Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
File:                     1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json)
Hash identifier:          eKjnh2Gsjwp12S5zRKEYlTueQ0CX31jPFwAcGAyltE0=
Subject key identifier:   20:CE:F6:7A:12:AD:CB:E2:BB:7A:C6:F3:6B:85:82:31:58:3D:D8:13
Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2
Certificate issuer:       /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
Manifest number:          01A3
Signing time:             Sat 03 Oct 2026 04:53:51 +0000
Manifest this update:     Sat 03 Oct 2026 04:53:50 +0000
Manifest next update:     Sat 10 Oct 2026 04:53:50 +0000
Files and hashes:         1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: jlKJ05o/VlT3aT3Gf92PnhXrYmMt1jw6p6PwOuOlBaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2
        Validity
            Not Before: Oct  3 04:53:50 2026 GMT
            Not After : Oct 10 04:53:50 2026 GMT
        Subject: CN=6ac08a5f-e5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:4c:f8:9f:0d:7f:1b:8d:a9:17:42:41:84:
                    bb:54:f5:99:4b:75:6c:33:19:8b:4b:01:d0:4e:b1:
                    f6:f2:7c:e3:c4:a1:36:0f:f9:42:84:34:00:54:45:
                    7b:93:af:51:60:97:aa:a1:c5:b3:21:fd:ca:98:34:
                    b3:21:46:26:11:42:29:ed:8c:fc:cd:d1:27:e3:48:
                    61:58:67:90:fc:51:4b:31:58:d1:f5:9a:cd:28:7e:
                    0c:b6:18:e6:1e:b3:fc:74:2b:5e:7d:12:ff:4e:29:
                    0e:a4:46:c5:49:f1:0e:c7:8b:b9:0d:66:be:c4:c0:
                    af:eb:ff:71:a1:4d:3b:5e:c9:9e:ca:cf:34:1f:e3:
                    57:c4:6d:da:72:b6:11:fc:a8:8d:18:1c:7e:62:24:
                    b3:4f:9d:43:04:ea:ee:20:4a:c4:35:5c:94:cb:a0:
                    46:95:d6:54:34:18:14:9d:12:12:9d:22:8d:54:1a:
                    80:11:15:31:de:dd:aa:f6:ce:80:88:07:1a:e6:f2:
                    50:65:ea:18:08:38:0c:00:c6:09:43:22:ac:0d:e7:
                    1c:e4:1e:3c:2d:f2:6b:1c:6d:83:7c:ed:d9:56:7d:
                    c3:22:80:2f:ee:de:1c:de:ae:f8:9f:2e:ae:13:fc:
                    9d:02:97:14:58:2f:96:d7:32:00:fb:5d:5d:9b:dd:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CE:F6:7A:12:AD:CB:E2:BB:7A:C6:F3:6B:85:82:31:58:3D:D8:13
            X509v3 Authority Key Identifier:
                keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fd:8d:ac:47:52:2f:e9:9e:37:3c:eb:1c:e3:db:25:a2:3e:
         98:c9:5d:6e:81:bc:f8:f0:56:71:d7:74:ab:88:d3:91:5b:82:
         51:1a:3f:99:82:ec:15:0e:8f:4a:e6:92:4b:94:ed:da:1c:26:
         6c:d5:a2:ca:6e:5c:52:3a:64:35:a7:9d:5d:26:a8:db:62:dd:
         21:e8:5e:24:2f:41:d0:39:76:da:b3:70:3e:29:82:ff:f6:94:
         5a:53:a6:4c:df:5a:ff:b9:7a:89:f0:8d:b6:c3:af:81:51:99:
         54:11:aa:5b:2f:49:57:95:61:fb:db:74:f9:04:86:d0:6c:50:
         de:65:98:57:0f:43:59:20:f3:40:76:14:32:fe:5e:0b:35:e3:
         4f:af:ab:b1:3f:a0:b3:a6:c9:46:f4:85:01:d2:a7:08:0a:79:
         5f:77:97:28:c2:36:d5:7a:db:5a:16:f1:b1:8e:a5:c7:d2:81:
         a0:4a:72:96:32:3f:30:ac:71:20:8a:1c:c9:c7:16:ca:f1:66:
         8a:82:1e:dd:8e:72:3f:db:26:ab:a2:d4:af:cf:b9:40:3f:32:
         9c:b9:39:81:c7:4a:a6:cb:da:75:f8:3a:77:94:c4:92:40:3f:
         86:42:c9:cd:ca:25:60:80:52:a7:26:06:8b:98:7b:99:12:e1:
         23:78:89:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI2MjkxMTAvBgNVBAUTKEQ2NjExQTM0MkUwNUU2RENEQzE5MjQzQkQ1MkY4OEQw
MkIwNzg3RDIwHhcNMjYxMDAzMDQ1MzUwWhcNMjYxMDEwMDQ1MzUwWjAYMRYwFAYD
VQQDEw02YWMwOGE1Zi1lNWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2j9M+J8NfxuNqRdCQYS7VPWZS3VsMxmLSwHQTrH28nzjxKE2D/lChDQAVEV7
k69RYJeqocWzIf3KmDSzIUYmEUIp7Yz8zdEn40hhWGeQ/FFLMVjR9ZrNKH4Mthjm
HrP8dCtefRL/TikOpEbFSfEOx4u5DWa+xMCv6/9xoU07Xsmeys80H+NXxG3acrYR
/KiNGBx+YiSzT51DBOruIErENVyUy6BGldZUNBgUnRISnSKNVBqAERUx3t2q9s6A
iAca5vJQZeoYCDgMAMYJQyKsDecc5B48LfJrHG2DfO3ZVn3DIoAv7t4c3q74ny6u
E/ydApcUWC+W1zIA+11dm91KSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDO9noS
rcviu3rG82uFgjFYPdgTMB8GA1UdIwQYMBaAFNZhGjQuBebc3BkkO9UviNArB4fS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FQUZCQjU1MDQ1
QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0emNHU1E3MVMtSTBDc0ho
OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjYyOS9FQUZCQjU1MDQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0
emNHU1E3MVMtSTBDc0hoOUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp/2NrEdSL+meNzzrHOPbJaI+mMldboG8+PBWcdd0q4jTkVuCURo/mYLsFQ6P
SuaSS5Tt2hwmbNWiym5cUjpkNaedXSao22LdIeheJC9B0Dl22rNwPimC//aUWlOm
TN9a/7l6ifCNtsOvgVGZVBGqWy9JV5Vh+9t0+QSG0GxQ3mWYVw9DWSDzQHYUMv5e
CzXjT6+rsT+gs6bJRvSFAdKnCAp5X3eXKMI21XrbWhbxsY6lx9KBoEpyljI/MKxx
IIocyccWyvFmioIe3Y5yP9smq6LUr8+5QD8ynLk5gcdKpsvadfg6d5TEkkA/hkLJ
zcolYIBSpyYGi5h7mRLhI3iJ6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:49 2026 by rpki-client