Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
File:                     _TtO-PebCuEn5x5LbBhp2Bsi6IA.mft (raw, json)
Hash identifier:          aOaSW7jPqC0Arc9sOlQ2jVAabzpTg0AH0wW5R2s19iA=
Subject key identifier:   A5:0F:34:B6:1E:1F:84:C9:8C:F9:ED:DF:41:4B:17:45:20:FC:27:38
Authority key identifier: FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80
Certificate issuer:       /CN=A91620E0/serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
Certificate serial:       1250
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
Manifest number:          0FC8
Signing time:             Tue 22 Sep 2026 06:06:29 +0000
Manifest this update:     Tue 22 Sep 2026 06:06:28 +0000
Manifest next update:     Tue 29 Sep 2026 06:06:28 +0000
Files and hashes:         1: _TtO-PebCuEn5x5LbBhp2Bsi6IA.crl (hash: +RbtDCyDGEl1xYL9rnrC6EqtfY9Dgq+pCdFjJ3a+Zs4=)
                          2: A40DF2FC959211EE839DCE49C4F9AE02.roa (hash: FjzFovZu6aXM8z/dlqSuAPqXLgKsrC/1lTjiwdyZmIg=)
                          3: A547705AF34A11EFA7A4C071C4F9AE02.roa (hash: BkPr25yKFO4OSu24mLv1IXHgIlBp7q8A5b/1fep419U=)
                          4: 1930A6C2DE1411EA9309134EC4F9AE02.roa (hash: 3wvmSVm24Be4PT+QoB6fmiVi8khIAb17IJdvXSMd/Sk=)
                          5: 50949534AAAE11F187CB4A693811F970.roa (hash: l0h/p7DjdnRmynh+nAyYMbP0S4Gi0gc2IDzle3zcR2A=)
                          6: E8CADC8EAACA11F1994AAEBB4511F970.roa (hash: sGlIm7n15nGUX3w4RSWt79+SmHQ1cDTRX06zpcJ8ftA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl
                          rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 06:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4688 (0x1250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91620E0, serialNumber=FD3B4EF8F79B0AE127E71E4B6C1869D81B22E880
        Validity
            Not Before: Sep 22 06:06:28 2026 GMT
            Not After : Sep 29 06:06:28 2026 GMT
        Subject: CN=6ab21ae5-3225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:a7:36:39:5b:05:0a:8b:f3:db:8a:29:41:
                    33:c6:f0:f9:fe:17:ee:9d:19:0a:24:d7:79:a7:d8:
                    ac:d5:8b:bf:65:e2:62:0a:5e:1c:c7:86:22:72:f0:
                    e1:bd:9f:c6:f0:d9:33:9a:b8:51:7b:4f:ed:bf:a8:
                    89:aa:aa:e8:fb:3e:e1:72:95:7e:bd:72:30:85:30:
                    d2:56:ae:3b:5f:58:83:e9:02:26:c1:40:39:20:8e:
                    56:da:f5:72:99:8e:82:2c:3d:82:3a:1c:5b:5d:ab:
                    d1:ac:d3:ee:cb:b1:2b:65:7b:29:28:e2:20:2c:6a:
                    9e:3e:95:a1:14:71:6b:fa:67:ce:9c:1e:6b:64:e3:
                    61:19:3a:f2:37:56:df:e4:0d:0b:74:e8:7a:85:18:
                    75:0d:77:f5:53:aa:a2:c1:ba:e4:14:cb:f8:3b:b6:
                    01:e9:19:4f:ee:79:26:48:68:55:14:ae:62:84:05:
                    38:3d:2e:6f:8d:e8:be:97:d0:25:21:ac:2c:56:2d:
                    c6:ba:53:59:39:5f:5b:f5:18:ad:2b:6b:1a:06:44:
                    04:d8:85:f8:62:3e:73:fc:85:be:af:cc:55:cc:dd:
                    11:75:af:b1:83:87:47:af:b9:be:67:fd:ef:a8:14:
