Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
File:                     CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json)
Hash identifier:          8HyRh+lW4yiNArj+Z05kI4f0NL74ze0Sfofyh0YsRf4=
Subject key identifier:   02:11:40:7A:65:64:A1:A9:1E:3B:25:A6:7E:AD:8A:49:9B:A9:9D:01
Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D
Certificate issuer:       /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D
Certificate serial:       0A77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
Manifest number:          0A69
Signing time:             Tue 06 Oct 2026 19:45:44 +0000
Manifest this update:     Tue 06 Oct 2026 19:45:44 +0000
Manifest next update:     Tue 13 Oct 2026 19:45:44 +0000
Files and hashes:         1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: txw86vw3nY7amzVcPZ4jn3cUYy4sE1I8l4X3GPGvBYY=)
                          2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: 3miiShfbAVQgjfgsHWydnIy25OOtPgMw6QYye8n1zb8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl
                          rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679 (0xa77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D
        Validity
            Not Before: Oct  6 19:45:44 2026 GMT
            Not After : Oct 13 19:45:44 2026 GMT
        Subject: CN=6ac54fe8-1217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:37:87:33:43:64:85:b2:0f:56:4c:a6:83:
                    8d:25:05:a2:c7:3d:dc:79:22:af:81:88:ac:99:99:
                    1f:fa:ea:8d:bc:57:f1:c4:db:c4:5a:0c:8c:d8:73:
                    d1:3b:b4:c1:c5:42:54:53:34:e0:27:6e:ed:7a:96:
                    87:48:f8:9b:0b:24:2f:41:c7:bf:7f:5b:ba:a5:c2:
                    5f:2a:43:a7:22:9f:71:b8:69:b2:2e:59:1b:ba:73:
                    ea:03:9c:4d:d2:94:e8:7d:15:ab:e0:b4:60:cd:12:
                    2b:e2:5a:34:ef:f3:8e:9c:1c:0b:0b:13:7c:33:79:
                    e6:b0:ad:f4:6d:26:d2:73:e0:f8:93:ba:68:73:16:
                    31:6c:c2:33:0e:b2:f1:0c:41:10:e9:43:6d:5a:9d:
                    eb:82:39:f1:65:3a:0f:61:45:42:89:d5:bf:35:24:
                    34:d2:f9:e6:2d:19:c6:a8:3c:36:6c:88:be:76:69:
                    e9:ee:08:b0:0d:41:28:79:77:4e:98:56:a6:a2:f7:
                    c1:ac:95:aa:37:40:ec:79:85:91:ef:e6:7d:7a:ce:
                    c4:c1:6d:9e:b9:9d:54:4c:e4:1f:26:e0:f3:f0:72:
                    9a:6f:60:98:16:b2:a7:12:af:09:08:6b:46:27:0e:
                    15:bc:5f:70:66:0e:66:ed:ba:d5:2b:d4:2f:86:40:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:11:40:7A:65:64:A1:A9:1E:3B:25:A6:7E:AD:8A:49:9B:A9:9D:01
            X509v3 Authority Key Identifier:
                keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:08:58:07:37:4c:58:3c:b1:a8:7b:28:b0:a1:17:02:6b:
         a5:21:ee:30:34:9e:55:c8:ad:fb:03:bf:7a:90:1e:f0:20:c9:
         72:72:cf:1d:7c:19:e4:ba:a2:8b:22:39:a2:eb:0f:72:01:48:
         f2:f3:7b:23:fb:00:4a:52:23:10:37:10:b0:30:f2:1a:80:e2:
         cc:73:5c:a5:fe:5c:2a:4e:4b:42:7c:f0:50:5a:fd:94:5a:2d:
         ce:73:d9:56:e4:18:72:50:12:f3:ac:95:96:e5:06:23:c3:70:
         6a:44:28:b7:4a:97:a6:1b:ab:55:be:68:5e:4b:5f:45:8b:3b:
         76:91:0d:29:09:42:94:cf:d9:47:02:b5:cc:12:74:20:a0:b2:
         e8:9e:63:33:58:27:91:b7:a2:2b:d3:8a:1a:4d:47:b1:a2:04:
         9c:28:5b:58:20:53:9c:a0:7e:0e:86:e5:76:31:a2:8d:d7:a6:
         47:ff:db:25:6a:89:b1:b0:f7:7b:45:73:61:e0:42:a6:bd:e1:
         70:ac:4c:c4:fd:6d:21:31:52:2e:f0:7a:b6:55:d6:0d:94:a4:
         e5:00:a9:61:c6:8f:80:f1:8b:9e:29:7f:09:ef:1b:eb:76:1f:
         74:2d:b0:ef:29:40:b1:95:57:9e:8f:56:18:66:b1:b1:87:20:
         1c:36:a4:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy
ODA3NDA1MUQwHhcNMjYxMDA2MTk0NTQ0WhcNMjYxMDEzMTk0NTQ0WjAYMRYwFAYD
VQQDEw02YWM1NGZlOC0xMjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyRE3hzNDZIWyD1ZMpoONJQWixz3ceSKvgYismZkf+uqNvFfxxNvEWgyM2HPR
O7TBxUJUUzTgJ27tepaHSPibCyQvQce/f1u6pcJfKkOnIp9xuGmyLlkbunPqA5xN
0pTofRWr4LRgzRIr4lo07/OOnBwLCxN8M3nmsK30bSbSc+D4k7pocxYxbMIzDrLx
DEEQ6UNtWp3rgjnxZToPYUVCidW/NSQ00vnmLRnGqDw2bIi+dmnp7giwDUEoeXdO
mFamovfBrJWqN0DseYWR7+Z9es7EwW2euZ1UTOQfJuDz8HKab2CYFrKnEq8JCGtG
Jw4VvF9wZg5m7brVK9QvhkB67QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIRQHpl
ZKGpHjslpn6tikmbqZ0BMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0
QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0
VkdtUXYxbE16V01vQjBCUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO9oIWAc3TFg8sah7KLChFwJrpSHuMDSeVcit+wO/epAe8CDJcnLPHXwZ5Lqi
iyI5ousPcgFI8vN7I/sASlIjEDcQsDDyGoDizHNcpf5cKk5LQnzwUFr9lFotznPZ
VuQYclAS86yVluUGI8NwakQot0qXphurVb5oXktfRYs7dpENKQlClM/ZRwK1zBJ0
IKCy6J5jM1gnkbeiK9OKGk1HsaIEnChbWCBTnKB+DobldjGijdemR//bJWqJsbD3
e0VzYeBCpr3hcKxMxP1tITFSLvB6tlXWDZSk5QCpYcaPgPGLnil/Ce8b63YfdC2w
7ylAsZVXno9WGGaxsYcgHDakfA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:18:51 2026 by rpki-client