Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
File:                     zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json)
Hash identifier:          PgLMsjnndBGNI1BI/raHX2oAmrXXOWyxtM9tvvL6zmg=
Subject key identifier:   D3:D8:37:26:19:22:B2:D8:A4:A1:6F:0E:EB:D2:1B:0B:29:C0:96:5C
Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF
Certificate issuer:       /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
Certificate serial:       0F3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
Manifest number:          0F29
Signing time:             Tue 18 Aug 2026 17:47:59 +0000
Manifest this update:     Tue 18 Aug 2026 17:47:58 +0000
Manifest next update:     Tue 25 Aug 2026 17:47:58 +0000
Files and hashes:         1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: gGJQ8dSmt5pAo9DSyz0nywUYrgtvrMZpH+WWWj04Izc=)
                          2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: WSppEKr3uUGfSP4JpZ6XY6kJsR4i7zyDZgxCkaSBcy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl
                          rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3900 (0xf3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF
        Validity
            Not Before: Aug 18 17:47:58 2026 GMT
            Not After : Aug 25 17:47:58 2026 GMT
        Subject: CN=6a849acf-195d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:3d:55:31:d3:2a:fa:41:43:8f:73:1e:e4:
                    4f:6b:ad:6a:4b:02:18:7d:00:6c:4f:3d:fb:40:3a:
                    38:8e:e0:c5:a5:b7:f6:b7:ef:ee:55:c7:a8:ba:f4:
                    40:4b:1c:cb:0a:42:56:c3:fc:d0:b8:e3:ba:c5:99:
                    53:4e:e1:4b:4e:12:43:95:d0:c3:3c:95:d0:bc:37:
                    fe:5d:6f:81:6e:cd:02:77:6f:58:92:6e:f7:2e:a8:
                    d3:ff:f7:17:99:07:f2:55:00:21:37:28:89:d9:e0:
                    e8:3a:b9:95:ca:4e:7c:50:85:ea:c5:46:f4:0b:b9:
                    18:27:dd:f2:d7:92:7c:77:c0:0a:ed:59:45:a5:2e:
                    63:3c:cf:32:f0:45:ef:44:fe:5a:f7:f7:29:dc:23:
                    2d:4f:e1:41:e5:23:f5:50:d4:15:7a:73:36:7f:54:
                    47:f7:58:42:a0:84:f6:21:79:91:38:cb:7a:21:81:
                    34:45:8a:c8:d1:40:66:61:3d:fb:99:d4:bb:24:64:
                    24:d0:6b:2e:cf:f1:80:98:35:36:af:c8:48:69:88:
                    c1:45:06:77:74:83:8b:e5:e3:5d:b7:e7:ab:c9:04:
                    dd:7e:b6:bc:39:f5:61:31:ad:16:da:47:e0:82:ca:
                    ff:6a:22:0e:54:d5:5f:bc:c9:26:fe:9c:ba:d0:78:
                    b5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D8:37:26:19:22:B2:D8:A4:A1:6F:0E:EB:D2:1B:0B:29:C0:96:5C
            X509v3 Authority Key Identifier:
                keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3b:12:49:c3:a9:7a:be:00:08:87:5c:60:ff:ae:1b:fa:65:
         8f:ff:1b:44:ec:f3:50:d5:b5:37:e7:b7:eb:89:f4:0d:8d:bb:
         17:65:fb:5d:3f:fe:71:c8:bb:a6:b3:1e:0a:40:8d:fc:8f:85:
         c4:ed:a7:8a:dc:8b:62:50:24:0d:3d:f6:1a:57:24:00:d0:22:
         4c:00:69:6f:4a:87:85:e1:ee:63:4d:40:e4:4c:53:77:d0:0c:
         cd:e4:e4:57:5c:17:ce:54:93:42:b7:26:0b:09:92:d9:37:13:
         55:7d:56:6a:63:74:20:1d:22:0a:d9:56:ac:12:a7:ff:d7:25:
         9a:67:d9:ea:ba:53:f4:86:7b:cf:7e:c0:05:48:a1:bb:5a:2b:
         b5:f0:95:f4:16:fd:33:37:99:42:ff:57:73:9d:a4:f7:3d:64:
         00:ed:17:c1:cd:a2:47:d5:0b:b3:b3:ab:39:6f:1a:89:79:9c:
         d4:26:c3:ab:98:5d:0d:51:d0:5b:48:7d:b5:c5:31:8d:84:06:
         4f:27:0d:e7:c3:81:29:26:d6:28:31:e0:a5:5f:3c:62:7e:82:
         22:83:d4:77:1d:07:82:09:8c:c3:3e:1e:a3:82:88:5e:0e:9c:
         6b:c5:69:18:f2:4d:8f:22:90:9b:72:7a:2c:df:49:f2:ef:2a:
         e3:7c:cf:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlGMDgxMTAvBgNVBAUTKENFOENBRDM1NjIxQTkwMTJDNDBCMzYzNzUzN0NBNDBF
M0QwN0U4Q0YwHhcNMjYwODE4MTc0NzU4WhcNMjYwODI1MTc0NzU4WjAYMRYwFAYD
VQQDEw02YTg0OWFjZi0xOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3uE9VTHTKvpBQ49zHuRPa61qSwIYfQBsTz37QDo4juDFpbf2t+/uVceouvRA
SxzLCkJWw/zQuOO6xZlTTuFLThJDldDDPJXQvDf+XW+Bbs0Cd29Ykm73LqjT//cX
mQfyVQAhNyiJ2eDoOrmVyk58UIXqxUb0C7kYJ93y15J8d8AK7VlFpS5jPM8y8EXv
RP5a9/cp3CMtT+FB5SP1UNQVenM2f1RH91hCoIT2IXmROMt6IYE0RYrI0UBmYT37
mdS7JGQk0Gsuz/GAmDU2r8hIaYjBRQZ3dIOL5eNdt+eryQTdfra8OfVhMa0W2kfg
gsr/aiIOVNVfvMkm/py60Hi1jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPYNyYZ
IrLYpKFvDuvSGwspwJZcMB8GA1UdIwQYMBaAFM6MrTViGpASxAs2N1N8pA49B+jP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUYwOC8zMDkwRDkxNEEx
NEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtCTEVDelkzVTN5a0RqMEg2
TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pveXROV0lha0JMRUN6WTNVM3lrRGowSDZNOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUYwOC8zMDkwRDkxNEExNEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtC
TEVDelkzVTN5a0RqMEg2TTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVTsSScOper4ACIdcYP+uG/plj/8bROzzUNW1N+e364n0DY27F2X7XT/+cci7
prMeCkCN/I+FxO2nityLYlAkDT32GlckANAiTABpb0qHheHuY01A5ExTd9AMzeTk
V1wXzlSTQrcmCwmS2TcTVX1WamN0IB0iCtlWrBKn/9clmmfZ6rpT9IZ7z37ABUih
u1ortfCV9Bb9MzeZQv9Xc52k9z1kAO0Xwc2iR9ULs7OrOW8aiXmc1CbDq5hdDVHQ
W0h9tcUxjYQGTycN58OBKSbWKDHgpV88Yn6CIoPUdx0HggmMwz4eo4KIXg6ca8Vp
GPJNjyKQm3J6LN9J8u8q43zPfA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:01 2026 by rpki-client