Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
File:                     788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json)
Hash identifier:          gS7YE3ROkz1g6U4XiGfRQGzlUvlGbfbF7TJ7VL7zhes=
Subject key identifier:   C3:8C:B4:93:4E:5E:50:C9:0D:9C:C6:B5:38:12:00:12:73:22:6C:A0
Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04
Certificate issuer:       /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
Certificate serial:       0E4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
Manifest number:          0E44
Signing time:             Sun 20 Sep 2026 17:44:20 +0000
Manifest this update:     Sun 20 Sep 2026 17:44:19 +0000
Manifest next update:     Sun 27 Sep 2026 17:44:19 +0000
Files and hashes:         1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: QmylZCD6bFoEYHUKFc3atq0DMc0QJr5x+Eyne0LoB8E=)
                          2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: nWSk10SPwusUWBSLiCJQo289XMus0NqOV3jdZ3AZ3Cs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3662 (0xe4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB9C0, serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
        Validity
            Not Before: Sep 20 17:44:19 2026 GMT
            Not After : Sep 27 17:44:19 2026 GMT
        Subject: CN=6ab01b74-af3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:34:7a:61:d2:eb:8d:7b:1f:a8:95:63:33:
                    c1:6a:30:bd:99:e9:95:44:a1:ad:de:be:cc:92:50:
                    18:ef:fa:1a:01:31:c1:6d:f2:09:c5:af:6f:0b:c5:
                    0c:8e:5d:4c:4c:3c:6c:7f:48:93:4a:31:5a:6a:b2:
                    b7:dd:63:52:9f:46:a6:5f:64:58:4c:de:c6:52:5e:
                    f0:94:f2:85:8b:5c:81:95:0a:08:f5:1c:13:17:69:
                    f3:61:d5:95:36:c8:bb:53:7b:f9:a5:34:bd:05:00:
                    b6:1a:85:23:c0:a4:28:ff:0e:72:4b:e5:90:71:28:
                    d9:87:6e:62:ac:83:d0:c0:c1:cf:cb:39:82:3f:84:
                    58:1d:b3:7a:8b:1d:e4:66:10:28:98:48:15:f4:19:
                    4e:f5:fd:9a:25:18:28:21:31:53:36:64:4a:39:42:
                    45:be:2c:4d:67:2b:b2:e1:f7:e9:4e:8c:e8:ee:9f:
                    05:27:f2:e3:7f:7b:1b:95:46:ae:b7:89:0c:19:f9:
                    60:a8:d7:41:11:59:f4:6b:9f:3d:89:76:8c:d8:cc:
                    37:86:af:5c:c3:9f:84:9a:14:0b:d5:59:11:a6:fd:
                    85:6c:19:f0:5f:2c:ad:80:fd:4f:d7:1b:3b:f7:d3:
                    12:f2:32:3f:3e:67:25:2f:54:d8:10:cc:ef:2a:59:
                    34:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8C:B4:93:4E:5E:50:C9:0D:9C:C6:B5:38:12:00:12:73:22:6C:A0
            X509v3 Authority Key Identifier:
                keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:67:f6:2c:b3:fb:20:ee:89:f5:18:e5:ad:82:f9:7b:31:c4:
         99:e1:c3:e4:4f:8e:c4:86:df:65:dd:90:fe:35:c1:bc:b9:af:
         61:6a:31:17:2a:93:1a:aa:8d:2b:8b:ea:14:c7:b7:8a:14:cf:
         56:0e:25:18:4d:ef:c2:a0:be:f8:a8:43:c5:6e:65:ae:dd:3e:
         75:0a:c6:8f:bc:8e:ca:fa:eb:3f:7a:52:45:c1:1b:55:1f:4d:
         7a:6a:88:aa:9e:4f:07:30:8a:f1:2c:cb:11:df:f6:e7:9f:41:
         d2:b1:30:bd:0b:45:6a:0e:12:42:7e:6a:3c:8a:07:f0:17:15:
         ee:a6:5d:3c:12:96:bf:87:55:42:32:52:02:92:46:cf:ef:18:
         51:4d:f9:76:55:f0:cf:69:b7:88:d0:3b:ed:5d:85:9a:a7:f3:
         2c:c2:98:33:65:dd:15:53:a4:5f:6f:85:cf:a4:8e:b3:cc:ed:
         c3:a4:6d:ac:38:93:91:ee:43:9d:88:36:fd:56:e9:ce:4f:e0:
         f2:86:bf:3c:5c:91:62:eb:30:58:a0:13:0a:d4:fd:b9:6a:69:
         bd:35:73:a0:17:fc:ec:8c:eb:e2:41:d1:96:61:d8:42:14:73:
         31:af:90:9c:43:81:fa:d4:65:92:16:93:ec:5d:45:bd:ab:f7:
         cb:ff:47:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI5QzAxMTAvBgNVBAUTKEVGQ0YwNTJEOTg5MjkyQ0VCMTA1MDkxMjlDOERFMjAz
RDQ5RjY4MDQwHhcNMjYwOTIwMTc0NDE5WhcNMjYwOTI3MTc0NDE5WjAYMRYwFAYD
VQQDEw02YWIwMWI3NC1hZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlEg0emHS6417H6iVYzPBajC9memVRKGt3r7MklAY7/oaATHBbfIJxa9vC8UM
jl1MTDxsf0iTSjFaarK33WNSn0amX2RYTN7GUl7wlPKFi1yBlQoI9RwTF2nzYdWV
Nsi7U3v5pTS9BQC2GoUjwKQo/w5yS+WQcSjZh25irIPQwMHPyzmCP4RYHbN6ix3k
ZhAomEgV9BlO9f2aJRgoITFTNmRKOUJFvixNZyuy4ffpTozo7p8FJ/Ljf3sblUau
t4kMGflgqNdBEVn0a589iXaM2Mw3hq9cw5+EmhQL1VkRpv2FbBnwXyytgP1P1xs7
99MS8jI/PmclL1TYEMzvKlk07QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOMtJNO
XlDJDZzGtTgSABJzImygMB8GA1UdIwQYMBaAFO/PBS2YkpLOsQUJEpyN4gPUn2gE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlDMC9EMzY0RjBDQ0Qy
MUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tzNnhCUWtTbkkzaUE5U2Zh
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc4OEZMWmlTa3M2eEJRa1NuSTNpQTlTZmFBUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjlDMC9EMzY0RjBDQ0QyMUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tz
NnhCUWtTbkkzaUE5U2ZhQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfWf2LLP7IO6J9RjlrYL5ezHEmeHD5E+OxIbfZd2Q/jXBvLmvYWoxFyqTGqqN
K4vqFMe3ihTPVg4lGE3vwqC++KhDxW5lrt0+dQrGj7yOyvrrP3pSRcEbVR9NemqI
qp5PBzCK8SzLEd/2559B0rEwvQtFag4SQn5qPIoH8BcV7qZdPBKWv4dVQjJSApJG
z+8YUU35dlXwz2m3iNA77V2FmqfzLMKYM2XdFVOkX2+Fz6SOs8ztw6RtrDiTke5D
nYg2/Vbpzk/g8oa/PFyRYuswWKATCtT9uWppvTVzoBf87Izr4kHRlmHYQhRzMa+Q
nEOB+tRlkhaT7F1Fvav3y/9Hmw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:31:23 2026 by rpki-client