Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
File:                     azpu8rvlhOJwDYYifvSaOc24Hc4.mft (raw, json)
Hash identifier:          z3p8B16WdKz8Z5DdebiyrQnybq9LFBjn6auGcfT5CX4=
Subject key identifier:   16:50:2A:55:66:5C:06:EE:A6:2F:2C:36:43:F0:3E:5B:43:0A:C0:C1
Authority key identifier: 6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE
Certificate issuer:       /CN=A91FA00A/serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
Certificate serial:       03C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
Manifest number:          03B1
Signing time:             Mon 21 Sep 2026 00:27:14 +0000
Manifest this update:     Mon 21 Sep 2026 00:27:13 +0000
Manifest next update:     Mon 28 Sep 2026 00:27:13 +0000
Files and hashes:         1: azpu8rvlhOJwDYYifvSaOc24Hc4.crl (hash: l182p7Aiw6f5TWi7SYfYD+Dz5+1RPcx/2Z1wquAwHDA=)
                          2: 937AFB607E3611EEAD05495AC4F9AE02.roa (hash: x4NHVBzqjdaRb4g6D343UGd0Ui9qfpMZfGfoXAmd0qY=)
                          3: E7D03568F89011ECB5F98148C4F9AE02.roa (hash: 3Ix6jRXAiLunM3PIJZxVlUi54u6IasjEvRYGdXCHut4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl
                          rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA00A, serialNumber=6B3A6EF2BBE584E2700D86227EF49A39CDB81DCE
        Validity
            Not Before: Sep 21 00:27:13 2026 GMT
            Not After : Sep 28 00:27:13 2026 GMT
        Subject: CN=6ab079e2-984f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:20:3a:8a:b2:98:9c:5a:3c:fa:5c:3b:68:
                    71:e5:81:b3:fa:9e:b6:fa:b7:e4:32:c8:f1:ae:e6:
                    de:43:4e:36:8c:f0:41:92:76:c2:cc:60:6f:5f:8a:
                    4b:e0:f7:8f:ff:37:6f:bb:81:6d:2b:5b:91:db:7e:
                    a5:9a:28:e7:00:47:ce:93:d9:cc:39:b9:35:12:a7:
                    c8:f5:2f:26:31:3d:cc:9e:73:8c:f2:14:5f:a2:c9:
                    4f:31:d2:56:da:a1:9c:27:17:0b:59:15:27:6e:37:
                    59:66:9e:7a:09:db:e4:63:dd:50:2c:1c:1e:fd:a5:
                    37:91:83:61:08:1e:d3:f2:74:9b:7c:9c:c9:2e:f4:
                    e5:c6:b3:42:5e:a0:f8:be:41:98:87:d5:9e:d1:e4:
                    1b:2b:8b:bf:bc:bb:5f:31:4a:1f:3c:91:cb:39:89:
                    56:a7:f5:51:5c:db:32:96:5f:c2:2d:35:d0:2c:ea:
                    36:79:d9:a2:f0:ad:d2:9e:4f:ca:f9:1d:3c:0d:40:
                    b3:1d:af:cb:a8:ea:3d:0f:ef:eb:4b:65:1f:a0:96:
                    8e:1f:8f:e1:e2:7f:8f:e2:f0:48:6f:62:2d:c0:4b:
                    68:29:98:3d:cd:78:96:f9:cc:c7:47:56:43:75:15:
                    3d:c3:6c:9a:30:4c:1c:9e:ec:4f:4d:36:6e:00:b9:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:2A:55:66:5C:06:EE:A6:2F:2C:36:43:F0:3E:5B:43:0A:C0:C1
            X509v3 Authority Key Identifier:
                keyid:6B:3A:6E:F2:BB:E5:84:E2:70:0D:86:22:7E:F4:9A:39:CD:B8:1D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azpu8rvlhOJwDYYifvSaOc24Hc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA00A/3AA94B36F88B11EC9ECBE23DC4F9AE02/azpu8rvlhOJwDYYifvSaOc24Hc4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e1:78:32:46:40:01:a0:1f:4b:fa:08:0d:6f:ea:89:ac:7d:
         ad:c5:61:f6:54:65:8b:1c:57:2d:27:f0:f3:01:4d:6f:ec:db:
         62:82:b9:04:ea:b2:88:e0:f9:84:7a:22:37:31:e8:07:e3:7b:
         15:15:a5:b4:2a:f8:6d:57:84:73:3f:a1:cd:f2:36:1e:92:f4:
         0a:be:58:4b:29:a7:31:20:df:d4:04:a3:04:ee:50:9e:a8:14:
         46:5b:d8:00:b0:4e:21:f7:0c:61:4e:f0:a0:28:31:b8:77:a5:
         18:93:08:36:93:f4:d6:02:03:17:fc:04:24:cb:59:88:cd:84:
         ec:aa:2e:8b:16:67:f8:7a:01:c6:b5:51:6a:34:fc:d0:f4:28:
         da:d5:f5:b6:ee:5b:b2:16:4d:ae:f3:2f:72:37:d1:0d:71:f4:
         d4:21:06:81:13:24:50:e7:3e:62:22:1f:1e:a0:24:95:f8:e4:
         fc:9b:25:1a:58:09:b4:a6:c8:df:60:bf:71:03:ec:5a:e4:32:
         2b:e7:00:2d:d7:af:41:ca:94:62:98:65:36:d3:c0:ac:5c:af:
         50:bd:e4:62:ca:6b:b3:ba:9c:8c:7e:20:ec:2d:3d:00:d6:82:
         31:7b:b5:70:ff:a9:07:f4:91:85:12:dd:3d:84:b6:b1:9c:0f:
         f3:95:6c:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkEwMEExMTAvBgNVBAUTKDZCM0E2RUYyQkJFNTg0RTI3MDBEODYyMjdFRjQ5QTM5
Q0RCODFEQ0UwHhcNMjYwOTIxMDAyNzEzWhcNMjYwOTI4MDAyNzEzWjAYMRYwFAYD
VQQDEw02YWIwNzllMi05ODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo6ggOoqymJxaPPpcO2hx5YGz+p62+rfkMsjxrubeQ042jPBBknbCzGBvX4pL
4PeP/zdvu4FtK1uR236lmijnAEfOk9nMObk1EqfI9S8mMT3MnnOM8hRfoslPMdJW
2qGcJxcLWRUnbjdZZp56CdvkY91QLBwe/aU3kYNhCB7T8nSbfJzJLvTlxrNCXqD4
vkGYh9We0eQbK4u/vLtfMUofPJHLOYlWp/VRXNsyll/CLTXQLOo2edmi8K3Snk/K
+R08DUCzHa/LqOo9D+/rS2UfoJaOH4/h4n+P4vBIb2ItwEtoKZg9zXiW+czHR1ZD
dRU9w2yaMEwcnuxPTTZuALmZ1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZQKlVm
XAbupi8sNkPwPltDCsDBMB8GA1UdIwQYMBaAFGs6bvK75YTicA2GIn70mjnNuB3O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTAwQS8zQUE5NEIzNkY4
OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhPSndEWVlpZnZTYU9jMjRI
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F6cHU4cnZsaE9Kd0RZWWlmdlNhT2MyNEhjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTAwQS8zQUE5NEIzNkY4OEIxMUVDOUVDQkUyM0RDNEY5QUUwMi9henB1OHJ2bGhP
SndEWVlpZnZTYU9jMjRIYzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB+F4MkZAAaAfS/oIDW/qiax9rcVh9lRlixxXLSfw8wFNb+zbYoK5BOqyiOD5
hHoiNzHoB+N7FRWltCr4bVeEcz+hzfI2HpL0Cr5YSymnMSDf1ASjBO5QnqgURlvY
ALBOIfcMYU7woCgxuHelGJMINpP01gIDF/wEJMtZiM2E7KouixZn+HoBxrVRajT8
0PQo2tX1tu5bshZNrvMvcjfRDXH01CEGgRMkUOc+YiIfHqAklfjk/JslGlgJtKbI
32C/cQPsWuQyK+cALdevQcqUYphlNtPArFyvUL3kYsprs7qcjH4g7C09ANaCMXu1
cP+pB/SRhRLdPYS2sZwP85VszA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:21:50 2026 by rpki-client