Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
File:                     0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json)
Hash identifier:          gLaeoZSayl1it8+CD+WAtweQkQ3IFB/+9FPT+YePxzU=
Subject key identifier:   E0:D8:96:7F:A1:46:1D:41:2B:41:9C:01:7A:44:D9:B8:2E:60:94:84
Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
Certificate issuer:       /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Certificate serial:       1B6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
Manifest number:          2363
Signing time:             Sun 20 Sep 2026 15:52:50 +0000
Manifest this update:     Sun 20 Sep 2026 15:52:50 +0000
Manifest next update:     Sun 27 Sep 2026 15:52:50 +0000
Files and hashes:         1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: fVuLvqJm6rjdneVQJKgeFdHqHg7TPeQvrvkUkDiHf/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7021 (0x1b6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
        Validity
            Not Before: Sep 20 15:52:50 2026 GMT
            Not After : Sep 27 15:52:50 2026 GMT
        Subject: CN=6ab00152-7998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:24:c8:6d:a8:38:ab:ce:fd:b4:54:02:6d:
                    07:e2:0e:d8:aa:3b:6b:2b:8a:1a:48:f9:a1:a2:6f:
                    4c:c4:52:96:79:7d:35:3b:a5:ae:04:60:18:91:7a:
                    31:d9:38:99:76:7a:83:00:cd:73:c8:79:77:d9:6a:
                    c9:34:e8:3c:d2:49:33:97:ce:66:85:fb:7d:f4:75:
                    9f:8b:54:74:7b:20:25:bf:5b:fa:f8:7e:2a:7e:59:
                    67:b3:f8:f2:27:e0:85:0c:38:c6:ab:23:95:04:d0:
                    21:8b:03:75:39:11:33:ad:47:aa:d6:da:b3:70:26:
                    e0:51:ab:73:9c:e2:c9:16:39:2f:8b:12:90:d9:88:
                    04:17:73:ef:96:4a:eb:d0:ee:41:d5:f7:0d:33:69:
                    52:49:5e:a9:1f:5c:ed:81:eb:94:b4:ba:48:61:07:
                    17:83:cd:f7:43:72:2f:c8:05:ad:a3:71:91:18:2e:
                    25:6c:40:ca:5a:00:2b:85:9e:0f:ed:a0:78:14:0a:
                    aa:fe:47:6e:9c:71:af:60:64:3a:18:54:b6:43:57:
                    33:b5:95:d1:90:42:65:6f:45:dd:ae:2b:b3:ab:7d:
                    56:44:af:e8:62:a2:59:91:bf:15:8d:37:6e:71:76:
                    c0:19:bb:8e:31:18:a8:a5:85:df:cb:85:02:90:58:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D8:96:7F:A1:46:1D:41:2B:41:9C:01:7A:44:D9:B8:2E:60:94:84
            X509v3 Authority Key Identifier:
                keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ff:99:8d:c7:dc:87:3c:23:12:ac:37:85:30:38:3b:fe:8d:
         d2:b1:11:db:e9:a7:c9:6e:2b:36:1a:35:d9:39:43:d1:d5:83:
         2d:aa:1a:85:89:44:b7:71:5f:41:ac:5c:52:e0:8c:66:b6:e7:
         6d:bf:40:1e:f1:e5:94:ff:fb:6a:cf:83:3d:7c:28:c2:34:54:
         f5:50:9d:c2:10:d9:cc:c1:b9:97:e2:2f:73:83:1a:63:15:01:
         6d:76:4c:15:96:6a:fc:de:40:c4:9b:2d:a5:19:66:68:b6:55:
         1e:aa:b9:c1:d5:0c:48:80:1e:2f:b8:8d:9e:6b:00:41:e2:7e:
         c4:f8:41:e6:83:c3:f0:4f:02:fd:43:f5:b5:dc:c8:20:3d:3c:
         8d:d3:b5:74:06:73:8d:6c:8c:9f:2a:11:9b:8d:71:8e:0c:52:
         63:5f:86:07:fe:92:c4:6d:c4:c1:36:80:6b:1e:d5:88:dc:b9:
         39:dd:e7:07:46:95:3b:96:f7:c8:4a:35:1c:00:e2:fe:dc:b9:
         a5:d6:4b:45:df:a0:ea:ee:d1:d2:7d:8b:1f:f3:e3:d3:5a:d0:
         0b:ea:5d:96:74:58:d9:24:a9:6d:c9:a1:ef:57:bd:cf:3d:31:
         0e:0f:4c:42:93:1f:92:dc:4e:01:e8:d9:b8:e0:7f:98:e7:15:
         ec:46:fb:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1
NTg0NjE3RjcwHhcNMjYwOTIwMTU1MjUwWhcNMjYwOTI3MTU1MjUwWjAYMRYwFAYD
VQQDEw02YWIwMDE1Mi03OTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2GskyG2oOKvO/bRUAm0H4g7YqjtrK4oaSPmhom9MxFKWeX01O6WuBGAYkXox
2TiZdnqDAM1zyHl32WrJNOg80kkzl85mhft99HWfi1R0eyAlv1v6+H4qfllns/jy
J+CFDDjGqyOVBNAhiwN1OREzrUeq1tqzcCbgUatznOLJFjkvixKQ2YgEF3Pvlkrr
0O5B1fcNM2lSSV6pH1ztgeuUtLpIYQcXg833Q3IvyAWto3GRGC4lbEDKWgArhZ4P
7aB4FAqq/kdunHGvYGQ6GFS2Q1cztZXRkEJlb0Xdriuzq31WRK/oYqJZkb8VjTdu
cXbAGbuOMRiopYXfy4UCkFjZwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODYln+h
Rh1BK0GcAXpE2bguYJSEMB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB
MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV
ZkNvcEJWOW01b2xWaEdGX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAif+ZjcfchzwjEqw3hTA4O/6N0rER2+mnyW4rNho12TlD0dWDLaoahYlEt3Ff
QaxcUuCMZrbnbb9AHvHllP/7as+DPXwowjRU9VCdwhDZzMG5l+Ivc4MaYxUBbXZM
FZZq/N5AxJstpRlmaLZVHqq5wdUMSIAeL7iNnmsAQeJ+xPhB5oPD8E8C/UP1tdzI
ID08jdO1dAZzjWyMnyoRm41xjgxSY1+GB/6SxG3EwTaAax7ViNy5Od3nB0aVO5b3
yEo1HADi/ty5pdZLRd+g6u7R0n2LH/Pj01rQC+pdlnRY2SSpbcmh71e9zz0xDg9M
QpMfktxOAejZuOB/mOcV7Eb75g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:34:11 2026 by rpki-client