Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
File:                     UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft (raw, json)
Hash identifier:          H38QFUkwsn1P1OxFiDAq2RDPlAVbg8Nelh6N/TnCo2w=
Subject key identifier:   D9:CC:3A:51:88:D2:2C:38:90:84:7D:C6:A4:B0:D0:55:DD:D3:F5:7E
Authority key identifier: 51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76
Certificate issuer:       /CN=A91C575E/serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
Manifest number:          CE
Signing time:             Mon 05 Oct 2026 07:09:02 +0000
Manifest this update:     Mon 05 Oct 2026 07:09:01 +0000
Manifest next update:     Mon 12 Oct 2026 07:09:01 +0000
Files and hashes:         1: UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl (hash: ytbBL9T3qayeH6KUkH7zYTthFisOFHx1by9n50kMSD8=)
                          2: 3FD60CEC896B11F0A99C2258C4F9AE02.roa (hash: Znxli92ke42bUcuO4y2MWt6186ap7JgRI1qPxtQiAUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl
                          rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C575E, serialNumber=513ECE73EE9EA325EA442931B0062BD8BF304A76
        Validity
            Not Before: Oct  5 07:09:01 2026 GMT
            Not After : Oct 12 07:09:01 2026 GMT
        Subject: CN=6ac34d0e-3842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:2b:aa:d5:47:ee:3e:1c:6b:ba:76:42:22:
                    6a:74:0d:a3:3c:f1:cf:d7:96:7e:aa:f1:01:d5:54:
                    75:2d:bb:80:f4:9b:78:fc:fd:9e:76:e1:8c:a6:6f:
                    32:a4:c8:3c:d8:bd:51:8e:5b:f7:77:d2:59:34:bd:
                    9b:e5:1c:2e:d6:20:42:85:4c:f6:8e:18:75:ea:b7:
                    b3:88:b0:09:6d:d2:90:bf:d8:59:8e:d0:07:e6:d6:
                    6f:f1:9f:99:43:bb:79:3a:c3:bb:59:23:12:78:d7:
                    04:33:e5:fa:26:56:3c:64:19:0c:af:1f:b8:93:5e:
                    db:ef:e5:1e:61:2d:11:89:96:5d:b6:5a:a4:fe:dd:
                    ea:00:36:19:9d:c5:25:b5:29:22:ee:47:36:67:51:
                    19:2a:1b:c9:20:88:2b:a0:40:15:22:44:d8:af:73:
                    43:25:be:60:27:68:87:2b:e2:5d:36:e2:f3:3e:d9:
                    08:7f:c0:34:83:f8:d6:b1:06:79:8c:28:75:1d:e8:
                    ab:70:cf:2d:99:40:5c:06:e1:d4:60:95:de:f4:13:
                    74:0b:46:08:16:e4:bb:34:11:50:51:2a:da:fa:09:
                    1b:26:50:3d:3d:4a:e6:ac:ea:3c:77:c3:2a:69:f6:
                    cb:fb:af:0f:b7:e6:5c:6f:40:36:d8:80:19:2a:65:
                    5b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CC:3A:51:88:D2:2C:38:90:84:7D:C6:A4:B0:D0:55:DD:D3:F5:7E
            X509v3 Authority Key Identifier:
