Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File:                     4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier:          GFkhqZDeZjDiURQnBa3DH1wRLMwhK3H4JUBpR8UeFzg=
Subject key identifier:   3F:A5:F1:87:94:9A:C5:34:03:53:35:65:A3:25:B7:9F:1A:7D:AD:BB
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer:       /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial:       02D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number:          02CB
Signing time:             Fri 09 Oct 2026 01:42:40 +0000
Manifest this update:     Fri 09 Oct 2026 01:42:40 +0000
Manifest next update:     Fri 16 Oct 2026 01:42:40 +0000
Files and hashes:         1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: Lxvex3MyY4aww8G97AYUK2ZR8fKujlVjJHzrehvdVmE=)
                          2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: j7B/95L7AiZyWXgQXJSIhJL56zEjU/YoNoxOzPBnzyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 01:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723 (0x2d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
        Validity
            Not Before: Oct  9 01:42:40 2026 GMT
            Not After : Oct 16 01:42:40 2026 GMT
        Subject: CN=6ac84690-ffa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:f4:1c:3a:ca:b2:53:4b:12:40:77:ac:cc:
                    85:c4:5d:45:61:b4:45:71:99:42:4d:18:ff:c3:44:
                    39:cf:c6:13:3f:c7:9f:1c:af:91:ee:de:d8:93:dd:
                    1f:2c:aa:4c:aa:53:b2:36:fb:3b:5a:a6:3d:38:32:
                    7d:2d:eb:19:00:f3:a3:7a:86:d0:b7:e6:4f:91:03:
                    4b:db:4a:b3:53:83:e8:89:b1:17:af:e6:84:f9:7a:
                    90:13:94:19:8f:b8:39:7e:d6:7b:ea:ee:bd:4e:73:
                    59:43:61:c2:85:77:9a:32:48:43:b0:02:7c:66:f5:
                    40:a3:53:11:85:ca:df:6b:76:a1:fa:bd:3a:65:2c:
                    fa:f5:ec:31:12:02:67:a3:21:ae:75:3e:19:4f:1d:
                    4b:c6:43:9a:36:cd:9b:9e:27:ec:09:d8:97:44:2b:
                    0e:fe:ad:06:4a:ea:2f:b9:4c:30:fd:51:4f:f3:36:
                    23:20:20:e9:f1:28:14:f0:f8:9d:ce:31:ed:3c:06:
                    60:cd:92:0b:76:2e:eb:f5:18:66:c2:f5:66:ae:50:
                    9a:db:70:1f:46:aa:dd:e5:60:fd:2e:15:88:b6:12:
                    ca:45:53:77:b3:8f:c5:8a:3d:83:79:9d:b9:75:28:
                    0a:da:4a:50:7a:e7:57:6a:4f:97:f2:ac:2d:f7:c3:
                    a2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A5:F1:87:94:9A:C5:34:03:53:35:65:A3:25:B7:9F:1A:7D:AD:BB
            X509v3 Authority Key Identifier:
                keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:33:2e:19:00:b9:83:92:00:d1:a4:28:19:19:6d:d7:d2:01:
         4c:34:1e:b0:90:6e:53:64:38:46:3d:6b:16:60:ac:be:c2:2a:
         19:d9:7b:f3:6e:56:31:4f:aa:87:ce:04:e7:c7:a9:7c:c5:39:
         a0:5a:c2:fe:bd:a5:f1:37:94:04:74:1d:d8:b6:d0:62:f0:8e:
         17:7d:bd:07:fa:39:66:16:ca:ea:d6:83:6c:97:ca:68:c6:d6:
         1d:53:40:26:75:8d:42:18:80:5b:57:61:71:f7:38:b4:cf:69:
         8c:ca:61:2c:b1:be:d7:2a:20:ee:d4:c8:e8:5e:4a:79:84:7f:
         71:65:51:3e:b9:b8:c2:e5:db:af:9a:ed:15:0a:a2:9c:5e:93:
         00:cd:b2:5a:c6:fe:63:4e:4c:33:63:da:ee:b1:44:66:d2:f9:
         cb:3b:00:45:a9:4e:2c:b2:1e:38:a7:4c:33:2c:54:4b:3a:a4:
         33:62:9b:80:11:9e:dd:b9:ff:d8:7c:0a:b0:db:d8:2e:64:4d:
         d6:83:80:12:0e:e1:ad:d5:41:0d:7b:5f:35:43:0c:13:20:9a:
         bb:db:c6:2d:e7:37:4f:8d:77:b8:62:ad:04:52:86:a6:8e:de:
         5e:ff:55:74:54:c6:46:c0:a3:f7:75:5a:5e:08:61:47:fa:91:
         87:b5:47:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdGNkExMTAvBgNVBAUTKEUzM0RCNzkzQkJFRkU0NkNCQ0Y3NURCMzRFNzA5NDI3
QTcyRUYwRjMwHhcNMjYxMDA5MDE0MjQwWhcNMjYxMDE2MDE0MjQwWjAYMRYwFAYD
VQQDEw02YWM4NDY5MC1mZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHn0HDrKslNLEkB3rMyFxF1FYbRFcZlCTRj/w0Q5z8YTP8efHK+R7t7Yk90f
LKpMqlOyNvs7WqY9ODJ9LesZAPOjeobQt+ZPkQNL20qzU4PoibEXr+aE+XqQE5QZ
j7g5ftZ76u69TnNZQ2HChXeaMkhDsAJ8ZvVAo1MRhcrfa3ah+r06ZSz69ewxEgJn
oyGudT4ZTx1LxkOaNs2bnifsCdiXRCsO/q0GSuovuUww/VFP8zYjICDp8SgU8Pid
zjHtPAZgzZILdi7r9RhmwvVmrlCa23AfRqrd5WD9LhWIthLKRVN3s4/Fij2DeZ25
dSgK2kpQeudXak+X8qwt98Oi1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+l8YeU
msU0A1M1ZaMlt58afa27MB8GA1UdIwQYMBaAFOM9t5O77+RsvPdds05wlCenLvDz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0Y2QS8wNjc5MjUwMDdG
NDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVHeTg5MTJ6VG5DVUo2Y3U4
UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzR6MjNrN3Z2NUd5ODkxMnpUbkNVSjZjdThQTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0Y2QS8wNjc5MjUwMDdGNDIxMUVEQjRFNzhDODZDNEY5QUUwMi80ejIzazd2djVH
eTg5MTJ6VG5DVUo2Y3U4UE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAzjMuGQC5g5IA0aQoGRlt19IBTDQesJBuU2Q4Rj1rFmCsvsIqGdl7825WMU+q
h84E58epfMU5oFrC/r2l8TeUBHQd2LbQYvCOF329B/o5ZhbK6taDbJfKaMbWHVNA
JnWNQhiAW1dhcfc4tM9pjMphLLG+1yog7tTI6F5KeYR/cWVRPrm4wuXbr5rtFQqi
nF6TAM2yWsb+Y05MM2Pa7rFEZtL5yzsARalOLLIeOKdMMyxUSzqkM2KbgBGe3bn/
2HwKsNvYLmRN1oOAEg7hrdVBDXtfNUMMEyCau9vGLec3T413uGKtBFKGpo7eXv9V
dFTGRsCj93VaXghhR/qRh7VHnQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:21:24 2026 by rpki-client