Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
File:                     8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json)
Hash identifier:          Ez2CLuKlUSHxv+Fg+ycLyHe4g0ee537D325hwQlglH0=
Subject key identifier:   B8:97:CC:84:AC:C9:A8:09:B6:7C:D3:18:F3:DE:3F:E9:B9:3C:E7:24
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Certificate issuer:       /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
Manifest number:          02DA
Signing time:             Sun 27 Sep 2026 01:28:35 +0000
Manifest this update:     Sun 27 Sep 2026 01:28:35 +0000
Manifest next update:     Sun 04 Oct 2026 01:28:35 +0000
Files and hashes:         1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: L79qwfg1ofl8AW5/0N+cy+nGMej+7IGVBhEqNplNeQ0=)
                          2: 6A46CFE0126211F188E006892E3D8C67.roa (hash: nUYhxodY8virYlw+fMIDHoACq8BtkTjC1JRqWKvQd98=)
                          3: 8333943E126211F1829E65892E3D8C67.roa (hash: W7dsw9RfmUEB5NrSvxv3kjHTLnZ6xH3SdkM9wJjtu4w=)
                          4: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 01:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
        Validity
            Not Before: Sep 27 01:28:35 2026 GMT
            Not After : Oct  4 01:28:35 2026 GMT
        Subject: CN=6ab87143-ad1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:3f:86:2e:40:8b:0a:ed:36:f1:8a:10:5f:
                    9c:5d:5b:1f:97:9d:04:26:de:48:39:6e:10:5b:a0:
                    dd:bc:59:97:d5:ca:18:c4:98:8f:56:c7:29:97:1e:
                    61:a2:2b:37:2d:fa:29:3e:45:57:9d:76:91:8c:69:
                    13:5b:b5:45:b3:50:51:e6:45:4b:66:a4:82:9f:a7:
                    a3:46:50:fe:40:2c:2e:29:af:6c:66:15:1a:7d:15:
                    22:3f:08:ba:ea:8d:4f:54:ff:f5:b6:be:f8:52:f7:
                    a2:5e:00:6c:ba:3d:1e:39:72:69:84:f6:6e:93:21:
                    85:83:f7:a9:e6:35:82:e1:fd:73:b9:4b:1f:a2:5d:
                    18:8a:20:69:e5:07:27:90:90:09:7a:59:89:a9:94:
                    87:ed:6b:26:45:b9:d4:8c:1b:1c:9e:71:56:74:a0:
                    f7:94:7c:83:0b:5a:c6:0c:87:f2:2f:a9:72:a4:ab:
                    a6:a0:c5:b4:68:2c:5c:62:34:6e:df:54:a6:34:2b:
                    06:70:df:0b:1b:40:18:1f:14:fe:6f:ea:ab:02:d3:
                    cc:70:01:c0:17:61:42:42:ed:41:65:a1:f4:22:83:
                    bd:09:b8:f8:1b:c4:0a:d8:ca:bd:e5:c8:37:98:1c:
                    56:12:4c:c9:58:ed:37:c9:0a:51:c5:24:67:8c:fb:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:CC:84:AC:C9:A8:09:B6:7C:D3:18:F3:DE:3F:E9:B9:3C:E7:24
            X509v3 Authority Key Identifier:
                keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:93:92:10:ee:cb:85:1d:9d:15:87:6f:84:37:d8:6a:f6:33:
         b2:c2:8e:37:09:14:c1:16:b1:c5:21:45:0d:bf:ff:8a:12:40:
         b2:bc:ff:68:cc:6e:0a:e8:b5:0c:2a:a4:36:f9:73:0a:64:f2:
         d3:dd:aa:da:45:2d:84:8d:1b:38:24:b9:fe:e5:da:3c:f8:47:
         75:c8:32:83:e8:91:b9:56:e4:6a:d1:62:71:b4:89:d1:86:a8:
         0d:e7:32:bb:18:39:e9:01:c8:3e:8d:ef:ab:15:67:a5:2d:48:
         d6:44:d4:55:4b:17:4c:94:8b:e4:5a:d8:e7:51:0a:2c:3d:27:
         46:9f:d8:16:5b:59:6b:bc:b6:67:a3:1a:f3:c5:f7:ed:7b:f6:
         fc:de:a3:ae:20:a5:b9:f6:df:00:4c:ce:05:ca:cc:92:0e:81:
         5d:16:40:24:a1:19:31:b4:88:98:a3:87:01:61:00:52:71:6c:
         f5:3a:e2:6c:8e:b0:a2:e5:fb:05:ae:d5:f1:0d:c1:f8:ab:b1:
         2f:e1:d3:f0:79:b5:cc:0d:61:61:73:80:b7:6e:21:78:3c:9c:
         8c:ae:65:c5:a0:4e:06:68:7a:e0:5d:41:62:2c:aa:de:6f:5f:
         4f:a4:c2:fc:16:fe:6b:2d:4f:57:46:44:2d:18:1a:e2:06:b5:
         14:c3:06:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF
M0FFODAxMzQwHhcNMjYwOTI3MDEyODM1WhcNMjYxMDA0MDEyODM1WjAYMRYwFAYD
VQQDEw02YWI4NzE0My1hZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzk4/hi5AiwrtNvGKEF+cXVsfl50EJt5IOW4QW6DdvFmX1coYxJiPVscplx5h
ois3LfopPkVXnXaRjGkTW7VFs1BR5kVLZqSCn6ejRlD+QCwuKa9sZhUafRUiPwi6
6o1PVP/1tr74UveiXgBsuj0eOXJphPZukyGFg/ep5jWC4f1zuUsfol0YiiBp5Qcn
kJAJelmJqZSH7WsmRbnUjBscnnFWdKD3lHyDC1rGDIfyL6lypKumoMW0aCxcYjRu
31SmNCsGcN8LG0AYHxT+b+qrAtPMcAHAF2FCQu1BZaH0IoO9Cbj4G8QK2Mq95cg3
mBxWEkzJWO03yQpRxSRnjPu7twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiXzISs
yagJtnzTGPPeP+m5POckMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD
MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2
N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkJOSEO7LhR2dFYdvhDfYavYzssKONwkUwRaxxSFFDb//ihJAsrz/aMxuCui1
DCqkNvlzCmTy092q2kUthI0bOCS5/uXaPPhHdcgyg+iRuVbkatFicbSJ0YaoDecy
uxg56QHIPo3vqxVnpS1I1kTUVUsXTJSL5FrY51EKLD0nRp/YFltZa7y2Z6Ma88X3
7Xv2/N6jriClufbfAEzOBcrMkg6BXRZAJKEZMbSImKOHAWEAUnFs9TribI6wouX7
Ba7V8Q3B+KuxL+HT8Hm1zA1hYXOAt24heDycjK5lxaBOBmh64F1BYiyq3m9fT6TC
/Bb+ay1PV0ZELRga4ga1FMMG7Q==
-----END CERTIFICATE-----
Generated at Mon Sep 28 11:22:58 2026 by rpki-client