Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
File:                     4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json)
Hash identifier:          beVv0hbABvyG218rH+N8uUIpFgTaPOg3zGVfvX8bXkM=
Subject key identifier:   F6:12:43:84:49:0E:25:DF:91:21:53:CA:D7:94:78:D8:1E:D2:44:EC
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Certificate issuer:       /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial:       1A1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
Manifest number:          1A0C
Signing time:             Tue 06 Oct 2026 16:23:10 +0000
Manifest this update:     Tue 06 Oct 2026 16:23:10 +0000
Manifest next update:     Tue 13 Oct 2026 16:23:10 +0000
Files and hashes:         1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: 8mE7WL48oL8+YtI/cbIrCU79IuKXxUR+rFU95y+fflA=)
                          2: 09C0DFCE202011F098619934C4F9AE02.roa (hash: KsiYN2ZlLGkto78MjZYyuPl/ISq78eTWQ/NUay3F0LY=)
                          3: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: 1q0EBkMwCeQp0QnQ95uBC5vuo8p5y3kFFTU1QySkeZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
                          rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6684 (0x1a1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
        Validity
            Not Before: Oct  6 16:23:10 2026 GMT
            Not After : Oct 13 16:23:10 2026 GMT
        Subject: CN=6ac5206e-6f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:f6:49:eb:34:30:15:03:9c:c4:bb:20:75:
                    5a:75:e3:9b:df:62:81:87:90:11:aa:ae:c2:56:25:
                    32:71:e4:be:4d:fa:93:8e:b8:39:3c:d1:c7:3d:f6:
                    c8:da:03:9a:ae:6a:0a:43:5b:85:92:6c:d5:09:32:
                    8e:ad:80:e0:d3:d5:38:f4:ac:ac:94:44:2c:d5:52:
                    b3:ac:c3:be:ae:e6:38:ac:f0:8d:43:be:ef:0f:11:
                    f2:a6:54:76:e6:a4:1c:4e:aa:64:b0:34:67:a5:b0:
                    46:19:77:36:b4:5d:3e:86:e9:55:4f:47:a9:24:2c:
                    18:41:d1:fa:c7:0f:28:16:43:13:57:49:6b:d5:af:
                    b5:08:98:69:08:1b:c8:3c:99:e0:32:5a:17:3c:71:
                    59:26:f8:44:dc:a5:8e:d9:75:81:5c:8a:a5:ae:fa:
                    18:14:31:d6:0e:62:e4:3f:fe:92:8e:e9:c2:32:08:
                    0c:48:f7:ee:8a:7f:c9:f7:fb:cb:98:46:e3:de:6a:
                    3d:aa:69:66:68:b8:56:17:b7:14:89:94:8d:14:8a:
                    a9:c6:b1:ad:47:a1:a9:41:f1:3c:4f:4e:ab:20:1e:
                    13:be:85:d6:b5:04:42:21:72:5a:e7:ca:b2:60:ad:
                    3b:c6:91:ef:51:75:5a:4e:c8:e7:31:e5:74:16:83:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:12:43:84:49:0E:25:DF:91:21:53:CA:D7:94:78:D8:1E:D2:44:EC
            X509v3 Authority Key Identifier:
                keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5b:bb:e9:c8:ef:25:45:91:81:5b:42:f2:a4:0e:53:f8:7e:
         bd:1b:7c:69:98:5a:d8:94:97:df:96:54:67:50:a5:fc:73:fb:
         90:2f:65:4b:ad:07:58:a1:f2:77:31:69:cd:6b:b7:d3:86:70:
         b2:f9:82:dd:18:26:25:0e:10:ae:e2:a0:57:ba:5b:f0:50:08:
         8d:cc:f4:1a:59:ee:47:7b:77:5e:ba:69:fc:b7:bf:ee:db:d8:
         2b:2f:d5:46:15:73:18:5b:6d:39:25:a7:32:08:51:34:d5:ad:
         02:79:21:fd:91:dd:20:53:5f:98:ad:05:ec:86:90:3e:99:d4:
         bc:8c:50:f1:76:3f:70:e0:14:18:92:14:05:9c:f3:72:6f:cf:
         b7:97:8e:54:57:3f:95:e1:67:ef:f6:e9:d5:9a:c2:30:7a:5d:
         39:06:9a:2a:2d:b8:96:57:fd:6c:43:ed:ff:3f:0d:a5:05:a2:
         f0:c9:84:b2:1b:17:e7:93:26:0b:bd:06:87:d5:22:7f:2c:31:
         8e:ab:50:2d:5f:71:ad:bb:f1:93:31:61:10:53:6a:73:54:9f:
         7b:b3:5d:56:66:6a:73:bf:d6:ad:89:1f:00:af:df:31:71:ac:
         2f:c5:a1:62:32:8e:d4:88:2d:e9:de:4f:7f:96:92:70:34:35:
         14:a4:b3:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDEzMDYxMTAvBgNVBAUTKEUwNEZCMkFBNjI3RDk3Qjk4OUFFQ0ZFODY5NzRFM0M1
RjMwMzEyMUEwHhcNMjYxMDA2MTYyMzEwWhcNMjYxMDEzMTYyMzEwWjAYMRYwFAYD
VQQDEw02YWM1MjA2ZS02ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYn2Ses0MBUDnMS7IHVadeOb32KBh5ARqq7CViUyceS+TfqTjrg5PNHHPfbI
2gOarmoKQ1uFkmzVCTKOrYDg09U49KyslEQs1VKzrMO+ruY4rPCNQ77vDxHyplR2
5qQcTqpksDRnpbBGGXc2tF0+hulVT0epJCwYQdH6xw8oFkMTV0lr1a+1CJhpCBvI
PJngMloXPHFZJvhE3KWO2XWBXIqlrvoYFDHWDmLkP/6SjunCMggMSPfuin/J9/vL
mEbj3mo9qmlmaLhWF7cUiZSNFIqpxrGtR6GpQfE8T06rIB4TvoXWtQRCIXJa58qy
YK07xpHvUXVaTsjnMeV0FoNK3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYSQ4RJ
DiXfkSFTyteUeNge0kTsMB8GA1UdIwQYMBaAFOBPsqpifZe5ia7P6Gl048XzAxIa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTMwNi9GRTQ5NzQ5ODgz
Q0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3bUpyc19vYVhUanhmTURF
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRFLXlxbUo5bDdtSnJzX29hWFRqeGZNREVoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTMwNi9GRTQ5NzQ5ODgzQ0ExMUU3QjgyNDBBNDJDNEY5QUUwMi80RS15cW1KOWw3
bUpyc19vYVhUanhmTURFaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV1u76cjvJUWRgVtC8qQOU/h+vRt8aZha2JSX35ZUZ1Cl/HP7kC9lS60HWKHy
dzFpzWu304ZwsvmC3RgmJQ4QruKgV7pb8FAIjcz0GlnuR3t3Xrpp/Le/7tvYKy/V
RhVzGFttOSWnMghRNNWtAnkh/ZHdIFNfmK0F7IaQPpnUvIxQ8XY/cOAUGJIUBZzz
cm/Pt5eOVFc/leFn7/bp1ZrCMHpdOQaaKi24llf9bEPt/z8NpQWi8MmEshsX55Mm
C70Gh9UifywxjqtQLV9xrbvxkzFhEFNqc1Sfe7NdVmZqc7/WrYkfAK/fMXGsL8Wh
YjKO1Igt6d5Pf5aScDQ1FKSzow==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:45:59 2026 by rpki-client