Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
File:                     T_UoRyFcSiLp8RSebL_t901hzos.mft (raw, json)
Hash identifier:          yu8v0LZkpKetZLwJcTpwRndK+1ZvhF+Am5RZ+IGplbA=
Subject key identifier:   36:C3:F0:F3:A1:58:71:A4:4E:CB:24:26:22:6D:56:88:CB:9A:01:BB
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Certificate issuer:       /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial:       0460
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
Manifest number:          0434
Signing time:             Fri 09 Oct 2026 00:33:03 +0000
Manifest this update:     Fri 09 Oct 2026 00:33:02 +0000
Manifest next update:     Fri 16 Oct 2026 00:33:02 +0000
Files and hashes:         1: T_UoRyFcSiLp8RSebL_t901hzos.crl (hash: Ni+5Gqt43Xs3+NhVDQQjn+oqe85qs22g14glRLq2Co0=)
                          2: D9750E78F01111EFB1720645C4F9AE02.roa (hash: oVrqPdNtzKEI9//1BRfPNFTrey+6zp4wX4J32E0xBc4=)
                          3: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (hash: X+ZMp2R6SUMq3SlqDIsBt5yVmWcK4Q5Oo/yQV7k9r5U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
                          rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 00:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
        Validity
            Not Before: Oct  9 00:33:02 2026 GMT
            Not After : Oct 16 00:33:02 2026 GMT
        Subject: CN=6ac8363e-98a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:8f:30:4e:99:df:eb:ce:4a:7d:c3:29:c4:
                    7c:05:79:d9:94:a7:14:9a:00:07:d4:c9:59:85:8c:
                    44:21:c0:c4:64:ef:72:db:4c:37:e2:e5:15:3b:d7:
                    17:b0:6c:fe:b0:64:4b:4f:4d:b2:da:33:84:b7:d8:
                    d9:02:15:d4:77:16:c9:25:b7:11:b0:0d:22:7b:82:
                    e6:c7:f6:38:95:ce:aa:db:0d:3b:c9:a8:6d:73:65:
                    ff:fb:75:99:72:55:f6:dc:b0:3a:60:7a:25:94:3d:
                    3c:6e:85:c2:43:61:9a:f2:40:bb:a1:86:1b:f2:e6:
                    31:82:7c:c3:7f:07:9f:7f:28:db:8e:38:46:da:73:
                    fc:7d:6e:46:bc:27:ca:6d:76:69:60:05:64:8b:1e:
                    29:5a:96:b6:43:32:a7:79:82:26:84:26:a3:88:a2:
                    20:be:56:da:25:95:b4:fe:c3:92:62:38:5f:2f:89:
                    c4:96:fc:65:63:06:52:3f:1c:47:b6:21:dc:d0:48:
                    65:c6:27:c4:4a:d0:16:46:a5:1c:21:d4:72:cf:77:
                    22:b7:bf:a1:48:e0:3b:9e:6b:e1:d8:b2:42:96:63:
                    fc:36:30:8f:c3:b7:ec:a6:05:96:f9:b9:08:6d:a7:
                    a7:4e:f5:e7:b5:dd:67:2d:bf:55:2f:96:99:2f:49:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C3:F0:F3:A1:58:71:A4:4E:CB:24:26:22:6D:56:88:CB:9A:01:BB
            X509v3 Authority Key Identifier:
                keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:b8:71:18:4b:7b:ae:c9:9c:ce:3e:f3:e1:ad:90:a5:e4:
         14:9e:42:fd:70:55:3e:39:12:3b:dd:2b:c5:2e:93:df:72:4c:
         eb:9a:57:ef:e7:bf:8f:9d:53:e5:87:37:46:85:dc:c7:db:ef:
         80:f1:63:4c:4d:e9:df:00:22:8a:55:3b:fc:ce:d0:c6:75:9f:
         28:e1:da:69:bb:e7:3c:38:da:5d:e3:6c:f7:85:a3:93:3a:74:
         e8:10:b2:6f:be:ff:79:c5:e1:bc:f9:92:3a:70:e9:5f:08:7b:
         5e:cb:1e:56:ef:67:39:89:aa:c0:bd:c5:33:67:1f:fe:f0:69:
         a7:c6:19:e3:9d:21:31:7a:33:51:6d:36:b2:d0:28:3a:73:64:
         d7:eb:73:7b:3f:2c:e3:9e:2d:8b:4e:a7:4f:50:51:82:69:c0:
         81:2f:51:18:ab:8e:b8:b2:7c:33:63:4c:cd:67:ee:28:6a:c3:
         12:d7:73:b0:d3:90:1f:28:df:57:79:61:84:67:36:8a:8d:d9:
         c1:5c:4d:21:0c:0b:78:1c:8a:51:30:a1:9d:67:d4:15:31:dd:
         1a:9b:f5:2a:cb:65:b7:54:63:f8:1f:80:5b:65:cb:19:65:eb:
         a8:eb:25:a0:be:da:5d:75:23:ce:72:c6:f6:fb:6d:85:d6:07:
         dc:54:04:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMzQTUxMTAvBgNVBAUTKDRGRjUyODQ3MjE1QzRBMjJFOUYxMTQ5RTZDQkZFREY3
NEQ2MUNFOEIwHhcNMjYxMDA5MDAzMzAyWhcNMjYxMDE2MDAzMzAyWjAYMRYwFAYD
VQQDEw02YWM4MzYzZS05OGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxv+PME6Z3+vOSn3DKcR8BXnZlKcUmgAH1MlZhYxEIcDEZO9y20w34uUVO9cX
sGz+sGRLT02y2jOEt9jZAhXUdxbJJbcRsA0ie4Lmx/Y4lc6q2w07yahtc2X/+3WZ
clX23LA6YHollD08boXCQ2Ga8kC7oYYb8uYxgnzDfweffyjbjjhG2nP8fW5GvCfK
bXZpYAVkix4pWpa2QzKneYImhCajiKIgvlbaJZW0/sOSYjhfL4nElvxlYwZSPxxH
tiHc0EhlxifEStAWRqUcIdRyz3cit7+hSOA7nmvh2LJClmP8NjCPw7fspgWW+bkI
baenTvXntd1nLb9VL5aZL0nzEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbD8POh
WHGkTsskJiJtVojLmgG7MB8GA1UdIwQYMBaAFE/1KEchXEoi6fEUnmy/7fdNYc6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xMTg3MDk3MkQ0
RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1NpTHA4UlNlYkxfdDkwMWh6
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RfVW9SeUZjU2lMcDhSU2ViTF90OTAxaHpvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzNBNS8xMTg3MDk3MkQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1Np
THA4UlNlYkxfdDkwMWh6b3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANuG4cRhLe67JnM4+8+GtkKXkFJ5C/XBVPjkSO90rxS6T33JM65pX7+e/j51T
5Yc3RoXcx9vvgPFjTE3p3wAiilU7/M7QxnWfKOHaabvnPDjaXeNs94Wjkzp06BCy
b77/ecXhvPmSOnDpXwh7XsseVu9nOYmqwL3FM2cf/vBpp8YZ450hMXozUW02stAo
OnNk1+tzez8s454ti06nT1BRgmnAgS9RGKuOuLJ8M2NMzWfuKGrDEtdzsNOQHyjf
V3lhhGc2io3ZwVxNIQwLeByKUTChnWfUFTHdGpv1Kstlt1Rj+B+AW2XLGWXrqOsl
oL7aXXUjznLG9vtthdYH3FQEwg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:50:14 2026 by rpki-client