Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
File:                     2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json)
Hash identifier:          NbhS8McGuvk6SVPcgNTNOWv34Tg0JjwyCFdvndv1qVM=
Subject key identifier:   75:52:84:AE:07:D8:4F:6D:A3:1A:88:41:95:0B:70:0F:6D:8F:D0:45
Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1
Certificate issuer:       /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
Certificate serial:       04CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
Manifest number:          04BC
Signing time:             Sun 04 Oct 2026 23:52:02 +0000
Manifest this update:     Sun 04 Oct 2026 23:52:02 +0000
Manifest next update:     Sun 11 Oct 2026 23:52:02 +0000
Files and hashes:         1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: L89SkXucKi5QZcnGj6m9f0wLQSLpFUDZ/EXZ30Whb8Y=)
                          2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: lRK5hM0+Ajz1Iu+TnpLxwj4NeRvEETgFEYDFPhqxkGM=)
                          3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: SzKheHkyXGhCU9L9E9bj5O9UK/QqaZCVghpUUMIvziw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl
                          rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228 (0x4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1
        Validity
            Not Before: Oct  4 23:52:02 2026 GMT
            Not After : Oct 11 23:52:02 2026 GMT
        Subject: CN=6ac2e6a2-1a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:e2:b2:8d:2e:19:9d:98:a3:47:dc:50:c7:
                    e2:43:28:95:3f:8e:b6:bc:9a:df:62:ac:65:ea:7e:
                    8b:8e:f3:10:4b:d8:54:52:7f:c1:49:6b:c1:41:a1:
                    98:65:cb:24:2d:71:16:0a:de:60:89:94:90:e5:ae:
                    6d:fc:2b:ee:34:b4:d2:e2:69:dc:96:46:c8:d0:d5:
                    70:a3:76:55:81:e7:36:ae:e1:b2:3d:b5:08:06:b4:
                    ca:59:9a:e8:cf:74:42:60:fa:e4:22:0d:4e:7d:57:
                    39:b2:de:8d:19:2f:58:7c:70:28:72:8b:7c:99:b1:
                    98:c7:83:ef:0f:03:bd:30:f1:be:96:90:35:eb:93:
                    9a:3d:83:e9:4b:b2:28:bc:ff:2a:66:1e:6e:a0:38:
                    c3:e6:92:22:dd:ed:44:ae:0f:fd:46:8d:6e:74:da:
                    82:34:db:e6:8c:2b:cd:9c:7a:19:80:32:e0:54:3c:
                    a1:72:06:43:7e:7f:1c:4b:3c:a1:26:25:85:da:40:
                    07:5b:98:45:86:e2:10:fa:7d:05:64:44:3d:2c:fe:
                    23:61:30:3e:69:fb:50:2c:c6:4e:52:35:fe:ff:51:
                    63:03:b2:dc:b6:16:a0:1f:cb:48:43:d5:45:73:36:
                    67:89:04:76:a0:58:0b:9e:17:db:84:4a:be:d9:b9:
                    1a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:52:84:AE:07:D8:4F:6D:A3:1A:88:41:95:0B:70:0F:6D:8F:D0:45
            X509v3 Authority Key Identifier:
                keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:01:8b:f0:f2:34:a5:57:48:10:29:72:e8:d8:ec:75:0c:4d:
         d2:de:d9:dd:f4:46:5a:e5:e6:2f:7f:1b:ac:8a:ef:b0:cd:a7:
         fd:af:cd:ca:1e:80:b7:83:f7:be:85:31:72:b8:9b:9e:71:5a:
         1a:5a:80:e4:3d:c8:a6:db:b1:dc:27:de:c6:94:96:31:2a:1c:
         0f:d0:02:d8:fb:0e:20:8c:d1:44:f2:c7:3d:a2:3a:a6:ce:a0:
         65:13:7f:55:65:c8:15:a7:25:c6:bc:b4:7d:07:1b:b4:4a:03:
         68:e6:ae:0b:bf:af:2f:fc:0b:7e:37:5f:08:7d:51:12:cf:7f:
         a0:14:70:d3:0f:ab:c2:e9:42:1a:11:31:ed:d8:70:41:31:15:
         24:7c:88:f7:a9:0f:ca:18:3f:1d:cd:1b:87:4f:da:b2:64:8c:
         d3:1c:ac:5e:8c:27:62:a1:10:2d:e1:e9:5e:fd:e5:7d:84:6b:
         d6:4b:ce:a1:af:e5:c4:40:aa:d8:57:57:ab:da:3f:ee:1e:cb:
         3b:f3:27:ae:16:17:6f:20:87:4a:e5:fb:c0:db:e6:48:72:7a:
         f4:bb:01:4b:f8:ac:87:56:9d:60:68:6b:78:3b:89:bf:a6:0c:
         2b:7b:10:4a:0a:c4:ef:0b:b7:29:9e:d2:28:9b:b2:2d:96:70:
         a4:19:59:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4
M0Y4QUQzRDEwHhcNMjYxMDA0MjM1MjAyWhcNMjYxMDExMjM1MjAyWjAYMRYwFAYD
VQQDEw02YWMyZTZhMi0xYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApHbiso0uGZ2Yo0fcUMfiQyiVP462vJrfYqxl6n6LjvMQS9hUUn/BSWvBQaGY
ZcskLXEWCt5giZSQ5a5t/CvuNLTS4mnclkbI0NVwo3ZVgec2ruGyPbUIBrTKWZro
z3RCYPrkIg1OfVc5st6NGS9YfHAocot8mbGYx4PvDwO9MPG+lpA165OaPYPpS7Io
vP8qZh5uoDjD5pIi3e1Erg/9Ro1udNqCNNvmjCvNnHoZgDLgVDyhcgZDfn8cSzyh
JiWF2kAHW5hFhuIQ+n0FZEQ9LP4jYTA+aftQLMZOUjX+/1FjA7LcthagH8tIQ9VF
czZniQR2oFgLnhfbhEq+2bkaxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVShK4H
2E9toxqIQZULcA9tj9BFMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF
MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt
bm9GeVU1WGZjUjZELUswOUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtAGL8PI0pVdIECly6NjsdQxN0t7Z3fRGWuXmL38brIrvsM2n/a/Nyh6At4P3
voUxcribnnFaGlqA5D3Iptux3CfexpSWMSocD9AC2PsOIIzRRPLHPaI6ps6gZRN/
VWXIFaclxry0fQcbtEoDaOauC7+vL/wLfjdfCH1REs9/oBRw0w+rwulCGhEx7dhw
QTEVJHyI96kPyhg/Hc0bh0/asmSM0xysXownYqEQLeHpXv3lfYRr1kvOoa/lxECq
2FdXq9o/7h7LO/MnrhYXbyCHSuX7wNvmSHJ69LsBS/ish1adYGhreDuJv6YMK3sQ
SgrE7wu3KZ7SKJuyLZZwpBlZog==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:41:09 2026 by rpki-client