Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
File:                     _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json)
Hash identifier:          F/emmhM/L8VNeopbECfbJ5JoZwv3cDIIfjua/ohxYDk=
Subject key identifier:   CE:23:DD:07:3D:3D:2A:F8:9C:C4:89:66:D6:A7:99:3B:C1:95:5D:8F
Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
Certificate issuer:       /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Certificate serial:       059A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
Manifest number:          0591
Signing time:             Tue 22 Sep 2026 22:54:54 +0000
Manifest this update:     Tue 22 Sep 2026 22:54:53 +0000
Manifest next update:     Tue 29 Sep 2026 22:54:53 +0000
Files and hashes:         1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: tICU4zRC+AQV4xwhgC9fInLwDhhIzC+2RP2PzESnu3M=)
                          2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: IciT28SUjRQ0I2gdini8FnT61/04yJg06IILVj5+2rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:54:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
        Validity
            Not Before: Sep 22 22:54:53 2026 GMT
            Not After : Sep 29 22:54:53 2026 GMT
        Subject: CN=6ab3073e-9ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d7:40:97:cb:2c:92:ad:57:fe:88:f4:8b:44:
                    4d:2b:bc:c4:cd:16:ff:0d:9d:b1:e2:a1:8a:5c:79:
                    0a:08:e5:8c:81:f9:08:eb:d6:ee:0a:b3:85:9f:c4:
                    21:d3:ee:8f:d5:7d:76:e8:43:d7:2c:5d:1a:51:24:
                    48:a6:d7:fd:c5:da:e0:3e:9b:66:b8:00:66:5c:21:
                    4c:2a:e6:19:7d:2e:9d:1f:d6:5b:1e:19:1b:bf:17:
                    c6:32:3a:d2:49:eb:c8:00:2c:69:93:f9:a1:89:b1:
                    1d:e1:6b:82:70:cd:9e:72:c7:e2:d4:bc:38:cb:7a:
                    f8:cf:2f:fd:2d:ef:2e:da:0b:a3:7e:6d:c9:4b:d8:
                    b3:33:f3:e2:d6:98:da:6d:8e:64:c7:96:72:27:c0:
                    33:a6:97:0c:b7:a9:bc:12:ef:d4:0c:4b:c2:ea:c4:
                    72:4c:c7:ba:21:37:ef:08:f0:af:a4:de:6a:00:c6:
                    a1:2b:64:45:21:1e:58:68:8e:41:ad:3c:b2:ab:03:
                    4f:6e:cc:1c:4c:56:3d:3a:18:46:09:d8:4e:4f:3d:
                    12:f2:6f:bd:8f:f0:b5:34:72:22:8a:b3:15:d2:dd:
                    38:00:fd:49:7d:1c:15:b3:89:e7:3e:3e:3f:33:c3:
                    6c:3f:2a:f5:09:1c:80:2b:0d:3c:e6:90:4c:3d:e7:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:23:DD:07:3D:3D:2A:F8:9C:C4:89:66:D6:A7:99:3B:C1:95:5D:8F
            X509v3 Authority Key Identifier:
                keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b4:9e:de:f6:f4:fc:47:fb:6b:cb:9e:a6:6a:df:f1:4d:d3:
         25:10:f0:9b:65:f0:c2:3d:61:d4:93:6f:59:78:96:58:82:e8:
         45:74:74:18:4f:3e:65:d8:71:bd:6e:c2:6b:dc:1e:1d:26:3a:
         3b:bc:b9:4b:79:96:fc:d2:5c:36:71:af:19:1e:49:b7:85:fb:
         d2:84:26:1a:c5:e6:e9:54:4b:52:23:a5:ec:a1:3a:57:6e:20:
         c8:6f:19:38:53:40:78:60:92:c5:46:2d:0e:7d:94:31:e4:ff:
         b1:75:dc:d3:f7:19:45:b9:34:c5:54:0e:ac:47:cd:b7:3d:3c:
         13:3e:d0:34:91:ee:41:1a:6b:db:ab:86:d8:d4:fa:c3:7f:dc:
         61:52:24:ad:a5:3c:b9:ed:9b:ef:ee:95:7b:49:82:27:f7:fe:
         72:54:20:cd:50:80:df:be:a4:ef:c7:53:c3:12:7e:33:5b:03:
         a2:0b:1d:fa:62:81:7c:73:38:a5:35:ba:d3:35:60:1c:81:11:
         af:f4:1b:84:df:a2:88:dc:80:a6:ed:b2:9d:9e:29:55:65:99:
         6e:ea:82:cc:7f:ef:c7:d5:21:86:02:3e:b2:84:21:21:42:9a:
         3d:08:78:89:4a:08:cb:4e:a8:fd:90:b8:5f:c6:e6:3a:c7:64:
         bf:f6:a3:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy
NEZGQUUxRkEwHhcNMjYwOTIyMjI1NDUzWhcNMjYwOTI5MjI1NDUzWjAYMRYwFAYD
VQQDEw02YWIzMDczZS05Y2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6NdAl8sskq1X/oj0i0RNK7zEzRb/DZ2x4qGKXHkKCOWMgfkI69buCrOFn8Qh
0+6P1X126EPXLF0aUSRIptf9xdrgPptmuABmXCFMKuYZfS6dH9ZbHhkbvxfGMjrS
SevIACxpk/mhibEd4WuCcM2ecsfi1Lw4y3r4zy/9Le8u2gujfm3JS9izM/Pi1pja
bY5kx5ZyJ8AzppcMt6m8Eu/UDEvC6sRyTMe6ITfvCPCvpN5qAMahK2RFIR5YaI5B
rTyyqwNPbswcTFY9OhhGCdhOTz0S8m+9j/C1NHIiirMV0t04AP1JfRwVs4nnPj4/
M8NsPyr1CRyAKw085pBMPecAIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4j3Qc9
PSr4nMSJZtanmTvBlV2PMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5
NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3
aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN7Se3vb0/Ef7a8uepmrf8U3TJRDwm2Xwwj1h1JNvWXiWWILoRXR0GE8+Zdhx
vW7Ca9weHSY6O7y5S3mW/NJcNnGvGR5Jt4X70oQmGsXm6VRLUiOl7KE6V24gyG8Z
OFNAeGCSxUYtDn2UMeT/sXXc0/cZRbk0xVQOrEfNtz08Ez7QNJHuQRpr26uG2NT6
w3/cYVIkraU8ue2b7+6Ve0mCJ/f+clQgzVCA376k78dTwxJ+M1sDogsd+mKBfHM4
pTW60zVgHIERr/QbhN+iiNyApu2ynZ4pVWWZbuqCzH/vx9UhhgI+soQhIUKaPQh4
iUoIy06o/ZC4X8bmOsdkv/ajBA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:29:46 2026 by rpki-client