Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
File:                     -soSQJs8JskJ3Pqy874emPzo2oA.mft (raw, json)
Hash identifier:          09IEhh9Nh95fNlDgje3qfvQFE/4QGruATeSwm8O7QZg=
Subject key identifier:   18:F5:D0:67:1B:05:3A:50:A4:92:9F:0B:A1:A7:F2:4D:DC:57:95:EA
Authority key identifier: FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80
Certificate issuer:       /CN=A91EE8EF/serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
Manifest number:          5A
Signing time:             Sat 03 Oct 2026 08:54:16 +0000
Manifest this update:     Sat 03 Oct 2026 08:54:15 +0000
Manifest next update:     Sat 10 Oct 2026 08:54:15 +0000
Files and hashes:         1: -soSQJs8JskJ3Pqy874emPzo2oA.crl (hash: X33/K1Q/Tdo/SrNZoY9fPCA8EI44dMA5hJ7/693yB0g=)
                          2: 4663706238A311F1973C08FAC9833773.roa (hash: Cm1HBvclOybdzNm8AH82qs/j/bXh5vrr9fMTzOhVfEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl
                          rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE8EF, serialNumber=FACA12409B3C26C909DCFAB2F3BE1E98FCE8DA80
        Validity
            Not Before: Oct  3 08:54:15 2026 GMT
            Not After : Oct 10 08:54:15 2026 GMT
        Subject: CN=6ac0c2b7-ff1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:bf:cb:31:54:79:c5:37:a0:69:c0:80:fd:
                    8b:72:38:a3:0c:bb:c8:36:b5:7f:25:ef:b2:74:15:
                    46:0e:8b:8f:a7:75:0e:6c:4d:f1:a6:ed:b8:a6:1e:
                    26:b4:80:db:d9:bb:a7:8e:2a:0e:6f:5c:e7:85:40:
                    a7:d6:b4:33:37:91:0b:20:78:42:37:30:31:c6:dd:
                    46:0d:98:1f:1f:6a:e6:67:88:52:7e:c8:35:22:b9:
                    33:c8:52:ea:56:19:68:a0:b1:0f:41:71:d3:9d:57:
                    c6:bc:f4:38:c5:2d:2f:c3:25:a4:22:99:af:a9:f0:
                    7e:5c:1d:6a:87:17:15:5f:8f:64:d2:cd:eb:6b:4a:
                    9a:f5:31:06:5d:3f:78:a7:cf:d6:bf:25:a3:fd:e2:
                    5f:10:5d:e0:9f:6d:91:b9:69:3e:f0:ff:e5:3b:6e:
                    69:4e:8e:c3:ab:a0:ac:0a:4d:ad:32:34:e0:ae:72:
                    d0:de:55:ec:1c:5d:6f:c7:80:3d:62:43:5f:22:b8:
                    9d:01:3f:1d:fb:16:c0:c4:c7:8e:25:18:82:65:bd:
                    cf:5c:54:fd:de:58:ae:43:b7:c9:8c:d6:dc:21:d6:
                    db:8b:f4:f0:a2:92:8d:48:8f:e2:c3:6e:cf:29:6c:
                    91:60:0d:a1:70:1d:27:9a:a1:a2:62:a2:63:2f:3b:
                    5e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F5:D0:67:1B:05:3A:50:A4:92:9F:0B:A1:A7:F2:4D:DC:57:95:EA
            X509v3 Authority Key Identifier:
