Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
File:                     FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json)
Hash identifier:          +hZWIa8FY79y/vwjNtQbgVWlJKJDcyvWy/fq0FZpMLk=
Subject key identifier:   7A:DA:47:5C:17:D6:C2:80:85:52:08:FD:08:D3:B1:84:EF:06:9A:A4
Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD
Certificate issuer:       /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
Certificate serial:       0D45
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
Manifest number:          0D31
Signing time:             Sat 24 Oct 2026 17:22:39 +0000
Manifest this update:     Sat 24 Oct 2026 17:22:39 +0000
Manifest next update:     Sat 31 Oct 2026 17:22:39 +0000
Files and hashes:         1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: pLIQWtjPD6Z2xmb8R7d7TlPV8UneUcb0LT3v2OpjjbU=)
                          2: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=)
                          3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl
                          rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3397 (0xd45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD
        Validity
            Not Before: Oct 24 17:22:39 2026 GMT
            Not After : Oct 31 17:22:39 2026 GMT
        Subject: CN=6adce95f-e0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:ff:21:c7:07:db:22:6a:ce:78:4a:9e:11:
                    2c:92:ed:a6:1b:c2:a3:1f:fb:a0:e2:32:69:2e:93:
                    f3:9b:af:bc:58:09:c4:f5:02:2a:23:61:7a:be:d4:
                    74:74:42:e6:b0:a2:b1:3f:ea:cf:23:22:0b:f4:9f:
                    c7:67:fd:82:46:c9:15:a3:d8:d5:e8:5a:d1:95:21:
                    0a:f2:8a:5e:68:28:00:fa:9f:cc:cf:1a:57:28:ed:
                    10:98:32:0b:b1:d1:e7:7a:2e:18:5f:19:c4:9e:44:
                    61:67:79:be:61:29:a1:f7:e7:4a:de:f0:fd:f6:a2:
                    00:a4:c1:34:db:10:ca:aa:51:c8:95:cc:c8:bb:2b:
                    c3:25:91:a7:91:c7:3f:f0:66:bd:83:70:5b:1f:c8:
                    d2:cd:38:da:d1:9e:ef:17:96:ba:10:39:0e:4a:94:
                    d2:50:f2:23:6d:cb:b3:7e:65:13:14:9c:58:0e:66:
                    59:d9:4a:02:86:90:67:af:44:ed:91:06:e8:53:46:
                    34:7e:cf:39:eb:a4:cb:23:3c:c2:22:10:79:1c:25:
                    9f:c8:aa:15:e3:ae:e6:41:1f:d3:29:3d:d9:d3:83:
                    f1:be:2e:f8:64:fe:e8:2e:04:d7:52:1c:9d:cd:bb:
                    6a:a7:9a:83:5e:2e:29:43:b7:cd:4b:99:4f:11:30:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DA:47:5C:17:D6:C2:80:85:52:08:FD:08:D3:B1:84:EF:06:9A:A4
            X509v3 Authority Key Identifier:
                keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9b:40:86:9d:45:10:ee:f4:12:1d:31:56:bf:db:b2:44:98:
         c1:18:0e:a2:dc:3c:fe:b3:1c:a2:3f:ce:42:97:0a:51:ba:24:
         cb:ad:a9:fd:93:91:3a:33:9d:ee:93:f1:37:27:84:c3:3c:19:
         b5:83:58:f2:10:c7:ec:86:9f:f9:21:ae:35:d6:f5:42:7a:2a:
         75:4c:09:14:c3:7e:2f:b2:70:0b:7b:2d:fb:f5:75:92:cf:68:
         bc:bf:95:00:6b:ea:08:8e:62:09:ae:4f:8a:2e:95:d8:54:07:
         e0:81:d3:a7:e5:ab:e9:f0:49:90:f1:68:63:c2:74:60:eb:cc:
         4a:9e:a8:9f:b5:ac:e8:3b:57:8b:a3:80:ad:fb:01:ba:08:8f:
         d7:56:01:57:b0:54:ff:41:e6:46:cd:74:f6:55:d4:e0:52:4b:
         49:fc:1f:5c:62:3d:ea:49:3f:a0:8a:dc:6c:4c:a2:2a:c4:a6:
         4c:22:d7:ba:e7:ac:61:63:d7:9d:82:0e:6e:97:fb:0f:c5:db:
         48:48:e7:49:37:4c:54:da:71:76:f5:33:9c:c0:a7:c0:c4:a7:
         3d:8a:d7:fb:2d:fe:ce:dd:54:a5:05:19:e9:3d:f9:92:99:28:
         81:55:dc:59:f1:da:90:ac:08:81:65:3c:0a:2c:aa:78:ce:95:
         d9:67:30:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz
QTQ1ODdBRkQwHhcNMjYxMDI0MTcyMjM5WhcNMjYxMDMxMTcyMjM5WjAYMRYwFAYD
VQQDEw02YWRjZTk1Zi1lMGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqZf/IccH2yJqznhKnhEsku2mG8KjH/ug4jJpLpPzm6+8WAnE9QIqI2F6vtR0
dELmsKKxP+rPIyIL9J/HZ/2CRskVo9jV6FrRlSEK8opeaCgA+p/MzxpXKO0QmDIL
sdHnei4YXxnEnkRhZ3m+YSmh9+dK3vD99qIApME02xDKqlHIlczIuyvDJZGnkcc/
8Ga9g3BbH8jSzTja0Z7vF5a6EDkOSpTSUPIjbcuzfmUTFJxYDmZZ2UoChpBnr0Tt
kQboU0Y0fs8566TLIzzCIhB5HCWfyKoV467mQR/TKT3Z04Pxvi74ZP7oLgTXUhyd
zbtqp5qDXi4pQ7fNS5lPETANAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHraR1wX
1sKAhVII/QjTsYTvBpqkMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC
NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll
djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt
ZHpTRnRsSXp4aXc2UllldjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUZtAhp1FEO70Eh0xVr/bskSYwRgOotw8/rMcoj/OQpcKUboky62p/ZOROjOd
7pPxNyeEwzwZtYNY8hDH7Iaf+SGuNdb1QnoqdUwJFMN+L7JwC3st+/V1ks9ovL+V
AGvqCI5iCa5Pii6V2FQH4IHTp+Wr6fBJkPFoY8J0YOvMSp6on7Ws6DtXi6OArfsB
ugiP11YBV7BU/0HmRs109lXU4FJLSfwfXGI96kk/oIrcbEyiKsSmTCLXuuesYWPX
nYIObpf7D8XbSEjnSTdMVNpxdvUznMCnwMSnPYrX+y3+zt1UpQUZ6T35kpkogVXc
WfHakKwIgWU8CiyqeM6V2Wcwvw==
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:01:26 2026 by rpki-client