                keyid:51:3E:CE:73:EE:9E:A3:25:EA:44:29:31:B0:06:2B:D8:BF:30:4A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C575E/E2ACB43A896A11F081E44D57C4F9AE02/UT7Oc-6eoyXqRCkxsAYr2L8wSnY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:80:93:c2:c7:ce:b9:19:f2:2a:a4:85:66:b0:23:4a:74:1f:
         d2:0f:43:95:9b:23:1c:d0:c4:bc:e9:95:46:fd:e0:94:a5:9e:
         67:3f:56:7c:65:71:d2:e8:56:08:d9:c4:fb:a9:c0:9f:8f:b5:
         82:6b:7d:ae:25:b0:99:4b:ec:6a:64:83:48:b3:7c:14:91:6e:
         50:0f:bb:94:8d:ed:39:bb:71:df:bd:11:9c:6c:fc:44:10:b5:
         f2:cd:a3:f5:95:fd:3b:96:eb:a3:45:c6:7c:c6:60:0b:0a:2e:
         be:f0:54:c1:3c:ad:a7:13:89:bf:ea:19:2b:75:d4:a4:3e:63:
         1a:31:a0:16:ee:b7:a9:4e:15:47:5e:cc:4c:1d:88:ff:c9:97:
         b7:98:60:2e:ef:bd:7d:36:04:16:5f:e2:61:fd:14:b5:e9:9b:
         c1:9f:bf:f3:4f:45:23:ee:ea:c0:3a:15:4c:6c:8f:ae:78:ec:
         8b:18:88:87:a3:46:b5:12:4d:2c:52:2f:10:7a:31:57:09:d9:
         0f:96:54:7b:f9:e8:eb:4b:2b:d3:43:7b:4c:1b:a0:98:1a:25:
         c4:07:68:ae:31:3d:74:c1:af:79:6b:b6:c0:9a:13:79:42:bc:
         b2:62:d8:30:f7:18:3e:11:9f:d2:17:97:79:8d:28:fc:87:9b:
         42:20:31:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU3NUUxMTAvBgNVBAUTKDUxM0VDRTczRUU5RUEzMjVFQTQ0MjkzMUIwMDYyQkQ4
QkYzMDRBNzYwHhcNMjYxMDA1MDcwOTAxWhcNMjYxMDEyMDcwOTAxWjAYMRYwFAYD
VQQDEw02YWMzNGQwZS0zODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBorqtVH7j4ca7p2QiJqdA2jPPHP15Z+qvEB1VR1LbuA9Jt4/P2eduGMpm8y
pMg82L1Rjlv3d9JZNL2b5Rwu1iBChUz2jhh16reziLAJbdKQv9hZjtAH5tZv8Z+Z
Q7t5OsO7WSMSeNcEM+X6JlY8ZBkMrx+4k17b7+UeYS0RiZZdtlqk/t3qADYZncUl
tSki7kc2Z1EZKhvJIIgroEAVIkTYr3NDJb5gJ2iHK+JdNuLzPtkIf8A0g/jWsQZ5
jCh1HeircM8tmUBcBuHUYJXe9BN0C0YIFuS7NBFQUSra+gkbJlA9PUrmrOo8d8Mq
afbL+68Pt+Zcb0A22IAZKmVb1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnMOlGI
0iw4kIR9xqSw0FXd0/V+MB8GA1UdIwQYMBaAFFE+znPunqMl6kQpMbAGK9i/MEp2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTc1RS9FMkFDQjQzQTg5
NkExMUYwODFFNDRENTdDNEY5QUUwMi9VVDdPYy02ZW95WHFSQ2t4c0FZcjJMOHdT
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VUN09jLTZlb3lYcVJDa3hzQVlyMkw4d1NuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTc1RS9FMkFDQjQzQTg5NkExMUYwODFFNDRENTdDNEY5QUUwMi9VVDdPYy02ZW95
WHFSQ2t4c0FZcjJMOHdTblkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt4CTwsfOuRnyKqSFZrAjSnQf0g9DlZsjHNDEvOmVRv3glKWeZz9WfGVx0uhW
CNnE+6nAn4+1gmt9riWwmUvsamSDSLN8FJFuUA+7lI3tObtx370RnGz8RBC18s2j
9ZX9O5bro0XGfMZgCwouvvBUwTytpxOJv+oZK3XUpD5jGjGgFu63qU4VR17MTB2I
/8mXt5hgLu+9fTYEFl/iYf0UtembwZ+/809FI+7qwDoVTGyPrnjsixiIh6NGtRJN
LFIvEHoxVwnZD5ZUe/no60sr00N7TBugmBolxAdorjE9dMGveWu2wJoTeUK8smLY
MPcYPhGf0heXeY0o/IebQiAxjw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:16 2026 by rpki-client