Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
File:                     1929C75jT2f_WMtqZhL6rTP4cEc.mft (raw, json)
Hash identifier:          RipphFp0T2Ldh3lPFWEnoSx36Tf/w9IIFDiG2czAZV0=
Subject key identifier:   CF:62:8E:4D:8D:CF:69:BE:82:58:E0:08:98:88:C4:87:3D:63:D1:DE
Authority key identifier: D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47
Certificate issuer:       /CN=A91DA5F7/serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
Manifest number:          82
Signing time:             Mon 21 Sep 2026 07:41:09 +0000
Manifest this update:     Mon 21 Sep 2026 07:41:08 +0000
Manifest next update:     Mon 28 Sep 2026 07:41:08 +0000
Files and hashes:         1: 1929C75jT2f_WMtqZhL6rTP4cEc.crl (hash: zIItiWARecdIpzN9byA8WZn2GL1OcxuWWMe7626rUSk=)
                          2: 3061C022F1F211F0B442E9B1456F56BC.roa (hash: yVZM9wIf/Y6hAa7HZ+B2izj2yBzbhyTFipocbEptqMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl
                          rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA5F7, serialNumber=D7DDBD0BBE634F67FF58CB6A6612FAAD33F87047
        Validity
            Not Before: Sep 21 07:41:08 2026 GMT
            Not After : Sep 28 07:41:08 2026 GMT
        Subject: CN=6ab0df95-800e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:cb:f0:73:4e:fe:a8:c0:cf:cd:fd:e8:0e:
                    11:52:51:e5:a7:14:03:90:21:06:f1:dc:17:c0:4f:
                    5c:f9:eb:68:7d:26:c6:3a:14:6b:ef:14:94:52:77:
                    9e:6c:17:95:67:48:7e:3a:1c:43:a5:38:49:3e:4f:
                    43:9f:e1:58:72:b1:86:2e:92:39:4c:63:9c:ba:5a:
                    54:86:08:9f:94:42:b1:16:07:fa:1a:5d:38:c2:be:
                    10:ad:57:de:c2:5b:3b:09:a3:77:17:55:96:0e:a3:
                    63:c7:03:8c:44:e2:ca:c4:93:00:c0:16:be:5d:40:
                    a0:82:ad:75:a8:90:1b:32:7b:a3:0d:68:df:d1:22:
                    22:1a:68:db:90:b0:66:2d:d4:87:a3:f1:ea:16:51:
                    06:05:a2:48:f8:75:cb:76:e8:7e:31:4f:63:8c:39:
                    a2:f8:f8:e0:4c:d8:06:81:3b:17:f8:4b:bb:e7:db:
                    a6:b3:92:84:56:6c:e1:7d:bb:89:d3:bf:0d:d0:63:
                    ad:36:71:68:07:e7:e8:34:a7:57:c0:2e:d3:7a:03:
                    5b:a6:61:7a:cd:e7:02:c9:14:55:20:de:df:22:dc:
                    ca:65:b6:86:0a:5a:03:fc:11:2f:b9:cf:51:51:89:
                    9e:08:11:f5:e8:6c:b0:85:95:22:cc:27:61:45:a0:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:62:8E:4D:8D:CF:69:BE:82:58:E0:08:98:88:C4:87:3D:63:D1:DE
            X509v3 Authority Key Identifier:
                keyid:D7:DD:BD:0B:BE:63:4F:67:FF:58:CB:6A:66:12:FA:AD:33:F8:70:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1929C75jT2f_WMtqZhL6rTP4cEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/D6DF5ADCF1F111F0AB21F93B456F56BC/1929C75jT2f_WMtqZhL6rTP4cEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:9a:c7:e5:16:49:b2:69:cd:e9:01:7a:bd:19:eb:61:d6:
         0a:71:6f:c4:53:24:30:62:b3:b9:0e:8c:74:2a:cc:76:d6:72:
         95:f1:0d:1b:3e:bd:aa:20:e1:f9:1f:14:cb:52:f5:40:64:b0:
         49:41:23:84:86:a2:26:a4:e4:7f:4c:d7:ae:82:aa:1c:8c:47:
         9f:5b:c0:a0:ae:95:45:27:d5:11:3c:cf:65:ef:55:90:30:fd:
         a2:7e:e3:46:90:d0:e1:04:73:61:4b:54:12:7d:d0:a5:50:39:
         00:70:ff:7a:99:f3:12:37:62:da:18:21:80:4d:b5:c2:e9:1c:
         3d:b7:41:1f:fc:48:36:f0:0d:92:dd:7f:a3:bf:cf:fa:24:1a:
         fa:f2:0f:9f:04:89:63:ff:3f:3f:73:76:52:7a:2e:83:3d:80:
         62:76:46:6d:23:aa:34:0c:50:78:62:36:af:c5:d2:d6:b5:09:
         99:5d:49:bb:b7:23:73:90:50:d7:c9:ea:45:fa:56:9f:e7:7c:
         37:09:5b:bc:93:67:95:9c:c3:e6:f3:2e:1a:61:bd:e8:15:82:
         85:3b:3c:d1:24:33:ea:18:ef:11:5e:d6:17:5d:a4:b6:95:5f:
         c9:fb:08:19:20:db:fa:ca:ce:54:e1:b4:bf:e0:90:28:be:cd:
         fa:73:f8:7e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE1RjcxMTAvBgNVBAUTKEQ3RERCRDBCQkU2MzRGNjdGRjU4Q0I2QTY2MTJGQUFE
MzNGODcwNDcwHhcNMjYwOTIxMDc0MTA4WhcNMjYwOTI4MDc0MTA4WjAYMRYwFAYD
VQQDEw02YWIwZGY5NS04MDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxarL8HNO/qjAz8396A4RUlHlpxQDkCEG8dwXwE9c+etofSbGOhRr7xSUUnee
bBeVZ0h+OhxDpThJPk9Dn+FYcrGGLpI5TGOculpUhgiflEKxFgf6Gl04wr4QrVfe
wls7CaN3F1WWDqNjxwOMROLKxJMAwBa+XUCggq11qJAbMnujDWjf0SIiGmjbkLBm
LdSHo/HqFlEGBaJI+HXLduh+MU9jjDmi+PjgTNgGgTsX+Eu759ums5KEVmzhfbuJ
078N0GOtNnFoB+foNKdXwC7TegNbpmF6zecCyRRVIN7fItzKZbaGCloD/BEvuc9R
UYmeCBH16GywhZUizCdhRaDf5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9ijk2N
z2m+gljgCJiIxIc9Y9HeMB8GA1UdIwQYMBaAFNfdvQu+Y09n/1jLamYS+q0z+HBH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTVGNy9ENkRGNUFEQ0Yx
RjExMUYwQUIyMUY5M0I0NTZGNTZCQy8xOTI5Qzc1alQyZl9XTXRxWmhMNnJUUDRj
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE5MjlDNzVqVDJmX1dNdHFaaEw2clRQNGNFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTVGNy9ENkRGNUFEQ0YxRjExMUYwQUIyMUY5M0I0NTZGNTZCQy8xOTI5Qzc1alQy
Zl9XTXRxWmhMNnJUUDRjRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAaKax+UWSbJpzekBer0Z62HWCnFvxFMkMGKzuQ6MdCrMdtZylfENGz69qiDh
+R8Uy1L1QGSwSUEjhIaiJqTkf0zXroKqHIxHn1vAoK6VRSfVETzPZe9VkDD9on7j
RpDQ4QRzYUtUEn3QpVA5AHD/epnzEjdi2hghgE21wukcPbdBH/xINvANkt1/o7/P
+iQa+vIPnwSJY/8/P3N2Unougz2AYnZGbSOqNAxQeGI2r8XS1rUJmV1Ju7cjc5BQ
18nqRfpWn+d8NwlbvJNnlZzD5vMuGmG96BWChTs80SQz6hjvEV7WF12ktpVfyfsI
GSDb+srOVOG0v+CQKL7N+nP4fg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:41:22 2026 by rpki-client