Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft
File:                     0ATM-ubwekS9796TeAatucMyn_o.mft (raw, json)
Hash identifier:          vZ2bTqAYP3k9tmy4adKUkZ5F8PP8GGfFShOZbbdgnvI=
Subject key identifier:   F2:ED:32:3E:8A:24:D0:76:58:44:2F:4F:A0:57:2B:8C:E8:65:20:58
Authority key identifier: D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA
Certificate issuer:       /CN=A91E116E/serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA
Certificate serial:       18CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft
Manifest number:          18BE
Signing time:             Sun 20 Sep 2026 16:26:34 +0000
Manifest this update:     Sun 20 Sep 2026 16:26:34 +0000
Manifest next update:     Sun 27 Sep 2026 16:26:34 +0000
Files and hashes:         1: 0ATM-ubwekS9796TeAatucMyn_o.crl (hash: 0ykIpjdfAdldRdxxpm8pWB3GqCmXcu/DlhnDHUBGsNA=)
                          2: A1021498C53311E7B0B0744BC4F9AE02.roa (hash: zt4oK0/qzguPKHgNPCXsx0+9E5YrD2MKflgeNP6urLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl
                          rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6349 (0x18cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E116E, serialNumber=D004CCFAE6F07A44BDEFDE937806ADB9C3329FFA
        Validity
            Not Before: Sep 20 16:26:34 2026 GMT
            Not After : Sep 27 16:26:34 2026 GMT
        Subject: CN=6ab0093a-9c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:3f:fa:00:48:9f:43:eb:12:a5:53:cc:e6:
                    54:fd:15:a6:17:e0:ec:c0:00:e4:5d:c5:46:07:09:
                    f7:4a:3e:bd:30:96:59:42:87:12:2f:2b:ea:06:4a:
                    06:76:56:d7:3c:79:1d:c3:60:f1:40:d8:71:b6:eb:
                    7f:fe:93:2a:81:77:dc:59:6d:3e:8a:18:c6:db:5f:
                    07:1f:34:e4:74:be:71:d9:9b:9c:b3:0f:1d:00:cd:
                    d3:86:b5:71:ce:6b:40:ba:31:b1:27:09:2d:d2:fc:
                    75:4e:54:98:15:9e:c7:3d:f1:26:90:8c:51:ab:19:
                    c0:01:63:54:5a:4c:73:e0:a5:5c:6b:3d:73:6d:b1:
                    6f:85:8c:60:3e:81:be:16:4b:71:63:f6:0b:41:04:
                    1d:ae:91:50:7a:d6:d1:0c:0d:31:83:6c:38:ec:91:
                    d6:f5:62:c2:c6:dc:df:69:0b:01:1b:21:c4:1d:43:
                    47:73:f6:bb:a4:58:81:80:b0:11:84:b2:97:5b:2b:
                    7c:9a:7a:4f:4a:88:ed:18:94:82:92:60:80:2c:95:
                    24:ed:c5:fc:e0:1e:b2:7c:52:ce:28:31:9c:9f:b4:
                    fa:af:e6:5f:01:21:a0:4a:0b:06:b2:3e:54:cd:8c:
                    03:fe:49:8d:cc:ef:60:a5:e0:21:06:98:16:11:20:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:32:3E:8A:24:D0:76:58:44:2F:4F:A0:57:2B:8C:E8:65:20:58
            X509v3 Authority Key Identifier:
