Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          Ln85qwVfrh1wbkZRR6LkngMsPE66oOl323izwtHc9jU=
Subject key identifier:   88:C8:E3:FF:B8:42:34:BA:1F:B6:68:DA:E8:E1:96:22:23:E4:F5:4A
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       34D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          34C5
Signing time:             Fri 02 Oct 2026 15:22:33 +0000
Manifest this update:     Fri 02 Oct 2026 15:22:33 +0000
Manifest next update:     Fri 09 Oct 2026 15:22:33 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: kxs0y7J/k73nce/TIYk3aeDZG7NS68cvD0qWaJmTLfE=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ej83i8NuEYKasou7W/9D745hYaGsqd2oMKEiRlHzF4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13527 (0x34d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Oct  2 15:22:33 2026 GMT
            Not After : Oct  9 15:22:33 2026 GMT
        Subject: CN=6abfcc39-c28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:89:7a:28:bf:52:78:a4:00:21:52:2f:fa:
                    62:45:59:b3:1f:99:d9:56:a9:fc:c6:72:7d:49:f1:
                    16:db:33:f4:47:f9:3d:75:4f:a2:c1:b5:1d:c1:f6:
                    7e:cc:7b:90:35:23:b5:df:a0:16:1e:b9:02:b9:ad:
                    c4:f2:58:7a:b7:3b:04:02:7f:09:3a:f2:7d:9f:98:
                    45:72:13:b9:be:c3:a5:83:a8:f0:ab:94:1d:be:07:
                    a5:af:1a:bf:8d:cf:50:8a:0b:2a:a7:ad:1e:1c:bc:
                    d5:8c:4c:f0:b7:aa:38:cf:fa:5c:f0:f5:8d:11:a8:
                    5f:c5:a2:27:78:96:59:19:25:1e:a5:17:2e:1a:a1:
                    f8:84:90:cc:0d:20:b6:06:89:bd:fb:2c:98:a9:41:
                    85:2a:06:ad:19:4b:50:5c:bf:34:5f:66:c0:7c:7b:
                    91:42:10:70:b0:6d:c5:ab:74:06:4e:84:b1:a4:b6:
                    fb:e4:c0:25:e2:e0:92:a6:6e:78:36:e4:0d:c8:59:
                    22:36:7b:42:71:35:4d:6c:0a:46:95:de:09:0b:88:
                    1e:13:18:90:58:6a:21:bd:16:9c:57:c4:9f:d2:34:
                    fc:30:84:97:df:4d:e4:20:6c:30:e3:2a:04:bc:ae:
                    76:a0:3b:ab:b6:ab:75:25:e6:c3:97:18:bb:bd:35:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C8:E3:FF:B8:42:34:BA:1F:B6:68:DA:E8:E1:96:22:23:E4:F5:4A
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ff:15:41:eb:23:a6:b6:30:72:c5:e0:34:20:fe:68:c8:ca:
         cd:12:cd:79:7c:b5:ba:02:f6:d4:4e:36:62:dc:3c:01:9d:29:
         92:04:dd:6f:f4:0a:b7:fd:ac:f7:00:e8:b0:27:a8:e2:c6:db:
         8d:32:0d:5e:4c:21:4e:01:f2:b1:a9:37:24:d7:5b:66:65:ab:
         84:78:07:18:3c:36:15:eb:4f:39:95:e9:e7:1f:47:3f:2e:45:
         ea:74:ab:d2:62:82:d7:c2:76:cb:53:02:0c:7f:ad:27:f0:84:
         a9:83:c2:5b:f8:18:2a:cc:cb:3a:73:cc:39:7e:6b:b1:91:ac:
         c5:51:5f:02:33:44:6f:ca:97:d0:42:df:8b:4f:b2:f1:80:1f:
         1f:7f:b1:e3:ac:b9:1c:d1:85:8f:e8:8b:11:09:48:55:95:56:
         d6:9a:e2:61:ee:e0:94:5c:e9:9d:91:db:fa:6d:34:8d:5e:e7:
         ca:f3:7c:d2:9d:23:e6:6f:03:47:4c:2e:57:4b:b5:bc:93:51:
         77:2e:1c:58:a3:b6:83:e1:9c:13:36:68:2c:2a:8e:ee:ad:36:
         ec:fa:39:57:49:95:a0:9d:ae:e9:58:3a:e2:bb:97:0e:3b:e8:
         ab:dd:c2:96:6a:b5:22:44:10:1c:cc:5c:35:a1:65:98:30:e4:
         26:d9:ce:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFRjkxMTAvBgNVBAUTKEQzMkRBMzZFODgyMTgyMkU2QkQzQzgyQ0ZGQTk4NEU3
QTkwOUMzRjYwHhcNMjYxMDAyMTUyMjMzWhcNMjYxMDA5MTUyMjMzWjAYMRYwFAYD
VQQDEw02YWJmY2MzOS1jMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsE2Jeii/UnikACFSL/piRVmzH5nZVqn8xnJ9SfEW2zP0R/k9dU+iwbUdwfZ+
zHuQNSO136AWHrkCua3E8lh6tzsEAn8JOvJ9n5hFchO5vsOlg6jwq5Qdvgelrxq/
jc9Qigsqp60eHLzVjEzwt6o4z/pc8PWNEahfxaIneJZZGSUepRcuGqH4hJDMDSC2
Bom9+yyYqUGFKgatGUtQXL80X2bAfHuRQhBwsG3Fq3QGToSxpLb75MAl4uCSpm54
NuQNyFkiNntCcTVNbApGld4JC4geExiQWGohvRacV8Sf0jT8MISX303kIGww4yoE
vK52oDurtqt1JebDlxi7vTUZYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjI4/+4
QjS6H7Zo2ujhliIj5PVKMB8GA1UdIwQYMBaAFNMto26IIYIua9PILP+phOepCcP2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEVGOS80NEE4MDVFRTQ0
QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdpNXIwOGdzXzZtRTU2a0p3
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB5Mmpib2doZ2k1cjA4Z3NfNm1FNTZrSndfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEVGOS80NEE4MDVFRTQ0QzkxMUUyQjM1QUM0ODQyOTc5QkIyMC8weTJqYm9naGdp
NXIwOGdzXzZtRTU2a0p3X1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATP8VQesjprYwcsXgNCD+aMjKzRLNeXy1ugL21E42Ytw8AZ0pkgTdb/QKt/2s
9wDosCeo4sbbjTINXkwhTgHysak3JNdbZmWrhHgHGDw2FetPOZXp5x9HPy5F6nSr
0mKC18J2y1MCDH+tJ/CEqYPCW/gYKszLOnPMOX5rsZGsxVFfAjNEb8qX0ELfi0+y
8YAfH3+x46y5HNGFj+iLEQlIVZVW1priYe7glFzpnZHb+m00jV7nyvN80p0j5m8D
R0wuV0u1vJNRdy4cWKO2g+GcEzZoLCqO7q027Po5V0mVoJ2u6Vg64ruXDjvoq93C
lmq1IkQQHMxcNaFlmDDkJtnOOg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 12:46:59 2026 by rpki-client