Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
File:                     EdT02sf7qLXBIiQwBTm9xhVEXeU.mft (raw, json)
Hash identifier:          q6WyfQ4hUU+UoxNwM2rWM9sCk+E2vVFH8XaH+TISyKk=
Subject key identifier:   FF:64:BD:04:7E:F4:74:2F:F3:2E:19:78:48:B5:9E:52:6D:F6:B6:1B
Authority key identifier: 11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5
Certificate issuer:       /CN=A91F79A2/serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
Manifest number:          01B8
Signing time:             Sat 19 Sep 2026 04:09:36 +0000
Manifest this update:     Sat 19 Sep 2026 04:09:35 +0000
Manifest next update:     Sat 26 Sep 2026 04:09:35 +0000
Files and hashes:         1: EdT02sf7qLXBIiQwBTm9xhVEXeU.crl (hash: +C5iRWABVGTROhhNZDR0SaH0oR2CL4NuqD31H4UnZw4=)
                          2: 3BFC4B0A931411F1884574F03411F970.roa (hash: SutKtjn58jiBSM8zZynClgTcqKXUAOmuAipUUGM+HAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=11D4F4DAC7FBA8B5C12224300539BDC615445DE5
        Validity
            Not Before: Sep 19 04:09:35 2026 GMT
            Not After : Sep 26 04:09:35 2026 GMT
        Subject: CN=6aae0b00-e6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:38:8c:9c:77:c3:06:e4:d9:e6:d1:14:60:
                    1b:cd:c3:93:71:71:91:3c:5e:2b:06:eb:28:dd:80:
                    85:a3:99:dc:14:9d:2b:be:b8:17:39:dd:45:b8:73:
                    0e:82:dc:39:85:91:ed:b0:a3:fe:0f:30:f7:38:88:
                    df:3d:45:44:d0:8e:3e:0f:c3:e3:0d:22:50:f4:48:
                    a9:d0:51:31:6f:5d:1f:18:27:3d:44:bc:15:98:17:
                    db:91:56:25:a4:76:10:a3:3d:05:22:41:76:73:87:
                    eb:de:e5:69:e9:03:2d:9b:fd:48:6a:ff:a9:c2:00:
                    90:9b:f4:7c:55:e0:6c:7a:87:82:cb:ba:8c:21:55:
                    e1:ed:41:f7:96:e2:82:cb:69:29:2a:18:a3:29:8a:
                    b2:47:00:b4:e5:2c:90:10:96:07:2a:c9:31:64:50:
                    be:dc:de:2a:ae:6e:cf:cc:95:2d:fe:14:1c:b7:2c:
                    66:f0:48:2c:be:95:fa:92:bc:e6:a4:f8:d7:01:1e:
                    a3:fa:98:1d:44:14:39:65:6c:de:17:08:ab:88:af:
                    c3:a3:64:24:81:96:e3:70:2f:08:e8:d2:9a:0f:bf:
                    32:d4:d0:fa:74:31:02:c2:a7:4e:92:d8:b3:bb:34:
                    cb:a8:6d:3a:aa:7b:b7:70:bf:9f:63:e3:f3:aa:5a:
                    3d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:64:BD:04:7E:F4:74:2F:F3:2E:19:78:48:B5:9E:52:6D:F6:B6:1B
            X509v3 Authority Key Identifier:
