Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
File:                     j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft (raw, json)
Hash identifier:          7r7d3iedB6gS7N/FkrU+PBfimfVG3TzWe+NPTQVBJRU=
Subject key identifier:   0F:70:A7:71:30:BC:38:56:CA:8C:60:7B:3A:B6:42:CD:D6:70:71:BB
Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9
Certificate issuer:       /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
Certificate serial:       039C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
Manifest number:          0392
Signing time:             Mon 21 Sep 2026 00:31:43 +0000
Manifest this update:     Mon 21 Sep 2026 00:31:42 +0000
Manifest next update:     Mon 28 Sep 2026 00:31:42 +0000
Files and hashes:         1: j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl (hash: MHSE4VwQUxgfznIAih77nDICH6opek/C4LMLDM5Yewo=)
                          2: 3B501252140811EDBF3D2F27C4F9AE02.roa (hash: IaCEDFgWsu0fOu5wbRu+aiuKfmRdek8u7/fO0bD+YLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl
                          rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91644A4, serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9
        Validity
            Not Before: Sep 21 00:31:42 2026 GMT
            Not After : Sep 28 00:31:42 2026 GMT
        Subject: CN=6ab07aef-bf01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:b1:c7:b3:c4:a3:d1:b6:52:af:fc:a7:c0:
                    f9:f8:ca:da:ba:6f:01:3d:83:b5:0b:71:96:13:c8:
                    df:49:1a:85:57:ac:f9:b5:ae:6e:97:b8:5b:d5:f8:
                    23:ce:c2:11:b6:a1:fc:2b:21:68:f3:cd:0f:a7:6c:
                    54:07:65:e2:c1:dc:52:b7:03:1d:88:e8:41:28:b6:
                    9a:a3:a8:07:d7:6f:1d:e5:b4:ce:36:e3:69:1e:67:
                    f6:a5:95:a3:1f:9e:b8:bf:2d:bb:b1:9f:19:5e:eb:
                    ac:23:79:6a:09:27:3e:19:ae:b8:61:44:2a:31:1f:
                    74:ae:2c:67:51:dd:08:58:6a:ba:4f:b2:a2:56:7d:
                    03:bb:df:92:6c:d6:fd:68:72:49:93:05:bc:3e:b7:
                    61:64:9c:3f:30:9b:f3:70:a8:65:a1:dd:a8:4b:7b:
                    79:e9:df:65:9b:00:79:29:2d:64:c5:df:dd:8d:49:
                    4b:04:36:1a:c4:db:dc:71:07:a1:f7:34:ef:1f:73:
                    68:3e:89:8b:62:e0:84:23:cc:f5:af:b6:83:62:9a:
                    76:34:f1:0c:78:75:a2:28:57:27:4c:02:5c:ca:5d:
                    3b:ba:96:33:2b:c2:6e:75:9d:71:40:0b:8b:83:b5:
                    33:80:3e:5a:6f:fd:6f:4c:53:3d:44:78:15:43:f0:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:A7:71:30:BC:38:56:CA:8C:60:7B:3A:B6:42:CD:D6:70:71:BB
            X509v3 Authority Key Identifier:
                keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5b:85:6d:6a:78:5d:e3:d3:55:75:a3:2f:45:56:7d:39:85:
         78:29:b5:c9:dc:50:d0:95:5d:5f:df:de:57:61:16:60:50:8f:
         fb:bc:b2:2a:5f:55:ea:94:18:0e:9b:f5:42:3b:94:5c:a6:98:
         06:99:ab:04:36:2f:75:50:0d:7f:b9:1a:8b:e0:22:45:f6:8f:
         a6:a2:77:25:cc:7d:96:9b:d7:42:e7:74:31:3e:e4:ce:5e:80:
         25:38:ae:c7:c4:3f:cf:30:e5:04:9c:d5:46:8e:d7:d8:8d:f1:
         8c:ce:9a:fd:97:84:7b:ab:ad:0a:ba:aa:ca:ca:a8:53:b7:b2:
         4f:fb:1c:9a:e3:7e:2b:1b:cb:f8:9d:13:0f:11:89:f9:9a:15:
         69:b1:b3:f6:09:ae:b8:52:f9:aa:5b:68:f6:1a:1a:72:0e:03:
         26:89:ab:4d:dd:8b:c4:bc:e0:68:94:90:82:87:69:94:b1:d3:
         b3:26:bd:6b:ff:b8:e4:17:25:88:2a:af:ba:8b:81:58:9d:fc:
         53:93:e1:54:6f:de:33:bb:1e:6c:a0:f7:a4:d0:2b:d1:9a:8c:
         00:82:55:d1:25:24:8a:53:11:4c:fb:af:2d:de:85:70:c7:81:
         4f:87:83:d3:d3:73:e8:3e:bb:1f:78:65:0d:f7:92:c7:42:a9:
         90:0e:d5:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ0QTQxMTAvBgNVBAUTKDhGQzY2MUExOTMzMkFFODY0QkM4NzkwMDc0NERBMzM3
RjlBNzAwQTkwHhcNMjYwOTIxMDAzMTQyWhcNMjYwOTI4MDAzMTQyWjAYMRYwFAYD
VQQDEw02YWIwN2FlZi1iZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rmxx7PEo9G2Uq/8p8D5+Mraum8BPYO1C3GWE8jfSRqFV6z5ta5ul7hb1fgj
zsIRtqH8KyFo880Pp2xUB2XiwdxStwMdiOhBKLaao6gH128d5bTONuNpHmf2pZWj
H564vy27sZ8ZXuusI3lqCSc+Ga64YUQqMR90rixnUd0IWGq6T7KiVn0Du9+SbNb9
aHJJkwW8PrdhZJw/MJvzcKhlod2oS3t56d9lmwB5KS1kxd/djUlLBDYaxNvccQeh
9zTvH3NoPomLYuCEI8z1r7aDYpp2NPEMeHWiKFcnTAJcyl07upYzK8JudZ1xQAuL
g7UzgD5ab/1vTFM9RHgVQ/D4uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9wp3Ew
vDhWyoxgezq2Qs3WcHG7MB8GA1UdIwQYMBaAFI/GYaGTMq6GS8h5AHRNozf5pwCp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDRBNC8yRDIzQTRDQzAy
MDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJvWkx5SGtBZEUyak5fbW5B
S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o4WmhvWk15cm9aTHlIa0FkRTJqTl9tbkFLay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDRBNC8yRDIzQTRDQzAyMDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJv
Wkx5SGtBZEUyak5fbW5BS2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeVuFbWp4XePTVXWjL0VWfTmFeCm1ydxQ0JVdX9/eV2EWYFCP+7yyKl9V6pQY
Dpv1QjuUXKaYBpmrBDYvdVANf7kai+AiRfaPpqJ3Jcx9lpvXQud0MT7kzl6AJTiu
x8Q/zzDlBJzVRo7X2I3xjM6a/ZeEe6utCrqqysqoU7eyT/scmuN+KxvL+J0TDxGJ
+ZoVabGz9gmuuFL5qlto9hoacg4DJomrTd2LxLzgaJSQgodplLHTsya9a/+45Bcl
iCqvuouBWJ38U5PhVG/eM7sebKD3pNAr0ZqMAIJV0SUkilMRTPuvLd6FcMeBT4eD
09Nz6D67H3hlDfeSx0KpkA7V/g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:45 2026 by rpki-client