Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
File:                     MZsxRPBqjysw1BIHH-EhB3T-huc.mft (raw, json)
Hash identifier:          8yE7BX7+mgDs7gd9n9H8PvsXmevPCXkHYDhYpFsb540=
Subject key identifier:   54:3B:97:52:7E:AA:D3:73:F9:02:13:98:7F:31:BE:3D:A6:E7:74:5B
Authority key identifier: 31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7
Certificate issuer:       /CN=A91971CB/serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
Certificate serial:       0773
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
Manifest number:          0769
Signing time:             Fri 04 Sep 2026 15:09:23 +0000
Manifest this update:     Fri 04 Sep 2026 15:09:23 +0000
Manifest next update:     Fri 11 Sep 2026 15:09:23 +0000
Files and hashes:         1: MZsxRPBqjysw1BIHH-EhB3T-huc.crl (hash: EPi5VxiGHSSdJOOoAru1NBdycV/Lf96pP682io+l5zQ=)
                          2: 27C29E5EF94411EDB4C6E91CC4F9AE02.roa (hash: dWX5BlXnJUAo9dHvNX1RgcAB0PkL/ZoFYS5PfP1NoaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=319B3144F06A8F2B30D412071FE1210774FE86E7
        Validity
            Not Before: Sep  4 15:09:23 2026 GMT
            Not After : Sep 11 15:09:23 2026 GMT
        Subject: CN=6a9adf23-79cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6c:c7:f2:62:52:cb:b9:ed:4c:8c:6c:5e:4f:
                    43:e6:3e:cf:f5:f8:e9:21:bf:35:e6:b2:b2:6d:8b:
                    46:18:49:c9:a7:bc:a8:e5:28:11:28:37:5b:3b:b9:
                    24:f7:f6:0a:d0:08:bf:7c:34:08:1d:9a:ea:a8:cc:
                    54:5a:de:eb:5c:2a:bc:a6:29:0e:e6:cf:2f:41:fb:
                    27:a4:0d:d0:ce:f0:4f:c3:a7:16:16:56:d7:2f:a7:
                    3a:41:c0:c9:9b:1b:34:d3:9c:70:03:76:80:d7:9e:
                    6a:57:62:cc:e5:16:f9:67:a4:7f:f2:24:3d:ff:c4:
                    0f:0d:b4:77:ac:02:72:d7:a6:cb:cf:a6:8a:d2:c3:
                    5f:35:8d:dd:25:e6:04:cd:a3:cb:8e:ef:97:be:07:
                    09:0a:f9:97:27:98:d8:a0:6b:69:0f:6a:5c:3a:ae:
                    d4:0f:bf:cd:c1:d0:75:04:c9:0d:7e:ef:80:93:29:
                    c8:77:2f:d6:78:40:a0:5d:e7:75:cb:09:6b:8f:64:
                    f7:9f:ed:81:a9:f6:6a:17:8b:f4:9e:72:78:46:4a:
                    7d:34:c3:46:f5:41:2d:03:e0:50:2d:25:2c:8c:4b:
                    eb:9c:1e:ac:b2:27:ed:8d:e5:28:87:73:c9:b8:65:
                    5a:53:6d:ca:58:01:3b:a7:a2:4a:62:63:e0:1e:01:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:97:52:7E:AA:D3:73:F9:02:13:98:7F:31:BE:3D:A6:E7:74:5B
            X509v3 Authority Key Identifier:
