:b1:17:a3:57:f4:58:5a:9a:a7:a8:
         7f:89:b8:ac:8a:7c:29:b9:6c:db:82:a5:58:21:96:83:af:27:
         14:d3:f9:dc:d7:58:22:6f:7e:6a:da:77:fe:57:0c:06:25:bf:
         b3:b1:f0:48:65:f5:92:f4:77:7a:12:de:78:1a:3b:2c:03:73:
         c8:f3:33:12:79:6e:70:e5:38:a3:a0:5d:ce:af:0a:68:aa:8f:
         af:d8:88:14:f8:4c:91:46:61:fa:f4:ab:fc:5c:6e:b9:2c:b4:
         4a:73:2e:56:b5:a5:ac:c7:99:a5:a6:03:bf:9a:31:36:7d:37:
         3e:ce:b7:b9:36:b8:67:be:92:b3:9b:e0:61:02:ce:02:f7:ed:
         85:7a:17:9d:3a:46:b4:88:77:45:7d:23:f9:2b:c5:36:ee:a7:
         3d:b0:09:85:f3:eb:01:45:2e:3a:f4:f6:79:7c:28:33:40:5d:
         7d:b9:69:d7:f0:15:19:73:77:45:21:5b:42:4d:35:f2:8f:5d:
         e2:52:15:29:71:f2:8f:35:06:fb:91:0c:a9:a8:f3:5e:38:ec:
         dc:c5:f6:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB
QTczMUI1NTIwHhcNMjYwOTI3MDM1NDI5WhcNMjYxMDA0MDM1NDI5WjAYMRYwFAYD
VQQDEw02YWI4OTM3NS03MGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuGHIY2bv6YqrfKidK3GXrP6jIi9vt6t2eVjNsOsAjaEUIbu7lFKCoxc5GxqB
2HNCMStHoHkGijZqaNPQzyPbMeAg8xLp9J42tpcU4HOWU9MFJHC/+nNB/chQoeQk
i0I5bsoVAbM3iXk0U98t6STmU/r0USKw3F+NEI/eI5iFBm7gvwgBGAyjLsCFwz7V
q95Ckkvc6BJsYAUbKjqQmyNdOE2FINQaCuefFH4dSoGqOY366YsKUTbC4kF1avyr
XbLb5SJrVNNB9CFbHDNBeKEJtGum6b6I58qX2N4QmOlqBhTbgiMthl2a1tjpYXIM
giLrPZVHdu28v7ZL9Ckw7LZ/JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVCtd0t
3/GDAed69ookiziiOuClMB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5
RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0
VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx
VXg2VGF0c0cyNnlxY3h0VkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkWfAvI9TsEG7rzcxIrxCXYclXfVHNzO1qCN6pB00jD0ZSBAPiekxEM7sUhOx
F6NX9Fhamqeof4m4rIp8Kbls24KlWCGWg68nFNP53NdYIm9+atp3/lcMBiW/s7Hw
SGX1kvR3ehLeeBo7LANzyPMzEnlucOU4o6Bdzq8KaKqPr9iIFPhMkUZh+vSr/Fxu
uSy0SnMuVrWlrMeZpaYDv5oxNn03Ps63uTa4Z76Ss5vgYQLOAvfthXoXnTpGtIh3
RX0j+SvFNu6nPbAJhfPrAUUuOvT2eXwoM0Bdfblp1/AVGXN3RSFbQk018o9d4lIV
KXHyjzUG+5EMqajzXjjs3MX2sA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 22:13:28 2026 by rpki-client