Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
File:                     8eD9e9rxcZiQ9rJJs7xBghS6iss.mft (raw, json)
Hash identifier:          XC+Nq9EbuDnWENXD8QVuxkLfYN7Ucpio9zA3KdOwe30=
Subject key identifier:   A3:46:1E:43:11:DA:11:E8:B0:8F:C8:F3:32:82:9F:43:B1:EB:BF:70
Authority key identifier: F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB
Certificate issuer:       /CN=A91C9706/serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
Manifest number:          67
Signing time:             Thu 03 Sep 2026 08:17:33 +0000
Manifest this update:     Thu 03 Sep 2026 08:17:32 +0000
Manifest next update:     Thu 10 Sep 2026 08:17:32 +0000
Files and hashes:         1: 8eD9e9rxcZiQ9rJJs7xBghS6iss.crl (hash: xGd33wEmhtdJnPhphD9vleTlFy5roG22TJfY+yfa7TM=)
                          2: B7B7EE46118411F1951E019C333D8C67.roa (hash: nTrTUgHl4VUdhScRvQ7M38Aw7fBG/zsPSb6R6Q8BgHU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl
                          rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9706, serialNumber=F1E0FD7BDAF1719890F6B249B3BC418214BA8ACB
        Validity
            Not Before: Sep  3 08:17:32 2026 GMT
            Not After : Sep 10 08:17:32 2026 GMT
        Subject: CN=6a992d1d-c766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:b3:95:d3:45:80:58:27:a0:ae:0e:eb:e5:
                    06:90:f1:03:32:c7:b4:b5:15:3f:64:5b:53:3f:52:
                    4c:9c:b3:ec:51:99:71:89:38:58:09:45:9e:98:f3:
                    56:f0:16:79:87:2f:1e:fe:55:1b:46:16:a3:0b:d5:
                    b6:1a:9d:e5:06:a9:e8:74:c7:a6:cf:59:15:02:35:
                    30:82:0e:e8:ea:3d:53:32:b4:31:d7:f7:27:81:24:
                    db:de:fd:eb:a4:75:ab:de:df:f4:16:9b:d7:86:9b:
                    03:16:d1:ba:02:76:39:7e:76:7c:9c:51:bf:f5:3f:
                    79:2c:93:c9:68:10:d4:60:25:4e:90:da:8a:64:70:
                    34:21:1c:e6:29:df:de:39:23:ac:96:23:b9:a5:35:
                    4c:60:c7:9d:d8:6e:c2:be:c1:20:2d:32:f9:50:f6:
                    8b:58:a7:1f:68:92:c6:7f:81:77:d4:0c:b9:81:59:
                    d3:0f:15:83:aa:de:b8:ae:cc:d7:7b:2a:4c:f5:b1:
                    29:06:25:c4:11:ba:51:98:60:ca:3c:b6:4f:fe:57:
                    e7:ee:f3:b8:a3:99:93:4c:4a:cf:74:89:28:0a:48:
                    96:54:91:a1:79:8a:80:8a:48:60:b3:96:3b:e2:3c:
                    3a:cd:0a:54:48:6c:54:53:96:cd:75:0d:b2:e7:af:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:1E:43:11:DA:11:E8:B0:8F:C8:F3:32:82:9F:43:B1:EB:BF:70
            X509v3 Authority Key Identifier:
                keyid:F1:E0:FD:7B:DA:F1:71:98:90:F6:B2:49:B3:BC:41:82:14:BA:8A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8eD9e9rxcZiQ9rJJs7xBghS6iss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/F888443A114711F18BB454AF223D8C67/8eD9e9rxcZiQ9rJJs7xBghS6iss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a8:a9:76:00:6e:02:af:4a:d5:77:c7:36:32:37:b6:1e:3a:
         0f:2e:33:6e:1e:5a:65:0e:72:e7:5c:e4:69:ad:7b:c3:9e:1b:
         8e:87:a6:f3:93:1f:27:6f:67:07:4c:87:1c:fc:8f:98:cc:5c:
         79:f1:53:15:f7:6b:9f:be:00:3f:c8:f3:2d:79:b3:a8:9a:bd:
         55:6a:d3:68:c8:6c:66:5e:22:33:89:b7:6d:3d:30:a0:c9:78:
         eb:93:85:f9:c7:c7:15:85:62:3f:8d:5f:ea:e7:24:a9:71:50:
         da:59:68:2b:5a:3f:71:5d:4b:dd:05:d2:90:44:13:18:07:62:
         24:6e:cc:0a:13:b5:9c:5a:5e:fb:f9:e8:65:e8:9f:0c:3b:bb:
         85:59:6f:91:d4:ef:69:13:5c:2b:b8:a1:1b:d2:36:e8:aa:6a:
         83:e3:a2:71:2e:c6:6a:be:41:b9:6f:5c:bc:3c:62:c8:87:57:
         75:31:45:1e:b6:cf:80:ec:65:fe:34:cb:61:64:57:1c:6d:d9:
         e8:10:5e:ba:1c:dc:c9:9a:fb:c4:e8:9b:eb:a6:53:44:0d:32:
         17:1c:0e:d4:8b:4a:24:09:e2:0a:66:b1:61:8a:76:10:72:ac:
         bf:ff:66:23:d9:66:03:13:e1:03:68:95:94:45:66:6d:11:03:
         ff:40:31:ce
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OTcwNjExMC8GA1UEBRMoRjFFMEZEN0JEQUYxNzE5ODkwRjZCMjQ5QjNCQzQxODIx
NEJBOEFDQjAeFw0yNjA5MDMwODE3MzJaFw0yNjA5MTAwODE3MzJaMBgxFjAUBgNV
BAMTDTZhOTkyZDFkLWM3NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCub7OV00WAWCegrg7r5QaQ8QMyx7S1FT9kW1M/Ukycs+xRmXGJOFgJRZ6Y81bw
FnmHLx7+VRtGFqML1bYaneUGqeh0x6bPWRUCNTCCDujqPVMytDHX9yeBJNve/euk
dave3/QWm9eGmwMW0boCdjl+dnycUb/1P3ksk8loENRgJU6Q2opkcDQhHOYp3945
I6yWI7mlNUxgx53YbsK+wSAtMvlQ9otYpx9oksZ/gXfUDLmBWdMPFYOq3riuzNd7
Kkz1sSkGJcQRulGYYMo8tk/+V+fu87ijmZNMSs90iSgKSJZUkaF5ioCKSGCzljvi
PDrNClRIbFRTls11DbLnr/DVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUo0YeQxHa
Eeiwj8jzMoKfQ7Hrv3AwHwYDVR0jBBgwFoAU8eD9e9rxcZiQ9rJJs7xBghS6issw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5NzA2L0Y4ODg0NDNBMTE0
NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1ppUTlySkpzN3hCZ2hTNmlz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvOGVEOWU5cnhjWmlROXJKSnM3eEJnaFM2aXNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
NzA2L0Y4ODg0NDNBMTE0NzExRjE4QkI0NTRBRjIyM0Q4QzY3LzhlRDllOXJ4Y1pp
UTlySkpzN3hCZ2hTNmlzcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAWqKl2AG4Cr0rVd8c2Mje2HjoPLjNuHlplDnLnXORprXvDnhuOh6bzkx8nb2cH
TIcc/I+YzFx58VMV92ufvgA/yPMtebOomr1VatNoyGxmXiIzibdtPTCgyXjrk4X5
x8cVhWI/jV/q5ySpcVDaWWgrWj9xXUvdBdKQRBMYB2IkbswKE7WcWl77+ehl6J8M
O7uFWW+R1O9pE1wruKEb0jboqmqD46JxLsZqvkG5b1y8PGLIh1d1MUUets+A7GX+
NMthZFccbdnoEF66HNzJmvvE6JvrplNEDTIXHA7Ui0okCeIKZrFhinYQcqy//2Yj
2WYDE+EDaJWURWZtEQP/QDHO
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:07:16 2026 by rpki-client