Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
File:                     aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json)
Hash identifier:          m6rc+Hx8XrfDVHr3h4Mc2idXiFrGLRPS3AfCSSycl88=
Subject key identifier:   39:85:9C:61:64:E5:1B:73:BD:74:E7:60:31:46:F2:F9:88:ED:95:11
Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD
Certificate issuer:       /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
Certificate serial:       0180
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
Manifest number:          017B
Signing time:             Wed 09 Sep 2026 05:09:02 +0000
Manifest this update:     Wed 09 Sep 2026 05:09:02 +0000
Manifest next update:     Wed 16 Sep 2026 05:09:02 +0000
Files and hashes:         1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: 2t83ovhsNk7eDUJ8xMMXgvMhzvFi4EqDj9GSUC4S0Bo=)
                          2: 0A20CDCE897611F1B13B2D5A6E11F970.roa (hash: itZhOw4IJP4VlWCLHvYfZz4HzXyu8gSXQoJ+qtlr4OY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl
                          rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 05:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
        Validity
            Not Before: Sep  9 05:09:02 2026 GMT
            Not After : Sep 16 05:09:02 2026 GMT
        Subject: CN=6aa0e9ee-dba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:96:08:ac:1f:4a:3f:87:71:e1:67:3a:c2:38:
                    6d:35:9c:f9:0d:ac:d6:3b:39:ec:07:fa:0a:88:1e:
                    f3:50:87:90:ce:e9:7c:75:05:d8:b2:99:2d:dd:f3:
                    67:aa:00:91:9f:f4:ed:2d:18:13:12:cb:f3:2d:f1:
                    29:e7:23:2c:07:14:08:57:6a:88:ca:29:88:8f:84:
                    8a:02:54:d8:d0:57:e8:d3:27:33:49:79:1f:07:e4:
                    e1:aa:2f:db:7c:f9:7f:6c:dc:88:11:df:c3:1b:e4:
                    9a:8d:87:3a:8d:82:6f:12:9a:4b:f1:9c:bf:6a:54:
                    04:9e:bc:97:70:3b:46:74:8b:f6:1f:2b:57:39:76:
                    5d:a8:06:7a:26:9a:45:f4:fa:11:dc:6e:66:58:2c:
                    6b:3e:f3:e6:3b:14:f8:22:42:cb:b4:6f:68:c2:14:
                    3f:32:53:c6:27:3e:bd:26:5a:bd:47:66:56:a1:f1:
                    fa:92:60:7c:25:63:6c:47:b0:e9:c1:00:ed:51:7c:
                    b0:9e:49:ca:57:34:b9:62:83:06:59:1e:aa:41:b2:
                    03:f2:9b:96:eb:5c:dc:76:ae:b3:80:ae:bc:d0:f2:
                    df:7f:5f:b7:0d:32:45:65:b7:c9:12:ee:f3:4f:f3:
                    48:15:99:f0:7a:35:f0:20:c7:ef:00:81:cc:ac:c7:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:85:9C:61:64:E5:1B:73:BD:74:E7:60:31:46:F2:F9:88:ED:95:11
            X509v3 Authority Key Identifier:
                keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:43:6a:3b:cf:dc:75:da:0a:49:ea:b8:0c:71:9b:f0:61:0e:
         17:9a:cd:6b:a8:2c:d0:14:db:c3:1f:98:5d:44:74:6e:8f:85:
         21:3a:f3:03:3f:22:fd:c4:17:38:f4:0a:4b:70:22:a8:66:73:
         5a:da:40:03:be:ab:48:e7:1e:05:ad:ba:39:77:bb:d8:b3:fa:
         43:74:56:2e:42:02:51:1b:a8:29:38:2d:ed:10:27:97:f4:ba:
         a6:d8:7d:84:9e:fd:64:89:41:af:d9:a7:97:27:ab:03:22:6c:
         ce:29:95:f9:8c:8f:76:c0:6c:a3:cf:0c:85:4e:c4:5e:79:88:
         28:2d:36:61:69:aa:50:a0:86:5b:ea:52:0c:b2:ad:46:14:37:
         9f:04:1a:d0:7b:69:f4:13:19:62:ac:1f:3a:37:fd:a9:53:15:
         6b:bf:3d:82:e9:09:df:cb:67:20:57:6d:9c:67:b2:61:da:cc:
         8c:9b:98:2d:33:90:bf:7e:ca:37:cd:2a:f9:88:92:21:7d:e2:
         1e:e9:04:54:74:84:54:c1:c4:9f:df:5d:db:58:a8:dc:8a:4d:
         13:27:28:54:dd:25:e0:18:0f:2a:64:8d:0b:08:c9:bc:b1:4d:
         87:6f:c9:f8:9c:ba:30:15:5d:5c:38:3b:a5:f0:47:b8:95:77:
         2e:63:8a:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcyREYxMTAvBgNVBAUTKDY4MTQ3N0I1REU1NjZBMzhEOUIwMTU2REE4N0FCQUZB
OUZBRjg1QkQwHhcNMjYwOTA5MDUwOTAyWhcNMjYwOTE2MDUwOTAyWjAYMRYwFAYD
VQQDEw02YWEwZTllZS1kYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8JYIrB9KP4dx4Wc6wjhtNZz5DazWOznsB/oKiB7zUIeQzul8dQXYspkt3fNn
qgCRn/TtLRgTEsvzLfEp5yMsBxQIV2qIyimIj4SKAlTY0Ffo0yczSXkfB+Thqi/b
fPl/bNyIEd/DG+SajYc6jYJvEppL8Zy/alQEnryXcDtGdIv2HytXOXZdqAZ6JppF
9PoR3G5mWCxrPvPmOxT4IkLLtG9owhQ/MlPGJz69Jlq9R2ZWofH6kmB8JWNsR7Dp
wQDtUXywnknKVzS5YoMGWR6qQbID8puW61zcdq6zgK680PLff1+3DTJFZbfJEu7z
T/NIFZnwejXwIMfvAIHMrMcEQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmFnGFk
5RtzvXTnYDFG8vmI7ZURMB8GA1UdIwQYMBaAFGgUd7XeVmo42bAVbah6uvqfr4W9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi9DQzc4Qjc2MjdD
MEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2FqalpzQlZ0cUhxNi1wLXZo
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCUjN0ZDVXYWpqWnNCVnRxSHE2LXAtdmhiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzJERi9DQzc4Qjc2MjdDMEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2Fq
alpzQlZ0cUhxNi1wLXZoYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbkNqO8/cddoKSeq4DHGb8GEOF5rNa6gs0BTbwx+YXUR0bo+FITrzAz8i/cQX
OPQKS3AiqGZzWtpAA76rSOceBa26OXe72LP6Q3RWLkICURuoKTgt7RAnl/S6pth9
hJ79ZIlBr9mnlyerAyJszimV+YyPdsBso88MhU7EXnmIKC02YWmqUKCGW+pSDLKt
RhQ3nwQa0Htp9BMZYqwfOjf9qVMVa789gukJ38tnIFdtnGeyYdrMjJuYLTOQv37K
N80q+YiSIX3iHukEVHSEVMHEn99d21io3IpNEycoVN0l4BgPKmSNCwjJvLFNh2/J
+Jy6MBVdXDg7pfBHuJV3LmOK+A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:46:08 2026 by rpki-client