Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
File:                     m5TObjVVCnQlu0QWLfN8v74FPCU.mft (raw, json)
Hash identifier:          c153Zmy1XX02ozlcr4EBcPgA7Du5MidiIgUtWnrNygk=
Subject key identifier:   46:B6:9E:F1:C4:69:32:DA:D1:DF:B8:19:2A:67:AB:80:97:F7:60:F7
Authority key identifier: 9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25
Certificate issuer:       /CN=A91776C9/serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
Certificate serial:       0265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
Manifest number:          0258
Signing time:             Sat 19 Sep 2026 02:23:54 +0000
Manifest this update:     Sat 19 Sep 2026 02:23:53 +0000
Manifest next update:     Sat 26 Sep 2026 02:23:53 +0000
Files and hashes:         1: m5TObjVVCnQlu0QWLfN8v74FPCU.crl (hash: 5U3L2GQTHCDF+gJywrZl+/k8WtCn1FVCKhIuaGWGsgk=)
                          2: C872E06C705711EFBDEF9265C4F9AE02.roa (hash: 1MIq+rcSRTegjnmGzTQMJgnHxYlx76GGoRYoAGorrKw=)
                          3: C9819D5E705711EFBDEF9265C4F9AE02.roa (hash: TEyQOs4bP3K/JaB+oUns48xwNXJCW4KtS2lBk6aDCPk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl
                          rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91776C9, serialNumber=9B94CE6E35550A7425BB44162DF37CBFBE053C25
        Validity
            Not Before: Sep 19 02:23:53 2026 GMT
            Not After : Sep 26 02:23:53 2026 GMT
        Subject: CN=6aadf23a-e88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:c3:f6:2f:fe:ec:91:a1:8f:f6:94:d3:16:
                    8b:1e:09:27:3d:65:38:84:ab:39:2e:5b:dd:d9:12:
                    1a:86:e5:95:27:e3:85:26:a5:95:5d:c6:c5:f8:dc:
                    82:0a:92:91:78:d2:00:c6:b6:e1:dd:70:03:38:be:
                    fb:9e:b8:7d:ed:b6:fa:fc:52:39:c3:c7:87:d4:ca:
                    21:e6:16:fd:75:e7:9c:1e:e0:a2:4f:6f:51:05:3c:
                    4d:9c:a9:5f:e4:63:87:80:68:ac:d8:5c:97:6f:15:
                    96:06:3d:c9:1d:6d:4e:72:9f:d6:23:58:54:64:ab:
                    e3:74:8c:5a:c2:9b:dd:1c:b8:cb:95:6d:ff:cd:8f:
                    ee:b9:e2:f4:52:5f:7b:e3:18:a0:46:72:cf:7f:55:
                    30:fa:fe:ec:c8:e3:cf:b8:93:06:6e:74:ee:d6:28:
                    ec:0a:c5:fc:98:4e:ca:a3:14:a7:9d:3d:b3:e3:2b:
                    84:5e:d8:05:86:2d:f7:ac:80:ac:1f:65:24:4e:62:
                    86:9e:5d:ae:b2:9d:b2:92:56:fb:d1:ad:28:84:f1:
                    cf:55:45:f1:52:c4:2b:b4:d6:29:d9:f7:65:58:20:
                    21:ad:3b:cf:69:60:c3:f7:d1:04:d2:03:23:c8:cf:
                    f1:8d:93:3f:44:e0:ae:ab:e5:f3:77:c6:62:76:08:
                    85:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B6:9E:F1:C4:69:32:DA:D1:DF:B8:19:2A:67:AB:80:97:F7:60:F7
            X509v3 Authority Key Identifier:
