Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
File:                     n7dBtymAPGtDKbw7QOduUqvYufg.mft (raw, json)
Hash identifier:          yCTmaDjp8JGT9HfLdOd1ab3eo368TH7noybJdK56GS0=
Subject key identifier:   44:C6:70:BA:18:75:86:DA:51:28:FD:AF:55:88:2D:57:87:62:9C:FE
Authority key identifier: 9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8
Certificate issuer:       /CN=A91A7F56/serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
Manifest number:          0200
Signing time:             Wed 23 Sep 2026 03:02:17 +0000
Manifest this update:     Wed 23 Sep 2026 03:02:16 +0000
Manifest next update:     Wed 30 Sep 2026 03:02:16 +0000
Files and hashes:         1: n7dBtymAPGtDKbw7QOduUqvYufg.crl (hash: RJHixWdEk+ILuYvF4Ir95GL2n3xFS0TWvP09QYiqnU0=)
                          2: 1FFCF508ADF211EE93DC0A12C4F9AE02.roa (hash: 01Z3o9E/9a1yoPoDH4foZI/dUy6PRT7K5bZ7LbnHM+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F56, serialNumber=9FB741B729803C6B4329BC3B40E76E52ABD8B9F8
        Validity
            Not Before: Sep 23 03:02:16 2026 GMT
            Not After : Sep 30 03:02:16 2026 GMT
        Subject: CN=6ab34139-9e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:5a:77:4a:6f:92:a9:d7:04:a0:bc:3e:4f:
                    e3:fc:78:40:a3:26:eb:24:f5:7a:8d:71:f3:bf:c0:
                    72:9e:bc:d0:9b:e2:f7:83:53:ea:17:b8:2d:c6:40:
                    3e:e3:e7:b4:25:b7:8e:75:83:ac:bb:bf:b5:e1:12:
                    5f:7f:51:12:5d:cb:75:6d:c1:56:37:0e:f3:1a:47:
                    f2:f3:f3:88:a9:eb:ea:de:ef:01:a1:9e:1f:a9:36:
                    a6:f9:53:d7:09:05:8f:61:40:91:ca:6e:96:85:0b:
                    dd:be:29:e1:97:45:11:8a:43:4c:5f:c0:7a:de:c9:
                    ce:a0:59:f4:e1:70:8d:87:bd:36:dc:49:a9:e0:5d:
                    2c:85:39:67:bd:88:f4:29:b1:cc:af:ac:6f:64:9a:
                    8f:50:47:13:a1:95:95:88:97:b2:86:54:98:fd:67:
                    86:fa:f1:6d:e6:77:37:af:b5:f2:1d:8c:e0:d8:b4:
                    2a:97:0e:f9:8e:b8:f7:04:2e:c3:02:ee:4c:d2:d8:
                    db:67:65:f0:a1:ff:6c:e7:9e:db:ec:7e:c7:e3:9a:
                    1a:14:94:73:77:35:c9:58:6e:02:57:93:70:bf:62:
                    70:19:be:02:f7:85:f8:b5:cf:fd:bb:f8:a4:51:7e:
                    08:cd:02:dd:f7:14:8e:a9:cd:82:ea:3c:b1:a6:77:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C6:70:BA:18:75:86:DA:51:28:FD:AF:55:88:2D:57:87:62:9C:FE
            X509v3 Authority Key Identifier:
                keyid:9F:B7:41:B7:29:80:3C:6B:43:29:BC:3B:40:E7:6E:52:AB:D8:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7dBtymAPGtDKbw7QOduUqvYufg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F56/94D57236ACCD11EE81069050C4F9AE02/n7dBtymAPGtDKbw7QOduUqvYufg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f3:c0:1d:02:0e:8a:b7:ed:04:bb:e0:fe:f0:83:92:95:af:
         f5:37:5b:bd:52:9b:18:8a:a0:14:1c:5c:c9:ad:90:46:67:30:
         11:ed:7a:0d:ad:4b:ef:70:65:4a:84:c9:e3:c3:bb:a0:39:c0:
         99:40:98:43:9f:23:69:d6:76:9c:ed:63:76:c5:91:3e:86:0b:
         7a:1b:c2:7e:5d:84:2c:7a:cd:c8:4f:07:51:f1:d9:9d:f5:97:
         cb:23:94:74:62:93:e8:d8:f7:32:ef:e7:ad:85:7d:28:fb:a8:
         25:b6:95:4f:18:51:22:fb:82:05:4a:ed:87:75:a4:c5:5a:c1:
         82:f5:53:86:02:c2:76:a9:62:27:c9:4d:f5:47:d0:0f:55:e5:
         75:60:fb:99:3c:c6:ce:fd:d5:40:e9:7f:7e:31:94:08:93:cf:
         a6:fb:65:d6:f0:af:6c:8d:d2:69:37:c7:51:f9:55:ce:85:4f:
         40:e2:ce:03:fd:7c:b9:ff:1e:05:17:26:18:da:29:e5:3d:51:
         cf:50:50:cf:ad:5a:83:0b:e4:32:21:63:43:fe:f0:43:0e:c5:
         b7:46:6a:a5:92:df:11:c1:eb:68:49:db:d5:78:35:f7:bb:24:
         5f:be:3a:aa:30:db:51:e8:08:02:d9:b8:b9:85:63:95:6d:f2:
         08:6c:d3:be
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdGNTYxMTAvBgNVBAUTKDlGQjc0MUI3Mjk4MDNDNkI0MzI5QkMzQjQwRTc2RTUy
QUJEOEI5RjgwHhcNMjYwOTIzMDMwMjE2WhcNMjYwOTMwMDMwMjE2WjAYMRYwFAYD
VQQDEw02YWIzNDEzOS05ZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuWRad0pvkqnXBKC8Pk/j/HhAoybrJPV6jXHzv8BynrzQm+L3g1PqF7gtxkA+
4+e0JbeOdYOsu7+14RJff1ESXct1bcFWNw7zGkfy8/OIqevq3u8BoZ4fqTam+VPX
CQWPYUCRym6WhQvdvinhl0URikNMX8B63snOoFn04XCNh7023Emp4F0shTlnvYj0
KbHMr6xvZJqPUEcToZWViJeyhlSY/WeG+vFt5nc3r7XyHYzg2LQqlw75jrj3BC7D
Au5M0tjbZ2Xwof9s557b7H7H45oaFJRzdzXJWG4CV5Nwv2JwGb4C94X4tc/9u/ik
UX4IzQLd9xSOqc2C6jyxpnc70QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETGcLoY
dYbaUSj9r1WILVeHYpz+MB8GA1UdIwQYMBaAFJ+3QbcpgDxrQym8O0DnblKr2Ln4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0Y1Ni85NEQ1NzIzNkFD
Q0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBHdERLYnc3UU9kdVVxdll1
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL243ZEJ0eW1BUEd0REtidzdRT2R1VXF2WXVmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0Y1Ni85NEQ1NzIzNkFDQ0QxMUVFODEwNjkwNTBDNEY5QUUwMi9uN2RCdHltQVBH
dERLYnc3UU9kdVVxdll1ZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP/PAHQIOirftBLvg/vCDkpWv9TdbvVKbGIqgFBxcya2QRmcwEe16Da1L73Bl
SoTJ48O7oDnAmUCYQ58jadZ2nO1jdsWRPoYLehvCfl2ELHrNyE8HUfHZnfWXyyOU
dGKT6Nj3Mu/nrYV9KPuoJbaVTxhRIvuCBUrth3WkxVrBgvVThgLCdqliJ8lN9UfQ
D1XldWD7mTzGzv3VQOl/fjGUCJPPpvtl1vCvbI3SaTfHUflVzoVPQOLOA/18uf8e
BRcmGNop5T1Rz1BQz61agwvkMiFjQ/7wQw7Ft0ZqpZLfEcHraEnb1Xg197skX746
qjDbUegIAtm4uYVjlW3yCGzTvg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:19:10 2026 by rpki-client