Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/1kadVjay7vDgODZ8JlBqh4641UQ.mft
File:                     1kadVjay7vDgODZ8JlBqh4641UQ.mft (raw, json)
Hash identifier:          Bd5kQNKsN8QJcegdednv99Moqv/Aqz65VzEqgIcdYjQ=
Subject key identifier:   89:9E:F9:6B:5A:06:CA:80:A7:88:70:6E:8C:B6:3E:6A:97:BE:8E:F2
Authority key identifier: D6:46:9D:56:36:B2:EE:F0:E0:38:36:7C:26:50:6A:87:8E:B8:D5:44
Certificate issuer:       /CN=A91C666C/serialNumber=D6469D5636B2EEF0E038367C26506A878EB8D544
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1kadVjay7vDgODZ8JlBqh4641UQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/1kadVjay7vDgODZ8JlBqh4641UQ.mft
Manifest number:          17
Signing time:             Sun 11 Oct 2026 09:42:45 +0000
Manifest this update:     Sun 11 Oct 2026 09:42:44 +0000
Manifest next update:     Sun 18 Oct 2026 09:42:44 +0000
Files and hashes:         1: 1kadVjay7vDgODZ8JlBqh4641UQ.crl (hash: SD8cCTbot/mGoVhJ4nJ/cHax482w3OaZcxgXoQYYPR4=)
                          2: F9LT1ICoy7ij2LnKIKIS8-g0Tlo.asa (hash: 3AMndpUtDpkmFcAou92Wme7s1OWeMrcvgmcFlx34bHs=)
                          3: 863699A8A68011F1AE60E6086C11F970.roa (hash: M1Zaa6zzbBQ2vKL/eM+XQhUfuBDeQ4BBEOnhMGUZVl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/1kadVjay7vDgODZ8JlBqh4641UQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/1kadVjay7vDgODZ8JlBqh4641UQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1kadVjay7vDgODZ8JlBqh4641UQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C666C, serialNumber=D6469D5636B2EEF0E038367C26506A878EB8D544
        Validity
            Not Before: Oct 11 09:42:44 2026 GMT
            Not After : Oct 18 09:42:44 2026 GMT
        Subject: CN=6acb5a15-0956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:61:d1:c0:65:0f:b2:f8:ca:8c:44:0e:49:
                    bd:00:79:30:fa:eb:d8:96:67:ce:41:2e:c3:23:f1:
                    88:b4:8f:ca:2f:8d:9d:e2:b1:70:19:c0:5a:90:0c:
                    b0:ee:52:da:b0:dd:6d:36:d2:69:eb:83:5a:da:a4:
                    15:d9:3c:88:52:13:14:3f:49:7e:b4:bc:b3:85:ba:
                    3a:63:d5:d5:2f:06:d5:ef:e8:ac:e3:fc:f8:dd:1b:
                    3d:38:4d:e3:71:e9:fc:81:44:69:d6:49:ff:33:73:
                    4f:fc:a8:73:1c:61:10:1c:79:21:3d:40:5f:62:74:
                    c8:18:6a:b0:48:b1:02:40:a0:3a:32:5d:6e:25:68:
                    b1:f2:ba:fb:82:7e:01:b2:cf:6b:5c:33:c2:24:e4:
                    e9:df:1a:7e:c2:3d:00:b4:d4:77:63:1d:70:ba:88:
                    d6:de:22:2f:3b:8b:cc:01:1a:91:4f:30:b0:af:24:
                    e8:46:5f:16:20:6f:65:80:fa:f4:a9:04:8d:cf:97:
                    41:94:99:be:6d:ba:e2:72:60:65:44:c0:b9:27:cc:
                    ac:33:d5:b4:89:3e:ee:eb:61:04:ba:0b:58:0b:9d:
                    f1:3c:a4:65:59:48:b8:3a:2d:79:26:6d:bd:5e:67:
                    a3:97:6f:77:28:9a:88:5e:fa:ff:bb:bb:f3:10:c9:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9E:F9:6B:5A:06:CA:80:A7:88:70:6E:8C:B6:3E:6A:97:BE:8E:F2