                keyid:9B:94:CE:6E:35:55:0A:74:25:BB:44:16:2D:F3:7C:BF:BE:05:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5TObjVVCnQlu0QWLfN8v74FPCU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91776C9/18C3C7682A9D11EEAAB5C953C4F9AE02/m5TObjVVCnQlu0QWLfN8v74FPCU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:57:de:b4:17:67:56:1e:f8:eb:f3:53:e7:71:09:7c:85:af:
         c7:65:a5:06:2d:60:8b:08:87:b9:f3:f9:0c:45:68:07:51:51:
         c2:a3:14:bc:3c:38:91:26:e9:7e:b4:73:f5:75:21:f8:0f:14:
         e2:dd:39:04:c9:a7:cd:ec:ec:d3:e6:b7:aa:fd:d0:20:a6:d1:
         67:90:78:16:8d:83:49:84:e1:90:3e:66:42:0b:0f:ed:0b:dd:
         2d:a0:4a:2f:8f:ec:6e:f3:05:b3:65:27:93:1d:e5:a6:42:ab:
         33:ac:c8:78:cf:11:90:3d:4a:31:25:e9:41:43:33:62:cc:66:
         28:c8:cb:80:15:52:42:29:f0:1b:36:e1:4a:1e:26:fe:88:f4:
         54:ee:11:3d:21:a9:da:8e:e6:dc:58:17:f0:57:86:e3:20:09:
         93:dd:10:64:43:6f:d4:23:86:05:ef:97:b4:02:70:bb:a5:07:
         d9:5d:ab:d5:33:08:2b:2b:0e:95:55:f5:e2:a6:de:17:40:3f:
         f4:61:9f:90:d9:e3:ee:1c:88:98:ce:bb:98:a6:25:42:ab:1b:
         69:01:8d:e5:65:5c:7e:dd:d1:5e:52:0b:7c:ad:9e:81:f3:f5:
         33:3c:02:f0:3f:23:44:9b:ff:ab:76:1c:b1:dc:a2:c5:5a:f2:
         92:83:99:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc2QzkxMTAvBgNVBAUTKDlCOTRDRTZFMzU1NTBBNzQyNUJCNDQxNjJERjM3Q0JG
QkUwNTNDMjUwHhcNMjYwOTE5MDIyMzUzWhcNMjYwOTI2MDIyMzUzWjAYMRYwFAYD
VQQDEw02YWFkZjIzYS1lODhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAolbD9i/+7JGhj/aU0xaLHgknPWU4hKs5Llvd2RIahuWVJ+OFJqWVXcbF+NyC
CpKReNIAxrbh3XADOL77nrh97bb6/FI5w8eH1Moh5hb9deecHuCiT29RBTxNnKlf
5GOHgGis2FyXbxWWBj3JHW1Ocp/WI1hUZKvjdIxawpvdHLjLlW3/zY/uueL0Ul97
4xigRnLPf1Uw+v7syOPPuJMGbnTu1ijsCsX8mE7KoxSnnT2z4yuEXtgFhi33rICs
H2UkTmKGnl2usp2yklb70a0ohPHPVUXxUsQrtNYp2fdlWCAhrTvPaWDD99EE0gMj
yM/xjZM/ROCuq+Xzd8ZidgiF5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEa2nvHE
aTLa0d+4GSpnq4CX92D3MB8GA1UdIwQYMBaAFJuUzm41VQp0JbtEFi3zfL++BTwl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzZDOS8xOEMzQzc2ODJB
OUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNuUWx1MFFXTGZOOHY3NEZQ
Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201VE9ialZWQ25RbHUwUVdMZk44djc0RlBDVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzZDOS8xOEMzQzc2ODJBOUQxMUVFQUFCNUM5NTNDNEY5QUUwMi9tNVRPYmpWVkNu
UWx1MFFXTGZOOHY3NEZQQ1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmVfetBdnVh746/NT53EJfIWvx2WlBi1giwiHufP5DEVoB1FRwqMUvDw4kSbp
frRz9XUh+A8U4t05BMmnzezs0+a3qv3QIKbRZ5B4Fo2DSYThkD5mQgsP7QvdLaBK
L4/sbvMFs2Unkx3lpkKrM6zIeM8RkD1KMSXpQUMzYsxmKMjLgBVSQinwGzbhSh4m
/oj0VO4RPSGp2o7m3FgX8FeG4yAJk90QZENv1COGBe+XtAJwu6UH2V2r1TMIKysO
lVX14qbeF0A/9GGfkNnj7hyImM67mKYlQqsbaQGN5WVcft3RXlILfK2egfP1MzwC
8D8jRJv/q3YcsdyixVrykoOZRQ==
-----END CERTIFICATE-----
Generated at Sat Sep 19 08:43:11 2026 by rpki-client