Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
File:                     lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json)
Hash identifier:          +Bu2slCQU8f/J1x9S+uonEBZSmAQc3j/sA9iQ+DFuns=
Subject key identifier:   F8:E8:76:5D:BA:F2:5E:91:3A:A3:82:2C:AF:B7:FC:92:D2:D9:B6:DA
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Certificate issuer:       /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial:       053E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
Manifest number:          0510
Signing time:             Fri 04 Sep 2026 23:27:13 +0000
Manifest this update:     Fri 04 Sep 2026 23:27:13 +0000
Manifest next update:     Fri 11 Sep 2026 23:27:13 +0000
Files and hashes:         1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: DnbTbpWhXW1JdLMaUyh1LUusyZuEhVs+XgETO3YPwdo=)
                          2: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: Hy/M1SuzjjtwQCWZGLtJSooNfC63JGvrwCvSA8jmPig=)
                          3: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: aoDfXs/+Zo3bM4TZQqdH42AnP+MxbUZEFcCO4REaPpo=)
                          4: AFF169A0F34111F0B7AB4BD35C6F56BC.roa (hash: pFySgYfQ+xZ6rwACdfd3mWWdJ/XmIO+H3i8NnPDCsAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 23:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
        Validity
            Not Before: Sep  4 23:27:13 2026 GMT
            Not After : Sep 11 23:27:13 2026 GMT
        Subject: CN=6a9b53d1-0b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:39:0b:c5:c9:86:89:4e:30:b4:45:aa:fb:
                    d6:e2:c5:b5:4e:47:66:80:bc:9d:b3:f0:4b:7b:36:
                    1a:a7:2b:61:8d:c1:29:88:e6:35:f9:3e:98:d8:83:
                    a5:bb:79:15:4f:f7:26:c3:29:ae:e8:74:a9:ba:5c:
                    02:03:44:dd:aa:fd:38:b6:d1:40:75:3b:43:f3:75:
                    df:0e:37:09:e4:8b:a6:9f:0c:6a:20:a1:50:08:3b:
                    e6:59:05:ea:fd:ee:9b:9e:1f:f8:97:b8:42:48:17:
                    b8:ff:47:53:25:f3:04:73:0f:60:13:ca:5d:d5:bf:
                    ad:35:93:67:7d:c2:98:64:67:0a:5c:e5:6e:de:0c:
                    dc:1b:20:dc:9d:2c:c8:27:2c:74:d6:de:65:61:07:
                    f9:4b:87:23:67:f2:50:da:65:3f:bd:1f:19:68:fb:
                    ad:90:79:d0:d7:d7:2a:46:ed:e1:20:f8:5e:b7:9b:
                    d5:79:3a:67:08:19:1c:50:2c:61:9a:1a:64:cf:56:
                    06:e3:3e:a2:33:ce:fe:b9:1c:83:dd:aa:5c:c9:46:
                    55:e0:96:77:8a:6e:d5:19:5b:1a:43:f2:01:fa:ee:
                    b1:83:e9:c0:71:7c:35:0c:1b:e1:e3:a5:dd:93:3e:
                    16:ff:e4:1e:35:38:e0:6c:a0:a4:92:37:a2:61:e0:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:76:5D:BA:F2:5E:91:3A:A3:82:2C:AF:B7:FC:92:D2:D9:B6:DA
            X509v3 Authority Key Identifier:
                keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e6:f4:87:32:ab:b2:da:af:58:f6:c3:59:b7:ce:1d:39:6e:
         07:b0:ac:e1:93:a6:47:90:11:07:90:16:8f:15:4c:79:50:9f:
         e5:3a:9e:69:2b:8d:9d:b9:37:6f:30:1c:39:93:27:3d:95:04:
         df:a5:75:c6:30:5a:a9:60:7e:0f:8a:b5:a9:38:4a:c2:90:b9:
         77:eb:ab:f3:a6:5a:a9:5c:1d:74:00:73:cf:9d:ad:95:4b:81:
         ff:b7:b5:4b:38:e2:a5:52:56:cc:27:c4:15:a6:3d:e2:e5:90:
         b0:da:60:49:cc:f5:2b:bb:59:0b:8c:b4:ce:7b:8c:09:c7:b5:
         05:13:6c:23:53:09:f6:27:2e:12:4f:d8:42:54:2d:2e:b4:89:
         2b:bb:88:46:5a:4e:37:a6:54:9e:8a:d5:b3:9a:93:88:96:12:
         17:96:6a:ff:27:72:78:cd:4a:6a:37:8c:ba:ed:2d:8a:25:05:
         1d:3c:36:dc:df:b4:71:5a:62:b3:21:9c:71:52:90:22:51:da:
         c8:e9:37:65:a8:fe:7d:4b:81:5b:75:e6:07:f2:95:bb:ab:67:
         28:60:ea:ee:6e:5e:23:7e:7f:7d:43:2b:03:29:39:4a:e6:52:
         c6:86:57:75:0e:e4:4a:81:e6:1d:bd:40:99:2e:84:b1:f8:0d:
         c3:28:5d:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG
NjExOUYzMEMwHhcNMjYwOTA0MjMyNzEzWhcNMjYwOTExMjMyNzEzWjAYMRYwFAYD
VQQDEw02YTliNTNkMS0wYjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJ45C8XJholOMLRFqvvW4sW1TkdmgLyds/BLezYapythjcEpiOY1+T6Y2IOl
u3kVT/cmwymu6HSpulwCA0Tdqv04ttFAdTtD83XfDjcJ5IumnwxqIKFQCDvmWQXq
/e6bnh/4l7hCSBe4/0dTJfMEcw9gE8pd1b+tNZNnfcKYZGcKXOVu3gzcGyDcnSzI
Jyx01t5lYQf5S4cjZ/JQ2mU/vR8ZaPutkHnQ19cqRu3hIPhet5vVeTpnCBkcUCxh
mhpkz1YG4z6iM87+uRyD3apcyUZV4JZ3im7VGVsaQ/IB+u6xg+nAcXw1DBvh46Xd
kz4W/+QeNTjgbKCkkjeiYeAH4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPjodl26
8l6ROqOCLK+3/JLS2bbaMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0
MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD
bkZoVnRNRjBVRnIyRVo4d3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGub0hzKrstqvWPbDWbfOHTluB7Cs4ZOmR5ARB5AWjxVMeVCf5TqeaSuNnbk3
bzAcOZMnPZUE36V1xjBaqWB+D4q1qThKwpC5d+ur86ZaqVwddABzz52tlUuB/7e1
SzjipVJWzCfEFaY94uWQsNpgScz1K7tZC4y0znuMCce1BRNsI1MJ9icuEk/YQlQt
LrSJK7uIRlpON6ZUnorVs5qTiJYSF5Zq/ydyeM1KajeMuu0tiiUFHTw23N+0cVpi
syGccVKQIlHayOk3Zaj+fUuBW3XmB/KVu6tnKGDq7m5eI35/fUMrAyk5SuZSxoZX
dQ7kSoHmHb1AmS6EsfgNwyhdUw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:44:23 2026 by rpki-client