Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
File:                     I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json)
Hash identifier:          KUssVrb5NoJdqZJssbyg5mopfGrmRbj+MukFQmQpaZs=
Subject key identifier:   58:CD:14:63:7E:EE:28:25:02:9D:3E:C1:F0:48:DF:9E:52:E7:64:52
Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
Certificate issuer:       /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
Manifest number:          024D
Signing time:             Sun 25 Oct 2026 02:42:49 +0000
Manifest this update:     Sun 25 Oct 2026 02:42:49 +0000
Manifest next update:     Sun 01 Nov 2026 02:42:49 +0000
Files and hashes:         1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: B6RNOxiI+4sPJ6YsiXQ9Lykwequ5lrsv0enmqxzcGXI=)
                          2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=)
                          3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
                          rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
        Validity
            Not Before: Oct 25 02:42:49 2026 GMT
            Not After : Nov  1 02:42:49 2026 GMT
        Subject: CN=6add6ca9-cd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:47:df:28:0d:f3:e3:e4:de:e9:e9:62:7c:
                    20:6d:ee:c3:21:07:f6:b7:61:0b:8e:6b:ac:47:82:
                    23:54:b4:a8:27:b6:b0:9e:a8:bc:23:b9:97:c6:59:
                    55:0b:90:c7:a3:41:61:c6:98:71:24:06:ee:f2:35:
                    3a:f2:a5:97:6f:01:0d:66:3c:9c:d1:ee:47:b1:de:
                    df:0f:79:91:5d:f8:a1:aa:48:83:64:97:f3:1b:ad:
                    18:43:1a:bf:44:83:8f:be:48:6a:2d:68:46:6d:c3:
                    1d:62:62:2e:b5:70:ad:ac:22:99:c2:c7:e2:c5:52:
                    f1:7e:bb:17:72:09:2d:9a:a5:b3:bb:f5:e8:b7:a6:
                    18:70:19:d4:e7:2e:bd:3b:56:10:7d:a9:b3:53:f8:
                    23:f9:2d:b4:90:90:2f:dc:2c:45:01:54:fa:9c:2f:
                    b7:8d:93:65:d9:04:8a:91:80:7c:fb:71:6c:7e:f7:
                    9c:49:c8:36:e8:80:f9:71:94:19:31:e7:47:b5:b3:
                    9f:f3:28:a8:19:a9:ae:1b:18:6f:61:a3:d6:d2:45:
                    96:6d:05:66:98:f4:f7:b3:1d:3c:41:55:49:39:60:
                    18:2a:05:7c:32:22:04:59:5d:d0:68:2c:5a:ca:3b:
                    a9:bb:7a:8c:69:9c:63:c4:e0:a0:2e:64:21:62:4a:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CD:14:63:7E:EE:28:25:02:9D:3E:C1:F0:48:DF:9E:52:E7:64:52
            X509v3 Authority Key Identifier:
                keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b6:af:10:2b:e6:b7:d3:ae:cd:89:4f:ec:a2:2f:96:af:7c:
         8b:53:a9:50:d6:8f:cf:9d:d2:46:45:6f:8f:15:10:f9:00:f5:
         8c:73:0c:54:0f:76:a9:c7:1a:7b:60:10:8f:b5:10:eb:39:59:
         fe:ec:36:26:ef:09:63:0c:d5:35:a9:56:68:70:1f:31:7f:46:
         0d:85:43:1b:02:cb:44:39:ee:7a:2e:53:ac:cd:b6:db:53:b2:
         80:02:11:92:10:24:6a:3d:0b:28:40:39:8f:a4:85:0e:85:c7:
         9b:43:ee:04:eb:61:4f:7a:6d:07:8c:3b:8b:15:68:bb:e1:0d:
         5d:f3:1c:af:e5:6b:52:78:8e:69:2e:ce:b4:7f:05:13:16:f5:
         a1:ee:79:f9:65:96:a7:9d:05:de:37:9b:73:8e:a6:00:df:e9:
         5a:d1:00:38:be:80:be:76:88:b1:d7:5f:79:89:ec:b3:23:07:
         c0:15:bb:db:e8:20:c1:c7:bf:95:af:16:40:88:6e:ea:5a:5b:
         cb:c5:e8:5a:4d:0b:d8:f7:24:d5:27:d2:1d:b1:a8:68:b2:60:
         cd:cd:e0:2b:0a:cb:12:34:6c:5c:77:70:15:c2:cd:53:6f:51:
         b2:75:1e:3b:90:c5:3c:d0:9f:44:6a:f3:fc:4c:9c:12:91:d4:
         51:35:64:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0
QTczMjUxNkIwHhcNMjYxMDI1MDI0MjQ5WhcNMjYxMTAxMDI0MjQ5WjAYMRYwFAYD
VQQDEw02YWRkNmNhOS1jZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm2RH3ygN8+Pk3unpYnwgbe7DIQf2t2ELjmusR4IjVLSoJ7awnqi8I7mXxllV
C5DHo0FhxphxJAbu8jU68qWXbwENZjyc0e5Hsd7fD3mRXfihqkiDZJfzG60YQxq/
RIOPvkhqLWhGbcMdYmIutXCtrCKZwsfixVLxfrsXcgktmqWzu/Xot6YYcBnU5y69
O1YQfamzU/gj+S20kJAv3CxFAVT6nC+3jZNl2QSKkYB8+3FsfvecScg26ID5cZQZ
MedHtbOf8yioGamuGxhvYaPW0kWWbQVmmPT3sx08QVVJOWAYKgV8MiIEWV3QaCxa
yjupu3qMaZxjxOCgLmQhYkqdzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjNFGN+
7iglAp0+wfBI355S52RSMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE
NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq
c0VVTGtwTTNhZFJLY3lVV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkravECvmt9OuzYlP7KIvlq98i1OpUNaPz53SRkVvjxUQ+QD1jHMMVA92qcca
e2AQj7UQ6zlZ/uw2Ju8JYwzVNalWaHAfMX9GDYVDGwLLRDnuei5TrM2221OygAIR
khAkaj0LKEA5j6SFDoXHm0PuBOthT3ptB4w7ixVou+ENXfMcr+VrUniOaS7OtH8F
Exb1oe55+WWWp50F3jebc46mAN/pWtEAOL6AvnaIsddfeYnssyMHwBW72+ggwce/
la8WQIhu6lpby8XoWk0L2Pck1SfSHbGoaLJgzc3gKwrLEjRsXHdwFcLNU29RsnUe
O5DFPNCfRGrz/EycEpHUUTVkYg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:44 2026 by rpki-client