Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
File:                     grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json)
Hash identifier:          JRlB688mZWdwC0Dd9Srku3bNGNrOONUKszfqxIPEES4=
Subject key identifier:   9A:A0:36:DD:7C:1C:5D:04:A9:52:59:71:0C:C3:8C:6F:E7:1B:1F:82
Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
Certificate issuer:       /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Certificate serial:       062A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
Manifest number:          0623
Signing time:             Sun 04 Oct 2026 22:49:31 +0000
Manifest this update:     Sun 04 Oct 2026 22:49:30 +0000
Manifest next update:     Sun 11 Oct 2026 22:49:30 +0000
Files and hashes:         1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: 7vbKsGmzGc5x1L6l1ajAsL1Jvv8qZGJE0X4Rgoj6QKk=)
                          2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: T+BAMElZYCx7kGTbdasdTT95R9yeWdnx6k5VpkPYG2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
                          rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 22:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
        Validity
            Not Before: Oct  4 22:49:30 2026 GMT
            Not After : Oct 11 22:49:30 2026 GMT
        Subject: CN=6ac2d7fb-f0ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:65:54:58:9f:be:c0:38:62:6c:1c:9a:e5:
                    1e:66:46:c8:a6:35:67:8b:86:2f:24:4f:7f:aa:7a:
                    b8:d9:93:de:e3:70:01:26:c0:e7:f3:b3:e8:8f:70:
                    43:d7:70:de:a1:7e:0e:63:93:b1:cf:7b:a9:69:42:
                    73:13:09:ed:f3:d5:26:cf:63:b4:8e:54:19:2d:13:
                    73:21:53:1b:10:54:01:95:d9:c5:80:5c:72:7a:c0:
                    d7:42:9b:d3:5a:e7:16:d6:b6:ff:45:01:d2:90:cb:
                    78:3f:aa:94:cc:10:a7:ad:3a:c6:13:ba:29:75:2f:
                    50:c8:03:76:e2:3a:d5:00:d7:16:1c:46:a7:4f:b5:
                    1f:d4:e1:98:6c:32:90:cc:48:b5:0f:8f:f8:7d:dc:
                    a0:5a:67:2f:47:55:4b:0b:e9:c2:ce:b9:0c:6b:9b:
                    9d:b8:e7:87:49:29:f2:3e:6b:35:b8:bf:07:35:74:
                    ff:81:00:9b:f5:8d:2e:f0:e1:ee:26:d3:72:57:80:
                    26:ed:c5:ae:09:28:28:b3:ba:dd:9d:fb:99:84:71:
                    27:a8:fd:aa:90:68:2d:82:63:99:12:d0:95:83:a9:
                    06:62:4e:26:67:d3:8e:c7:e7:67:85:3c:f2:1a:6a:
                    29:b3:e3:e9:68:6b:24:e0:34:af:d0:84:7e:93:ee:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A0:36:DD:7C:1C:5D:04:A9:52:59:71:0C:C3:8C:6F:E7:1B:1F:82
            X509v3 Authority Key Identifier:
                keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:26:4f:67:ce:09:0a:a1:4d:22:f8:54:aa:8e:ba:9c:33:b7:
         aa:90:7b:d3:b7:a1:55:e9:a6:ce:9e:af:4d:91:12:6e:4d:8d:
         76:da:98:1a:a0:34:9f:af:d5:da:46:d9:fd:95:4a:f8:30:2c:
         95:79:1b:d5:59:00:35:91:37:ba:8e:99:33:b0:e5:58:0d:d7:
         4e:72:b1:25:08:dd:41:1a:a8:86:f5:28:e9:b0:bf:bf:64:4f:
         1e:dd:ce:29:94:16:a5:af:6b:e4:8a:74:76:99:c3:9f:a9:b7:
         45:57:d1:bb:f2:29:a1:c0:52:93:ee:9f:91:fa:93:f2:d9:67:
         df:37:bf:30:83:6b:3f:ca:c9:a8:99:7d:6d:49:a5:dd:99:d8:
         95:ad:fd:9d:1e:c4:7a:be:0c:20:51:c0:38:b4:4f:36:13:84:
         4d:0e:23:d3:99:d8:56:89:49:2e:5d:2d:85:81:98:22:1b:33:
         69:63:26:af:d3:ec:92:13:c0:e1:d4:7a:60:ca:b1:b9:08:31:
         f8:e5:41:e6:dd:cf:df:70:42:ef:37:e4:34:13:db:50:b1:fe:
         92:b3:ac:79:fc:e2:bf:31:f8:f4:d2:1e:84:11:04:4b:99:3a:
         d4:49:88:85:57:ca:ff:2a:1d:61:33:0a:41:b7:f5:1e:07:67:
         d3:95:7c:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk0RjcxMTAvBgNVBAUTKDgyQjMxRkExRENFMEM0QkYyRjY2Mzk3Nzg2QTZDMDhF
NDdDNkI4RkUwHhcNMjYxMDA0MjI0OTMwWhcNMjYxMDExMjI0OTMwWjAYMRYwFAYD
VQQDEw02YWMyZDdmYi1mMGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpNlVFifvsA4YmwcmuUeZkbIpjVni4YvJE9/qnq42ZPe43ABJsDn87Poj3BD
13DeoX4OY5Oxz3upaUJzEwnt89Umz2O0jlQZLRNzIVMbEFQBldnFgFxyesDXQpvT
WucW1rb/RQHSkMt4P6qUzBCnrTrGE7opdS9QyAN24jrVANcWHEanT7Uf1OGYbDKQ
zEi1D4/4fdygWmcvR1VLC+nCzrkMa5uduOeHSSnyPms1uL8HNXT/gQCb9Y0u8OHu
JtNyV4Am7cWuCSgos7rdnfuZhHEnqP2qkGgtgmOZEtCVg6kGYk4mZ9OOx+dnhTzy
Gmops+PpaGsk4DSv0IR+k+6jLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqgNt18
HF0EqVJZcQzDjG/nGx+CMB8GA1UdIwQYMBaAFIKzH6Hc4MS/L2Y5d4amwI5Hxrj+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTRGNy81OUZGMDVBQUZG
QzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hMOHZaamwzaHFiQWprZkd1
UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dyTWZvZHpneEw4dlpqbDNocWJBamtmR3VQNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTRGNy81OUZGMDVBQUZGQzgxMUVCQThBNEEwNTdDNEY5QUUwMi9nck1mb2R6Z3hM
OHZaamwzaHFiQWprZkd1UDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWCZPZ84JCqFNIvhUqo66nDO3qpB707ehVemmzp6vTZESbk2NdtqYGqA0n6/V
2kbZ/ZVK+DAslXkb1VkANZE3uo6ZM7DlWA3XTnKxJQjdQRqohvUo6bC/v2RPHt3O
KZQWpa9r5Ip0dpnDn6m3RVfRu/IpocBSk+6fkfqT8tln3ze/MINrP8rJqJl9bUml
3ZnYla39nR7Eer4MIFHAOLRPNhOETQ4j05nYVolJLl0thYGYIhszaWMmr9PskhPA
4dR6YMqxuQgx+OVB5t3P33BC7zfkNBPbULH+krOsefzivzH49NIehBEES5k61EmI
hVfK/yodYTMKQbf1Hgdn05V8yA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:28:09 2026 by rpki-client