Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
File:                     CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft (raw, json)
Hash identifier:          0PqNodej1gfcpg2O+te3AG9n/IEgcBGftjY5QUyJEM4=
Subject key identifier:   31:CB:94:A9:7F:0B:D3:3F:3C:72:1A:C8:CC:A8:1D:7D:51:42:C8:31
Authority key identifier: 09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F
Certificate issuer:       /CN=A91F89DB/serialNumber=09B1C8604234172274BA8494EB4266748F55029F
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
Manifest number:          40
Signing time:             Sun 11 Oct 2026 09:07:13 +0000
Manifest this update:     Sun 11 Oct 2026 09:07:13 +0000
Manifest next update:     Sun 18 Oct 2026 09:07:13 +0000
Files and hashes:         1: CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl (hash: Q9S7Ko1jCAdY6fG4QUpmQuVvBDKZ+yw65/9syRnQ1fg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl
                          rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89DB, serialNumber=09B1C8604234172274BA8494EB4266748F55029F
        Validity
            Not Before: Oct 11 09:07:13 2026 GMT
            Not After : Oct 18 09:07:13 2026 GMT
        Subject: CN=6acb51c1-2320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:d1:46:9f:eb:9b:6d:43:0a:dd:b8:80:62:
                    e6:00:2a:61:7a:82:46:da:5e:37:72:7c:e4:88:93:
                    1d:4f:41:fb:00:1b:49:80:29:09:32:af:b7:37:7f:
                    c3:0e:39:bb:d0:a1:14:db:06:90:91:72:b7:04:d1:
                    ed:86:85:2d:11:40:15:b2:21:09:ce:3a:01:96:05:
                    a2:01:d9:ce:09:ec:c3:8e:44:b4:4c:37:4b:78:b1:
                    52:47:55:00:74:28:e6:96:68:76:39:09:34:4e:6a:
                    e8:1b:76:93:f5:dc:96:0e:5d:2b:8a:fe:f7:ad:39:
                    4b:41:f8:9a:5e:d1:6f:cf:14:3f:4e:30:ef:7f:f8:
                    1a:9f:65:1c:a5:6b:c1:cf:a3:9d:7b:38:2f:9a:9e:
                    04:33:28:4c:4d:f4:60:e6:24:9a:1a:9c:5f:11:5b:
                    26:a7:9f:d7:7a:0f:40:24:5e:2a:04:1a:60:ec:c6:
                    c3:1d:2c:40:6b:22:7d:ee:1b:e6:2c:31:1c:0d:49:
                    60:09:1b:14:9e:3c:e9:d0:5a:46:3d:1f:dc:3d:ac:
                    44:ef:b1:49:e7:1f:cf:15:94:28:59:f1:41:41:83:
                    33:a2:c3:79:8a:80:19:06:d9:98:a2:bd:5a:52:7a:
                    a0:67:cc:7d:fb:49:51:0e:95:fd:91:df:5c:d7:7f:
                    4c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CB:94:A9:7F:0B:D3:3F:3C:72:1A:C8:CC:A8:1D:7D:51:42:C8:31
            X509v3 Authority Key Identifier:
                keyid:09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:87:0f:1c:57:26:21:fc:89:c4:c9:c4:fd:67:8f:3b:7e:74:
         99:22:8b:cd:67:b1:3a:52:05:a5:b9:f1:7d:39:98:7e:93:85:
         0a:b7:2a:94:3f:e4:34:d7:2a:35:1c:60:76:6f:13:97:07:bd:
         56:a6:90:f3:2a:19:28:dd:98:7a:98:7a:1e:27:dc:d8:11:bc:
         8a:c8:e2:e0:6e:f5:e3:f8:09:7f:6e:64:92:85:e0:c9:23:c3:
         a7:72:22:fe:da:80:4c:e6:79:bc:5a:d7:4b:d6:73:cc:93:73:
         23:46:9d:8f:b9:2d:1c:d7:53:74:ab:53:de:22:72:5f:9d:8c:
         5b:6a:b8:d2:1f:8e:11:41:6f:94:f0:1c:2d:42:d2:b5:6c:c1:
         e9:af:25:34:e9:c9:83:a2:0c:fe:af:d9:15:6f:4e:fe:50:00:
         2d:00:c6:5d:d2:3c:75:cb:10:5b:3a:aa:af:8f:85:6c:d8:2f:
         0c:17:4c:2e:fd:0f:49:58:0e:0f:e1:77:41:87:3a:d4:81:d1:
         5a:33:7e:e3:e4:10:07:e4:e6:92:dc:19:ad:94:04:f0:9f:4a:
         c6:c8:fa:dd:b7:ca:53:33:19:52:7b:c8:80:e9:fc:79:b6:da:
         2d:62:27:19:b5:28:34:44:e9:03:9f:a2:2f:0e:17:80:8b:09:
         b7:e3:00:dd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
ODlEQjExMC8GA1UEBRMoMDlCMUM4NjA0MjM0MTcyMjc0QkE4NDk0RUI0MjY2NzQ4
RjU1MDI5RjAeFw0yNjEwMTEwOTA3MTNaFw0yNjEwMTgwOTA3MTNaMBgxFjAUBgNV
BAMTDTZhY2I1MWMxLTIzMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgttFGn+ubbUMK3biAYuYAKmF6gkbaXjdyfOSIkx1PQfsAG0mAKQkyr7c3f8MO
ObvQoRTbBpCRcrcE0e2GhS0RQBWyIQnOOgGWBaIB2c4J7MOORLRMN0t4sVJHVQB0
KOaWaHY5CTROaugbdpP13JYOXSuK/vetOUtB+Jpe0W/PFD9OMO9/+BqfZRyla8HP
o517OC+angQzKExN9GDmJJoanF8RWyann9d6D0AkXioEGmDsxsMdLEBrIn3uG+Ys
MRwNSWAJGxSePOnQWkY9H9w9rETvsUnnH88VlChZ8UFBgzOiw3mKgBkG2ZiivVpS
eqBnzH37SVEOlf2R31zXf0zhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUMcuUqX8L
0z88chrIzKgdfVFCyDEwHwYDVR0jBBgwFoAUCbHIYEI0FyJ0uoSU60JmdI9VAp8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OURCL0MzRUEwNjYyNjM5
NzExRjE5OEZBODE1ODZFNDdBODg4L0NiSElZRUkwRnlKMHVvU1U2MEptZEk5VkFw
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQ2JISVlFSTBGeUowdW9TVTYwSm1kSTlWQXA4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4
OURCL0MzRUEwNjYyNjM5NzExRjE5OEZBODE1ODZFNDdBODg4L0NiSElZRUkwRnlK
MHVvU1U2MEptZEk5VkFwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDGhw8cVyYh/InEycT9Z487fnSZIovNZ7E6UgWlufF9OZh+k4UKtyqUP+Q01yo1
HGB2bxOXB71WppDzKhko3Zh6mHoeJ9zYEbyKyOLgbvXj+Al/bmSSheDJI8OnciL+
2oBM5nm8WtdL1nPMk3MjRp2PuS0c11N0q1PeInJfnYxbarjSH44RQW+U8BwtQtK1
bMHpryU06cmDogz+r9kVb07+UAAtAMZd0jx1yxBbOqqvj4Vs2C8MF0wu/Q9JWA4P
4XdBhzrUgdFaM37j5BAH5OaS3BmtlATwn0rGyPrdt8pTMxlSe8iA6fx5ttotYicZ
tSg0ROkDn6IvDheAiwm34wDd
-----END CERTIFICATE-----
Generated at Tue Oct 13 06:15:04 2026 by rpki-client