Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
File:                     voMTRZEKyCwYqIMcLYUK5bOOUA8.mft (raw, json)
Hash identifier:          GFhHcERA11qtFFqFqYlmwFu9W6BfoHgczRNd/s/D/dg=
Subject key identifier:   22:A4:68:33:C0:D4:B4:C9:9F:94:D0:C8:FB:14:80:EF:03:A8:67:4D
Authority key identifier: BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F
Certificate issuer:       /CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
Manifest number:          0888
Signing time:             Fri 04 Sep 2026 15:13:55 +0000
Manifest this update:     Fri 04 Sep 2026 15:13:55 +0000
Manifest next update:     Fri 11 Sep 2026 15:13:54 +0000
Files and hashes:         1: voMTRZEKyCwYqIMcLYUK5bOOUA8.crl (hash: AbmQ1XJUvEw7yTbMTIW7Mc0RbvaiyHoR326xSX1w8Cg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C13, serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F
        Validity
            Not Before: Sep  4 15:13:55 2026 GMT
            Not After : Sep 11 15:13:54 2026 GMT
        Subject: CN=6a9ae033-5c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:56:6d:ed:52:16:88:03:f5:62:30:d6:c2:95:
                    5d:fd:48:95:2b:f1:14:75:ea:50:3f:6f:33:7b:34:
                    c2:1f:77:7d:a1:34:14:dc:19:10:63:e9:26:d7:1b:
                    79:34:dc:bb:b3:17:c2:53:21:91:39:65:55:3e:b4:
                    1b:54:1a:c6:8a:6a:29:dc:50:ce:f7:f4:20:df:08:
                    9e:af:64:d1:28:90:a6:0a:4e:9e:9e:9d:ef:ec:3c:
                    c5:f6:0b:7f:71:f5:1a:21:7e:88:d8:68:bb:b6:a5:
                    db:a7:ea:88:47:96:6c:19:a4:55:e7:e0:ce:b4:14:
                    ad:0b:39:c0:c8:88:06:c1:ec:54:b5:0f:21:6c:a0:
                    e2:d2:11:aa:42:8f:76:f8:ea:ed:7a:c4:44:44:ef:
                    6d:f1:cf:24:23:14:ee:df:2e:68:03:76:38:c5:39:
                    af:35:d9:10:d5:17:59:f2:89:af:d1:02:09:f1:cc:
                    83:96:e6:8a:a1:e8:6f:11:a9:d9:20:5c:77:33:48:
                    97:da:a3:04:49:10:e6:34:09:ab:66:44:cd:60:40:
                    3b:11:9c:80:1e:02:b5:4e:53:a3:e4:a7:6b:1e:33:
                    44:50:fb:51:27:97:8d:df:e4:23:52:8c:f7:5d:05:
                    b6:49:65:1a:7b:08:ab:f8:a1:46:eb:3a:62:6c:08:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A4:68:33:C0:D4:B4:C9:9F:94:D0:C8:FB:14:80:EF:03:A8:67:4D
            X509v3 Authority Key Identifier:
                keyid:BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ea:89:8c:e2:55:d0:ab:58:3d:de:4d:2b:09:c7:fc:35:19:
         c0:57:7c:b9:f9:1e:5b:70:29:68:53:b7:1c:9a:18:d8:ff:24:
         77:2d:8c:92:62:10:00:b3:d9:0b:24:d4:7f:3b:7f:f3:4a:67:
         f4:f8:5a:7d:7e:3d:26:35:7b:26:d5:43:35:84:15:cc:3f:76:
         66:2d:19:1e:b1:13:3a:70:87:47:c9:bd:46:a0:d6:1f:e2:80:
         14:0a:eb:ca:a5:df:af:c2:d0:92:74:a9:08:ac:4c:24:90:c7:
         cb:3e:a8:4d:4e:be:cf:2f:b2:39:1d:71:72:c6:76:3d:4e:68:
         35:ec:66:2d:85:69:7f:f7:35:73:b5:0d:10:d0:6f:89:65:bd:
         4e:82:68:c6:f0:18:25:a2:f6:9f:56:a4:d3:9c:88:f4:da:4e:
         4d:8b:95:c7:6e:62:1e:97:f1:82:ef:06:cf:9b:a4:f0:37:1e:
         8e:ad:8a:09:d7:79:c9:39:bc:92:81:92:c7:36:7a:5d:a2:51:
         d7:4e:e9:e3:4c:e0:27:61:2a:e0:22:59:a1:e7:c2:6e:ff:72:
         3c:b5:2a:86:4a:0a:9e:46:a6:fb:12:75:9f:15:4a:ad:d6:da:
         0f:69:aa:97:31:c6:79:16:15:b3:af:b2:68:c6:9e:4e:d2:27:
         5c:f5:94:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhDMTMxMTAvBgNVBAUTKEJFODMxMzQ1OTEwQUM4MkMxOEE4ODMxQzJEODUwQUU1
QjM4RTUwMEYwHhcNMjYwOTA0MTUxMzU1WhcNMjYwOTExMTUxMzU0WjAYMRYwFAYD
VQQDEw02YTlhZTAzMy01YzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5VZt7VIWiAP1YjDWwpVd/UiVK/EUdepQP28zezTCH3d9oTQU3BkQY+km1xt5
NNy7sxfCUyGROWVVPrQbVBrGimop3FDO9/Qg3wier2TRKJCmCk6enp3v7DzF9gt/
cfUaIX6I2Gi7tqXbp+qIR5ZsGaRV5+DOtBStCznAyIgGwexUtQ8hbKDi0hGqQo92
+OrtesRERO9t8c8kIxTu3y5oA3Y4xTmvNdkQ1RdZ8omv0QIJ8cyDluaKoehvEanZ
IFx3M0iX2qMESRDmNAmrZkTNYEA7EZyAHgK1TlOj5KdrHjNEUPtRJ5eN3+QjUoz3
XQW2SWUaewir+KFG6zpibAirGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKkaDPA
1LTJn5TQyPsUgO8DqGdNMB8GA1UdIwQYMBaAFL6DE0WRCsgsGKiDHC2FCuWzjlAP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9GODlDNEY2ODBE
NjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lDd1lxSU1jTFlVSzViT09V
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3ZvTVRSWkVLeUN3WXFJTWNMWVVLNWJPT1VBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEMxMy9GODlDNEY2ODBENjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lD
d1lxSU1jTFlVSzViT09VQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEOqJjOJV0KtYPd5NKwnH/DUZwFd8ufkeW3ApaFO3HJoY2P8kdy2MkmIQALPZ
CyTUfzt/80pn9PhafX49JjV7JtVDNYQVzD92Zi0ZHrETOnCHR8m9RqDWH+KAFArr
yqXfr8LQknSpCKxMJJDHyz6oTU6+zy+yOR1xcsZ2PU5oNexmLYVpf/c1c7UNENBv
iWW9ToJoxvAYJaL2n1ak05yI9NpOTYuVx25iHpfxgu8Gz5uk8Dcejq2KCdd5yTm8
koGSxzZ6XaJR107p40zgJ2Eq4CJZoefCbv9yPLUqhkoKnkam+xJ1nxVKrdbaD2mq
lzHGeRYVs6+yaMaeTtInXPWUMQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:21:26 2026 by rpki-client