Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
File:                     PusZaI0z1iGZTls9nkbsqqUJ9CM.mft (raw, json)
Hash identifier:          co9Ame0XJt625KerrTk5lDMHUh3jat7MoaRpziQ71eA=
Subject key identifier:   4D:C8:F9:8E:93:55:FC:17:D2:45:70:96:00:20:D4:A2:2F:77:A5:34
Authority key identifier: 3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23
Certificate issuer:       /CN=A91DE4AC/serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
Certificate serial:       0517
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
Manifest number:          050F
Signing time:             Sun 20 Sep 2026 23:27:36 +0000
Manifest this update:     Sun 20 Sep 2026 23:27:35 +0000
Manifest next update:     Sun 27 Sep 2026 23:27:35 +0000
Files and hashes:         1: PusZaI0z1iGZTls9nkbsqqUJ9CM.crl (hash: NChT3iJQsfZF1WBdD9A4YpLuqJzBZbwEaUWI3pxtg8w=)
                          2: 0716B2646C7111EC8C5E6967C4F9AE02.roa (hash: n0l/G3zz8221DJQZK1QZg+2i3DJbPsMPV1JZDdgqiFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl
                          rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1303 (0x517)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE4AC, serialNumber=3EEB19688D33D621994E5B3D9E46ECAAA509F423
        Validity
            Not Before: Sep 20 23:27:35 2026 GMT
            Not After : Sep 27 23:27:35 2026 GMT
        Subject: CN=6ab06be8-994c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:47:69:7d:33:f8:87:69:5b:ae:8f:45:cb:
                    5f:52:bd:e8:74:e2:9d:fa:22:85:63:1c:6c:ca:5d:
                    88:3f:1a:82:c7:be:0d:a1:bd:5b:cf:74:89:de:60:
                    c1:e7:20:0a:44:fe:a3:4a:8d:34:b6:98:3f:6f:95:
                    b4:c7:fd:ed:cd:60:ca:45:db:1f:e4:16:19:1f:3d:
                    ee:27:e3:90:95:2d:5a:29:8a:9e:00:e9:c9:bf:1f:
                    4a:a4:db:3a:de:17:bf:25:9a:40:8f:d4:6a:6d:f0:
                    86:79:e3:b8:39:d1:06:57:8d:7a:3d:12:3c:d9:98:
                    e0:90:f7:cb:4a:f5:c0:8d:dc:86:2b:1a:2c:e1:ff:
                    fd:4a:36:f7:5f:13:6e:a0:2c:03:06:f5:09:3f:c6:
                    b6:4f:06:84:31:b2:2c:94:c7:3e:57:df:de:fa:f3:
                    82:3a:63:a8:fb:c7:c1:ab:99:fd:0e:2b:10:cc:db:
                    81:85:73:61:18:b0:cc:cc:ec:be:b6:73:87:c1:33:
                    66:5e:29:ee:d7:c6:12:ae:29:d1:0b:24:4e:a0:e9:
                    eb:af:e0:1a:b5:f6:10:8f:5d:02:05:f8:1d:e9:de:
                    c3:46:5e:98:2f:25:e8:d7:74:78:80:7b:bb:6a:6f:
                    f8:ee:a4:6a:c3:d1:d7:bf:05:66:45:f1:ad:0f:57:
                    5d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:F9:8E:93:55:FC:17:D2:45:70:96:00:20:D4:A2:2F:77:A5:34
            X509v3 Authority Key Identifier:
                keyid:3E:EB:19:68:8D:33:D6:21:99:4E:5B:3D:9E:46:EC:AA:A5:09:F4:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PusZaI0z1iGZTls9nkbsqqUJ9CM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE4AC/3441D2D06C6E11ECB233FB61C4F9AE02/PusZaI0z1iGZTls9nkbsqqUJ9CM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ec:03:68:43:be:d1:99:83:58:a7:83:7b:56:4c:d3:04:f6:
         3c:f8:62:18:c2:f3:44:87:f7:a5:d7:8c:95:47:7c:2b:9d:4a:
         41:1c:66:cc:d3:c2:ca:11:15:7a:da:f8:ee:13:ff:99:32:86:
         14:88:e7:fb:02:27:27:78:d9:5e:3d:56:4d:8b:38:15:30:61:
         a9:ff:0d:45:81:22:65:94:33:87:6e:cf:48:c6:2c:ab:a3:fd:
         72:46:a9:2b:50:c2:47:b8:24:9d:a7:70:4b:65:23:16:1c:ae:
         a3:60:aa:3f:a1:32:55:62:ca:a0:ec:91:76:6d:c7:c5:6d:5f:
         1c:c7:54:80:fe:a6:5f:84:39:0e:c9:a9:ec:c9:2a:3b:66:06:
         43:36:06:1e:15:bf:91:99:2b:6f:97:0c:58:4e:a8:c0:2b:d7:
         0c:ff:73:e7:77:28:56:76:79:0e:46:e9:e8:ca:db:a6:87:3b:
         4a:b3:10:92:d2:8a:25:50:13:c5:fb:18:0d:8e:81:ed:a4:42:
         5e:82:9a:3e:f4:81:87:38:e1:93:e8:af:bd:4d:0d:78:17:8f:
         27:96:b1:f0:b4:01:a8:e7:40:fe:cc:2e:ed:c5:5e:26:4e:aa:
         e9:ac:1f:55:21:28:50:7e:92:31:f9:28:13:27:10:f1:36:c9:
         40:d2:ca:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU0QUMxMTAvBgNVBAUTKDNFRUIxOTY4OEQzM0Q2MjE5OTRFNUIzRDlFNDZFQ0FB
QTUwOUY0MjMwHhcNMjYwOTIwMjMyNzM1WhcNMjYwOTI3MjMyNzM1WjAYMRYwFAYD
VQQDEw02YWIwNmJlOC05OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA11NHaX0z+IdpW66PRctfUr3odOKd+iKFYxxsyl2IPxqCx74Nob1bz3SJ3mDB
5yAKRP6jSo00tpg/b5W0x/3tzWDKRdsf5BYZHz3uJ+OQlS1aKYqeAOnJvx9KpNs6
3he/JZpAj9RqbfCGeeO4OdEGV416PRI82ZjgkPfLSvXAjdyGKxos4f/9Sjb3XxNu
oCwDBvUJP8a2TwaEMbIslMc+V9/e+vOCOmOo+8fBq5n9DisQzNuBhXNhGLDMzOy+
tnOHwTNmXinu18YSrinRCyROoOnrr+AatfYQj10CBfgd6d7DRl6YLyXo13R4gHu7
am/47qRqw9HXvwVmRfGtD1ddYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3I+Y6T
VfwX0kVwlgAg1KIvd6U0MB8GA1UdIwQYMBaAFD7rGWiNM9YhmU5bPZ5G7KqlCfQj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTRBQy8zNDQxRDJEMDZD
NkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFpR1pUbHM5bmtic3FxVUo5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B1c1phSTB6MWlHWlRsczlua2JzcXFVSjlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTRBQy8zNDQxRDJEMDZDNkUxMUVDQjIzM0ZCNjFDNEY5QUUwMi9QdXNaYUkwejFp
R1pUbHM5bmtic3FxVUo5Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbewDaEO+0ZmDWKeDe1ZM0wT2PPhiGMLzRIf3pdeMlUd8K51KQRxmzNPCyhEV
etr47hP/mTKGFIjn+wInJ3jZXj1WTYs4FTBhqf8NRYEiZZQzh27PSMYsq6P9ckap
K1DCR7gknadwS2UjFhyuo2CqP6EyVWLKoOyRdm3HxW1fHMdUgP6mX4Q5Dsmp7Mkq
O2YGQzYGHhW/kZkrb5cMWE6owCvXDP9z53coVnZ5Dkbp6Mrbpoc7SrMQktKKJVAT
xfsYDY6B7aRCXoKaPvSBhzjhk+ivvU0NeBePJ5ax8LQBqOdA/swu7cVeJk6q6awf
VSEoUH6SMfkoEycQ8TbJQNLKzA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:08:49 2026 by rpki-client