Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File:                     dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier:          nEMG/u0pVVNkUwHCh/NaH70euLuHLrpmMLikTiF05qk=
Subject key identifier:   70:21:78:13:99:28:24:5A:C6:18:46:E8:2E:5A:0D:DD:70:42:94:7D
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer:       /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial:       02F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number:          02EB
Signing time:             Sat 05 Sep 2026 00:52:37 +0000
Manifest this update:     Sat 05 Sep 2026 00:52:37 +0000
Manifest next update:     Sat 12 Sep 2026 00:52:37 +0000
Files and hashes:         1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: emEHM1ZIY0LSqW3m+9+hgMGrPFiawC6aI1gdJDUS5TM=)
                          2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: ZgAplW2WPpphTjMrs3xfinlKfr7iRBVAdXaHsqlCR2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
        Validity
            Not Before: Sep  5 00:52:37 2026 GMT
            Not After : Sep 12 00:52:37 2026 GMT
        Subject: CN=6a9b67d5-a855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:e4:07:8b:44:90:56:50:f5:0b:92:a3:a6:
                    ce:c3:54:1b:f5:56:88:df:7b:48:e8:f3:a7:ae:84:
                    29:a6:31:c3:54:ad:72:49:0b:17:4f:e8:65:ce:af:
                    c9:aa:33:4c:ec:07:09:06:c7:ac:81:63:7a:b7:1e:
                    e2:9e:34:3c:d2:51:bf:bc:94:fa:84:89:45:ee:b1:
                    43:f4:66:c8:02:60:0e:85:1d:0f:18:fa:3e:44:05:
                    00:df:e8:1f:66:8c:38:19:ee:d0:0b:8a:bc:3a:d3:
                    81:5f:e4:a4:0d:55:53:c5:9c:dc:f1:e4:ee:b0:82:
                    5d:d2:d8:71:0e:0f:2f:f7:aa:5e:eb:d4:10:ad:71:
                    e9:af:a8:96:a3:41:85:6d:f8:cc:a5:71:bc:18:fc:
                    e9:fa:83:25:26:bb:10:0b:cc:36:ee:7a:ef:fa:7a:
                    e2:62:67:57:b7:b4:7b:0f:c6:1b:18:7c:c6:f3:e8:
                    11:d8:05:91:d0:ec:cf:72:aa:95:17:50:67:31:b8:
                    2b:4e:70:18:58:7c:c9:0e:e0:30:5b:e2:2b:34:b2:
                    1c:52:a2:58:1b:09:38:09:43:18:3e:bf:95:fa:83:
                    40:5f:c0:26:40:c8:e5:78:f9:6c:65:2f:db:ed:7c:
                    5d:94:fa:f9:4c:48:7e:45:18:0c:3a:8d:37:bb:b4:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:21:78:13:99:28:24:5A:C6:18:46:E8:2E:5A:0D:DD:70:42:94:7D
            X509v3 Authority Key Identifier:
                keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:73:ff:cb:cf:18:8b:6d:71:7b:ff:e0:e2:dd:1d:e2:a5:84:
         2e:27:14:21:5c:cb:c4:6d:5c:ea:b1:c5:4a:a0:6a:50:b1:d5:
         c1:3d:7e:7b:8c:ce:6d:12:b0:81:6c:f4:64:bb:11:2a:ae:9a:
         70:0e:b0:11:d2:18:89:a3:e7:ed:3e:c6:b5:cf:b8:80:51:e8:
         c5:81:c0:04:dc:1d:74:2b:5a:37:2b:19:15:b3:e6:8f:11:6a:
         37:59:af:72:f7:48:3e:81:87:bc:b6:0d:18:87:85:b2:e6:2b:
         1a:88:8c:c8:d6:dd:bc:5a:9c:7d:e7:33:9d:3b:8e:40:8c:75:
         a5:de:fc:4b:d1:01:02:bb:eb:22:7e:4a:4e:07:d6:7b:c0:00:
         ab:d4:cd:2b:6f:fa:75:f6:5c:9d:1b:88:24:6e:98:9e:f9:b6:
         b8:33:6e:40:d2:4d:59:55:55:b4:eb:49:05:2e:16:07:df:bd:
         e0:ec:64:8a:94:06:86:fb:89:19:61:ed:47:5a:d1:99:97:21:
         39:c6:b5:8f:ad:40:25:cd:16:70:8f:26:23:81:06:06:19:1c:
         19:9f:f6:e8:a9:5a:87:bd:af:f8:64:be:7c:c0:9e:27:75:85:
         d6:d4:bb:26:8a:58:49:d1:13:92:50:f3:22:86:62:54:3c:6d:
         00:6c:e6:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0
MEZCNzIyOUEwHhcNMjYwOTA1MDA1MjM3WhcNMjYwOTEyMDA1MjM3WjAYMRYwFAYD
VQQDEw02YTliNjdkNS1hODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoLnkB4tEkFZQ9QuSo6bOw1Qb9VaI33tI6POnroQppjHDVK1ySQsXT+hlzq/J
qjNM7AcJBsesgWN6tx7injQ80lG/vJT6hIlF7rFD9GbIAmAOhR0PGPo+RAUA3+gf
Zow4Ge7QC4q8OtOBX+SkDVVTxZzc8eTusIJd0thxDg8v96pe69QQrXHpr6iWo0GF
bfjMpXG8GPzp+oMlJrsQC8w27nrv+nriYmdXt7R7D8YbGHzG8+gR2AWR0OzPcqqV
F1BnMbgrTnAYWHzJDuAwW+IrNLIcUqJYGwk4CUMYPr+V+oNAX8AmQMjlePlsZS/b
7XxdlPr5TEh+RRgMOo03u7Sy2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAheBOZ
KCRaxhhG6C5aDd1wQpR9MB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF
MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t
OWozbWdfUWtKSUpBLTNJcG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKHP/y88Yi21xe//g4t0d4qWELicUIVzLxG1c6rHFSqBqULHVwT1+e4zObRKw
gWz0ZLsRKq6acA6wEdIYiaPn7T7Gtc+4gFHoxYHABNwddCtaNysZFbPmjxFqN1mv
cvdIPoGHvLYNGIeFsuYrGoiMyNbdvFqcfecznTuOQIx1pd78S9EBArvrIn5KTgfW
e8AAq9TNK2/6dfZcnRuIJG6Ynvm2uDNuQNJNWVVVtOtJBS4WB9+94OxkipQGhvuJ
GWHtR1rRmZchOca1j61AJc0WcI8mI4EGBhkcGZ/26Klah72v+GS+fMCeJ3WF1tS7
JopYSdETklDzIoZiVDxtAGzmMw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:22:18 2026 by rpki-client