Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File:                     gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier:          wM3hzRv5dXzcA6jGYBpVR2Wf18TPmv9t5B4OfjlDJI0=
Subject key identifier:   28:C9:9C:16:63:B9:BE:03:DC:D1:70:AF:8E:04:9D:E7:2A:BD:33:26
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer:       /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial:       0CFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number:          0CE3
Signing time:             Thu 24 Sep 2026 18:26:09 +0000
Manifest this update:     Thu 24 Sep 2026 18:26:09 +0000
Manifest next update:     Thu 01 Oct 2026 18:26:09 +0000
Files and hashes:         1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: lxr8r9AGpOFbcO/bkx0rixVW1fRGknb8wDNBZxZzFBw=)
                          2: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=)
                          3: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
                          rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3325 (0xcfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
        Validity
            Not Before: Sep 24 18:26:09 2026 GMT
            Not After : Oct  1 18:26:09 2026 GMT
        Subject: CN=6ab56b41-a380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:eb:9b:cf:09:3e:14:bb:e2:c0:75:04:0c:
                    0a:f4:65:b6:c7:47:57:c4:35:3a:3d:f8:98:fe:bd:
                    46:65:93:58:51:d3:e3:01:4b:52:83:40:c2:a0:48:
                    7c:40:50:ff:5a:e1:70:24:d1:fd:14:44:69:69:9d:
                    9d:b6:e3:49:27:80:aa:9c:93:ee:3d:e2:b2:a3:e6:
                    83:5e:8b:b0:fa:da:b2:a8:c4:19:f1:fe:d1:d6:22:
                    06:bf:8c:b1:08:e3:29:37:eb:66:6a:d5:98:e0:0c:
                    95:59:78:56:f0:2f:1f:1e:39:79:a7:d6:d1:91:e6:
                    a5:a0:9b:19:39:82:07:a8:d7:da:4b:c4:1a:30:d1:
                    2a:a8:5d:dd:a9:c9:3b:89:46:3c:1c:fd:c3:a2:c9:
                    62:4e:1c:c4:be:18:4a:1c:43:72:48:b0:cf:db:48:
                    bd:9f:6d:aa:b2:6e:89:e1:fa:27:7a:27:88:1e:8f:
                    c3:47:f2:07:51:9d:56:d4:4d:4c:0e:38:97:16:9e:
                    3a:c2:65:7c:70:cc:dd:aa:36:58:2e:97:6d:99:5b:
                    69:04:d9:bd:6a:02:13:a7:e9:ad:f8:e1:35:8b:16:
                    7e:e9:27:a5:b1:cf:64:51:52:95:5b:3a:85:aa:94:
                    94:c4:f2:51:78:c1:77:35:1f:e6:a7:58:21:60:b6:
                    86:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C9:9C:16:63:B9:BE:03:DC:D1:70:AF:8E:04:9D:E7:2A:BD:33:26
            X509v3 Authority Key Identifier:
                keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1d:aa:6f:69:aa:21:1b:3f:28:07:ff:c9:58:63:e9:bd:30:
         24:32:3d:31:82:3a:2f:7b:23:cd:29:93:3c:7a:77:5f:44:11:
         ed:14:d4:2a:99:04:16:0e:3b:f9:5e:47:bc:1b:aa:c0:1d:41:
         e6:68:9e:b6:73:dd:26:14:78:89:fb:51:b8:b9:ac:90:23:30:
         33:5b:f6:47:65:86:63:e3:d9:7d:d3:bb:3c:fc:0d:c6:56:0e:
         b9:12:6e:c9:e7:99:d5:f0:91:7e:10:b4:44:28:19:65:dc:57:
         e9:64:47:44:c8:fc:28:3a:9a:ab:ac:d1:fd:80:dd:1b:e3:38:
         2f:a2:cf:82:81:38:b0:f4:75:83:f6:74:7e:3d:9a:3e:fe:e8:
         f6:b7:b9:b9:58:f8:0c:47:2d:d3:eb:7e:63:ac:f5:fd:1c:bc:
         19:a4:d4:9f:2f:00:ce:09:71:c4:1d:ad:7e:d1:e5:23:6c:a7:
         c1:fc:ae:6a:b2:34:9e:56:1c:1c:b6:8b:be:4f:0f:40:cf:f6:
         07:69:b1:0f:f9:cc:dc:5b:85:32:2c:13:f3:fc:02:d1:92:f1:
         56:6c:9c:1b:a2:62:94:44:9d:24:81:c4:34:62:fd:20:4c:0b:
         2f:5a:de:50:34:e2:9d:18:90:61:12:c2:6d:80:f0:e7:5e:c3:
         40:16:04:41
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC
RkZCNERFQzYwHhcNMjYwOTI0MTgyNjA5WhcNMjYxMDAxMTgyNjA5WjAYMRYwFAYD
VQQDEw02YWI1NmI0MS1hMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbzrm88JPhS74sB1BAwK9GW2x0dXxDU6PfiY/r1GZZNYUdPjAUtSg0DCoEh8
QFD/WuFwJNH9FERpaZ2dtuNJJ4CqnJPuPeKyo+aDXouw+tqyqMQZ8f7R1iIGv4yx
COMpN+tmatWY4AyVWXhW8C8fHjl5p9bRkealoJsZOYIHqNfaS8QaMNEqqF3dqck7
iUY8HP3DosliThzEvhhKHENySLDP20i9n22qsm6J4foneieIHo/DR/IHUZ1W1E1M
DjiXFp46wmV8cMzdqjZYLpdtmVtpBNm9agITp+mt+OE1ixZ+6Selsc9kUVKVWzqF
qpSUxPJReMF3NR/mp1ghYLaG4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjJnBZj
ub4D3NFwr44EnecqvTMmMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5
QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz
c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa
RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAah2qb2mqIRs/KAf/yVhj6b0wJDI9MYI6L3sjzSmTPHp3X0QR7RTUKpkEFg47
+V5HvBuqwB1B5mietnPdJhR4iftRuLmskCMwM1v2R2WGY+PZfdO7PPwNxlYOuRJu
yeeZ1fCRfhC0RCgZZdxX6WRHRMj8KDqaq6zR/YDdG+M4L6LPgoE4sPR1g/Z0fj2a
Pv7o9re5uVj4DEct0+t+Y6z1/Ry8GaTUny8AzglxxB2tftHlI2ynwfyuarI0nlYc
HLaLvk8PQM/2B2mxD/nM3FuFMiwT8/wC0ZLxVmycG6JilESdJIHENGL9IEwLL1re
UDTinRiQYRLCbYDw517DQBYEQQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:34:25 2026 by rpki-client