Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1762/A27B5EFEA5E111F1A1CF85683911F970/o-VMt3ZwnNoobP8rXpWM5h_ueV0.mft
File:                     o-VMt3ZwnNoobP8rXpWM5h_ueV0.mft (raw, json)
Hash identifier:          QeIRpaZRXWtvAsgYdygh1wUmXThIr+yVe69dsrU+Kdg=
Subject key identifier:   DF:89:2B:D6:75:A3:22:CE:39:B2:F5:F1:71:6B:29:D8:A4:EF:0E:3A
Authority key identifier: A3:E5:4C:B7:76:70:9C:DA:28:6C:FF:2B:5E:95:8C:E6:1F:EE:79:5D
Certificate issuer:       /CN=A91A1762/serialNumber=A3E54CB776709CDA286CFF2B5E958CE61FEE795D
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-VMt3ZwnNoobP8rXpWM5h_ueV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1762/A27B5EFEA5E111F1A1CF85683911F970/o-VMt3ZwnNoobP8rXpWM5h_ueV0.mft
Manifest number:          11
Signing time:             Tue 29 Sep 2026 09:45:36 +0000
Manifest this update:     Tue 29 Sep 2026 09:45:36 +0000
Manifest next update:     Tue 06 Oct 2026 09:45:36 +0000
Files and hashes:         1: o-VMt3ZwnNoobP8rXpWM5h_ueV0.crl (hash: 1ILBQX4eq8RP9zeH60NGFXlos5M9i6NX2wN6lug4utg=)
                          2: 1CvYp3Y7ybKhE3RLcp0zC6PCfec.asa (hash: qtw7G+RSuNICYo+Z9oLakX2XrITC+Z9zxyA0S15ZG/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1762/A27B5EFEA5E111F1A1CF85683911F970/o-VMt3ZwnNoobP8rXpWM5h_ueV0.crl
                          rsync://rpki.apnic.net/member_repository/A91A1762/A27B5EFEA5E111F1A1CF85683911F970/o-VMt3ZwnNoobP8rXpWM5h_ueV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-VMt3ZwnNoobP8rXpWM5h_ueV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 09:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1762, serialNumber=A3E54CB776709CDA286CFF2B5E958CE61FEE795D
        Validity
            Not Before: Sep 29 09:45:36 2026 GMT
            Not After : Oct  6 09:45:36 2026 GMT
        Subject: CN=6abb88c0-ab3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:e9:93:8e:3c:de:9c:01:e0:1a:73:68:56:
                    64:43:fa:f4:e9:9e:19:28:6b:63:02:b4:87:87:70:
                    fc:16:04:21:2a:49:40:fd:a8:a4:cd:49:ce:7a:5c:
                    21:b9:19:fc:ce:c3:01:98:d9:2b:d4:49:2e:a2:05:
                    32:6b:64:8e:7f:54:41:d8:33:b8:5d:bd:21:d0:06:
                    e2:b0:1e:4c:62:b1:e1:d2:84:c1:7f:c5:c1:21:96:
                    0f:76:4f:0f:c2:4a:45:4e:44:ec:97:4a:80:b7:25:
                    70:ae:ef:97:9e:aa:ff:0b:29:63:fd:4e:3b:e9:ed:
                    b1:da:ef:df:0d:f1:c1:f1:ea:cb:53:80:4a:4c:67:
                    62:ee:f7:04:1e:ae:e5:4e:7b:b4:70:eb:e3:a0:c3:
                    70:84:61:96:64:5d:99:e2:37:f5:cb:5f:30:49:70:
                    3e:3a:c6:8c:d6:f6:a9:81:a1:82:3b:20:4b:39:98:
                    78:59:56:b4:59:13:a4:4e:31:5c:ff:3c:98:c4:da:
                    35:0d:b7:7f:44:38:3c:ad:83:9e:f9:37:a8:bd:4a:
                    ff:2d:66:dd:25:35:45:97:1a:8b:67:46:dc:97:1a:
                    9b:2d:46:bb:db:84:41:a9:75:9c:ad:fb:14:32:cd:
                    44:b8:a5:43:a8:c0:30:70:fd:f8:22:9e:b3:45:27:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:89:2B:D6:75:A3:22:CE:39:B2:F5:F1:71:6B:29:D8:A4:EF:0E:3A
