Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
File:                     S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json)
Hash identifier:          inZnToBF2OI+qh19/Oif8hidhqTKFA0UkM0ILeNb4/E=
Subject key identifier:   82:57:7B:22:45:20:23:E1:13:FA:74:08:D6:37:FC:82:72:06:4B:0E
Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A
Certificate issuer:       /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
Certificate serial:       0BFD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
Manifest number:          0BF3
Signing time:             Sat 26 Sep 2026 19:01:14 +0000
Manifest this update:     Sat 26 Sep 2026 19:01:13 +0000
Manifest next update:     Sat 03 Oct 2026 19:01:13 +0000
Files and hashes:         1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: k0ZtrAf+PstUmp57hKaF6P3RAvr4PNetfZwV4SpPwqw=)
                          2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: zPalni0azpF/zlC0w+aS0ngHnlgcsl2xEhMwm9vK8X0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl
                          rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3069 (0xbfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A
        Validity
            Not Before: Sep 26 19:01:13 2026 GMT
            Not After : Oct  3 19:01:13 2026 GMT
        Subject: CN=6ab8167a-3af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:c4:24:89:ff:29:da:79:06:41:f5:bd:c3:
                    de:98:11:eb:e3:81:f0:08:22:88:bf:9f:46:34:ad:
                    4b:21:83:84:ba:ca:41:cf:8b:0d:ba:11:4a:54:b1:
                    67:82:05:59:c6:57:f5:5c:8c:8d:78:f8:9d:a6:8e:
                    8b:7b:a5:d3:b3:c6:f2:79:50:64:ab:ff:a8:16:23:
                    b8:4c:c1:8c:4c:e6:ae:44:91:94:a4:e4:30:3f:39:
                    64:15:7f:5c:7a:7e:bb:7c:c7:16:7e:7f:d5:be:fd:
                    d1:56:d1:03:20:55:6e:55:a7:ae:d2:e7:01:dc:42:
                    f0:69:a9:76:4e:5b:a5:00:ac:9e:4d:17:21:10:66:
                    e7:8b:6c:23:fb:61:ed:ce:bb:32:9b:b9:81:b9:0c:
                    d7:0c:e5:0b:d6:60:8f:25:a1:b2:44:1f:36:10:ea:
                    04:16:20:97:26:fe:93:22:b7:89:37:41:bb:67:ec:
                    50:df:43:3b:5a:33:1d:34:4b:a5:1e:ef:17:59:97:
                    de:63:c6:e7:c0:0e:f9:0d:db:14:49:ab:12:40:7f:
                    91:f0:a9:c6:79:4c:bb:19:33:98:56:11:b7:f2:bd:
                    27:a3:72:3b:2c:25:00:74:26:97:22:03:c2:a3:f7:
                    d9:55:3f:25:31:3f:ed:0d:5f:5d:7e:52:42:9b:09:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:57:7B:22:45:20:23:E1:13:FA:74:08:D6:37:FC:82:72:06:4B:0E
            X509v3 Authority Key Identifier:
                keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:30:d1:5f:ec:3f:0f:71:3d:50:ef:49:33:bb:a9:a8:1e:2a:
         98:d5:7f:d1:6c:14:c5:a8:6e:b6:c2:d8:aa:f2:c0:a2:72:43:
         9b:7f:aa:11:8d:db:f6:6f:00:bc:24:67:b3:e4:a0:30:9b:9a:
         d5:69:f9:4e:37:a7:64:e1:82:1f:ba:bb:24:05:e2:c2:99:e6:
         41:62:b8:e8:a7:ad:fd:b9:fd:54:a0:31:c6:92:14:39:7d:11:
         f9:52:ff:be:a2:82:38:ac:3f:5a:51:61:03:50:ae:78:7c:19:
         05:5d:3e:46:ad:ee:39:d8:73:73:72:b3:1f:20:78:59:cd:1c:
         8f:2a:92:24:4d:5f:2b:94:01:39:21:a7:4e:47:ce:c8:ec:ce:
         01:05:b7:4f:9d:0b:81:8c:4a:12:46:c2:2a:08:bc:1f:b4:a6:
         3e:01:9c:25:68:50:47:9b:bf:cf:2a:ea:45:98:ea:1b:c6:98:
         48:be:db:61:6a:70:5f:be:6a:6f:9b:c1:e5:36:b2:6b:57:68:
         05:2c:df:0d:6d:7f:ff:40:b7:3b:1b:6b:11:51:e0:02:89:b9:
         dd:3b:e0:09:5f:27:14:a4:b6:5c:77:78:6a:69:61:5a:1a:2f:
         73:ad:b9:12:99:b9:fe:c9:3b:03:1b:14:c0:0b:d4:d6:a2:46:
         a7:32:65:23
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw
RjcyODdDOUEwHhcNMjYwOTI2MTkwMTEzWhcNMjYxMDAzMTkwMTEzWjAYMRYwFAYD
VQQDEw02YWI4MTY3YS0zYWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5fLEJIn/Kdp5BkH1vcPemBHr44HwCCKIv59GNK1LIYOEuspBz4sNuhFKVLFn
ggVZxlf1XIyNePidpo6Le6XTs8byeVBkq/+oFiO4TMGMTOauRJGUpOQwPzlkFX9c
en67fMcWfn/Vvv3RVtEDIFVuVaeu0ucB3ELwaal2TlulAKyeTRchEGbni2wj+2Ht
zrsym7mBuQzXDOUL1mCPJaGyRB82EOoEFiCXJv6TIreJN0G7Z+xQ30M7WjMdNEul
Hu8XWZfeY8bnwA75DdsUSasSQH+R8KnGeUy7GTOYVhG38r0no3I7LCUAdCaXIgPC
o/fZVT8lMT/tDV9dflJCmwnUOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIJXeyJF
ICPhE/p0CNY3/IJyBksOMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1
QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH
LXEzSkl6aUxtR1lQY29mSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtDDRX+w/D3E9UO9JM7upqB4qmNV/0WwUxahutsLYqvLAonJDm3+qEY3b9m8A
vCRns+SgMJua1Wn5TjenZOGCH7q7JAXiwpnmQWK46Ket/bn9VKAxxpIUOX0R+VL/
vqKCOKw/WlFhA1CueHwZBV0+Rq3uOdhzc3KzHyB4Wc0cjyqSJE1fK5QBOSGnTkfO
yOzOAQW3T50LgYxKEkbCKgi8H7SmPgGcJWhQR5u/zyrqRZjqG8aYSL7bYWpwX75q
b5vB5Taya1doBSzfDW1//0C3OxtrEVHgAom53TvgCV8nFKS2XHd4amlhWhovc625
Epm5/sk7AxsUwAvU1qJGpzJlIw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:14:46 2026 by rpki-client