            X509v3 Authority Key Identifier:
                keyid:D6:46:9D:56:36:B2:EE:F0:E0:38:36:7C:26:50:6A:87:8E:B8:D5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/1kadVjay7vDgODZ8JlBqh4641UQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1kadVjay7vDgODZ8JlBqh4641UQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C666C/0FA18442A68011F1AD8A66F66B11F970/1kadVjay7vDgODZ8JlBqh4641UQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7a:fd:9f:2b:43:82:b0:8f:65:23:b1:ce:cb:d2:f7:a8:b9:
         51:cb:a2:09:1e:fd:ec:bc:93:5d:6e:39:c3:cf:db:9e:1f:a1:
         48:ae:22:9a:b1:3f:4c:bf:6d:20:ff:de:d3:b0:f8:fa:f9:08:
         de:e5:cb:0b:57:26:15:f8:d9:ee:be:da:f4:3b:13:a8:85:b9:
         db:80:41:bc:88:35:50:8d:f5:ad:ae:fe:e8:fd:47:a8:f8:72:
         3e:66:c2:12:f3:8d:4a:e8:7f:28:11:30:6a:0f:42:dc:af:a5:
         36:6f:41:c8:4b:30:74:39:94:e6:2a:e2:b0:e3:84:f6:9b:fe:
         c4:44:12:87:44:10:64:18:bc:d1:5e:98:18:55:a7:4d:92:e7:
         89:c1:5b:80:c1:76:2c:a3:ae:a5:76:01:8e:c1:2e:23:99:5c:
         2a:0b:f6:13:14:af:0a:a5:36:f1:c0:f2:cb:f9:34:1a:82:e7:
         96:1f:6a:cc:56:7d:85:fd:85:2f:bd:07:b6:9f:88:f4:b6:a3:
         c3:0a:85:98:6e:4c:c2:39:d5:42:51:3d:c9:63:1b:9c:58:03:
         83:cc:62:84:a3:7b:a1:43:17:b0:de:a4:2b:73:67:a6:54:69:
         3f:e1:d3:61:ec:f4:4d:c0:d0:25:ed:3a:1f:c9:bb:3b:5e:ad:
         5b:4b:01:7c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NjY2QzExMC8GA1UEBRMoRDY0NjlENTYzNkIyRUVGMEUwMzgzNjdDMjY1MDZBODc4
RUI4RDU0NDAeFw0yNjEwMTEwOTQyNDRaFw0yNjEwMTgwOTQyNDRaMBgxFjAUBgNV
BAMTDTZhY2I1YTE1LTA5NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUVGHRwGUPsvjKjEQOSb0AeTD669iWZ85BLsMj8Yi0j8ovjZ3isXAZwFqQDLDu
Utqw3W020mnrg1rapBXZPIhSExQ/SX60vLOFujpj1dUvBtXv6Kzj/PjdGz04TeNx
6fyBRGnWSf8zc0/8qHMcYRAceSE9QF9idMgYarBIsQJAoDoyXW4laLHyuvuCfgGy
z2tcM8Ik5OnfGn7CPQC01HdjHXC6iNbeIi87i8wBGpFPMLCvJOhGXxYgb2WA+vSp
BI3Pl0GUmb5tuuJyYGVEwLknzKwz1bSJPu7rYQS6C1gLnfE8pGVZSLg6LXkmbb1e
Z6OXb3comohe+v+7u/MQyZzPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiZ75a1oG
yoCniHBujLY+ape+jvIwHwYDVR0jBBgwFoAU1kadVjay7vDgODZ8JlBqh4641UQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NjZDLzBGQTE4NDQyQTY4
MDExRjFBRDhBNjZGNjZCMTFGOTcwLzFrYWRWamF5N3ZEZ09EWjhKbEJxaDQ2NDFV
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMWthZFZqYXk3dkRnT0RaOEpsQnFoNDY0MVVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2
NjZDLzBGQTE4NDQyQTY4MDExRjFBRDhBNjZGNjZCMTFGOTcwLzFrYWRWamF5N3ZE
Z09EWjhKbEJxaDQ2NDFVUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAKev2fK0OCsI9lI7HOy9L3qLlRy6IJHv3svJNdbjnDz9ueH6FIriKasT9Mv20g
/97TsPj6+Qje5csLVyYV+Nnuvtr0OxOohbnbgEG8iDVQjfWtrv7o/Ueo+HI+ZsIS
841K6H8oETBqD0Lcr6U2b0HISzB0OZTmKuKw44T2m/7ERBKHRBBkGLzRXpgYVadN
kueJwVuAwXYso66ldgGOwS4jmVwqC/YTFK8KpTbxwPLL+TQagueWH2rMVn2F/YUv
vQe2n4j0tqPDCoWYbkzCOdVCUT3JYxucWAODzGKEo3uhQxew3qQrc2emVGk/4dNh
7PRNwNAl7Tofybs7Xq1bSwF8
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:44:18 2026 by rpki-client