Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
File:                     5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json)
Hash identifier:          Uykx+HZKiuiUOoervaCyzHrLl1z0L7UbfwE6wbVALyU=
Subject key identifier:   DA:09:79:93:17:F8:53:96:54:DE:36:38:DE:13:C9:DE:BF:4C:A7:70
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Certificate issuer:       /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
Manifest number:          018F
Signing time:             Wed 23 Sep 2026 04:15:26 +0000
Manifest this update:     Wed 23 Sep 2026 04:15:25 +0000
Manifest next update:     Wed 30 Sep 2026 04:15:25 +0000
Files and hashes:         1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: eVvhaQS2RwHSXOn+Cektta/wPsIHfN6rYyQMgWFtjMk=)
                          2: E9BDEF2CABD011F0B868ED11C4F9AE02.roa (hash: 6qNEgwLHVAYpgshoxndpSifoEhXIYB8Fbev50w/bqoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
        Validity
            Not Before: Sep 23 04:15:25 2026 GMT
            Not After : Sep 30 04:15:25 2026 GMT
        Subject: CN=6ab3525e-4f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b1:1d:0f:fd:e0:ed:61:1e:dc:5e:9e:99:f9:
                    56:16:05:42:0c:7c:ea:14:fb:f0:9b:25:dc:7b:f5:
                    ee:1f:f6:f6:db:4a:ff:4a:63:ed:ad:fa:d6:52:89:
                    1c:f7:c8:6d:21:f2:34:ce:31:81:9c:37:8f:1e:e2:
                    64:6d:57:39:52:a9:a1:14:53:af:a7:ac:bc:bd:6c:
                    de:4b:98:4b:b8:a3:19:7c:eb:55:25:27:af:f6:f7:
                    6b:e0:e6:66:de:f1:ed:94:5e:79:65:be:5e:e8:06:
                    62:72:4a:f2:20:77:9b:90:c2:62:42:f8:ad:1c:dd:
                    9b:30:21:41:12:78:c0:91:0d:2e:0b:12:0b:ae:47:
                    00:20:6e:3a:68:2f:0f:f7:44:bf:5d:a3:d4:e0:e2:
                    c7:61:33:c4:4a:8b:d6:9b:ac:39:52:cb:4b:99:be:
                    a8:66:0b:a2:69:fc:f5:e4:dc:34:29:cc:02:24:81:
                    f1:12:a8:76:90:fb:be:04:e1:c2:dd:12:f4:fe:d6:
                    52:f4:81:bd:88:14:b1:2b:59:00:6c:6b:83:ec:10:
                    37:dc:51:64:b9:84:23:59:ce:b7:c1:11:f9:55:52:
                    7c:08:fc:6a:29:b0:cc:b2:54:3f:c0:4a:74:3c:f7:
                    c2:3f:89:85:1f:83:73:04:9f:34:02:f1:31:74:d4:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:09:79:93:17:F8:53:96:54:DE:36:38:DE:13:C9:DE:BF:4C:A7:70
            X509v3 Authority Key Identifier:
                keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a5:18:03:1f:35:06:6d:98:6f:8b:27:a2:3b:71:5a:6e:14:
         c9:44:1b:5e:72:05:53:bc:2c:ce:f1:8f:68:da:1c:55:f3:1f:
         d7:67:d8:76:0e:f8:db:8a:15:d6:be:53:a6:28:90:4f:33:ab:
         b5:f4:81:c3:e7:89:7f:c5:6f:5a:3d:5f:a5:ce:b4:c4:e3:33:
         76:c5:be:81:02:29:91:64:8b:d3:bf:ae:ec:79:46:4a:a8:17:
         5b:da:bf:de:28:77:e9:31:d4:8c:d1:0d:85:c5:0e:63:16:b8:
         cf:d1:76:ad:42:d4:a7:a4:08:89:39:a6:bb:b3:55:99:b6:90:
         63:82:b3:47:a4:39:a1:ed:29:5a:6c:1b:6c:2b:57:a9:cc:fd:
         b4:74:3d:27:db:6b:18:ab:25:a7:12:f3:06:0c:3f:b6:00:55:
         e2:db:59:4f:ba:17:61:c5:d0:85:59:97:c5:c8:49:ff:4d:44:
         55:9f:36:e9:55:05:9a:99:bc:b0:b5:b6:45:32:04:07:b3:c8:
         79:c0:f4:06:6a:0b:89:44:88:68:ad:2d:3c:32:0c:73:e7:ad:
         68:54:72:54:87:17:7f:88:be:e1:4c:82:2b:17:ed:c9:2e:25:
         1d:c4:02:a0:fd:82:c9:b4:f5:71:fe:95:c5:c5:ef:80:7d:a8:
         c9:6a:b0:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJCNjIxMTAvBgNVBAUTKEU2RjY1RDIyMUI1OTVGNkJBMTNFQjMxNERFRTMzOENB
MjQxRTI3MjAwHhcNMjYwOTIzMDQxNTI1WhcNMjYwOTMwMDQxNTI1WjAYMRYwFAYD
VQQDEw02YWIzNTI1ZS00ZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8rEdD/3g7WEe3F6emflWFgVCDHzqFPvwmyXce/XuH/b220r/SmPtrfrWUokc
98htIfI0zjGBnDePHuJkbVc5UqmhFFOvp6y8vWzeS5hLuKMZfOtVJSev9vdr4OZm
3vHtlF55Zb5e6AZickryIHebkMJiQvitHN2bMCFBEnjAkQ0uCxILrkcAIG46aC8P
90S/XaPU4OLHYTPESovWm6w5UstLmb6oZguiafz15Nw0KcwCJIHxEqh2kPu+BOHC
3RL0/tZS9IG9iBSxK1kAbGuD7BA33FFkuYQjWc63wRH5VVJ8CPxqKbDMslQ/wEp0
PPfCP4mFH4NzBJ80AvExdNRa9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNoJeZMX
+FOWVN42ON4Tyd6/TKdwMB8GA1UdIwQYMBaAFOb2XSIbWV9roT6zFN7jOMokHicg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI2Mi9CRDI5QjgxNjVB
RTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0WlgydWhQck1VM3VNNHlpUWVK
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0Wlgy
dWhQck1VM3VNNHlpUWVKeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmqUYAx81Bm2Yb4snojtxWm4UyUQbXnIFU7wszvGPaNocVfMf12fYdg7424oV
1r5TpiiQTzOrtfSBw+eJf8VvWj1fpc60xOMzdsW+gQIpkWSL07+u7HlGSqgXW9q/
3ih36THUjNENhcUOYxa4z9F2rULUp6QIiTmmu7NVmbaQY4KzR6Q5oe0pWmwbbCtX
qcz9tHQ9J9trGKslpxLzBgw/tgBV4ttZT7oXYcXQhVmXxchJ/01EVZ826VUFmpm8
sLW2RTIEB7PIecD0BmoLiUSIaK0tPDIMc+etaFRyVIcXf4i+4UyCKxftyS4lHcQC
oP2CybT1cf6VxcXvgH2oyWqwug==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:58 2026 by rpki-client