Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          O1bdiF4fe7zihodPi9aKQV2RZBgmde7/AxP2IYD8Gfk=
Subject key identifier:   9B:C1:32:AA:7A:DC:1D:AE:6B:6F:DB:8D:D1:9B:5B:98:03:B9:F2:3E
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0F86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0F5A
Signing time:             Tue 22 Sep 2026 17:28:12 +0000
Manifest this update:     Tue 22 Sep 2026 17:28:12 +0000
Manifest next update:     Tue 29 Sep 2026 17:28:12 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: PmZlz2CtbNGWC5hEJh3lwrFtWfWaMimoBCmwcCawp7A=)
                          2: 93713A1442F311EDA8889068C4F9AE02.roa (hash: kW/azHIo/hS4GG4jZMMnW9bGd24sdPe70lFUMVnm2rM=)
                          3: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: stFWg1dMHznKMtzRSOUwWm0CGmuogU2NNcwYBYm0LzM=)
                          4: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 7mK7C2dDA9Pr5XARK5lfOZOhUbUYxwvET636T8UBOLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
                          rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3974 (0xf86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Sep 22 17:28:12 2026 GMT
            Not After : Sep 29 17:28:12 2026 GMT
        Subject: CN=6ab2baac-66c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:34:da:a2:33:a3:be:10:2f:9b:64:17:07:
                    9d:5a:26:9c:7d:72:5c:01:4c:b8:25:f1:f9:04:0e:
                    6d:0f:de:34:51:21:5a:2d:8c:c7:d4:86:6e:9b:eb:
                    3c:14:da:e5:a7:65:b6:7d:2a:1e:cf:1d:56:b8:c8:
                    03:c3:29:ec:df:7f:a5:b1:82:76:47:fa:ac:6b:54:
                    89:91:04:be:68:d1:3f:23:5a:83:52:4d:da:cc:d6:
                    fd:ad:bb:f3:cc:7b:47:29:ba:1b:6b:37:74:e1:28:
                    59:b1:3f:94:b6:c8:19:c7:cb:d8:67:06:c7:ae:e9:
                    99:8e:aa:72:cc:6b:5e:2b:6b:bf:20:f3:03:5e:be:
                    d8:a1:b8:76:04:5d:43:62:9b:a6:d2:14:9e:44:11:
                    36:f6:e7:6a:fe:7c:50:49:67:b8:8b:3b:32:f5:eb:
                    8f:f6:8e:24:f6:72:7e:c0:a7:d4:95:35:e3:12:66:
                    0d:21:3a:6e:c7:be:5f:e0:ff:64:b8:ea:19:04:4d:
                    b5:5a:fa:84:84:8e:f3:ab:19:1d:fb:3a:15:60:e1:
                    37:c0:43:82:66:80:5f:ca:26:3a:7a:55:03:ae:1d:
                    25:6e:80:88:57:cb:76:ba:5a:96:fb:33:d7:f4:81:
                    e0:68:f3:2d:58:16:ae:90:0e:e7:1d:e5:d3:44:16:
                    13:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C1:32:AA:7A:DC:1D:AE:6B:6F:DB:8D:D1:9B:5B:98:03:B9:F2:3E
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:86:15:df:0e:36:e7:e4:bb:65:53:bd:89:5c:10:92:ca:
         7b:fe:fc:d0:81:bb:64:ca:e5:91:7b:f2:2f:d8:f5:8f:d0:79:
         c6:ba:ac:5c:47:aa:2f:59:9a:c3:80:78:fe:6c:2c:57:08:74:
         21:d5:75:7a:40:f2:31:3f:c2:d4:90:0e:a7:4c:a5:b9:0a:a9:
         d8:04:79:46:80:14:09:3c:88:ba:af:39:d8:ed:6b:b5:77:48:
         22:2e:98:37:11:e2:07:59:2b:a7:0b:02:9a:fb:da:92:02:8f:
         f2:39:74:d3:a9:32:54:6e:b7:bf:91:74:c0:f6:88:14:a1:9f:
         12:0d:c5:80:46:0c:38:53:b1:7c:95:b9:29:04:a2:43:e8:0a:
         d6:76:83:cc:04:70:e2:b2:01:99:82:27:84:3c:1c:38:d8:4b:
         f9:4b:1e:e4:ad:db:a1:f7:bb:4f:8e:73:ef:d2:ee:74:2a:6b:
         9a:13:ef:17:29:a9:9f:e8:98:61:4c:03:e8:28:a5:d9:2a:3a:
         fd:3a:35:b4:74:f4:66:d8:28:75:3a:b5:f1:db:a6:c0:ab:01:
         ac:56:12:10:d1:50:bd:6e:d3:68:dd:d5:7a:a4:8f:65:61:26:
         c4:97:61:6a:00:86:28:55:5d:76:f6:7b:63:55:1b:8b:15:69:
         83:c0:b3:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5
NTVFRDg5RTAwHhcNMjYwOTIyMTcyODEyWhcNMjYwOTI5MTcyODEyWjAYMRYwFAYD
VQQDEw02YWIyYmFhYy02NmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiqI02qIzo74QL5tkFwedWiacfXJcAUy4JfH5BA5tD940USFaLYzH1IZum+s8
FNrlp2W2fSoezx1WuMgDwyns33+lsYJ2R/qsa1SJkQS+aNE/I1qDUk3azNb9rbvz
zHtHKbobazd04ShZsT+UtsgZx8vYZwbHrumZjqpyzGteK2u/IPMDXr7Yobh2BF1D
Ypum0hSeRBE29udq/nxQSWe4izsy9euP9o4k9nJ+wKfUlTXjEmYNITpux75f4P9k
uOoZBE21WvqEhI7zqxkd+zoVYOE3wEOCZoBfyiY6elUDrh0lboCIV8t2ulqW+zPX
9IHgaPMtWBaukA7nHeXTRBYTzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvBMqp6
3B2ua2/bjdGbW5gDufI+MB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF
MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTFENy82OEYwOTI5MjlFMkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFD
ckFhcEFkWmJ1YXlWWHRpZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAntKGFd8ONufku2VTvYlcEJLKe/780IG7ZMrlkXvyL9j1j9B5xrqsXEeqL1ma
w4B4/mwsVwh0IdV1ekDyMT/C1JAOp0yluQqp2AR5RoAUCTyIuq852O1rtXdIIi6Y
NxHiB1krpwsCmvvakgKP8jl006kyVG63v5F0wPaIFKGfEg3FgEYMOFOxfJW5KQSi
Q+gK1naDzARw4rIBmYInhDwcONhL+Use5K3bofe7T45z79LudCprmhPvFympn+iY
YUwD6Cil2So6/To1tHT0ZtgodTq18dumwKsBrFYSENFQvW7TaN3VeqSPZWEmxJdh
agCGKFVddvZ7Y1UbixVpg8Cz3w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:59:51 2026 by rpki-client