Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File:                     tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier:          WHLaWYt4h2dKYMpouPDcCdw/jdAL8L5W2bfB7is67Nk=
Subject key identifier:   C1:4F:46:BF:08:14:92:36:DF:90:17:09:CD:D8:ED:CB:30:54:C1:A8
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer:       /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number:          01CE
Signing time:             Sat 03 Oct 2026 04:26:06 +0000
Manifest this update:     Sat 03 Oct 2026 04:26:05 +0000
Manifest next update:     Sat 10 Oct 2026 04:26:05 +0000
Files and hashes:         1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 5jpORW0nO8MdikUD8yKGMrNxfsKc0CvQnJ5nYiI/2S8=)
                          2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: +2GaHe5cWbVmXD0EaHkbTYfFj1TTwinsmIfZx+qjcRc=)
                          3: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: vRQ6HdkSj/Wf7+vduG5A9cFn7YJoyEBj6p0aYIaPJ/w=)
                          4: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: SsVxQtDk/Oa1shqSFxMi2LpzccLXqJhR2Mhs5lXheR4=)
                          5: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: 5D/Ry/8ZP2E54WupdxSy/KsQmqjx8wwM6c9M/jH7pYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
        Validity
            Not Before: Oct  3 04:26:05 2026 GMT
            Not After : Oct 10 04:26:05 2026 GMT
        Subject: CN=6ac083de-1dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:ad:11:3d:56:d0:41:a7:e0:67:1d:98:e4:
                    b6:22:73:75:77:0e:3c:90:f3:75:97:13:bb:4e:88:
                    06:95:18:c6:db:86:7f:32:fa:13:ad:49:cb:42:e3:
                    96:c0:45:5d:92:3c:1e:c7:cf:ea:23:99:0b:69:33:
                    92:50:3e:61:2f:6e:2e:b0:15:07:17:9e:eb:87:33:
                    ac:02:75:d0:03:77:a4:ae:f6:bc:c8:c6:3f:a7:e5:
                    80:96:9d:cc:bb:2f:20:3e:ca:1d:d9:87:b4:33:71:
                    45:ed:1b:f1:4d:18:a2:94:f1:ce:dc:3f:84:15:cc:
                    17:f0:11:0c:98:bd:77:75:53:49:a6:f8:42:7e:34:
                    47:b6:af:ba:d4:d6:c3:db:8f:57:f1:33:f4:b5:3d:
                    54:f3:31:a6:b2:f0:75:c3:4e:fe:9d:d4:46:ba:7b:
                    3a:76:f9:19:ae:c9:94:4e:25:82:6a:49:5f:aa:56:
                    6a:78:80:73:53:57:c3:5f:da:23:2d:3b:30:0a:96:
                    9c:d6:b8:92:c5:63:8c:b9:e0:4c:19:41:60:ea:e2:
                    aa:dd:12:7a:52:ca:dd:73:c9:07:7f:ce:2b:0d:f7:
                    92:4c:26:41:b8:09:ee:ad:0f:a8:1e:5a:b0:d9:f2:
                    2c:0b:4d:61:96:4b:87:a5:6f:e8:bc:45:27:fc:ef:
                    e0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4F:46:BF:08:14:92:36:DF:90:17:09:CD:D8:ED:CB:30:54:C1:A8
            X509v3 Authority Key Identifier:
                keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:23:f6:c2:c9:ed:a7:66:11:be:da:37:d2:f9:b8:8a:1c:55:
         3b:0f:ee:c2:e8:d4:40:be:af:20:3b:c2:9c:46:2b:15:73:ea:
         23:f0:25:f6:64:2c:27:c4:46:2f:75:0b:00:33:27:c8:c5:1b:
         97:ba:37:ce:ec:e3:71:e9:70:9c:0a:c1:30:9d:20:c6:55:58:
         26:24:33:46:7f:9e:67:dd:f6:1a:1b:91:b2:d1:c7:ce:43:8f:
         bd:bc:52:d6:32:d7:f5:7b:06:e1:8f:d7:20:91:0c:35:df:19:
         06:32:8f:4e:94:54:ea:ee:c1:de:9e:64:64:05:c1:e5:40:4a:
         e3:40:28:5b:ec:ae:a1:97:73:d1:16:38:a8:1c:c7:0c:82:ea:
         ba:83:01:ff:3f:89:94:0b:75:fb:c3:11:15:5d:2b:77:a3:d4:
         99:33:aa:44:95:30:11:f9:3a:a7:f6:c5:8f:94:d0:55:c2:10:
         65:9d:97:aa:2a:4c:c0:5f:db:62:1d:e0:e9:30:5b:9a:48:be:
         ee:b9:f1:87:6e:ac:e4:a3:a0:35:4a:fb:38:d8:3f:11:a9:3b:
         97:50:73:c8:b8:be:7d:df:7a:e0:e3:01:45:3a:25:62:99:13:
         a9:32:51:b5:9a:ed:dc:ad:44:a5:d2:fb:cd:64:63:9c:45:dd:
         46:29:41:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD
NjAwNTg5MDIwHhcNMjYxMDAzMDQyNjA1WhcNMjYxMDEwMDQyNjA1WjAYMRYwFAYD
VQQDEw02YWMwODNkZS0xZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0c2tET1W0EGn4GcdmOS2InN1dw48kPN1lxO7TogGlRjG24Z/MvoTrUnLQuOW
wEVdkjwex8/qI5kLaTOSUD5hL24usBUHF57rhzOsAnXQA3ekrva8yMY/p+WAlp3M
uy8gPsod2Ye0M3FF7RvxTRiilPHO3D+EFcwX8BEMmL13dVNJpvhCfjRHtq+61NbD
249X8TP0tT1U8zGmsvB1w07+ndRGuns6dvkZrsmUTiWCaklfqlZqeIBzU1fDX9oj
LTswCpac1riSxWOMueBMGUFg6uKq3RJ6Usrdc8kHf84rDfeSTCZBuAnurQ+oHlqw
2fIsC01hlkuHpW/ovEUn/O/gHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFPRr8I
FJI235AXCc3Y7cswVMGoMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2
QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda
aWh6SlVLeHZvUXZHQUZpUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADSP2wsntp2YRvto30vm4ihxVOw/uwujUQL6vIDvCnEYrFXPqI/Al9mQsJ8RG
L3ULADMnyMUbl7o3zuzjcelwnArBMJ0gxlVYJiQzRn+eZ932GhuRstHHzkOPvbxS
1jLX9XsG4Y/XIJEMNd8ZBjKPTpRU6u7B3p5kZAXB5UBK40AoW+yuoZdz0RY4qBzH
DILquoMB/z+JlAt1+8MRFV0rd6PUmTOqRJUwEfk6p/bFj5TQVcIQZZ2XqipMwF/b
Yh3g6TBbmki+7rnxh26s5KOgNUr7ONg/Eak7l1BzyLi+fd964OMBRTolYpkTqTJR
tZrt3K1EpdL7zWRjnEXdRilBIg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:29:12 2026 by rpki-client