Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File:                     SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier:          yMrDsJ+idE6dDLuz1TN30E1QHB4T53fWR6GA7e0ee6M=
Subject key identifier:   4A:09:44:27:AF:CC:DA:3B:B3:FC:80:B9:F1:D9:30:F4:F1:42:46:E8
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer:       /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number:          016A
Signing time:             Thu 03 Sep 2026 05:04:03 +0000
Manifest this update:     Thu 03 Sep 2026 05:04:02 +0000
Manifest next update:     Thu 10 Sep 2026 05:04:02 +0000
Files and hashes:         1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: ibUKS2Cs7mEqHPM3X4kLk4UqyB1ggQmf7huVAEymBUI=)
                          2: 35525B92845611EFB053C341C4F9AE02.roa (hash: ZevCcNNQ+Cl/hbcakseWpBDq3A4TOtczE3OSaShrKcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
        Validity
            Not Before: Sep  3 05:04:02 2026 GMT
            Not After : Sep 10 05:04:02 2026 GMT
        Subject: CN=6a98ffc3-6242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8c:f7:90:a0:03:db:bf:d7:ad:86:33:ad:3e:
                    76:6b:be:3a:4c:68:6a:b3:db:2c:79:be:77:2c:3a:
                    09:61:92:07:f8:6f:91:01:38:ba:be:6e:dc:15:01:
                    7e:7e:12:fa:81:9c:55:22:17:94:76:c3:e1:27:69:
                    77:08:40:90:3f:ce:78:16:b4:41:10:96:c6:ab:63:
                    c5:c8:8b:79:1b:8b:47:02:c6:2a:64:f1:ea:74:45:
                    e0:4b:d0:e1:92:b9:20:04:ad:d6:4b:f7:0f:40:2e:
                    aa:7a:00:d4:90:b8:4f:a2:de:22:cb:c6:7c:22:08:
                    80:48:b1:77:f5:90:db:bd:0d:87:b3:e4:53:4f:34:
                    b9:da:ea:a6:b6:d2:26:42:ec:12:32:3c:90:03:a2:
                    e1:ad:d1:4c:4d:ff:be:7e:25:20:6a:dd:af:cd:4d:
                    8a:f4:f2:78:73:ba:50:b2:a2:a9:3a:df:65:9d:74:
                    a3:3e:79:69:76:4c:13:56:ca:71:0b:78:72:0c:73:
                    a3:60:d4:a5:ce:64:a6:25:44:09:55:e2:ac:e2:41:
                    ea:5f:fa:cc:62:3a:88:89:2d:d1:9c:b7:43:1c:65:
                    1f:6a:79:d7:1c:7b:25:23:01:36:cd:c6:7b:1b:2b:
                    a8:19:5e:72:a2:c8:b0:bd:fc:84:6d:42:ca:6f:52:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:09:44:27:AF:CC:DA:3B:B3:FC:80:B9:F1:D9:30:F4:F1:42:46:E8
            X509v3 Authority Key Identifier:
                keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:1c:37:4a:f5:15:29:e7:e4:91:87:e2:d7:3d:1f:fb:c1:ba:
         8f:79:8e:6a:b6:53:5b:b2:fb:a5:65:0b:ba:6f:10:90:93:87:
         e5:ba:44:89:bb:cc:9c:62:50:c2:65:58:f1:1b:30:77:ab:28:
         51:31:e3:e9:3e:3a:2e:a0:fc:1b:58:b8:a1:ed:f9:bb:76:3a:
         c5:2f:b0:93:70:e9:71:68:3c:f6:90:5d:fc:83:83:7c:56:12:
         15:99:3f:0b:84:77:a1:44:c8:ac:39:b8:2f:76:1a:07:68:32:
         c5:d2:1c:04:a3:4f:da:3f:2f:ee:96:ec:b1:be:05:38:d7:60:
         9b:fc:c6:cc:ee:62:4e:73:8a:6c:f4:56:a7:ca:69:af:19:92:
         16:3e:4c:ba:07:71:09:0a:3c:ec:31:58:42:cd:73:3f:7e:3c:
         42:24:53:91:d5:47:71:ff:e4:65:3c:7f:3b:57:89:95:bf:13:
         d5:48:8e:6d:f3:3b:ce:1b:6d:d9:f6:97:20:a9:11:ac:6c:4e:
         35:c3:9e:9b:98:85:7f:30:dc:ef:0d:4f:5b:e7:64:c0:69:71:
         9b:8a:8e:67:3d:98:d2:3d:99:ef:66:f2:af:fd:c1:bc:36:a6:
         80:4c:4d:7b:c1:a4:58:0f:7b:81:ff:c4:69:db:12:a8:e6:1c:
         0c:de:4e:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM0RkYxMTAvBgNVBAUTKDQ5NDc1QjU5NzVGMTk3OTg5NUEzQzZFNDQxODNFNEJD
QTJFODM0NkYwHhcNMjYwOTAzMDUwNDAyWhcNMjYwOTEwMDUwNDAyWjAYMRYwFAYD
VQQDEw02YTk4ZmZjMy02MjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Yz3kKAD27/XrYYzrT52a746TGhqs9sseb53LDoJYZIH+G+RATi6vm7cFQF+
fhL6gZxVIheUdsPhJ2l3CECQP854FrRBEJbGq2PFyIt5G4tHAsYqZPHqdEXgS9Dh
krkgBK3WS/cPQC6qegDUkLhPot4iy8Z8IgiASLF39ZDbvQ2Hs+RTTzS52uqmttIm
QuwSMjyQA6LhrdFMTf++fiUgat2vzU2K9PJ4c7pQsqKpOt9lnXSjPnlpdkwTVspx
C3hyDHOjYNSlzmSmJUQJVeKs4kHqX/rMYjqIiS3RnLdDHGUfannXHHslIwE2zcZ7
GyuoGV5yosiwvfyEbULKb1IT8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoJRCev
zNo7s/yAufHZMPTxQkboMB8GA1UdIwQYMBaAFElHW1l18ZeYlaPG5EGD5Lyi6DRv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzRGRi85QzU2QkU0Mjg0
NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1aVZvOGJrUVlQa3ZLTG9O
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05HOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzRGRi85QzU2QkU0Mjg0NTUxMUVGQjc2RDI3NDBDNEY5QUUwMi9TVWRiV1hYeGw1
aVZvOGJrUVlQa3ZLTG9ORzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdBw3SvUVKefkkYfi1z0f+8G6j3mOarZTW7L7pWULum8QkJOH5bpEibvMnGJQ
wmVY8Rswd6soUTHj6T46LqD8G1i4oe35u3Y6xS+wk3DpcWg89pBd/IODfFYSFZk/
C4R3oUTIrDm4L3YaB2gyxdIcBKNP2j8v7pbssb4FONdgm/zGzO5iTnOKbPRWp8pp
rxmSFj5MugdxCQo87DFYQs1zP348QiRTkdVHcf/kZTx/O1eJlb8T1UiObfM7zhtt
2faXIKkRrGxONcOem5iFfzDc7w1PW+dkwGlxm4qOZz2Y0j2Z72byr/3BvDamgExN
e8GkWA97gf/EadsSqOYcDN5OAw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:18:40 2026 by rpki-client