                keyid:D0:04:CC:FA:E6:F0:7A:44:BD:EF:DE:93:78:06:AD:B9:C3:32:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ATM-ubwekS9796TeAatucMyn_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E116E/7456C75AC53211E7921E3E49C4F9AE02/0ATM-ubwekS9796TeAatucMyn_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e0:51:3b:17:f8:39:aa:b4:a8:c2:ee:bd:a7:79:e2:3d:26:
         59:1d:9a:44:eb:b2:43:e3:98:bc:7c:75:0c:bb:c6:96:9c:1b:
         33:3a:05:4c:9a:c5:ec:19:7b:9b:75:87:7d:07:ae:de:a6:c8:
         5f:25:31:cd:51:b6:17:b2:a2:26:91:a1:7d:db:d3:a2:b6:56:
         2b:c9:da:7d:99:cb:e0:02:3f:e9:81:f7:0a:ec:e4:b2:7b:60:
         c6:10:ec:e2:9d:41:b1:79:fc:54:1e:4c:7c:a4:16:69:80:9e:
         94:ba:e0:05:aa:f8:d0:38:7e:53:c2:04:3e:3c:fc:02:bc:62:
         88:37:71:2c:a9:20:2f:3b:6c:b9:99:f9:55:e1:7c:31:ec:65:
         6e:20:f0:8b:c9:cb:d2:8f:1b:db:dc:88:21:c3:22:6c:ad:3d:
         50:f5:6a:07:9a:c9:f9:f1:96:2f:cb:68:d4:f2:d4:d3:d2:a7:
         2d:bf:55:4a:e9:88:b9:db:db:f1:88:a3:69:33:d5:32:a0:28:
         3d:ea:16:dc:e6:2d:83:78:86:bc:68:c5:f4:7d:fb:45:16:38:
         2b:d4:f4:64:4d:f9:8e:91:76:32:49:7e:03:99:11:b7:75:14:
         0b:a0:df:2d:50:c3:5e:71:f4:ec:b9:74:b2:8a:41:ee:37:a7:
         ae:3d:48:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExNkUxMTAvBgNVBAUTKEQwMDRDQ0ZBRTZGMDdBNDRCREVGREU5Mzc4MDZBREI5
QzMzMjlGRkEwHhcNMjYwOTIwMTYyNjM0WhcNMjYwOTI3MTYyNjM0WjAYMRYwFAYD
VQQDEw02YWIwMDkzYS05YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqNQ/+gBIn0PrEqVTzOZU/RWmF+DswADkXcVGBwn3Sj69MJZZQocSLyvqBkoG
dlbXPHkdw2DxQNhxtut//pMqgXfcWW0+ihjG218HHzTkdL5x2Zucsw8dAM3ThrVx
zmtAujGxJwkt0vx1TlSYFZ7HPfEmkIxRqxnAAWNUWkxz4KVcaz1zbbFvhYxgPoG+
FktxY/YLQQQdrpFQetbRDA0xg2w47JHW9WLCxtzfaQsBGyHEHUNHc/a7pFiBgLAR
hLKXWyt8mnpPSojtGJSCkmCALJUk7cX84B6yfFLOKDGcn7T6r+ZfASGgSgsGsj5U
zYwD/kmNzO9gpeAhBpgWESBnCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLtMj6K
JNB2WEQvT6BXK4zoZSBYMB8GA1UdIwQYMBaAFNAEzPrm8HpEve/ek3gGrbnDMp/6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE2RS83NDU2Qzc1QUM1
MzIxMUU3OTIxRTNFNDlDNEY5QUUwMi8wQVRNLXVid2VrUzk3OTZUZUFhdHVjTXlu
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBVE0tdWJ3ZWtTOTc5NlRlQWF0dWNNeW5fby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTE2RS83NDU2Qzc1QUM1MzIxMUU3OTIxRTNFNDlDNEY5QUUwMi8wQVRNLXVid2Vr
Uzk3OTZUZUFhdHVjTXluX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu+BROxf4Oaq0qMLuvad54j0mWR2aROuyQ+OYvHx1DLvGlpwbMzoFTJrF7Bl7
m3WHfQeu3qbIXyUxzVG2F7KiJpGhfdvTorZWK8nafZnL4AI/6YH3CuzksntgxhDs
4p1BsXn8VB5MfKQWaYCelLrgBar40Dh+U8IEPjz8ArxiiDdxLKkgLztsuZn5VeF8
MexlbiDwi8nL0o8b29yIIcMibK09UPVqB5rJ+fGWL8to1PLU09KnLb9VSumIudvb
8YijaTPVMqAoPeoW3OYtg3iGvGjF9H37RRY4K9T0ZE35jpF2Mkl+A5kRt3UUC6Df
LVDDXnH07Ll0sopB7jenrj1I1g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:10:52 2026 by rpki-client