Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
File:                     4yZfQR3LsPEXSFI4boF_4njS-Q4.mft (raw, json)
Hash identifier:          PqeXgxzVx76PaaCjMPHMChg9Np+GHbWpe5xjTlDrUrI=
Subject key identifier:   0E:BE:F5:0B:86:54:05:50:F0:87:0E:26:5F:1D:21:E3:4D:70:86:17
Authority key identifier: E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E
Certificate issuer:       /CN=A91598B1/serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
Manifest number:          A7
Signing time:             Thu 01 Oct 2026 08:36:06 +0000
Manifest this update:     Thu 01 Oct 2026 08:36:06 +0000
Manifest next update:     Thu 08 Oct 2026 08:36:06 +0000
Files and hashes:         1: 4yZfQR3LsPEXSFI4boF_4njS-Q4.crl (hash: cXwAEAzfCMAzNrfqSLZig96TvzKLTpTrsPzzzWvypCY=)
                          2: DE80A48EC7EF11F0A991652AC4F9AE02.roa (hash: H7kSN8+Xlu4BXj6sGCock6IRGM49q5itOkR0aztzbHA=)
                          3: eR8yiPj_HfPocgIKe4Lfgud2LQ4.asa (hash: GkxPfUymF1yghLhW8uwGshrG1gg+jszt03IX72KcUQo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl
                          rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 08:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91598B1, serialNumber=E3265F411DCBB0F1174852386E817FE278D2F90E
        Validity
            Not Before: Oct  1 08:36:06 2026 GMT
            Not After : Oct  8 08:36:06 2026 GMT
        Subject: CN=6abe1b76-b548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:c7:6f:b0:b2:c6:87:ef:75:3c:26:11:86:
                    ee:77:c6:5f:0d:ba:a6:55:06:8f:c1:db:fb:3d:50:
                    d1:88:1b:43:4b:53:af:a4:ad:e2:9c:80:06:37:2e:
                    a0:50:4f:e0:41:06:4e:85:04:33:5a:00:39:88:99:
                    86:30:c0:24:ec:f6:ec:03:f1:09:60:1e:f8:89:3c:
                    62:a1:8d:18:ce:3f:76:33:fb:8a:16:23:4b:61:75:
                    63:c9:8c:c4:24:8d:b2:b5:c2:70:53:2f:34:fa:91:
                    7c:08:b8:c1:7f:67:f6:50:e6:83:a3:6c:0a:86:8d:
                    ff:59:80:95:a9:8f:c5:92:18:41:34:3c:32:b3:6f:
                    06:bc:1c:8d:0f:00:9f:dd:11:c2:03:83:38:c4:f4:
                    1a:bd:d8:2e:72:c8:db:9a:0a:c4:e0:8a:ba:38:60:
                    d4:bb:c0:b3:0a:bf:ff:b1:ae:76:52:9c:a0:c4:6d:
                    50:de:34:55:3b:ae:71:39:a7:6c:5e:1a:08:b2:39:
                    34:ec:d9:e4:02:fe:d3:70:9d:2a:05:df:d4:5c:13:
                    10:71:3e:a7:fd:71:28:a7:68:82:51:9d:c8:c6:85:
                    c0:00:69:7f:1a:c4:73:f6:3b:9c:ae:8a:b6:c8:7b:
                    72:7c:2b:6e:51:e9:2c:c8:b5:d0:10:31:ce:35:3e:
                    de:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BE:F5:0B:86:54:05:50:F0:87:0E:26:5F:1D:21:E3:4D:70:86:17
            X509v3 Authority Key Identifier:
