Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
File:                     zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json)
Hash identifier:          5A4MRtV9/gKC5TETX899H+4fM/VkYlHeHqXMTpt6n+o=
Subject key identifier:   A2:1C:17:D6:6A:70:E7:F4:16:8E:00:B3:5C:34:19:41:BC:83:43:9E
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Certificate issuer:       /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial:       0F58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
Manifest number:          0F45
Signing time:             Mon 12 Oct 2026 17:39:15 +0000
Manifest this update:     Mon 12 Oct 2026 17:39:15 +0000
Manifest next update:     Mon 19 Oct 2026 17:39:15 +0000
Files and hashes:         1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: rxIyRU8SK4wBVZToMCd8El+iyCjrdFIuaBxEAVJV9dI=)
                          2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: WSppEKr3uUGfSP4JpZ6XY6kJsR4i7zyDZgxCkaSBcy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3928 (0xf58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
        Validity
            Not Before: Oct 12 17:39:15 2026 GMT
            Not After : Oct 19 17:39:15 2026 GMT
        Subject: CN=6acd1b43-60df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:aa:6d:b5:89:94:d5:5f:d6:84:02:d6:8d:
                    97:e7:93:1b:14:55:03:3f:1d:f8:62:e7:ef:3d:89:
                    da:89:9c:6f:a6:6c:30:2b:53:b4:81:21:1e:27:53:
                    0f:cf:1e:44:4c:85:c1:11:65:0a:7e:4c:32:0a:af:
                    86:38:f2:99:42:72:c5:6b:5c:0b:a5:fb:4b:2d:71:
                    c4:1d:98:43:39:2c:85:00:b9:db:3a:74:d5:b7:47:
                    b9:d5:7c:8d:16:ec:3e:f4:42:20:b2:b1:43:84:d9:
                    19:08:8d:8a:b2:59:73:66:0b:8f:b4:54:1c:9c:e2:
                    b9:04:2a:4e:ee:f3:af:45:f3:5e:62:56:50:15:31:
                    c2:30:ed:df:cc:2c:95:50:79:fb:be:82:9a:56:d7:
                    64:94:c8:94:aa:42:c2:2b:12:a2:df:29:e6:e6:49:
                    64:b8:4e:9e:9a:10:21:c1:fd:53:6a:8e:05:0e:46:
                    99:07:23:05:7b:2f:a2:f3:05:04:2d:cf:48:eb:6a:
                    45:44:a3:00:c1:0f:c8:9f:a8:62:60:15:5e:9e:fb:
                    69:da:16:34:2b:78:42:61:28:9a:5e:9b:23:3b:0b:
                    26:a7:70:eb:d7:5a:f8:2a:47:e8:38:a1:ef:a7:9c:
                    6f:b3:cc:30:05:71:6f:ed:80:f8:b2:58:0b:54:86:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1C:17:D6:6A:70:E7:F4:16:8E:00:B3:5C:34:19:41:BC:83:43:9E
            X509v3 Authority Key Identifier:
                keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:f9:26:e1:02:56:03:0b:4b:e3:ee:9f:21:97:d0:36:70:
         45:0d:ba:0e:e9:20:0d:11:97:97:e0:f7:e0:5e:63:6b:6f:af:
         49:22:08:57:1d:bf:d7:66:36:43:ad:b9:0c:51:37:55:2c:a7:
         3d:37:d7:ac:d2:8b:1a:a4:ae:4c:85:20:7d:9e:5f:84:2a:22:
         86:ff:b8:e9:5a:d8:5d:e6:b3:03:06:6f:22:e1:ce:8e:07:59:
         ab:21:39:7a:fc:69:94:20:f4:ee:8b:12:cd:83:d1:04:2b:03:
         ee:22:83:3d:bc:8e:ce:bd:47:59:a9:57:33:b9:1a:83:23:d0:
         9d:ef:20:0d:3e:aa:93:b7:d7:f6:dc:0c:4a:d6:0a:71:70:90:
         6d:fc:75:d2:b3:31:6d:c3:28:4b:19:50:76:8e:14:9f:4c:a1:
         2e:bb:b1:ae:87:ad:4b:74:ae:9c:1b:f2:1a:e8:6f:1e:c1:89:
         64:2b:3c:8d:ee:77:29:16:85:3a:36:ff:12:cd:5d:9f:d6:8f:
         d4:00:16:42:da:ac:79:36:5e:da:9e:73:1b:b8:93:1b:51:cf:
         d7:07:5c:ec:51:33:c7:b5:19:77:69:ec:fe:6a:41:33:e3:ac:
         3b:af:93:41:ec:2a:c7:44:e6:04:31:79:e1:00:dd:1d:a1:0b:
         f6:c3:fe:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlGMDgxMTAvBgNVBAUTKENFOENBRDM1NjIxQTkwMTJDNDBCMzYzNzUzN0NBNDBF
M0QwN0U4Q0YwHhcNMjYxMDEyMTczOTE1WhcNMjYxMDE5MTczOTE1WjAYMRYwFAYD
VQQDEw02YWNkMWI0My02MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt96qbbWJlNVf1oQC1o2X55MbFFUDPx34YufvPYnaiZxvpmwwK1O0gSEeJ1MP
zx5ETIXBEWUKfkwyCq+GOPKZQnLFa1wLpftLLXHEHZhDOSyFALnbOnTVt0e51XyN
Fuw+9EIgsrFDhNkZCI2KsllzZguPtFQcnOK5BCpO7vOvRfNeYlZQFTHCMO3fzCyV
UHn7voKaVtdklMiUqkLCKxKi3ynm5klkuE6emhAhwf1Tao4FDkaZByMFey+i8wUE
Lc9I62pFRKMAwQ/In6hiYBVenvtp2hY0K3hCYSiaXpsjOwsmp3Dr11r4KkfoOKHv
p5xvs8wwBXFv7YD4slgLVIZ6uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIcF9Zq
cOf0Fo4As1w0GUG8g0OeMB8GA1UdIwQYMBaAFM6MrTViGpASxAs2N1N8pA49B+jP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUYwOC8zMDkwRDkxNEEx
NEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtCTEVDelkzVTN5a0RqMEg2
TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pveXROV0lha0JMRUN6WTNVM3lrRGowSDZNOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUYwOC8zMDkwRDkxNEExNEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtC
TEVDelkzVTN5a0RqMEg2TTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAUv5JuECVgMLS+PunyGX0DZwRQ26DukgDRGXl+D34F5ja2+vSSIIVx2/12Y2
Q625DFE3VSynPTfXrNKLGqSuTIUgfZ5fhCoihv+46VrYXeazAwZvIuHOjgdZqyE5
evxplCD07osSzYPRBCsD7iKDPbyOzr1HWalXM7kagyPQne8gDT6qk7fX9twMStYK
cXCQbfx10rMxbcMoSxlQdo4Un0yhLruxroetS3SunBvyGuhvHsGJZCs8je53KRaF
Ojb/Es1dn9aP1AAWQtqseTZe2p5zG7iTG1HP1wdc7FEzx7UZd2ns/mpBM+OsO6+T
Qewqx0TmBDF54QDdHaEL9sP+GQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:41:39 2026 by rpki-client