                keyid:11:D4:F4:DA:C7:FB:A8:B5:C1:22:24:30:05:39:BD:C6:15:44:5D:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdT02sf7qLXBIiQwBTm9xhVEXeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/B8C0B0A026A011EFB9A37E39C4F9AE02/EdT02sf7qLXBIiQwBTm9xhVEXeU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:bb:c7:19:18:21:c2:a7:9d:f9:8a:fb:29:b7:48:be:81:dd:
         5a:2b:e9:30:8c:4e:62:47:d0:1e:6d:09:52:b1:17:37:9c:1c:
         95:91:2f:e8:c0:7e:04:b6:e6:08:11:e0:5c:dc:c3:d0:e9:3b:
         a8:68:77:b0:86:17:d9:f1:b3:03:c7:86:dd:bc:4f:8d:b8:c6:
         59:83:5b:12:72:d7:bc:b6:fc:3c:c6:ee:30:c1:8c:f0:f0:d3:
         57:7d:f0:08:14:f8:4f:66:bd:7c:e9:15:b5:e1:d5:77:9b:0a:
         b3:ab:99:62:92:e5:f1:cf:3f:23:a5:1d:b7:cf:1a:ac:6b:7b:
         30:da:20:8d:cc:0f:43:52:7d:ce:5f:31:a5:c2:f2:c8:28:57:
         95:8d:d8:44:2d:d2:41:5c:75:e4:e4:51:e5:86:17:d5:32:2e:
         97:3c:66:e5:90:70:f2:d0:a9:4d:fb:32:b5:09:96:8a:a3:08:
         27:dc:78:d5:7c:6a:cc:00:81:84:8e:00:0c:ee:a3:96:21:ce:
         4e:b1:82:59:20:94:63:ca:b8:ec:4f:dc:f6:e0:a3:1f:0f:4f:
         8a:59:26:a7:b9:03:a5:44:5a:8e:49:16:49:2f:27:e1:b6:86:
         65:12:55:a3:14:65:a3:bb:80:ac:71:b1:4f:20:f8:56:bb:ee:
         7e:31:25:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjc5QTIxMTAvBgNVBAUTKDExRDRGNERBQzdGQkE4QjVDMTIyMjQzMDA1MzlCREM2
MTU0NDVERTUwHhcNMjYwOTE5MDQwOTM1WhcNMjYwOTI2MDQwOTM1WjAYMRYwFAYD
VQQDEw02YWFlMGIwMC1lNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnMY4jJx3wwbk2ebRFGAbzcOTcXGRPF4rBuso3YCFo5ncFJ0rvrgXOd1FuHMO
gtw5hZHtsKP+DzD3OIjfPUVE0I4+D8PjDSJQ9Eip0FExb10fGCc9RLwVmBfbkVYl
pHYQoz0FIkF2c4fr3uVp6QMtm/1Iav+pwgCQm/R8VeBseoeCy7qMIVXh7UH3luKC
y2kpKhijKYqyRwC05SyQEJYHKskxZFC+3N4qrm7PzJUt/hQctyxm8EgsvpX6krzm
pPjXAR6j+pgdRBQ5ZWzeFwiriK/Do2QkgZbjcC8I6NKaD78y1ND6dDECwqdOktiz
uzTLqG06qnu3cL+fY+Pzqlo9RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9kvQR+
9HQv8y4ZeEi1nlJt9rYbMB8GA1UdIwQYMBaAFBHU9NrH+6i1wSIkMAU5vcYVRF3l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzlBMi9COEMwQjBBMDI2
QTAxMUVGQjlBMzdFMzlDNEY5QUUwMi9FZFQwMnNmN3FMWEJJaVF3QlRtOXhoVkVY
ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VkVDAyc2Y3cUxYQklpUXdCVG05eGhWRVhlVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzlBMi9COEMwQjBBMDI2QTAxMUVGQjlBMzdFMzlDNEY5QUUwMi9FZFQwMnNmN3FM
WEJJaVF3QlRtOXhoVkVYZVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAz7vHGRghwqed+Yr7KbdIvoHdWivpMIxOYkfQHm0JUrEXN5wclZEv6MB+BLbm
CBHgXNzD0Ok7qGh3sIYX2fGzA8eG3bxPjbjGWYNbEnLXvLb8PMbuMMGM8PDTV33w
CBT4T2a9fOkVteHVd5sKs6uZYpLl8c8/I6Udt88arGt7MNogjcwPQ1J9zl8xpcLy
yChXlY3YRC3SQVx15ORR5YYX1TIulzxm5ZBw8tCpTfsytQmWiqMIJ9x41XxqzACB
hI4ADO6jliHOTrGCWSCUY8q47E/c9uCjHw9Pilkmp7kDpURajkkWSS8n4baGZRJV
oxRlo7uArHGxTyD4VrvufjElaw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:44:33 2026 by rpki-client