Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
File:                     c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json)
Hash identifier:          FJPXONP5n6tsJOs/PP7v49AnCTbQxK4HvZj9DlOll0c=
Subject key identifier:   2A:19:27:A8:F6:12:1C:74:47:20:8F:93:85:FB:4C:B7:43:43:D4:69
Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60
Certificate issuer:       /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
Manifest number:          027D
Signing time:             Sat 03 Oct 2026 02:29:24 +0000
Manifest this update:     Sat 03 Oct 2026 02:29:24 +0000
Manifest next update:     Sat 10 Oct 2026 02:29:24 +0000
Files and hashes:         1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: gBRGinxdgxOvCxbbCqtoA+2wh7B98aZgvO2Ay/bv/2A=)
                          2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: evrrp35v+kEqYtlZi8zcxreXxzWFEB8bQkw/fkPA/3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl
                          rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360
        Validity
            Not Before: Oct  3 02:29:24 2026 GMT
            Not After : Oct 10 02:29:24 2026 GMT
        Subject: CN=6ac06884-ed90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:12:f1:00:f5:71:e4:73:cc:c3:69:b5:6c:
                    67:ed:c9:8d:f4:40:c7:3f:e4:a6:20:43:e4:0a:e3:
                    bc:7a:49:42:0b:d8:43:56:0a:d8:85:b9:58:05:6f:
                    8b:f9:3a:27:b7:43:9d:29:d9:bb:fc:18:a4:db:e2:
                    92:62:f0:84:d8:b6:b0:bc:84:a6:d7:32:d0:8e:95:
                    f7:a8:f1:81:d4:bb:81:5f:ec:cc:e5:1f:5e:31:ec:
                    84:44:24:7d:34:3d:9a:75:9d:c3:42:1f:ba:5e:0a:
                    5e:3a:68:fc:d8:eb:8e:9f:03:71:af:5e:3a:75:ae:
                    e9:8c:ce:ad:38:6e:dc:1b:dd:36:58:b8:bf:e0:cb:
                    e7:d1:6a:0c:ae:60:66:c7:b6:ae:d1:e8:bd:d3:fd:
                    6a:74:90:5e:26:45:2d:e7:b5:fa:38:31:b5:1f:d1:
                    b5:04:99:02:c6:45:c7:31:54:5d:01:e9:ae:8c:fc:
                    69:e6:d5:10:5c:4b:d2:64:bf:21:68:fe:36:29:c1:
                    18:fb:22:d1:7f:df:ec:0c:d9:99:3d:c6:18:68:f9:
                    a8:37:c7:b9:ae:a1:92:2a:86:5e:6f:91:3c:22:07:
                    4f:7f:e9:83:0c:a1:aa:65:59:93:8e:02:4e:05:9c:
                    aa:55:ba:12:42:f9:3a:a2:8a:58:98:68:59:43:28:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:19:27:A8:F6:12:1C:74:47:20:8F:93:85:FB:4C:B7:43:43:D4:69
            X509v3 Authority Key Identifier:
                keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:55:4a:fd:e0:b5:77:2d:5f:61:72:90:32:ae:af:9e:8f:6e:
         62:3d:9e:be:64:ff:65:e0:c7:63:f8:f0:bf:51:00:98:ff:47:
         81:ed:b8:d6:a4:c2:b8:2a:9e:d8:21:66:86:63:4f:a3:88:8a:
         12:46:c3:9b:e3:f2:36:fe:8b:02:57:3d:ea:0e:72:96:fe:54:
         e6:90:b3:a1:98:cb:2e:c9:87:62:c2:16:bb:eb:5c:11:97:ca:
         f2:5c:d5:48:01:8a:59:34:0a:c8:53:7d:9d:a9:fb:68:c0:1e:
         f0:01:88:d5:2d:9a:bb:43:58:e4:31:50:47:d1:ac:20:e4:09:
         f6:d6:de:af:5b:07:cd:c6:5c:5e:81:58:98:1f:f1:60:27:83:
         de:65:67:ba:f8:2d:05:91:6b:99:68:a0:b6:ac:4e:9a:2b:b3:
         97:b5:a1:ab:0b:98:6d:2b:94:40:87:56:66:7e:db:1d:bf:b6:
         c6:a2:ff:75:f8:8b:2c:92:6c:5b:89:3b:ad:86:d9:17:99:13:
         7a:c4:a4:78:4e:92:44:46:28:d7:f1:d4:78:d1:ab:e4:c2:ba:
         fa:79:13:6c:2b:3a:b0:63:9a:50:98:63:d3:c9:3a:09:d5:03:
         b2:f1:f8:dd:43:6e:94:fb:35:21:64:79:f0:c8:74:6d:31:a2:
         c4:35:c1:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1
MTE0RDAzNjAwHhcNMjYxMDAzMDIyOTI0WhcNMjYxMDEwMDIyOTI0WjAYMRYwFAYD
VQQDEw02YWMwNjg4NC1lZDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMUS8QD1ceRzzMNptWxn7cmN9EDHP+SmIEPkCuO8eklCC9hDVgrYhblYBW+L
+Tont0OdKdm7/Bik2+KSYvCE2LawvISm1zLQjpX3qPGB1LuBX+zM5R9eMeyERCR9
ND2adZ3DQh+6XgpeOmj82OuOnwNxr146da7pjM6tOG7cG902WLi/4Mvn0WoMrmBm
x7au0ei90/1qdJBeJkUt57X6ODG1H9G1BJkCxkXHMVRdAemujPxp5tUQXEvSZL8h
aP42KcEY+yLRf9/sDNmZPcYYaPmoN8e5rqGSKoZeb5E8IgdPf+mDDKGqZVmTjgJO
BZyqVboSQvk6oopYmGhZQygjBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoZJ6j2
Ehx0RyCPk4X7TLdDQ9RpMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE
QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz
R19sMzR4RnZXQjlSRk5BMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsFVK/eC1dy1fYXKQMq6vno9uYj2evmT/ZeDHY/jwv1EAmP9Hge241qTCuCqe
2CFmhmNPo4iKEkbDm+PyNv6LAlc96g5ylv5U5pCzoZjLLsmHYsIWu+tcEZfK8lzV
SAGKWTQKyFN9nan7aMAe8AGI1S2au0NY5DFQR9GsIOQJ9tber1sHzcZcXoFYmB/x
YCeD3mVnuvgtBZFrmWigtqxOmiuzl7WhqwuYbSuUQIdWZn7bHb+2xqL/dfiLLJJs
W4k7rYbZF5kTesSkeE6SREYo1/HUeNGr5MK6+nkTbCs6sGOaUJhj08k6CdUDsvH4
3UNulPs1IWR58Mh0bTGixDXBKA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:38 2026 by rpki-client