Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
File:                     P20pux90eTz4jHg3KFY7vUPoCj4.mft (raw, json)
Hash identifier:          60VlbmJ+/WhhxnvhYccvIIZEAb+aIUdZJo0zdWfBn9A=
Subject key identifier:   23:09:B1:13:48:4F:23:E9:8A:12:74:B3:9E:CF:0D:02:16:F8:69:EB
Authority key identifier: 3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
Certificate issuer:       /CN=A9186428/serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Certificate serial:       67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
Manifest number:          66
Signing time:             Sat 03 Oct 2026 08:44:39 +0000
Manifest this update:     Sat 03 Oct 2026 08:44:38 +0000
Manifest next update:     Sat 10 Oct 2026 08:44:38 +0000
Files and hashes:         1: P20pux90eTz4jHg3KFY7vUPoCj4.crl (hash: jBTf9+j/JYNjwYorpJyaxfIWL34FYQEUGcRX/df0KZ4=)
                          2: 66767246246211F193F9A3F1C5833773.roa (hash: I6tnaRrL2ImhRfp92h3chg5E+cCvl6J/obElhMxuuOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
                          rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186428, serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
        Validity
            Not Before: Oct  3 08:44:38 2026 GMT
            Not After : Oct 10 08:44:38 2026 GMT
        Subject: CN=6ac0c077-3592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bf:d7:8e:8a:b5:7c:c5:5a:4e:28:de:51:14:
                    e8:70:a2:e8:a0:ff:ca:fe:d8:78:aa:36:42:80:2e:
                    37:fb:e0:26:b9:86:fe:4b:3f:b1:1c:46:ea:79:62:
                    ad:7b:a3:fe:89:8c:4e:cd:83:ef:34:d2:12:4a:78:
                    e2:a3:61:77:b4:e8:33:85:87:11:60:df:14:d7:1a:
                    5a:78:67:a9:a0:2b:cb:fc:fa:de:3f:4a:07:58:77:
                    a5:d8:ce:f5:81:0c:c2:4a:c7:31:e9:24:d2:8d:6c:
                    64:13:e2:aa:35:73:ac:ef:0b:7d:d5:8c:3d:85:f3:
                    07:fb:ea:32:0f:e0:96:40:7f:ee:28:43:53:04:37:
                    0c:bd:1d:a0:35:ab:a2:92:11:3e:83:5a:ff:1d:9b:
                    d3:35:fa:48:6a:a6:75:68:fd:bf:d6:f5:79:7e:c8:
                    67:96:2b:68:63:c5:ac:a8:75:43:68:09:fc:e2:f0:
                    51:2f:88:8e:62:ff:f0:39:08:70:06:32:90:15:5b:
                    cb:48:62:e3:5a:02:7d:00:d4:2b:41:ce:62:e7:6a:
                    9b:66:eb:3e:70:7b:93:e4:01:3e:24:16:f6:46:bd:
                    7c:03:b7:22:ac:48:12:26:5a:6e:86:56:54:0b:20:
                    3b:51:bb:8a:8f:8a:52:4a:61:51:27:75:b4:ed:7b:
                    d0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:09:B1:13:48:4F:23:E9:8A:12:74:B3:9E:CF:0D:02:16:F8:69:EB
            X509v3 Authority Key Identifier:
                keyid:3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:19:10:a2:70:96:87:51:df:17:c9:e7:b9:5f:f1:74:a4:37:
         89:d0:80:33:d2:aa:a6:d7:78:11:24:1f:83:8e:0d:51:f6:b8:
         f2:39:ca:05:17:57:1b:5f:79:b4:de:51:fa:d4:db:f0:c4:5b:
         35:80:30:47:06:55:47:d6:0f:51:1a:1f:07:e3:93:4c:41:9d:
         b8:be:5b:5d:d6:70:58:e6:5c:25:a2:cb:9b:b9:3d:40:fc:00:
         c1:33:5a:58:74:ce:80:f5:f9:f8:8c:35:96:96:2a:23:1f:85:
         73:6d:76:15:74:b5:45:01:9b:cd:6d:81:41:92:dd:7b:b8:0c:
         33:8a:f9:71:16:3c:b4:4a:91:d4:dc:5d:66:ed:8a:16:c9:ea:
         55:83:5a:2c:d7:06:20:ef:ca:c5:69:29:50:26:dd:1b:2e:7f:
         09:5d:b0:05:c5:70:10:79:df:93:76:57:82:ba:e3:5c:36:7e:
         23:01:5e:78:f3:aa:ee:b4:63:87:99:75:68:a2:bd:f5:4f:65:
         6d:84:c6:4b:76:83:a5:a5:35:32:bf:db:a9:92:d4:d1:16:d1:
         ac:61:c9:50:d9:fa:e9:ec:8a:57:13:f7:07:9e:f4:51:ab:c1:
         19:74:7c:ca:73:dc:c2:6b:f4:fc:3d:93:9b:c9:bb:c5:8f:91:
         75:57:09:30
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjQyODExMC8GA1UEBRMoM0Y2RDI5QkIxRjc0NzkzQ0Y4OEM3ODM3Mjg1NjNCQkQ0
M0U4MEEzRTAeFw0yNjEwMDMwODQ0MzhaFw0yNjEwMTAwODQ0MzhaMBgxFjAUBgNV
BAMTDTZhYzBjMDc3LTM1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDyv9eOirV8xVpOKN5RFOhwouig/8r+2HiqNkKALjf74Ca5hv5LP7EcRup5Yq17
o/6JjE7Ng+800hJKeOKjYXe06DOFhxFg3xTXGlp4Z6mgK8v8+t4/SgdYd6XYzvWB
DMJKxzHpJNKNbGQT4qo1c6zvC33VjD2F8wf76jIP4JZAf+4oQ1MENwy9HaA1q6KS
ET6DWv8dm9M1+khqpnVo/b/W9Xl+yGeWK2hjxayodUNoCfzi8FEviI5i//A5CHAG
MpAVW8tIYuNaAn0A1CtBzmLnaptm6z5we5PkAT4kFvZGvXwDtyKsSBImWm6GVlQL
IDtRu4qPilJKYVEndbTte9CfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIwmxE0hP
I+mKEnSzns8NAhb4aeswHwYDVR0jBBgwFoAUP20pux90eTz4jHg3KFY7vUPoCj4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NDI4L0VGNUMyN0I0MjQ2
MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6NGpIZzNLRlk3dlVQb0Nq
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUDIwcHV4OTBlVHo0akhnM0tGWTd2VVBvQ2o0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2
NDI4L0VGNUMyN0I0MjQ2MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6
NGpIZzNLRlk3dlVQb0NqNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBqGRCicJaHUd8Xyee5X/F0pDeJ0IAz0qqm13gRJB+Djg1R9rjyOcoFF1cbX3m0
3lH61NvwxFs1gDBHBlVH1g9RGh8H45NMQZ24vltd1nBY5lwlosubuT1A/ADBM1pY
dM6A9fn4jDWWliojH4VzbXYVdLVFAZvNbYFBkt17uAwzivlxFjy0SpHU3F1m7YoW
yepVg1os1wYg78rFaSlQJt0bLn8JXbAFxXAQed+TdleCuuNcNn4jAV5486rutGOH
mXVoor31T2VthMZLdoOlpTUyv9upktTRFtGsYclQ2frp7IpXE/cHnvRRq8EZdHzK
c9zCa/T8PZObybvFj5F1Vwkw
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:16:23 2026 by rpki-client