Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
File:                     9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json)
Hash identifier:          DKRAredCiqA6bpdi89r0p+POGsJIClCmKGmFnYOu5Xs=
Subject key identifier:   89:02:8A:94:4A:07:32:23:17:88:AD:C3:6C:A3:E8:4E:CB:65:73:90
Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80
Certificate issuer:       /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
Certificate serial:       043A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
Manifest number:          0433
Signing time:             Mon 21 Sep 2026 00:03:48 +0000
Manifest this update:     Mon 21 Sep 2026 00:03:47 +0000
Manifest next update:     Mon 28 Sep 2026 00:03:47 +0000
Files and hashes:         1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: ffVu+GqXfcjT1wUkRpM0ZBrZXJ9gKXEC7khh15H9lfc=)
                          2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: acpBj/fZ/lNO+jE72RL9W85WiLHEc7BOknabYLCBTPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl
                          rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980
        Validity
            Not Before: Sep 21 00:03:47 2026 GMT
            Not After : Sep 28 00:03:47 2026 GMT
        Subject: CN=6ab07464-a0b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:b3:e2:91:5c:43:6d:3e:2c:7f:76:7f:64:
                    01:5d:02:b3:9f:db:0f:96:2e:ce:ae:63:9c:42:db:
                    97:06:f4:11:cf:c4:6c:15:03:5d:43:5a:ef:a3:e6:
                    44:f1:2a:b2:cf:ea:5a:8a:e8:3b:3a:8b:52:85:8f:
                    61:cd:1a:fc:d6:8f:67:4b:6a:e0:8c:65:3a:26:5c:
                    5f:37:e3:c4:61:de:63:6d:c3:c8:ab:78:c5:90:f6:
                    88:7e:07:64:a3:7c:dc:49:9b:a8:04:bb:54:7c:8d:
                    8c:3a:d4:f4:65:94:1e:63:61:93:ef:43:3d:42:20:
                    14:3e:a8:63:46:2b:78:c9:75:87:98:e6:70:a1:b0:
                    3a:34:88:b8:42:a9:82:13:4f:24:81:6b:8f:d8:c0:
                    19:36:0d:34:09:70:8e:be:0e:50:8c:de:cd:7d:2b:
                    94:90:da:2d:fe:26:80:e0:93:02:7d:b2:87:ba:7b:
                    c9:64:f4:99:3e:d8:18:eb:49:4f:9c:c1:59:3e:f2:
                    cc:5b:99:14:f8:65:3f:88:44:04:1d:c2:b5:33:4a:
                    8d:f3:3a:77:1c:49:3e:f4:36:27:c9:ad:b0:c9:9f:
                    5e:d0:da:a9:68:14:eb:2e:22:75:9f:24:7c:ca:00:
                    00:74:4b:7c:cc:8e:1c:b1:ff:4e:03:71:e2:58:cd:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:02:8A:94:4A:07:32:23:17:88:AD:C3:6C:A3:E8:4E:CB:65:73:90
            X509v3 Authority Key Identifier:
                keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:bf:62:dd:dc:8d:ad:51:8e:70:f4:ed:04:40:03:ac:ee:c6:
         b8:a6:91:05:55:41:4c:f8:d7:9a:34:3f:2c:65:a7:58:73:96:
         85:d3:28:4f:e2:d7:12:bf:92:67:f1:ec:2c:f5:86:9b:26:da:
         a1:7c:4b:4a:c7:b8:9a:50:a8:f7:60:7c:bf:f2:11:3c:4e:21:
         6f:e9:2d:9a:97:b0:cc:92:51:55:be:6c:a3:56:b1:f4:c1:40:
         91:74:49:0d:81:f6:36:85:da:a0:68:ff:36:d0:75:3a:f1:04:
         89:b0:6d:f4:f9:e4:9e:4b:d0:8e:3c:13:ca:81:71:42:e0:ae:
         28:30:a7:da:26:a8:6b:06:39:37:8c:72:f6:8f:51:36:60:65:
         1c:3d:a5:50:0f:0a:49:26:ee:d4:ca:c1:9e:ce:a6:c4:f4:e1:
         f2:b1:d0:e3:b9:71:a9:ef:18:d7:5f:9a:18:1e:66:52:60:dd:
         56:6f:00:a0:c2:24:15:87:de:96:25:7b:3e:69:11:cc:b4:17:
         b9:fb:41:21:39:43:64:56:09:08:58:ba:6e:f2:38:be:e4:e1:
         60:52:a1:d9:38:a4:14:6f:c4:65:1b:5f:b4:ad:bf:7e:4b:f9:
         5e:0b:cc:89:fa:f8:b3:52:17:9b:d4:18:11:3a:c1:34:57:3e:
         38:56:03:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG
NzQ3REI5ODAwHhcNMjYwOTIxMDAwMzQ3WhcNMjYwOTI4MDAwMzQ3WjAYMRYwFAYD
VQQDEw02YWIwNzQ2NC1hMGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEGz4pFcQ20+LH92f2QBXQKzn9sPli7OrmOcQtuXBvQRz8RsFQNdQ1rvo+ZE
8Sqyz+paiug7OotShY9hzRr81o9nS2rgjGU6JlxfN+PEYd5jbcPIq3jFkPaIfgdk
o3zcSZuoBLtUfI2MOtT0ZZQeY2GT70M9QiAUPqhjRit4yXWHmOZwobA6NIi4QqmC
E08kgWuP2MAZNg00CXCOvg5QjN7NfSuUkNot/iaA4JMCfbKHunvJZPSZPtgY60lP
nMFZPvLMW5kU+GU/iEQEHcK1M0qN8zp3HEk+9DYnya2wyZ9e0NqpaBTrLiJ1nyR8
ygAAdEt8zI4csf9OA3HiWM2NrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIkCipRK
BzIjF4itw2yj6E7LZXOQMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw
QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL
OC1pUXhTajhjc2ozUjl1WUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtb9i3dyNrVGOcPTtBEADrO7GuKaRBVVBTPjXmjQ/LGWnWHOWhdMoT+LXEr+S
Z/HsLPWGmybaoXxLSse4mlCo92B8v/IRPE4hb+ktmpewzJJRVb5so1ax9MFAkXRJ
DYH2NoXaoGj/NtB1OvEEibBt9PnknkvQjjwTyoFxQuCuKDCn2iaoawY5N4xy9o9R
NmBlHD2lUA8KSSbu1MrBns6mxPTh8rHQ47lxqe8Y11+aGB5mUmDdVm8AoMIkFYfe
liV7PmkRzLQXuftBITlDZFYJCFi6bvI4vuThYFKh2TikFG/EZRtftK2/fkv5XgvM
ifr4s1IXm9QYETrBNFc+OFYDZA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:36:33 2026 by rpki-client