Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
File:                     aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json)
Hash identifier:          HXfY3MLHDbrObmthVCoabTGomrZghT2j2lqGSWTKM3o=
Subject key identifier:   9C:4A:81:12:F1:A6:37:43:CB:58:48:6C:3E:B2:B1:A5:76:E9:A9:56
Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Certificate issuer:       /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Certificate serial:       0843
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
Manifest number:          083A
Signing time:             Sat 24 Oct 2026 21:05:25 +0000
Manifest this update:     Sat 24 Oct 2026 21:05:25 +0000
Manifest next update:     Sat 31 Oct 2026 21:05:25 +0000
Files and hashes:         1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: NoSl/Te3TTFPrUiYM20Mr0VEzigFNH8wZTXVA9X1t5Q=)
                          2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: +dqj5dUwvw+xC7YK9g1ktDdByBUDI++m9TD2lt9C0Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl
                          rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 21:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
        Validity
            Not Before: Oct 24 21:05:25 2026 GMT
            Not After : Oct 31 21:05:25 2026 GMT
        Subject: CN=6add1d95-4c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:db:77:b1:a2:df:16:7c:d2:6b:9c:64:56:f1:
                    d2:99:a1:63:1e:77:e8:4d:73:64:e9:a2:bb:20:f5:
                    53:9d:7b:c2:8d:aa:8c:ac:de:1e:e8:a4:6f:a3:13:
                    4b:ca:17:eb:26:81:a6:04:6d:d9:52:0e:66:7a:34:
                    5b:ff:9e:69:a9:b3:25:27:1b:60:bd:1a:63:4d:bd:
                    2b:c0:39:db:c9:00:d9:6b:49:d0:7c:4b:24:ec:39:
                    c9:74:fa:5e:d0:c5:0c:ba:50:4c:10:ef:7c:e9:53:
                    1e:b5:5b:fb:17:ec:7d:a9:f4:00:b4:94:9d:37:86:
                    36:0c:b7:1a:66:f9:35:47:ac:5b:63:3c:76:77:8c:
                    34:e9:0e:66:24:0c:ea:4d:f3:db:e3:9e:d1:56:71:
                    33:99:27:9d:f7:78:8f:dc:a5:44:ff:82:8b:18:0e:
                    c3:75:fe:dd:0c:10:90:9d:75:8b:92:ca:d6:0f:e6:
                    13:30:03:01:1a:76:3b:6b:bb:99:bb:f9:0c:ab:5f:
                    66:1c:4e:47:d4:08:38:98:96:11:95:dc:b0:27:f1:
                    19:e1:63:d6:b4:f4:c0:b8:a6:19:ce:94:06:fa:54:
                    66:8b:75:bf:bd:02:74:e5:02:cc:21:17:55:85:99:
                    40:78:72:06:7c:c5:68:f1:f0:d6:05:14:c9:bb:cb:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:81:12:F1:A6:37:43:CB:58:48:6C:3E:B2:B1:A5:76:E9:A9:56
            X509v3 Authority Key Identifier:
                keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e7:b6:89:92:e4:c6:3e:1a:d1:e7:f7:68:29:f0:e8:42:6b:
         65:2f:e0:4e:5f:cd:4b:19:10:85:32:74:87:ae:5a:88:ac:4a:
         1b:d8:75:49:45:91:47:7a:64:7f:aa:23:c0:6a:cb:f2:0b:ad:
         c8:b5:41:6a:64:9f:75:c1:ed:d2:64:f2:a4:a7:1e:f2:53:f8:
         47:5b:04:bc:1b:05:49:35:18:d3:ff:ff:40:4d:26:bf:5c:13:
         27:39:30:0e:c4:31:6f:c4:23:dc:49:36:00:92:6d:3e:ec:a2:
         29:64:84:83:14:68:9f:26:15:ec:44:27:ad:24:46:47:84:f3:
         a5:33:9d:03:c6:1d:91:e9:27:e3:ff:a0:c9:34:35:2b:32:6f:
         9d:ac:4a:3b:78:d7:49:7f:b2:0b:9b:e5:ec:65:8d:b5:d8:33:
         ca:fb:1c:87:f7:0b:63:35:cc:0f:1a:e6:01:75:de:26:af:8a:
         fd:d2:28:98:fb:7d:4e:a3:d1:e2:3d:6e:a6:76:d1:c0:e1:29:
         2d:39:5b:2d:38:b4:b9:a4:ec:e2:d9:30:60:3c:5c:bc:26:ba:
         f1:dc:5c:a9:41:aa:9d:7b:f8:e8:ce:e6:65:1d:02:5f:71:c4:
         f4:0d:92:2f:ba:9d:de:41:5d:04:3f:56:c6:3c:dd:09:f4:a1:
         30:ba:24:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0
MjY1QTI2N0IwHhcNMjYxMDI0MjEwNTI1WhcNMjYxMDMxMjEwNTI1WjAYMRYwFAYD
VQQDEw02YWRkMWQ5NS00YzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAltt3saLfFnzSa5xkVvHSmaFjHnfoTXNk6aK7IPVTnXvCjaqMrN4e6KRvoxNL
yhfrJoGmBG3ZUg5mejRb/55pqbMlJxtgvRpjTb0rwDnbyQDZa0nQfEsk7DnJdPpe
0MUMulBMEO986VMetVv7F+x9qfQAtJSdN4Y2DLcaZvk1R6xbYzx2d4w06Q5mJAzq
TfPb457RVnEzmSed93iP3KVE/4KLGA7Ddf7dDBCQnXWLksrWD+YTMAMBGnY7a7uZ
u/kMq19mHE5H1Ag4mJYRldywJ/EZ4WPWtPTAuKYZzpQG+lRmi3W/vQJ05QLMIRdV
hZlAeHIGfMVo8fDWBRTJu8sZvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxKgRLx
pjdDy1hIbD6ysaV26alWMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw
RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK
bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0Ukht
bngzM25Nb2hITXRDWmFKbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeee2iZLkxj4a0ef3aCnw6EJrZS/gTl/NSxkQhTJ0h65aiKxKG9h1SUWRR3pk
f6ojwGrL8gutyLVBamSfdcHt0mTypKce8lP4R1sEvBsFSTUY0///QE0mv1wTJzkw
DsQxb8Qj3Ek2AJJtPuyiKWSEgxRonyYV7EQnrSRGR4TzpTOdA8Ydkekn4/+gyTQ1
KzJvnaxKO3jXSX+yC5vl7GWNtdgzyvsch/cLYzXMDxrmAXXeJq+K/dIomPt9TqPR
4j1upnbRwOEpLTlbLTi0uaTs4tkwYDxcvCa68dxcqUGqnXv46M7mZR0CX3HE9A2S
L7qd3kFdBD9WxjzdCfShMLok8Q==
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:11 2026 by rpki-client