                keyid:31:9B:31:44:F0:6A:8F:2B:30:D4:12:07:1F:E1:21:07:74:FE:86:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/MZsxRPBqjysw1BIHH-EhB3T-huc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/010EB288808911EB8B505F20C4F9AE02/MZsxRPBqjysw1BIHH-EhB3T-huc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:02:ee:27:8b:2f:f5:6c:8a:97:6b:e9:96:6a:9e:fc:9f:2e:
         de:f6:1a:ec:80:ff:a4:33:07:ba:7d:3a:b6:00:4e:da:93:4e:
         03:48:7f:ac:26:e6:a2:e5:4c:84:7c:97:e3:b9:5d:08:6f:d2:
         1b:d6:1d:d1:ab:0b:f6:7e:6e:3a:9f:0d:ef:c9:63:32:28:02:
         64:84:07:23:49:75:74:fb:55:84:44:6e:06:79:2e:b7:f2:f9:
         40:54:39:07:16:c0:df:8b:30:51:20:4c:1f:39:88:32:5a:68:
         03:a2:4b:3e:a2:a2:7e:03:41:2a:e1:22:ff:54:45:cf:d0:c3:
         1f:0e:fb:61:36:59:58:50:45:b1:d3:bb:be:59:fc:25:b9:cc:
         09:9f:00:80:d8:ba:d5:f2:3a:9f:d8:ba:95:f0:c0:f1:32:02:
         38:bb:58:ee:85:c3:0c:0e:a8:6b:87:e2:33:24:6d:0f:a9:ff:
         14:ed:e1:af:f2:f9:20:55:87:b7:53:b7:30:4a:61:5a:cf:b4:
         4d:62:59:26:08:2e:e1:56:97:32:a7:ea:63:f6:37:4b:07:db:
         0b:85:50:bd:c2:c0:10:d6:5b:0a:1e:08:b6:36:4e:58:69:64:
         57:a3:f9:cb:91:17:2f:24:0a:8d:bd:ae:3f:18:f4:da:b8:d8:
         9d:92:52:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcxQ0IxMTAvBgNVBAUTKDMxOUIzMTQ0RjA2QThGMkIzMEQ0MTIwNzFGRTEyMTA3
NzRGRTg2RTcwHhcNMjYwOTA0MTUwOTIzWhcNMjYwOTExMTUwOTIzWjAYMRYwFAYD
VQQDEw02YTlhZGYyMy03OWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmWzH8mJSy7ntTIxsXk9D5j7P9fjpIb815rKybYtGGEnJp7yo5SgRKDdbO7kk
9/YK0Ai/fDQIHZrqqMxUWt7rXCq8pikO5s8vQfsnpA3QzvBPw6cWFlbXL6c6QcDJ
mxs005xwA3aA155qV2LM5Rb5Z6R/8iQ9/8QPDbR3rAJy16bLz6aK0sNfNY3dJeYE
zaPLju+XvgcJCvmXJ5jYoGtpD2pcOq7UD7/NwdB1BMkNfu+AkynIdy/WeECgXed1
ywlrj2T3n+2BqfZqF4v0nnJ4Rkp9NMNG9UEtA+BQLSUsjEvrnB6ssiftjeUoh3PJ
uGVaU23KWAE7p6JKYmPgHgHyjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQ7l1J+
qtNz+QITmH8xvj2m53RbMB8GA1UdIwQYMBaAFDGbMUTwao8rMNQSBx/hIQd0/obn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8wMTBFQjI4ODgw
ODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5c3cxQklISC1FaEIzVC1o
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL01ac3hSUEJxanlzdzFCSUhILUVoQjNULWh1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzFDQi8wMTBFQjI4ODgwODkxMUVCOEI1MDVGMjBDNEY5QUUwMi9NWnN4UlBCcWp5
c3cxQklISC1FaEIzVC1odWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmwLuJ4sv9WyKl2vplmqe/J8u3vYa7ID/pDMHun06tgBO2pNOA0h/rCbmouVM
hHyX47ldCG/SG9Yd0asL9n5uOp8N78ljMigCZIQHI0l1dPtVhERuBnkut/L5QFQ5
BxbA34swUSBMHzmIMlpoA6JLPqKifgNBKuEi/1RFz9DDHw77YTZZWFBFsdO7vln8
JbnMCZ8AgNi61fI6n9i6lfDA8TICOLtY7oXDDA6oa4fiMyRtD6n/FO3hr/L5IFWH
t1O3MEphWs+0TWJZJggu4VaXMqfqY/Y3SwfbC4VQvcLAENZbCh4ItjZOWGlkV6P5
y5EXLyQKjb2uPxj02rjYnZJS8A==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:40:58 2026 by rpki-client