Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File:                     mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier:          zmfSN3IL7198td195P/fDvuwUbjNBJyVcc6MDogD+4I=
Subject key identifier:   B4:14:5B:74:E9:A0:0F:8E:66:C7:F6:86:BB:6D:F5:E8:F7:24:77:EA
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer:       /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number:          01CB
Signing time:             Mon 21 Sep 2026 03:43:53 +0000
Manifest this update:     Mon 21 Sep 2026 03:43:52 +0000
Manifest next update:     Mon 28 Sep 2026 03:43:52 +0000
Files and hashes:         1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: 7VUuNa6P/khYqdgLRJfOwvDsDorJV1Xwqt5sNBNVu30=)
                          2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: AJJ92VGVLucsvsIdaZU0nKfuQXZ8cJi9IfizP5I2ais=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
                          rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
        Validity
            Not Before: Sep 21 03:43:52 2026 GMT
            Not After : Sep 28 03:43:52 2026 GMT
        Subject: CN=6ab0a7f8-5d54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:e4:a2:ee:25:86:5c:e4:87:47:7f:34:b2:
                    05:14:62:a4:c5:92:b6:c0:e0:a4:36:9d:be:b0:62:
                    06:5e:a4:80:34:2a:e0:ef:e3:ae:a3:ab:3f:20:b5:
                    a5:7f:e4:1e:84:8b:ae:45:9a:41:00:0a:26:f6:1d:
                    91:1c:da:63:dd:91:d0:b4:ed:af:fb:47:3d:86:2a:
                    de:44:13:6d:07:ae:c6:f0:9b:d5:65:5d:47:3a:42:
                    78:0a:1b:8a:95:cf:fc:ee:6c:56:39:c0:4f:fa:56:
                    3e:c7:85:f1:51:06:49:e8:56:98:b4:59:d9:3a:bd:
                    b3:7f:00:5d:a7:fe:0b:b7:c9:c3:ee:f2:47:5e:b5:
                    c7:fa:1e:78:ed:1d:7c:b5:b1:31:c9:c6:b3:f4:4a:
                    df:87:e1:fe:4c:89:a5:09:59:df:34:f9:17:90:a5:
                    98:37:d2:d6:6b:78:08:b7:da:d7:c6:c6:3c:78:ba:
                    ab:ba:dc:20:20:5a:12:65:1a:bc:32:a6:4a:82:e4:
                    a2:1c:1e:6c:40:15:27:9f:6d:31:6b:61:2f:cb:bd:
                    87:bc:54:a6:a6:61:d0:36:f6:65:a5:54:c7:9c:2c:
                    f7:91:c0:20:62:5e:3e:e6:6a:4a:e4:91:b7:c5:8c:
                    46:88:30:4d:dd:d9:4d:0a:e3:da:b9:0c:25:aa:23:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:14:5B:74:E9:A0:0F:8E:66:C7:F6:86:BB:6D:F5:E8:F7:24:77:EA
            X509v3 Authority Key Identifier:
                keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:aa:1f:4b:9c:85:b0:72:eb:d7:5c:a4:3f:9f:99:1a:5a:
         15:81:f2:07:6f:12:41:55:af:cf:f4:0e:be:f9:c0:4c:4c:7c:
         3a:35:79:1c:84:87:1f:6e:79:04:34:41:af:86:3e:72:e7:4a:
         bc:59:2d:54:79:2e:bd:e6:3c:c1:3d:d7:03:cf:7c:bb:e1:53:
         28:8e:40:e0:2c:3c:a8:f0:d8:51:84:bc:7c:5e:a7:5c:9a:b3:
         57:87:0e:16:2a:e9:85:6c:eb:ce:52:47:4e:ab:f1:e4:d5:ab:
         39:d5:95:ee:e6:e7:b0:69:8b:37:e6:f5:be:a9:26:3a:28:82:
         83:c7:a6:b1:37:d7:13:0a:65:9d:e2:39:23:fe:c8:7e:c4:d5:
         75:2e:e1:52:77:ff:83:22:8f:ca:f5:67:6c:f6:4f:92:86:c4:
         03:30:19:07:6f:a8:0e:9b:16:17:82:a5:83:e3:b7:41:b1:3b:
         b4:8e:37:ee:55:8c:12:70:bf:95:df:90:08:95:3e:4b:ca:fa:
         d2:3f:58:a3:db:5b:3e:69:35:e6:16:16:32:e8:2b:fc:42:05:
         9d:67:b0:a7:8d:9c:9f:80:e9:33:a1:3b:38:1a:dc:78:db:0a:
         85:f0:a5:a6:54:c8:62:9e:aa:38:f9:e5:1f:2f:51:ab:22:e3:
         32:a8:64:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIwNTUxMTAvBgNVBAUTKDk5OUIyRjY1MzlDMjNFQUVCNDY5RTY3NTM5RkIyREM5
MzNEOTgwNDAwHhcNMjYwOTIxMDM0MzUyWhcNMjYwOTI4MDM0MzUyWjAYMRYwFAYD
VQQDEw02YWIwYTdmOC01ZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+zkou4lhlzkh0d/NLIFFGKkxZK2wOCkNp2+sGIGXqSANCrg7+Ouo6s/ILWl
f+QehIuuRZpBAAom9h2RHNpj3ZHQtO2v+0c9hireRBNtB67G8JvVZV1HOkJ4ChuK
lc/87mxWOcBP+lY+x4XxUQZJ6FaYtFnZOr2zfwBdp/4Lt8nD7vJHXrXH+h547R18
tbExycaz9Erfh+H+TImlCVnfNPkXkKWYN9LWa3gIt9rXxsY8eLqrutwgIFoSZRq8
MqZKguSiHB5sQBUnn20xa2Evy72HvFSmpmHQNvZlpVTHnCz3kcAgYl4+5mpK5JG3
xYxGiDBN3dlNCuPauQwlqiPpgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQUW3Tp
oA+OZsf2hrtt9ej3JHfqMB8GA1UdIwQYMBaAFJmbL2U5wj6utGnmdTn7Lckz2YBA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjA1NS80QUJCQzAxQ0Y1
NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1BxNjBhZVoxT2ZzdHlUUFpn
RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21ac3ZaVG5DUHE2MGFlWjFPZnN0eVRQWmdFQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjA1NS80QUJCQzAxQ0Y1NTUxMUVFQUNGMTIzNEJDNEY5QUUwMi9tWnN2WlRuQ1Bx
NjBhZVoxT2ZzdHlUUFpnRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjnOqH0uchbBy69dcpD+fmRpaFYHyB28SQVWvz/QOvvnATEx8OjV5HISHH255
BDRBr4Y+cudKvFktVHkuveY8wT3XA898u+FTKI5A4Cw8qPDYUYS8fF6nXJqzV4cO
FirphWzrzlJHTqvx5NWrOdWV7ubnsGmLN+b1vqkmOiiCg8emsTfXEwplneI5I/7I
fsTVdS7hUnf/gyKPyvVnbPZPkobEAzAZB2+oDpsWF4Klg+O3QbE7tI437lWMEnC/
ld+QCJU+S8r60j9Yo9tbPmk15hYWMugr/EIFnWewp42cn4DpM6E7OBrceNsKhfCl
plTIYp6qOPnlHy9RqyLjMqhkZg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:47:54 2026 by rpki-client