Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
File:                     _YxfSHdCyyBRsoaXKbRmEkzfXms.mft (raw, json)
Hash identifier:          PPrbUyUKFDa8JBdkDv07poT4qqPOKfzJlZVPwto0eMU=
Subject key identifier:   86:D8:60:09:DE:A3:4B:31:12:DA:C3:6F:76:F8:72:CF:E8:45:E7:C1
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Certificate issuer:       /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
Manifest number:          016E
Signing time:             Mon 21 Sep 2026 05:03:19 +0000
Manifest this update:     Mon 21 Sep 2026 05:03:19 +0000
Manifest next update:     Mon 28 Sep 2026 05:03:19 +0000
Files and hashes:         1: _YxfSHdCyyBRsoaXKbRmEkzfXms.crl (hash: Uz+tlIx9c3T7pdN/3GFhRIb81z5vZc8+0MTabMtHmmo=)
                          2: 3117605AFF2E11F099836B6D89EE528E.roa (hash: 9SU96IyHt+q6dfn55IH1qHwjcN6QmVNgdXOAMwSq/nc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
        Validity
            Not Before: Sep 21 05:03:19 2026 GMT
            Not After : Sep 28 05:03:19 2026 GMT
        Subject: CN=6ab0ba97-54ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:67:81:9c:94:f6:80:81:96:36:67:42:f0:
                    a8:41:d8:48:08:12:e7:7e:19:5b:84:27:46:02:ad:
                    b9:c5:bb:6b:85:30:c6:80:1f:e0:16:19:14:3b:e1:
                    50:e2:0b:c0:5c:c5:64:34:f8:60:00:48:0c:b1:11:
                    1e:5b:16:a6:93:22:55:ce:3f:cd:af:5e:54:51:7e:
                    b0:58:20:59:40:51:77:21:1e:12:65:ea:6d:f6:73:
                    bc:4f:19:c2:1b:ed:74:54:90:0d:1a:06:4e:26:ed:
                    0c:7d:36:fb:99:82:7f:36:10:c3:1e:4a:13:90:3f:
                    d4:03:32:b5:44:06:34:5d:60:c6:86:b4:2e:89:65:
                    71:9c:3a:21:b5:a1:05:09:54:20:b3:4f:f7:64:6d:
                    23:64:11:3c:10:24:7a:a0:42:03:55:c0:b8:31:c9:
                    89:9d:62:3a:85:73:d7:79:48:f4:bb:68:62:79:68:
                    75:1a:76:0b:e6:3c:92:06:c1:02:22:df:3e:62:10:
                    32:30:8f:61:f1:50:d0:6b:82:0a:8a:0c:73:b4:cd:
                    43:ac:df:d7:dc:59:69:ad:8a:2c:71:81:8a:1d:4a:
                    8e:02:12:7e:8e:23:8f:d5:18:7f:6c:c3:99:27:8c:
                    de:24:00:b5:25:0c:68:c6:05:3b:cc:48:ec:ad:78:
                    3b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:60:09:DE:A3:4B:31:12:DA:C3:6F:76:F8:72:CF:E8:45:E7:C1
            X509v3 Authority Key Identifier:
                keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c4:44:6b:0d:fb:32:27:06:0c:f6:04:74:70:4e:c1:83:f5:
         fd:4d:a5:c5:54:fa:7f:24:6c:90:50:05:c5:1d:74:22:07:86:
         30:1d:18:2f:e8:07:48:30:8e:e7:d8:9a:d4:4b:97:10:3e:39:
         0d:99:a2:a5:23:a2:e9:6c:8a:1d:08:b9:fd:e3:d1:60:4f:79:
         f0:51:b6:47:f0:9b:f9:78:fa:f1:3a:9c:a4:d9:3f:1d:59:10:
         16:5c:8f:dd:ed:e5:4c:58:5c:b4:51:b7:85:07:46:cf:e4:4c:
         55:fd:98:83:d1:99:4a:81:8f:7c:1a:e4:a3:fe:59:f5:f3:10:
         6c:67:69:fe:21:f0:67:de:9d:0b:be:85:a1:50:8d:23:78:2f:
         02:d7:6d:2d:d4:6c:c2:bb:c3:40:7b:a5:44:2c:53:b7:ed:1d:
         74:0c:81:a3:7f:fe:86:57:93:60:c8:21:6a:d9:2f:ed:e4:bc:
         5a:6b:68:2b:14:54:31:de:e0:1f:2b:0d:82:e6:b5:da:83:44:
         9d:b8:ee:78:47:d3:a1:c2:47:91:69:6c:c5:ad:cb:47:d5:e5:
         97:dc:53:a9:ad:12:33:9e:19:96:36:11:ce:e9:e3:16:96:6c:
         78:cf:f1:be:2f:a6:bf:dc:cf:8f:3b:38:c2:61:f3:4f:08:f4:
         41:6f:a0:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy
NENERjVFNkIwHhcNMjYwOTIxMDUwMzE5WhcNMjYwOTI4MDUwMzE5WjAYMRYwFAYD
VQQDEw02YWIwYmE5Ny01NGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlHhngZyU9oCBljZnQvCoQdhICBLnfhlbhCdGAq25xbtrhTDGgB/gFhkUO+FQ
4gvAXMVkNPhgAEgMsREeWxamkyJVzj/Nr15UUX6wWCBZQFF3IR4SZept9nO8TxnC
G+10VJANGgZOJu0MfTb7mYJ/NhDDHkoTkD/UAzK1RAY0XWDGhrQuiWVxnDohtaEF
CVQgs0/3ZG0jZBE8ECR6oEIDVcC4McmJnWI6hXPXeUj0u2hieWh1GnYL5jySBsEC
It8+YhAyMI9h8VDQa4IKigxztM1DrN/X3FlprYoscYGKHUqOAhJ+jiOP1Rh/bMOZ
J4zeJAC1JQxoxgU7zEjsrXg7EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIbYYAne
o0sxEtrDb3b4cs/oRefBMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD
RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5
QlJzb2FYS2JSbUVremZYbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ8REaw37MicGDPYEdHBOwYP1/U2lxVT6fyRskFAFxR10IgeGMB0YL+gHSDCO
59ia1EuXED45DZmipSOi6WyKHQi5/ePRYE958FG2R/Cb+Xj68TqcpNk/HVkQFlyP
3e3lTFhctFG3hQdGz+RMVf2Yg9GZSoGPfBrko/5Z9fMQbGdp/iHwZ96dC76FoVCN
I3gvAtdtLdRswrvDQHulRCxTt+0ddAyBo3/+hleTYMghatkv7eS8WmtoKxRUMd7g
HysNgua12oNEnbjueEfTocJHkWlsxa3LR9Xll9xTqa0SM54ZljYRzunjFpZseM/x
vi+mv9zPjzs4wmHzTwj0QW+glg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:45 2026 by rpki-client