                keyid:FA:CA:12:40:9B:3C:26:C9:09:DC:FA:B2:F3:BE:1E:98:FC:E8:DA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-soSQJs8JskJ3Pqy874emPzo2oA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8EF/AC5447BC38A211F19A3E191AC9833773/-soSQJs8JskJ3Pqy874emPzo2oA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:cd:67:d8:8f:0e:62:fe:3b:c5:66:ef:00:81:0d:ac:0b:d2:
         af:af:cf:cd:30:f7:df:f7:21:90:0a:f1:a4:61:ce:12:c8:54:
         fa:70:d1:70:66:e6:e7:04:c5:32:1c:7d:a6:dc:e8:ab:00:e8:
         f2:c7:9f:80:1d:22:a1:a8:c9:2c:70:12:a2:4e:a5:5d:37:c0:
         9f:cd:ae:93:68:e8:f1:a3:31:91:e9:31:7c:47:d0:37:40:99:
         92:96:bf:47:a0:21:af:52:31:5f:54:99:b0:4f:07:52:f1:0f:
         e8:92:b0:5a:65:91:ca:29:9e:3f:da:21:8c:7b:4c:42:4d:42:
         51:49:26:a3:12:fd:88:c6:67:d1:8a:92:df:f7:7b:dd:68:d5:
         f1:c9:27:d9:a2:01:53:b5:37:f3:fd:09:5f:c1:d0:e6:55:e0:
         91:32:85:b7:b6:15:55:36:c4:cc:99:b2:e2:4d:fb:e6:fc:26:
         9d:78:a2:26:ee:25:f2:ea:37:63:c6:75:65:af:10:a1:ca:d7:
         07:48:8b:fc:a0:5d:ca:02:8c:28:88:6e:53:88:6f:47:21:07:
         55:53:e8:66:83:04:30:b6:03:04:67:24:41:44:c3:79:a8:ac:
         1c:15:db:94:1e:15:ce:11:88:aa:86:b3:7c:b4:e7:39:b9:e0:
         8b:c6:23:c5
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
RThFRjExMC8GA1UEBRMoRkFDQTEyNDA5QjNDMjZDOTA5RENGQUIyRjNCRTFFOThG
Q0U4REE4MDAeFw0yNjEwMDMwODU0MTVaFw0yNjEwMTAwODU0MTVaMBgxFjAUBgNV
BAMTDTZhYzBjMmI3LWZmMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEW7/LMVR5xTegacCA/YtyOKMMu8g2tX8l77J0FUYOi4+ndQ5sTfGm7bimHia0
gNvZu6eOKg5vXOeFQKfWtDM3kQsgeEI3MDHG3UYNmB8fauZniFJ+yDUiuTPIUupW
GWigsQ9BcdOdV8a89DjFLS/DJaQima+p8H5cHWqHFxVfj2TSzetrSpr1MQZdP3in
z9a/JaP94l8QXeCfbZG5aT7w/+U7bmlOjsOroKwKTa0yNOCuctDeVewcXW/HgD1i
Q18iuJ0BPx37FsDEx44lGIJlvc9cVP3eWK5Dt8mM1twh1tuL9PCiko1Ij+LDbs8p
bJFgDaFwHSeaoaJiomMvO14DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGPXQZxsF
OlCkkp8LoafyTdxXleowHwYDVR0jBBgwFoAU+soSQJs8JskJ3Pqy874emPzo2oAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVFOEVGL0FDNTQ0N0JDMzhB
MjExRjE5QTNFMTkxQUM5ODMzNzczLy1zb1NRSnM4SnNrSjNQcXk4NzRlbVB6bzJv
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXNvU1FKczhKc2tKM1BxeTg3NGVtUHpvMm9BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVF
OEVGL0FDNTQ0N0JDMzhBMjExRjE5QTNFMTkxQUM5ODMzNzczLy1zb1NRSnM4SnNr
SjNQcXk4NzRlbVB6bzJvQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQChzWfYjw5i/jvFZu8AgQ2sC9Kvr8/NMPff9yGQCvGkYc4SyFT6cNFwZubnBMUy
HH2m3OirAOjyx5+AHSKhqMkscBKiTqVdN8Cfza6TaOjxozGR6TF8R9A3QJmSlr9H
oCGvUjFfVJmwTwdS8Q/okrBaZZHKKZ4/2iGMe0xCTUJRSSajEv2IxmfRipLf93vd
aNXxySfZogFTtTfz/QlfwdDmVeCRMoW3thVVNsTMmbLiTfvm/CadeKIm7iXy6jdj
xnVlrxChytcHSIv8oF3KAowoiG5TiG9HIQdVU+hmgwQwtgMEZyRBRMN5qKwcFduU
HhXOEYiqhrN8tOc5ueCLxiPF
-----END CERTIFICATE-----
Generated at Sun Oct 4 14:15:53 2026 by rpki-client