Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft
File:                     W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft (raw, json)
Hash identifier:          nXAGTf6uYaQrjyvH1jQ1CWbLMaKvlosrETDWh0VTU5k=
Subject key identifier:   FC:1E:0D:4D:CE:DE:11:3F:30:87:9C:93:EB:1D:B5:90:BF:C0:31:08
Authority key identifier: 5B:A4:86:99:61:E9:AB:09:48:49:D2:D5:50:0F:55:26:26:39:0A:4D
Certificate issuer:       /CN=A91B5585/serialNumber=5BA4869961E9AB094849D2D5500F552626390A4D
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6SGmWHpqwlISdLVUA9VJiY5Ck0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft
Manifest number:          1E
Signing time:             Mon 19 Oct 2026 09:40:44 +0000
Manifest this update:     Mon 19 Oct 2026 09:40:43 +0000
Manifest next update:     Mon 26 Oct 2026 09:40:43 +0000
Files and hashes:         1: W6SGmWHpqwlISdLVUA9VJiY5Ck0.crl (hash: phhzwMpL9JkpfpymxCNyCiqYBMferCMKbAxLV43t4ec=)
                          2: 8B48B9BAA03811F198EE418E3711F970.roa (hash: HMebga2Cee+mkPgXMYSD7ugJvRB7D8pLJ5U8lhm9Gjc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.crl
                          rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6SGmWHpqwlISdLVUA9VJiY5Ck0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 09:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5585, serialNumber=5BA4869961E9AB094849D2D5500F552626390A4D
        Validity
            Not Before: Oct 19 09:40:43 2026 GMT
            Not After : Oct 26 09:40:43 2026 GMT
        Subject: CN=6ad5e59b-ebf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:34:d5:d2:ac:84:1a:7e:0e:ff:85:87:b8:
                    b9:66:8d:dd:e4:e9:b8:22:ea:6c:86:40:fb:8f:5f:
                    e2:e6:f9:0e:90:10:e9:13:4c:69:b0:67:36:44:a7:
                    41:aa:ad:48:03:b6:65:7a:fe:8b:3c:8c:46:c8:f0:
                    a4:4c:6e:4d:c3:b0:97:36:9b:1d:34:1b:9b:b1:87:
                    74:a4:1e:65:2f:ac:4c:80:35:0a:05:81:da:11:73:
                    d3:b1:82:59:0a:7f:26:64:71:8e:c7:c4:17:f2:0c:
                    ac:22:1d:57:b7:21:df:df:28:b9:9b:f0:d5:8e:f5:
                    91:dd:c0:40:40:98:4e:20:40:59:84:43:20:fd:ff:
                    f6:a7:ed:96:5c:21:0d:84:4e:d1:ff:82:e5:e6:de:
                    f4:fc:d5:15:09:db:1f:7b:e3:8b:4c:7a:77:d2:e6:
                    a4:5b:87:f8:c5:22:a5:eb:24:15:f7:ce:8b:1b:df:
                    1b:e8:22:6e:d3:83:c5:24:28:c7:da:98:4c:70:44:
                    10:8e:80:73:6f:04:67:3c:e0:62:20:e2:e1:49:90:
                    bf:5c:9a:2e:84:43:68:18:af:21:54:24:12:d4:60:
                    5a:50:88:de:fe:ec:ec:f9:df:00:6a:c6:02:d2:d1:
                    fe:24:5f:96:fc:6b:15:7d:c7:a1:a7:67:98:60:48:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1E:0D:4D:CE:DE:11:3F:30:87:9C:93:EB:1D:B5:90:BF:C0:31:08
            X509v3 Authority Key Identifier:
                keyid:5B:A4:86:99:61:E9:AB:09:48:49:D2:D5:50:0F:55:26:26:39:0A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6SGmWHpqwlISdLVUA9VJiY5Ck0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5585/039D237AA03811F186C056843711F970/W6SGmWHpqwlISdLVUA9VJiY5Ck0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:72:d6:2e:c3:9b:b3:2f:04:f4:39:8c:10:d2:bf:40:f1:c3:
         f7:3a:92:d4:5a:4d:81:b8:48:c6:7b:ed:0c:44:95:f7:bc:09:
         00:e8:5c:6d:83:68:92:75:9b:e8:b7:90:ab:c3:22:10:41:3e:
         9c:c5:d2:2e:1b:67:b4:57:5f:cc:ae:84:77:80:83:e9:be:12:
         4d:07:78:c1:97:b4:71:12:29:5b:32:56:32:11:ea:21:ab:4f:
         27:e6:2b:e3:d5:bf:7c:85:3f:3a:e6:3b:16:02:7a:7a:2a:1a:
         23:69:8f:65:f2:b5:2e:b2:cf:c5:84:ab:da:d0:d7:ab:43:62:
         d8:98:26:92:0b:63:e9:47:c1:c7:dd:43:c0:69:bd:d2:74:7d:
         db:27:6d:1b:ce:59:3f:2d:65:ca:42:f4:fa:29:c4:28:0c:63:
         29:e7:2c:28:4e:77:ad:03:24:e9:72:70:13:47:7e:10:6b:44:
         a8:b0:08:af:a5:ab:7a:79:52:99:50:da:dd:d3:51:9f:0c:bd:
         6d:41:44:ea:52:77:c4:a2:82:ce:1d:52:e9:9c:f1:a5:ef:a2:
         d4:79:f7:38:ab:e7:36:7c:e3:0d:e5:4a:79:aa:b2:41:44:a3:
         7f:32:56:29:fa:23:96:c8:26:7e:06:f5:9d:c5:b5:d3:d0:8e:
         04:b7:7a:19
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NTU4NTExMC8GA1UEBRMoNUJBNDg2OTk2MUU5QUIwOTQ4NDlEMkQ1NTAwRjU1MjYy
NjM5MEE0RDAeFw0yNjEwMTkwOTQwNDNaFw0yNjEwMjYwOTQwNDNaMBgxFjAUBgNV
BAMTDTZhZDVlNTliLWViZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjzTTV0qyEGn4O/4WHuLlmjd3k6bgi6myGQPuPX+Lm+Q6QEOkTTGmwZzZEp0Gq
rUgDtmV6/os8jEbI8KRMbk3DsJc2mx00G5uxh3SkHmUvrEyANQoFgdoRc9OxglkK
fyZkcY7HxBfyDKwiHVe3Id/fKLmb8NWO9ZHdwEBAmE4gQFmEQyD9//an7ZZcIQ2E
TtH/guXm3vT81RUJ2x9744tMenfS5qRbh/jFIqXrJBX3zosb3xvoIm7Tg8UkKMfa
mExwRBCOgHNvBGc84GIg4uFJkL9cmi6EQ2gYryFUJBLUYFpQiN7+7Oz53wBqxgLS
0f4kX5b8axV9x6GnZ5hgSPzhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/B4NTc7e
ET8wh5yT6x21kL/AMQgwHwYDVR0jBBgwFoAUW6SGmWHpqwlISdLVUA9VJiY5Ck0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1NTg1LzAzOUQyMzdBQTAz
ODExRjE4NkMwNTY4NDM3MTFGOTcwL1c2U0dtV0hwcXdsSVNkTFZVQTlWSmlZNUNr
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvVzZTR21XSHBxd2xJU2RMVlVBOVZKaVk1Q2swLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1
NTg1LzAzOUQyMzdBQTAzODExRjE4NkMwNTY4NDM3MTFGOTcwL1c2U0dtV0hwcXds
SVNkTFZVQTlWSmlZNUNrMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAectYuw5uzLwT0OYwQ0r9A8cP3OpLUWk2BuEjGe+0MRJX3vAkA6Fxtg2iSdZvo
t5CrwyIQQT6cxdIuG2e0V1/MroR3gIPpvhJNB3jBl7RxEilbMlYyEeohq08n5ivj
1b98hT865jsWAnp6KhojaY9l8rUuss/FhKva0NerQ2LYmCaSC2PpR8HH3UPAab3S
dH3bJ20bzlk/LWXKQvT6KcQoDGMp5ywoTnetAyTpcnATR34Qa0SosAivpat6eVKZ
UNrd01GfDL1tQUTqUnfEooLOHVLpnPGl76LUefc4q+c2fOMN5Up5qrJBRKN/MlYp
+iOWyCZ+BvWdxbXT0I4Et3oZ
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:29:28 2026 by rpki-client