Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
File:                     n23iTD7GWLEeatCvFdv-DKPb9mg.mft (raw, json)
Hash identifier:          8TIs+zy3xfCGueq1LMGIrpqM4LxCHryasb5tzjXb5eE=
Subject key identifier:   01:B4:B5:AB:94:AC:A9:70:26:18:5F:EC:56:E5:33:14:72:BC:CC:24
Authority key identifier: 9F:6D:E2:4C:3E:C6:58:B1:1E:6A:D0:AF:15:DB:FE:0C:A3:DB:F6:68
Certificate issuer:       /CN=A91D2DDF/serialNumber=9F6DE24C3EC658B11E6AD0AF15DBFE0CA3DBF668
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n23iTD7GWLEeatCvFdv-DKPb9mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
Manifest number:          04
Signing time:             Mon 21 Sep 2026 09:15:58 +0000
Manifest this update:     Mon 21 Sep 2026 09:15:58 +0000
Manifest next update:     Mon 28 Sep 2026 09:15:58 +0000
Files and hashes:         1: n23iTD7GWLEeatCvFdv-DKPb9mg.crl (hash: FNdkGUzaZVzsW2E4AsBySLjyTCIH6VlLMF4aGVBF/Rs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.crl
                          rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n23iTD7GWLEeatCvFdv-DKPb9mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2DDF, serialNumber=9F6DE24C3EC658B11E6AD0AF15DBFE0CA3DBF668
        Validity
            Not Before: Sep 21 09:15:58 2026 GMT
            Not After : Sep 28 09:15:58 2026 GMT
        Subject: CN=6ab0f5ce-6052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:e2:07:a4:11:52:b0:80:96:f6:63:55:38:
                    fc:9f:22:73:6f:6a:81:16:b5:cd:b7:e6:4b:1e:c6:
                    18:48:10:e9:6b:c5:0e:e6:9b:74:15:a5:1c:45:ab:
                    6b:b7:b5:fc:ff:ea:52:5e:f2:01:73:3a:96:8f:57:
                    1d:5b:0f:52:76:21:0c:85:9a:5e:a3:71:a6:ea:94:
                    49:2b:8c:83:31:aa:86:dd:8a:7a:5a:9f:81:00:6a:
                    d3:66:90:4a:45:ba:49:a7:b6:68:6e:cb:12:5a:95:
                    55:02:bb:12:2a:c0:c3:40:9e:50:c5:3d:ad:16:10:
                    55:f6:c8:40:fb:d0:56:19:f3:56:2a:5b:81:3c:b6:
                    ce:23:25:6b:e5:d7:c3:78:12:a0:0c:c6:2c:e5:fc:
                    5b:df:5d:40:69:36:e3:d7:e9:6f:88:bc:a3:75:eb:
                    56:46:6c:28:25:eb:4f:32:46:00:0b:56:4a:fb:a9:
                    32:c3:a6:ec:51:7d:45:8e:84:84:e7:35:8a:f3:46:
                    91:ed:3e:65:7c:f1:f1:f3:0d:e9:65:22:50:f4:a0:
                    c0:0e:7a:44:0d:7d:3e:cc:b0:4f:45:0f:f3:fd:b7:
                    26:5c:d0:a9:e5:87:fa:b5:0f:4c:55:e1:61:d6:87:
                    fd:b7:8c:5e:33:75:ee:45:4b:a2:67:a1:ed:71:a6:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B4:B5:AB:94:AC:A9:70:26:18:5F:EC:56:E5:33:14:72:BC:CC:24
            X509v3 Authority Key Identifier:
