Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File:                     fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier:          1i3rZSZWfi80xi+5k3Ja6PNKJPU6KUDwca6JTJM8M5w=
Subject key identifier:   D5:D5:2F:6B:B8:11:B2:45:47:8A:70:69:FD:9D:1F:E5:B0:1E:7B:9D
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer:       /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number:          0201
Signing time:             Sat 19 Sep 2026 03:19:18 +0000
Manifest this update:     Sat 19 Sep 2026 03:19:17 +0000
Manifest next update:     Sat 26 Sep 2026 03:19:17 +0000
Files and hashes:         1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: mcxWVuCRFy+6ybGIT8EYXKm95kjVkHJM6xv2WtqKg7E=)
                          2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: uQETdOBNe+Ai7qHHdjas7+cwdq4hlfeAOCRsaHC0QMs=)
                          3: B6B34C7E80F211F1958CCFA465A30FBC.roa (hash: Ym/+JBhkEZ5Bpl7vO2rxrswxWBhGXCPumfmGo7E+pVU=)
                          4: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: RCE7v/cxnBGfMPk3MtJPuEIln4OQNI5lz0I7q4Ez8SY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
                          rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
        Validity
            Not Before: Sep 19 03:19:17 2026 GMT
            Not After : Sep 26 03:19:17 2026 GMT
        Subject: CN=6aadff36-5026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:3b:9a:5c:b6:66:a5:f7:e2:6d:d5:14:5a:
                    52:39:e6:f6:04:90:50:a0:d9:40:76:be:68:cb:ee:
                    86:10:04:b5:65:ac:78:56:a6:0c:2b:a0:91:22:8c:
                    12:49:4f:6c:af:ec:86:f0:c6:f3:03:bc:d1:56:16:
                    c4:45:38:92:14:3f:28:c7:ed:24:bc:72:6a:4b:33:
                    f5:78:5e:30:74:f9:5a:f7:0c:ed:ca:d0:a4:bf:41:
                    bb:37:6f:e4:01:dd:88:89:be:db:5d:f9:23:e7:72:
                    e9:6a:82:59:86:0c:8c:02:21:58:59:69:86:e8:fd:
                    c6:d3:83:66:fc:1c:67:60:97:81:37:2b:d4:64:6b:
                    e8:42:53:71:ab:5c:2c:5b:54:67:2e:02:ad:b9:17:
                    9f:05:2a:0c:42:ac:1c:5a:c8:13:c1:25:91:2a:14:
                    05:57:ec:a8:03:1e:e2:46:df:55:b0:ed:17:88:8c:
                    96:53:55:97:2f:98:47:bb:da:c4:e0:04:fc:d4:60:
                    6e:20:8f:98:e6:6a:fa:e3:7f:2e:1f:2f:48:f9:bc:
                    0d:30:11:b3:24:75:34:02:b1:e6:da:72:30:a2:6c:
                    e2:c4:f2:f0:50:1d:0e:48:0d:ed:72:8e:82:97:2d:
                    ea:85:ec:2c:fe:be:eb:56:7b:28:5c:29:d4:8a:19:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D5:2F:6B:B8:11:B2:45:47:8A:70:69:FD:9D:1F:E5:B0:1E:7B:9D
            X509v3 Authority Key Identifier:
                keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:83:1f:d3:82:77:7f:2a:cc:e6:94:89:60:87:c7:4d:a8:0a:
         b6:3d:18:ee:e0:83:ac:4f:9e:99:9e:a6:a3:99:fa:e2:a1:3f:
         d3:24:f9:49:b9:92:8e:ea:a3:da:30:ca:92:e9:e4:ba:fe:f9:
         61:2f:15:53:5f:ac:1a:b3:6c:91:d0:cc:0f:5c:96:9e:ac:25:
         ec:e2:cf:1f:90:17:c7:26:53:78:85:8c:ee:57:d7:56:b3:41:
         fa:66:b4:81:0e:9b:95:d1:69:cc:e4:a4:14:f4:09:10:0c:4b:
         6c:52:3a:90:1f:17:1d:0c:e1:f8:a2:b5:99:32:d8:73:b7:ca:
         6c:3f:75:c1:e2:20:e3:6c:f8:b3:4f:7a:5c:9e:84:82:b6:51:
         cc:16:c3:a5:c4:45:27:e3:29:4c:eb:7a:a9:7b:14:de:2c:2c:
         d8:39:eb:03:14:65:5f:2e:ee:a8:71:e7:c6:83:7e:d5:64:95:
         4f:a8:d8:3f:9b:5d:96:e0:48:3d:7a:62:5e:05:45:75:7e:75:
         b7:05:d7:e3:31:43:b8:a8:05:f0:09:7b:c1:b1:0f:a7:40:bb:
         0f:62:7b:64:94:4a:21:70:4d:10:91:6d:19:d6:1b:f6:e6:69:
         5c:16:90:e2:cf:54:25:6f:51:14:56:ab:7e:c7:97:69:4d:19:
         f9:8c:74:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG
MjY3MjQ5OEEwHhcNMjYwOTE5MDMxOTE3WhcNMjYwOTI2MDMxOTE3WjAYMRYwFAYD
VQQDEw02YWFkZmYzNi01MDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlk7mly2ZqX34m3VFFpSOeb2BJBQoNlAdr5oy+6GEAS1Zax4VqYMK6CRIowS
SU9sr+yG8MbzA7zRVhbERTiSFD8ox+0kvHJqSzP1eF4wdPla9wztytCkv0G7N2/k
Ad2Iib7bXfkj53LpaoJZhgyMAiFYWWmG6P3G04Nm/BxnYJeBNyvUZGvoQlNxq1ws
W1RnLgKtuRefBSoMQqwcWsgTwSWRKhQFV+yoAx7iRt9VsO0XiIyWU1WXL5hHu9rE
4AT81GBuII+Y5mr6438uHy9I+bwNMBGzJHU0ArHm2nIwomzixPLwUB0OSA3tco6C
ly3qhews/r7rVnsoXCnUihk9NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNXVL2u4
EbJFR4pwaf2dH+WwHnudMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw
NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3
RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPYMf04J3fyrM5pSJYIfHTagKtj0Y7uCDrE+emZ6mo5n64qE/0yT5SbmSjuqj
2jDKkunkuv75YS8VU1+sGrNskdDMD1yWnqwl7OLPH5AXxyZTeIWM7lfXVrNB+ma0
gQ6bldFpzOSkFPQJEAxLbFI6kB8XHQzh+KK1mTLYc7fKbD91weIg42z4s096XJ6E
grZRzBbDpcRFJ+MpTOt6qXsU3iws2DnrAxRlXy7uqHHnxoN+1WSVT6jYP5tdluBI
PXpiXgVFdX51twXX4zFDuKgF8Al7wbEPp0C7D2J7ZJRKIXBNEJFtGdYb9uZpXBaQ
4s9UJW9RFFarfseXaU0Z+Yx0yA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 03:22:05 2026 by rpki-client