Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
File:                     91rI3ARJV7GxWgsVxu2jGLI7QDM.mft (raw, json)
Hash identifier:          NdZVaSaLah2L0NM1TfegWnaxAHKDfRplYW89TZ8RtFo=
Subject key identifier:   1B:F5:9D:97:94:F6:52:B8:93:EC:24:2A:13:0C:4D:B0:CB:8D:23:CE
Authority key identifier: F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33
Certificate issuer:       /CN=A919CDE4/serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
Certificate serial:       02A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
Manifest number:          02A3
Signing time:             Fri 23 Oct 2026 02:01:17 +0000
Manifest this update:     Fri 23 Oct 2026 02:01:16 +0000
Manifest next update:     Fri 30 Oct 2026 02:01:16 +0000
Files and hashes:         1: 91rI3ARJV7GxWgsVxu2jGLI7QDM.crl (hash: afMPlfYr52BhHqb+Jd+/MOTlyVbwShxlJW0tvvNOg3w=)
                          2: 955C43AAC99E11ED98E9BE5BC4F9AE02.roa (hash: I5lzb/QAAInVeAXwX1UF76K4valuRx7JaU0RB09yN/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl
                          rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CDE4, serialNumber=F75AC8DC044957B1B15A0B15C6EDA318B23B4033
        Validity
            Not Before: Oct 23 02:01:16 2026 GMT
            Not After : Oct 30 02:01:16 2026 GMT
        Subject: CN=6adabfed-9d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:ae:79:fa:03:fd:c0:3f:6f:34:87:e1:0e:
                    09:01:a1:67:47:1f:5e:8c:88:5a:d1:0e:98:58:67:
                    56:68:fc:de:7c:40:74:08:b9:71:c2:36:f7:fb:73:
                    71:9b:c7:54:86:22:57:5d:1d:5f:54:f5:ab:75:30:
                    be:67:f5:76:fd:d1:86:59:3a:ab:96:3f:90:de:ce:
                    60:f7:83:8e:7f:57:bf:09:20:ce:4d:8a:f7:2a:bd:
                    b5:62:10:bf:a0:48:e8:93:81:dc:05:48:ca:2a:8f:
                    74:62:ff:1d:77:86:ca:ef:ec:2a:48:4e:b1:4a:19:
                    a1:6b:59:89:22:a1:38:15:ba:ff:bf:f3:43:74:59:
                    ca:82:4a:60:8e:35:77:e3:9d:b3:e3:cc:59:65:b5:
                    99:b2:93:c9:01:40:78:95:13:ed:31:c1:e9:bb:30:
                    b5:c9:de:33:ee:18:55:8a:2d:3b:5a:42:01:05:ea:
                    c6:d8:4e:95:10:6d:a8:16:ec:cc:62:55:d5:72:ab:
                    72:4c:6a:08:37:08:8d:44:9a:23:4e:7f:75:2d:7a:
                    32:70:61:85:a6:af:93:c2:57:38:b3:5a:ed:b1:e5:
                    7f:a8:a8:29:d1:57:83:e4:fe:7e:f3:a4:27:f8:8b:
                    0f:c4:7e:b8:aa:0c:85:7b:2b:f3:ab:bc:7b:06:b8:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:9D:97:94:F6:52:B8:93:EC:24:2A:13:0C:4D:B0:CB:8D:23:CE
            X509v3 Authority Key Identifier:
                keyid:F7:5A:C8:DC:04:49:57:B1:B1:5A:0B:15:C6:ED:A3:18:B2:3B:40:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91rI3ARJV7GxWgsVxu2jGLI7QDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CDE4/B5A47390C99311ED9B4B3B10C4F9AE02/91rI3ARJV7GxWgsVxu2jGLI7QDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:03:bc:8a:2f:8f:d9:da:55:b7:42:d8:40:07:5a:b5:59:5e:
         d4:a9:f8:5e:c8:87:8e:e3:21:2b:3e:42:08:d4:d4:1a:30:0c:
         ac:f8:f2:b7:13:ab:0f:65:90:12:e2:a9:ef:98:fd:5e:8a:e1:
         3a:ca:b0:66:66:05:70:41:b0:bb:a4:be:3b:62:14:9d:ef:2d:
         00:8f:91:d3:95:7c:53:3d:84:55:39:ec:17:21:40:d8:4f:db:
         ec:43:2a:5f:f0:00:24:44:11:1a:c6:de:7d:b1:91:d0:13:94:
         0d:a3:05:7d:c0:94:5b:5d:81:02:e7:78:fe:eb:6f:24:88:5a:
         a9:6e:7e:88:3a:62:ca:c3:e0:ea:d7:d6:52:f1:c1:b3:35:93:
         42:2b:a6:48:17:cd:63:10:7f:c0:fd:94:0b:95:0c:4c:90:a1:
         4b:3d:c4:69:ac:5d:44:d9:83:48:e7:e5:db:18:7a:4c:e9:ee:
         5b:65:10:99:79:06:d1:f1:e1:28:42:f9:c8:9b:42:78:54:47:
         e6:02:04:32:bb:65:6d:85:49:1d:e4:d3:2a:a3:77:db:45:9a:
         92:77:ea:e7:7b:b1:ed:29:94:a4:9d:f9:f1:2c:d6:2f:1c:bb:
         b1:60:fe:bc:08:73:b2:bd:79:73:d1:f5:24:b5:91:85:83:44:
         a3:f3:59:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUNERTQxMTAvBgNVBAUTKEY3NUFDOERDMDQ0OTU3QjFCMTVBMEIxNUM2RURBMzE4
QjIzQjQwMzMwHhcNMjYxMDIzMDIwMTE2WhcNMjYxMDMwMDIwMTE2WjAYMRYwFAYD
VQQDEw02YWRhYmZlZC05ZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1oiuefoD/cA/bzSH4Q4JAaFnRx9ejIha0Q6YWGdWaPzefEB0CLlxwjb3+3Nx
m8dUhiJXXR1fVPWrdTC+Z/V2/dGGWTqrlj+Q3s5g94OOf1e/CSDOTYr3Kr21YhC/
oEjok4HcBUjKKo90Yv8dd4bK7+wqSE6xShmha1mJIqE4Fbr/v/NDdFnKgkpgjjV3
452z48xZZbWZspPJAUB4lRPtMcHpuzC1yd4z7hhVii07WkIBBerG2E6VEG2oFuzM
YlXVcqtyTGoINwiNRJojTn91LXoycGGFpq+Twlc4s1rtseV/qKgp0VeD5P5+86Qn
+IsPxH64qgyFeyvzq7x7Bri31QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBv1nZeU
9lK4k+wkKhMMTbDLjSPOMB8GA1UdIwQYMBaAFPdayNwESVexsVoLFcbtoxiyO0Az
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0RFNC9CNUE0NzM5MEM5
OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3R3hXZ3NWeHUyakdMSTdR
RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzkxckkzQVJKVjdHeFdnc1Z4dTJqR0xJN1FETS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Q0RFNC9CNUE0NzM5MEM5OTMxMUVEOUI0QjNCMTBDNEY5QUUwMi85MXJJM0FSSlY3
R3hXZ3NWeHUyakdMSTdRRE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMQO8ii+P2dpVt0LYQAdatVle1Kn4XsiHjuMhKz5CCNTUGjAMrPjytxOrD2WQ
EuKp75j9XorhOsqwZmYFcEGwu6S+O2IUne8tAI+R05V8Uz2EVTnsFyFA2E/b7EMq
X/AAJEQRGsbefbGR0BOUDaMFfcCUW12BAud4/utvJIhaqW5+iDpiysPg6tfWUvHB
szWTQiumSBfNYxB/wP2UC5UMTJChSz3EaaxdRNmDSOfl2xh6TOnuW2UQmXkG0fHh
KEL5yJtCeFRH5gIEMrtlbYVJHeTTKqN320Waknfq53ux7SmUpJ358SzWLxy7sWD+
vAhzsr15c9H1JLWRhYNEo/NZFA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:42:37 2026 by rpki-client