                    3b:e7:9d:9d:e8:c2:89:f8:a9:dd:a5:75:27:0f:58:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0F:34:B6:1E:1F:84:C9:8C:F9:ED:DF:41:4B:17:45:20:FC:27:38
            X509v3 Authority Key Identifier:
                keyid:FD:3B:4E:F8:F7:9B:0A:E1:27:E7:1E:4B:6C:18:69:D8:1B:22:E8:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_TtO-PebCuEn5x5LbBhp2Bsi6IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/E1A384AC310E11EA9C3CE72FC4F9AE02/_TtO-PebCuEn5x5LbBhp2Bsi6IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:e4:b0:13:56:26:e2:8f:58:4f:4c:c5:df:eb:70:76:be:88:
         6f:4f:35:87:95:62:05:fd:2c:f7:c0:97:be:ed:23:ad:8a:e6:
         c0:8e:61:32:90:1b:ac:78:b9:08:d8:6d:73:fd:0c:8c:03:63:
         e6:7b:5b:9c:19:9d:a3:33:5f:e6:ca:e2:9e:75:0e:7b:c8:f3:
         1b:66:34:a0:56:f5:9c:04:85:28:21:4f:3c:d4:2e:bb:aa:cf:
         c1:58:a3:7b:85:44:c1:23:10:a7:50:c2:9a:b4:26:bf:67:15:
         0c:81:9d:e7:24:b2:13:a7:b1:c1:27:ff:3b:b4:7b:b4:72:e1:
         5e:d2:55:9f:cb:c5:46:22:89:ac:9b:cc:1d:b8:fb:fe:ac:df:
         bb:6a:0f:92:b2:a4:b5:66:40:80:23:3a:95:fc:0c:0d:dc:f4:
         b0:52:50:fc:16:91:06:4a:fa:fe:d3:3c:f5:50:1d:27:dc:4d:
         d2:e6:f6:49:52:e7:89:f2:8b:b7:8e:d0:c8:f6:80:39:b2:61:
         e7:87:f8:c2:a5:cc:d0:06:b5:a7:0d:ec:ca:99:19:8a:a2:1a:
         bb:58:64:7c:13:f7:00:fe:db:ee:88:1d:4d:92:af:40:3e:a9:
         8b:2e:cc:df:71:8a:c1:b5:a7:f9:e8:df:e7:27:dd:84:6a:f9:
         4c:81:36:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICElAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIwRTAxMTAvBgNVBAUTKEZEM0I0RUY4Rjc5QjBBRTEyN0U3MUU0QjZDMTg2OUQ4
MUIyMkU4ODAwHhcNMjYwOTIyMDYwNjI4WhcNMjYwOTI5MDYwNjI4WjAYMRYwFAYD
VQQDEw02YWIyMWFlNS0zMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr1OnNjlbBQqL89uKKUEzxvD5/hfunRkKJNd5p9is1Yu/ZeJiCl4cx4YicvDh
vZ/G8NkzmrhRe0/tv6iJqqro+z7hcpV+vXIwhTDSVq47X1iD6QImwUA5II5W2vVy
mY6CLD2COhxbXavRrNPuy7ErZXspKOIgLGqePpWhFHFr+mfOnB5rZONhGTryN1bf
5A0LdOh6hRh1DXf1U6qiwbrkFMv4O7YB6RlP7nkmSGhVFK5ihAU4PS5vjei+l9Al
IawsVi3GulNZOV9b9RitK2saBkQE2IX4Yj5z/IW+r8xVzN0Rda+xg4dHr7m+Z/3v
qBQ7552d6MKJ+KndpXUnD1j8AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUPNLYe
H4TJjPnt30FLF0Ug/Cc4MB8GA1UdIwQYMBaAFP07Tvj3mwrhJ+ceS2wYadgbIuiA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9FMUEzODRBQzMx
MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1RW41eDVMYkJocDJCc2k2
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19UdE8tUGViQ3VFbjV4NUxiQmhwMkJzaTZJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjBFMC9FMUEzODRBQzMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9fVHRPLVBlYkN1
RW41eDVMYkJocDJCc2k2SUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAyeSwE1Ym4o9YT0zF3+twdr6Ib081h5ViBf0s98CXvu0jrYrmwI5hMpAbrHi5
CNhtc/0MjANj5ntbnBmdozNf5srinnUOe8jzG2Y0oFb1nASFKCFPPNQuu6rPwVij
e4VEwSMQp1DCmrQmv2cVDIGd5ySyE6exwSf/O7R7tHLhXtJVn8vFRiKJrJvMHbj7
/qzfu2oPkrKktWZAgCM6lfwMDdz0sFJQ/BaRBkr6/tM89VAdJ9xN0ub2SVLnifKL
t47QyPaAObJh54f4wqXM0Aa1pw3sypkZiqIau1hkfBP3AP7b7ogdTZKvQD6piy7M
33GKwbWn+ejf5yfdhGr5TIE2Yw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:23:12 2026 by rpki-client