Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
File:                     G7ThccrEGeYWe6On1yU8dhYxoo0.mft (raw, json)
Hash identifier:          rScePjYk35aq06wEUAbWGX1CD7h/zP1Rk7MsIyJHrhc=
Subject key identifier:   3D:DB:B2:D8:26:29:FE:64:5D:F0:A8:74:7A:17:2F:92:B0:58:A1:F3
Authority key identifier: 1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
Certificate issuer:       /CN=A91259CA/serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
Manifest number:          0122
Signing time:             Sat 03 Oct 2026 06:32:43 +0000
Manifest this update:     Sat 03 Oct 2026 06:32:43 +0000
Manifest next update:     Sat 10 Oct 2026 06:32:43 +0000
Files and hashes:         1: G7ThccrEGeYWe6On1yU8dhYxoo0.crl (hash: oNajcB9zwTv1/ytuBjoGUaeOGCq1YvEo+opDqXzpglE=)
                          2: 2031308808A111F09B131E5BC4F9AE02.roa (hash: bfZHmy0//lzWJ0TH2iq1RiILBXFH7y1Z1TmJFXwbV9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
                          rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91259CA, serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
        Validity
            Not Before: Oct  3 06:32:43 2026 GMT
            Not After : Oct 10 06:32:43 2026 GMT
        Subject: CN=6ac0a18b-e9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:d1:de:9b:70:2e:89:a7:92:25:48:e6:a1:
                    4d:02:54:9b:d8:8d:7d:ac:a7:9f:d7:eb:78:92:d4:
                    dc:92:7b:1f:1d:bf:96:9f:5d:6a:a2:e6:55:9f:14:
                    34:54:cd:05:11:4e:07:ae:8c:cd:97:e3:4d:ba:d1:
                    c5:cf:83:08:c9:1b:3f:a5:e7:57:33:f5:9e:31:f9:
                    2e:02:74:41:d5:7a:83:e2:d9:d5:11:02:61:46:b2:
                    39:86:92:b2:65:e7:eb:a7:cb:04:4d:b2:35:e8:4f:
                    7f:7d:1f:fe:cf:4b:bb:62:04:fc:91:99:87:1e:aa:
                    11:df:10:06:e3:f0:3d:e2:1f:3f:3e:b6:c5:97:ce:
                    aa:f1:68:df:b6:b0:43:25:9f:d3:6b:2d:71:0f:0f:
                    4e:5a:88:79:f1:42:49:79:67:69:57:0d:70:79:c6:
                    7f:1d:1b:77:3e:20:cb:14:3d:a5:30:5c:c2:bc:23:
                    a3:1a:b9:94:dd:a0:a4:c4:28:a3:7d:54:7f:b2:4e:
                    b2:f8:51:01:36:98:3d:9f:8d:b5:6e:bd:08:27:9e:
                    a8:7e:4d:08:1e:ee:17:07:16:24:fb:5e:37:84:4e:
                    45:34:0d:d6:81:dd:4b:d4:99:34:51:22:8f:c3:76:
                    fb:f5:8a:c4:32:1b:4f:17:3b:1d:34:29:7a:d8:89:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DB:B2:D8:26:29:FE:64:5D:F0:A8:74:7A:17:2F:92:B0:58:A1:F3
            X509v3 Authority Key Identifier:
