Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
File:                     ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft (raw, json)
Hash identifier:          KIM+WlmUjNQ45YnD6D9D5+bei22z3jNzKrVz632yGJY=
Subject key identifier:   44:FD:C2:15:5D:29:F9:76:C0:3E:1F:55:6D:4B:DF:66:F7:0B:99:DD
Authority key identifier: 6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44
Certificate issuer:       /CN=A91A6ABE/serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
Manifest number:          DD
Signing time:             Sun 04 Oct 2026 10:41:31 +0000
Manifest this update:     Sun 04 Oct 2026 10:41:30 +0000
Manifest next update:     Sun 11 Oct 2026 10:41:30 +0000
Files and hashes:         1: ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl (hash: EcsO2WxaFU33K3pYYWd5TMwi4HV+jrCcdSuxva//NdI=)
                          2: EADAF6B2743E11F0ABAB020EC4F9AE02.roa (hash: XmAkdXljY7ifS/FL8KMXbXDPOHdCBlE7app0ObsezBk=)
                          3: s66mtO8l_fETAiX4Khi-e7ol6kM.asa (hash: lT+PT/yKbvN4le4JUkVdPjbxAOB2AGn6uRfnFq6t8+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 10:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6ABE, serialNumber=6B22F9079105A4DEBCB09CC1B90096085C662D44
        Validity
            Not Before: Oct  4 10:41:30 2026 GMT
            Not After : Oct 11 10:41:30 2026 GMT
        Subject: CN=6ac22d5b-d4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e1:43:6c:56:e2:1b:b9:4b:fc:92:39:c3:43:
                    a2:64:58:01:10:43:82:75:80:1e:11:d5:17:b9:17:
                    43:41:74:66:5a:52:cf:bb:b4:16:15:7e:2f:c8:87:
                    08:a9:a6:6f:b3:41:fc:a1:8f:44:fa:dc:dd:71:49:
                    a5:0d:3a:48:72:92:13:72:38:e4:c9:82:8b:84:53:
                    73:06:2a:23:d5:8d:0c:ae:a5:67:00:f6:72:88:ff:
                    04:d0:c8:45:5a:77:03:4c:5f:36:78:8a:0e:14:c3:
                    53:fa:ea:d3:ad:02:9c:6b:f3:13:d3:e0:da:1d:53:
                    36:51:72:9a:1c:16:a7:33:a5:72:42:15:c3:0c:da:
                    eb:44:58:71:64:8b:8a:7f:a5:24:34:59:78:42:e5:
                    35:f7:f3:eb:7b:f0:58:f8:08:e5:a2:94:5f:e7:f5:
                    7b:e7:b4:60:11:f8:22:0c:b6:50:23:aa:8a:b6:55:
                    b8:07:e3:ca:56:61:a1:cd:03:f7:cd:38:c8:6b:90:
                    c3:68:55:49:ca:b6:90:e7:ab:db:43:78:40:5e:47:
                    e6:b4:14:0c:c4:a7:df:16:58:3e:fe:4c:07:75:c8:
                    77:dc:51:f9:bf:57:5d:9e:3e:de:40:81:ca:d8:88:
                    bb:0c:a0:78:52:26:4f:76:e0:40:7a:c3:55:eb:9e:
                    95:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FD:C2:15:5D:29:F9:76:C0:3E:1F:55:6D:4B:DF:66:F7:0B:99:DD
            X509v3 Authority Key Identifier:
                keyid:6B:22:F9:07:91:05:A4:DE:BC:B0:9C:C1:B9:00:96:08:5C:66:2D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ayL5B5EFpN68sJzBuQCWCFxmLUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6ABE/15F5C10C743E11F094A7BF09C4F9AE02/ayL5B5EFpN68sJzBuQCWCFxmLUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:57:b2:d6:be:d7:bb:59:57:b2:a3:35:ba:b9:a1:f1:16:
         ad:37:e3:97:78:06:9f:41:c0:47:63:b6:3c:a9:12:aa:2d:a2:
         8b:9b:68:b5:81:17:4f:0c:97:ba:28:46:90:b5:05:f7:70:52:
         91:5d:e8:66:4e:d1:a4:17:37:36:e8:66:b3:61:6f:15:00:d4:
         d2:c2:3a:5f:30:c9:b3:99:92:4a:d7:e6:58:ed:6c:07:02:0b:
         8e:3f:3c:03:44:7a:f4:74:e2:33:15:5c:83:d8:8f:04:a7:e2:
         ee:16:3f:47:02:a2:fd:04:0c:46:06:8f:de:14:42:9b:de:b8:
         5b:d2:c5:38:aa:ab:14:33:17:bf:91:b1:ce:35:43:07:b6:9a:
         b4:d5:94:48:b1:1b:17:d8:dc:4b:d2:84:f0:b1:5f:09:a9:16:
         87:0c:b1:50:77:50:e8:9d:a1:f5:9a:80:d2:14:66:4e:5b:e0:
         28:1d:b4:89:34:90:f1:89:44:3a:35:c4:97:25:b8:23:cb:b4:
         0e:d5:f2:76:a3:ea:83:90:e7:55:82:78:fe:ed:8e:c2:03:64:
         fc:d8:1c:13:3d:ce:32:88:da:c3:7b:73:9e:e0:db:77:6d:6f:
         12:ee:0d:6e:4e:ea:00:b8:c7:6d:4a:43:0e:ab:7b:47:2e:a4:
         7f:cb:ab:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZBQkUxMTAvBgNVBAUTKDZCMjJGOTA3OTEwNUE0REVCQ0IwOUNDMUI5MDA5NjA4
NUM2NjJENDQwHhcNMjYxMDA0MTA0MTMwWhcNMjYxMDExMTA0MTMwWjAYMRYwFAYD
VQQDEw02YWMyMmQ1Yi1kNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8uFDbFbiG7lL/JI5w0OiZFgBEEOCdYAeEdUXuRdDQXRmWlLPu7QWFX4vyIcI
qaZvs0H8oY9E+tzdcUmlDTpIcpITcjjkyYKLhFNzBioj1Y0MrqVnAPZyiP8E0MhF
WncDTF82eIoOFMNT+urTrQKca/MT0+DaHVM2UXKaHBanM6VyQhXDDNrrRFhxZIuK
f6UkNFl4QuU19/Pre/BY+AjlopRf5/V757RgEfgiDLZQI6qKtlW4B+PKVmGhzQP3
zTjIa5DDaFVJyraQ56vbQ3hAXkfmtBQMxKffFlg+/kwHdch33FH5v1ddnj7eQIHK
2Ii7DKB4UiZPduBAesNV656V6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFET9whVd
Kfl2wD4fVW1L32b3C5ndMB8GA1UdIwQYMBaAFGsi+QeRBaTevLCcwbkAlghcZi1E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkFCRS8xNUY1QzEwQzc0
M0UxMUYwOTRBN0JGMDlDNEY5QUUwMi9heUw1QjVFRnBONjhzSnpCdVFDV0NGeG1M
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F5TDVCNUVGcE42OHNKekJ1UUNXQ0Z4bUxVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkFCRS8xNUY1QzEwQzc0M0UxMUYwOTRBN0JGMDlDNEY5QUUwMi9heUw1QjVFRnBO
NjhzSnpCdVFDV0NGeG1MVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJtxXsta+17tZV7KjNbq5ofEWrTfjl3gGn0HAR2O2PKkSqi2ii5totYEXTwyX
uihGkLUF93BSkV3oZk7RpBc3Nuhms2FvFQDU0sI6XzDJs5mSStfmWO1sBwILjj88
A0R69HTiMxVcg9iPBKfi7hY/RwKi/QQMRgaP3hRCm964W9LFOKqrFDMXv5GxzjVD
B7aatNWUSLEbF9jcS9KE8LFfCakWhwyxUHdQ6J2h9ZqA0hRmTlvgKB20iTSQ8YlE
OjXElyW4I8u0DtXydqPqg5DnVYJ4/u2OwgNk/NgcEz3OMojaw3tznuDbd21vEu4N
bk7qALjHbUpDDqt7Ry6kf8urJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:59:24 2026 by rpki-client