                keyid:9F:6D:E2:4C:3E:C6:58:B1:1E:6A:D0:AF:15:DB:FE:0C:A3:DB:F6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n23iTD7GWLEeatCvFdv-DKPb9mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/59D5B348B23411F1826349B35E11F970/n23iTD7GWLEeatCvFdv-DKPb9mg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bd:24:5e:03:e5:7a:be:af:1e:9e:b0:61:79:5b:55:e5:46:
         93:f9:2d:4e:27:40:41:48:3e:6d:2d:90:11:23:58:b7:9a:89:
         53:45:95:81:58:17:cb:f4:68:16:dd:33:c4:0b:12:70:95:e1:
         d2:e9:db:0f:7e:7c:87:38:7d:a4:82:9b:6f:e5:6b:b9:f6:32:
         ce:8e:5d:f2:26:c2:f4:dc:8b:18:ae:93:3e:31:0d:6f:42:df:
         b6:b2:c9:54:3c:18:1f:4d:73:cd:5a:c4:39:08:2a:a8:86:22:
         7c:5d:c9:56:a2:ec:94:62:65:fe:5d:f3:39:63:92:67:5f:e5:
         1e:09:b0:4f:40:1e:b1:e6:54:f5:b1:57:42:a2:3a:81:30:b1:
         7c:88:0c:46:a6:34:03:59:6e:76:1e:51:6d:e7:ba:76:b5:12:
         99:fa:15:00:7f:33:1e:f7:5c:0e:c9:d3:7a:c0:a0:89:1c:e5:
         ea:8e:ce:82:76:7d:71:e4:1d:18:c1:ba:f6:9b:71:8b:0a:63:
         41:c6:38:11:98:48:79:c7:6e:22:71:fb:c8:1d:0a:72:eb:b0:
         5a:52:49:56:20:ae:45:e9:7d:e7:f5:81:b8:dc:0b:59:9b:2a:
         bf:73:61:8d:9b:42:a1:e7:0e:e3:25:47:c5:f0:ca:41:0b:b9:
         2f:7a:86:1b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MkRERjExMC8GA1UEBRMoOUY2REUyNEMzRUM2NThCMTFFNkFEMEFGMTVEQkZFMENB
M0RCRjY2ODAeFw0yNjA5MjEwOTE1NThaFw0yNjA5MjgwOTE1NThaMBgxFjAUBgNV
BAMTDTZhYjBmNWNlLTYwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC38eIHpBFSsICW9mNVOPyfInNvaoEWtc235ksexhhIEOlrxQ7mm3QVpRxFq2u3
tfz/6lJe8gFzOpaPVx1bD1J2IQyFml6jcabqlEkrjIMxqobdinpan4EAatNmkEpF
ukmntmhuyxJalVUCuxIqwMNAnlDFPa0WEFX2yED70FYZ81YqW4E8ts4jJWvl18N4
EqAMxizl/FvfXUBpNuPX6W+IvKN161ZGbCgl608yRgALVkr7qTLDpuxRfUWOhITn
NYrzRpHtPmV88fHzDellIlD0oMAOekQNfT7MsE9FD/P9tyZc0Knlh/q1D0xV4WHW
h/23jF4zde5FS6Jnoe1xpuPfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAbS1q5Ss
qXAmGF/sVuUzFHK8zCQwHwYDVR0jBBgwFoAUn23iTD7GWLEeatCvFdv+DKPb9mgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyRERGLzU5RDVCMzQ4QjIz
NDExRjE4MjYzNDlCMzVFMTFGOTcwL24yM2lURDdHV0xFZWF0Q3ZGZHYtREtQYjlt
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbjIzaVREN0dXTEVlYXRDdkZkdi1ES1BiOW1nLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy
RERGLzU5RDVCMzQ4QjIzNDExRjE4MjYzNDlCMzVFMTFGOTcwL24yM2lURDdHV0xF
ZWF0Q3ZGZHYtREtQYjltZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCmvSReA+V6vq8enrBheVtV5UaT+S1OJ0BBSD5tLZARI1i3molTRZWBWBfL9GgW
3TPECxJwleHS6dsPfnyHOH2kgptv5Wu59jLOjl3yJsL03IsYrpM+MQ1vQt+2sslU
PBgfTXPNWsQ5CCqohiJ8XclWouyUYmX+XfM5Y5JnX+UeCbBPQB6x5lT1sVdCojqB
MLF8iAxGpjQDWW52HlFt57p2tRKZ+hUAfzMe91wOydN6wKCJHOXqjs6Cdn1x5B0Y
wbr2m3GLCmNBxjgRmEh5x24icfvIHQpy67BaUklWIK5F6X3n9YG43AtZmyq/c2GN
m0Kh5w7jJUfF8MpBC7kveoYb
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:05 2026 by rpki-client