                keyid:1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:aa:47:f3:e1:d3:13:c6:4e:92:e7:fc:31:81:73:06:91:fb:
         66:73:d9:53:ec:ad:6f:f8:11:d9:66:f2:b2:56:a9:9e:72:77:
         3b:59:57:92:23:21:f6:10:7b:9f:1d:60:4d:69:ab:d6:cb:7f:
         86:ca:01:c4:fb:ac:47:80:d7:0a:23:22:4b:e9:46:68:b3:76:
         08:bb:d9:b6:2c:b8:4e:55:0f:29:20:cd:26:39:b3:9b:77:37:
         7e:eb:78:1f:34:ca:0f:5b:b3:89:32:af:38:05:63:aa:c9:43:
         ea:aa:f2:c4:57:86:71:4a:6b:d5:b5:6a:8b:03:b3:7d:ff:73:
         44:4c:89:26:73:82:bd:ac:47:65:12:49:4e:d3:92:83:c0:bc:
         3d:e7:31:eb:ba:5d:2e:f8:2c:75:d3:d3:97:a8:b3:72:e3:73:
         97:3b:30:04:8b:88:e6:f1:2e:65:5c:44:d0:86:24:c1:5b:36:
         77:ea:33:64:7b:db:b5:7b:8e:84:2b:fc:4e:57:af:89:19:6d:
         27:64:23:90:48:c6:2e:15:ef:50:48:ba:ad:b7:71:15:b8:7e:
         97:dd:01:a8:7f:df:23:30:f5:1f:00:69:7b:1e:d0:a3:b2:d3:
         30:57:5d:dd:3b:03:6d:f2:aa:8c:f2:b0:37:77:0a:34:3b:75:
         7e:6e:34:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5Q0ExMTAvBgNVBAUTKDFCQjRFMTcxQ0FDNDE5RTYxNjdCQTNBN0Q3MjUzQzc2
MTYzMUEyOEQwHhcNMjYxMDAzMDYzMjQzWhcNMjYxMDEwMDYzMjQzWjAYMRYwFAYD
VQQDEw02YWMwYTE4Yi1lOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy//R3ptwLomnkiVI5qFNAlSb2I19rKef1+t4ktTcknsfHb+Wn11qouZVnxQ0
VM0FEU4HrozNl+NNutHFz4MIyRs/pedXM/WeMfkuAnRB1XqD4tnVEQJhRrI5hpKy
Zefrp8sETbI16E9/fR/+z0u7YgT8kZmHHqoR3xAG4/A94h8/PrbFl86q8WjftrBD
JZ/Tay1xDw9OWoh58UJJeWdpVw1wecZ/HRt3PiDLFD2lMFzCvCOjGrmU3aCkxCij
fVR/sk6y+FEBNpg9n421br0IJ56ofk0IHu4XBxYk+143hE5FNA3Wgd1L1Jk0USKP
w3b79YrEMhtPFzsdNCl62Im6nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3bstgm
Kf5kXfCodHoXL5KwWKHzMB8GA1UdIwQYMBaAFBu04XHKxBnmFnujp9clPHYWMaKN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTlDQS9BOUYyNzIyRTA4
QTAxMUYwQjE1ODU2NUFDNEY5QUUwMi9HN1RoY2NyRUdlWVdlNk9uMXlVOGRoWXhv
bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c3VGhjY3JFR2VZV2U2T24xeVU4ZGhZeG9vMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTlDQS9BOUYyNzIyRTA4QTAxMUYwQjE1ODU2NUFDNEY5QUUwMi9HN1RoY2NyRUdl
WVdlNk9uMXlVOGRoWXhvbzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoKpH8+HTE8ZOkuf8MYFzBpH7ZnPZU+ytb/gR2WbyslapnnJ3O1lXkiMh9hB7
nx1gTWmr1st/hsoBxPusR4DXCiMiS+lGaLN2CLvZtiy4TlUPKSDNJjmzm3c3fut4
HzTKD1uziTKvOAVjqslD6qryxFeGcUpr1bVqiwOzff9zREyJJnOCvaxHZRJJTtOS
g8C8Pecx67pdLvgsddPTl6izcuNzlzswBIuI5vEuZVxE0IYkwVs2d+ozZHvbtXuO
hCv8TleviRltJ2QjkEjGLhXvUEi6rbdxFbh+l90BqH/fIzD1HwBpex7Qo7LTMFdd
3TsDbfKqjPKwN3cKNDt1fm40Jg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:29 2026 by rpki-client