                keyid:E3:26:5F:41:1D:CB:B0:F1:17:48:52:38:6E:81:7F:E2:78:D2:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4yZfQR3LsPEXSFI4boF_4njS-Q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598B1/720276B0C66511F09A903E37C4F9AE02/4yZfQR3LsPEXSFI4boF_4njS-Q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ea:9e:a1:fb:ef:25:18:1d:9d:d3:47:66:07:2d:3f:a4:40:
         ea:aa:64:03:69:03:8c:9e:1a:d7:7f:ce:91:7d:32:de:5c:fa:
         43:8f:a3:1c:a9:ac:c5:50:be:73:6e:b3:96:3d:c8:32:68:df:
         a9:16:3a:c4:84:73:34:91:c6:32:f0:81:08:51:b2:5c:5c:51:
         fe:ab:02:73:ea:cf:fc:7d:ec:70:78:64:1b:f9:0e:d2:7b:04:
         aa:72:bb:b4:02:1a:af:08:60:b9:9f:cc:b6:b6:8d:e0:89:96:
         20:e5:5f:d0:1b:21:62:0d:9d:eb:ca:fe:e6:4a:f6:79:a6:cd:
         46:19:d2:64:4f:30:e2:59:12:fd:19:bc:7a:d1:07:08:d1:fd:
         20:f3:04:d3:d6:69:58:b5:de:f7:0f:49:40:47:94:60:d4:89:
         7a:70:dc:a1:94:9b:e3:e9:ab:fd:4f:0e:86:37:23:79:a0:f5:
         c9:7d:86:c8:ee:1c:a1:ff:be:cb:f3:ca:73:2f:f6:80:e7:21:
         ce:39:1e:06:a8:fa:66:60:86:c0:d7:0e:52:bf:14:5b:7e:fa:
         1d:58:09:8b:b4:7b:a7:ec:57:6f:70:8d:9f:3c:46:51:cf:0b:
         7e:c7:0d:62:28:bb:a1:b0:15:bb:ef:e1:d0:b6:41:00:b3:1b:
         60:59:2a:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk4QjExMTAvBgNVBAUTKEUzMjY1RjQxMURDQkIwRjExNzQ4NTIzODZFODE3RkUy
NzhEMkY5MEUwHhcNMjYxMDAxMDgzNjA2WhcNMjYxMDA4MDgzNjA2WjAYMRYwFAYD
VQQDEw02YWJlMWI3Ni1iNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq+7Hb7CyxofvdTwmEYbud8ZfDbqmVQaPwdv7PVDRiBtDS1OvpK3inIAGNy6g
UE/gQQZOhQQzWgA5iJmGMMAk7PbsA/EJYB74iTxioY0Yzj92M/uKFiNLYXVjyYzE
JI2ytcJwUy80+pF8CLjBf2f2UOaDo2wKho3/WYCVqY/FkhhBNDwys28GvByNDwCf
3RHCA4M4xPQavdgucsjbmgrE4Iq6OGDUu8CzCr//sa52UpygxG1Q3jRVO65xOads
XhoIsjk07NnkAv7TcJ0qBd/UXBMQcT6n/XEop2iCUZ3IxoXAAGl/GsRz9jucroq2
yHtyfCtuUeksyLXQEDHONT7exwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6+9QuG
VAVQ8IcOJl8dIeNNcIYXMB8GA1UdIwQYMBaAFOMmX0Edy7DxF0hSOG6Bf+J40vkO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OThCMS83MjAyNzZCMEM2
NjUxMUYwOUE5MDNFMzdDNEY5QUUwMi80eVpmUVIzTHNQRVhTRkk0Ym9GXzRualMt
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzR5WmZRUjNMc1BFWFNGSTRib0ZfNG5qUy1RNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OThCMS83MjAyNzZCMEM2NjUxMUYwOUE5MDNFMzdDNEY5QUUwMi80eVpmUVIzTHNQ
RVhTRkk0Ym9GXzRualMtUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGOqeofvvJRgdndNHZgctP6RA6qpkA2kDjJ4a13/OkX0y3lz6Q4+jHKmsxVC+
c26zlj3IMmjfqRY6xIRzNJHGMvCBCFGyXFxR/qsCc+rP/H3scHhkG/kO0nsEqnK7
tAIarwhguZ/MtraN4ImWIOVf0BshYg2d68r+5kr2eabNRhnSZE8w4lkS/Rm8etEH
CNH9IPME09ZpWLXe9w9JQEeUYNSJenDcoZSb4+mr/U8OhjcjeaD1yX2GyO4cof++
y/PKcy/2gOchzjkeBqj6ZmCGwNcOUr8UW376HVgJi7R7p+xXb3CNnzxGUc8LfscN
Yii7obAVu+/h0LZBALMbYFkqqg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 00:44:47 2026 by rpki-client