            X509v3 Authority Key Identifier:
                keyid:A3:E5:4C:B7:76:70:9C:DA:28:6C:FF:2B:5E:95:8C:E6:1F:EE:79:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1762/A27B5EFEA5E111F1A1CF85683911F970/o-VMt3ZwnNoobP8rXpWM5h_ueV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o-VMt3ZwnNoobP8rXpWM5h_ueV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1762/A27B5EFEA5E111F1A1CF85683911F970/o-VMt3ZwnNoobP8rXpWM5h_ueV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:e2:a2:0e:2b:d3:b7:44:1c:18:87:56:79:8c:42:84:a8:
         3f:89:49:ff:08:07:70:87:af:b8:29:51:d5:d1:d7:c5:cc:cf:
         95:3f:9f:ba:74:1e:bd:57:71:b8:1d:68:97:ca:b0:93:9b:d5:
         8d:6f:7d:4c:f7:10:e1:13:b2:f0:b6:fe:65:b9:08:6b:cd:d8:
         f2:e3:48:a0:95:74:eb:c7:ba:1f:a7:f7:a7:5c:2f:d2:ba:b9:
         5e:29:f1:eb:7d:83:7e:7e:7a:97:af:ba:5e:7a:d2:6b:54:fc:
         0e:3c:4e:bd:84:a9:63:09:96:63:b1:7f:0a:8b:63:1a:e0:42:
         ba:9d:89:2e:57:d3:4f:58:72:bf:0a:8a:74:ef:64:8a:1d:6d:
         d4:a2:cf:77:df:59:fc:d1:e7:8b:38:ca:8a:5e:e6:c0:41:a0:
         b3:2f:cd:c1:57:74:4f:1a:82:a4:46:c9:42:6f:87:bd:45:c0:
         ce:2b:9d:74:87:c6:75:95:c2:b3:0a:2f:e2:b3:64:07:dd:2c:
         a3:4c:e7:e3:36:bf:23:68:01:51:33:38:7e:24:bc:e7:d6:bd:
         44:3a:e2:c1:81:26:fa:35:48:f8:83:3b:e5:45:bf:cc:5f:34:
         45:a8:85:c6:b2:63:d3:d3:8b:ad:7f:e2:dd:7b:32:e2:9d:dc:
         24:e4:5e:f3
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MTc2MjExMC8GA1UEBRMoQTNFNTRDQjc3NjcwOUNEQTI4NkNGRjJCNUU5NThDRTYx
RkVFNzk1RDAeFw0yNjA5MjkwOTQ1MzZaFw0yNjEwMDYwOTQ1MzZaMBgxFjAUBgNV
BAMTDTZhYmI4OGMwLWFiM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeVumTjjzenAHgGnNoVmRD+vTpnhkoa2MCtIeHcPwWBCEqSUD9qKTNSc56XCG5
GfzOwwGY2SvUSS6iBTJrZI5/VEHYM7hdvSHQBuKwHkxiseHShMF/xcEhlg92Tw/C
SkVOROyXSoC3JXCu75eeqv8LKWP9Tjvp7bHa798N8cHx6stTgEpMZ2Lu9wQeruVO
e7Rw6+Ogw3CEYZZkXZniN/XLXzBJcD46xozW9qmBoYI7IEs5mHhZVrRZE6ROMVz/
PJjE2jUNt39EODytg575N6i9Sv8tZt0lNUWXGotnRtyXGpstRrvbhEGpdZyt+xQy
zUS4pUOowDBw/fginrNFJ7hLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU34kr1nWj
Is45svXxcWsp2KTvDjowHwYDVR0jBBgwFoAUo+VMt3ZwnNoobP8rXpWM5h/ueV0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNzYyL0EyN0I1RUZFQTVF
MTExRjFBMUNGODU2ODM5MTFGOTcwL28tVk10M1p3bk5vb2JQOHJYcFdNNWhfdWVW
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvby1WTXQzWnduTm9vYlA4clhwV001aF91ZVYwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEx
NzYyL0EyN0I1RUZFQTVFMTExRjFBMUNGODU2ODM5MTFGOTcwL28tVk10M1p3bk5v
b2JQOHJYcFdNNWhfdWVWMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCWC+KiDivTt0QcGIdWeYxChKg/iUn/CAdwh6+4KVHV0dfFzM+VP5+6dB69V3G4
HWiXyrCTm9WNb31M9xDhE7Lwtv5luQhrzdjy40iglXTrx7ofp/enXC/SurleKfHr
fYN+fnqXr7peetJrVPwOPE69hKljCZZjsX8Ki2Ma4EK6nYkuV9NPWHK/Cop072SK
HW3Uos9331n80eeLOMqKXubAQaCzL83BV3RPGoKkRslCb4e9RcDOK510h8Z1lcKz
Ci/is2QH3SyjTOfjNr8jaAFRMzh+JLzn1r1EOuLBgSb6NUj4gzvlRb/MXzRFqIXG
smPT04utf+LdezLindwk5F7z
-----END CERTIFICATE-----
Generated at Thu Oct 1 13:54:28 2026 by rpki-client