Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File:                     I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier:          5VnwZ4VSu9wZWr4uLQ12CfsXl99Goxb5UhjfdHVW5RA=
Subject key identifier:   7D:1E:60:C8:39:73:47:EE:42:80:9A:3B:27:79:2C:0E:04:B8:D3:0C
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer:       /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial:       0D21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number:          0D08
Signing time:             Thu 24 Sep 2026 18:22:44 +0000
Manifest this update:     Thu 24 Sep 2026 18:22:44 +0000
Manifest next update:     Thu 01 Oct 2026 18:22:44 +0000
Files and hashes:         1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: sZTYzU3cxX8ioy2r9dc/Mh5q3zvcDdM1VGPGNU+zRGM=)
                          2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: mKkuVSeTZtVuG7BfqaqUZzcHeF9XMKmK1adCEnjlrRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
                          rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3361 (0xd21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
        Validity
            Not Before: Sep 24 18:22:44 2026 GMT
            Not After : Oct  1 18:22:44 2026 GMT
        Subject: CN=6ab56a74-6676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:e9:3d:6a:37:9f:62:63:43:68:01:05:0c:
                    15:d8:9e:a5:25:ec:cb:9c:d2:30:20:60:45:23:f6:
                    3a:43:fe:37:68:a9:22:0f:cb:c5:49:6a:41:bf:d4:
                    a9:eb:5e:b5:82:ac:59:10:75:3b:4e:85:4d:7d:c8:
                    72:0f:be:5a:bc:92:e0:78:08:9e:73:b2:21:46:f4:
                    3f:13:93:93:05:8b:39:40:fa:59:ed:fa:a8:75:82:
                    a4:2f:d8:f7:35:59:9c:9e:e2:99:4c:32:33:b3:76:
                    7b:80:b5:10:a1:cd:43:6b:36:5a:70:d1:f7:af:fd:
                    f3:05:b7:95:7d:6b:2d:73:c6:8f:20:ba:ea:0e:cb:
                    19:e9:ae:e7:45:12:e2:61:df:4c:28:d2:4c:06:fa:
                    c2:ad:15:10:84:f2:91:03:8a:02:17:4b:c5:49:b2:
                    85:25:48:a7:43:c3:71:7a:29:3d:93:e3:25:6b:db:
                    7e:f5:79:af:48:31:da:42:90:25:df:df:ee:2c:eb:
                    3f:ab:a2:aa:8c:51:b8:a4:2b:af:51:38:20:25:4a:
                    7d:c5:42:a4:c6:08:d3:4e:97:6b:65:a7:90:e0:f0:
                    27:52:c5:06:c2:d4:5d:1e:cb:cb:77:77:3a:2f:c0:
                    b0:51:19:70:f6:11:18:ff:3f:af:11:51:6f:10:ed:
                    fd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1E:60:C8:39:73:47:EE:42:80:9A:3B:27:79:2C:0E:04:B8:D3:0C
            X509v3 Authority Key Identifier:
                keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:21:a6:0b:dd:71:c7:cd:ef:1a:9a:84:83:b4:0d:45:ba:
         74:44:41:d4:ca:ee:d8:f6:a7:59:04:be:98:44:7c:5c:a9:59:
         10:f7:52:d2:dd:19:a7:34:df:32:81:9c:ea:43:f6:48:a5:d4:
         83:74:c2:0c:39:fb:0f:c1:e6:02:4f:c4:35:c7:1b:a7:a7:68:
         95:88:ae:9b:ef:b1:40:da:2c:d2:e4:bf:b9:b2:e9:0f:2e:79:
         06:5c:c1:14:a6:19:3c:6d:4c:f1:96:d8:bf:2f:36:4e:a8:e0:
         51:e0:28:b1:55:94:a9:c1:ed:be:85:e1:e0:77:07:73:7e:df:
         a2:4b:a0:22:bf:e4:9c:73:99:ca:70:35:8d:87:8f:42:81:c7:
         82:cf:83:b0:1e:fb:1b:04:68:bf:07:29:11:9b:2d:86:39:63:
         67:0d:1e:8b:14:a0:a4:ac:7f:55:d7:1c:99:31:22:e4:14:56:
         56:57:17:78:4d:cf:f4:10:cd:9e:63:a9:9e:3a:4f:ac:17:1a:
         41:76:31:13:dd:41:58:2f:80:cf:d4:2a:33:07:04:7e:d9:45:
         c5:e4:35:9c:20:3c:f4:a8:4b:06:a3:fd:27:11:f9:b9:8d:ee:
         84:1b:8b:53:7e:dc:1c:69:ba:23:19:f5:ab:d3:40:d8:82:72:
         a0:d8:dc:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5
OTI1RkJENEYwHhcNMjYwOTI0MTgyMjQ0WhcNMjYxMDAxMTgyMjQ0WjAYMRYwFAYD
VQQDEw02YWI1NmE3NC02Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufDpPWo3n2JjQ2gBBQwV2J6lJezLnNIwIGBFI/Y6Q/43aKkiD8vFSWpBv9Sp
6161gqxZEHU7ToVNfchyD75avJLgeAiec7IhRvQ/E5OTBYs5QPpZ7fqodYKkL9j3
NVmcnuKZTDIzs3Z7gLUQoc1DazZacNH3r/3zBbeVfWstc8aPILrqDssZ6a7nRRLi
Yd9MKNJMBvrCrRUQhPKRA4oCF0vFSbKFJUinQ8Nxeik9k+Mla9t+9XmvSDHaQpAl
39/uLOs/q6KqjFG4pCuvUTggJUp9xUKkxgjTTpdrZaeQ4PAnUsUGwtRdHsvLd3c6
L8CwURlw9hEY/z+vEVFvEO39hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH0eYMg5
c0fuQoCaOyd5LA4EuNMMMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0
MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj
TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdtAhpgvdccfN7xqahIO0DUW6dERB1Mru2PanWQS+mER8XKlZEPdS0t0ZpzTf
MoGc6kP2SKXUg3TCDDn7D8HmAk/ENccbp6dolYium++xQNos0uS/ubLpDy55BlzB
FKYZPG1M8ZbYvy82TqjgUeAosVWUqcHtvoXh4HcHc37fokugIr/knHOZynA1jYeP
QoHHgs+DsB77GwRovwcpEZsthjljZw0eixSgpKx/VdccmTEi5BRWVlcXeE3P9BDN
nmOpnjpPrBcaQXYxE91BWC+Az9QqMwcEftlFxeQ1nCA89KhLBqP9JxH5uY3uhBuL
U37cHGm6Ixn1q9NA2IJyoNjcgg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:28:26 2026 by rpki-client