Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
File:                     akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json)
Hash identifier:          OYKOWs6D58YI4TN+8qFqaqF5Di1cz3HrNpRkiOW/t8M=
Subject key identifier:   5A:6D:F0:57:9D:97:72:3E:5F:96:29:4E:F7:EA:7B:8A:08:2A:80:45
Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A
Certificate issuer:       /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
Certificate serial:       0B55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
Manifest number:          0B34
Signing time:             Sat 10 Oct 2026 19:20:33 +0000
Manifest this update:     Sat 10 Oct 2026 19:20:32 +0000
Manifest next update:     Sat 17 Oct 2026 19:20:32 +0000
Files and hashes:         1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: 3v5KnrKDhfZxpc0N3nZJZUJe/ApqUXZxDVmIGJKLvD0=)
                          2: 6E71C43EF80A11F0BD0E5DB76F6F56BC.roa (hash: EAWXNHbw72NGXN5onuQ/WOahqrbdihDLckXMN5kD8CQ=)
                          3: 6EE80A72F80A11F0BD0E5DB76F6F56BC.roa (hash: sUHEm0sthEP5Lto5Jyv7yFbAnqT7Ikn9wDCxjmSd04U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl
                          rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A
        Validity
            Not Before: Oct 10 19:20:32 2026 GMT
            Not After : Oct 17 19:20:32 2026 GMT
        Subject: CN=6aca9000-f747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:6f:a4:76:3a:ba:a1:75:14:09:04:4c:00:
                    5a:3a:31:ad:d8:64:5f:60:70:36:7b:50:85:b6:18:
                    ad:70:9d:73:86:9f:8b:20:92:d2:a5:ec:8c:cb:62:
                    15:de:8c:85:6a:28:43:be:98:64:c1:e4:1d:f0:9a:
                    ed:47:6d:25:c1:1a:9d:a2:7e:ad:e6:d9:aa:09:ed:
                    1a:0f:ec:4c:12:82:12:8e:cc:ee:f2:37:4d:c2:90:
                    33:b9:a9:28:91:f4:b3:c4:37:d8:31:db:94:88:4d:
                    24:7b:5b:3b:c8:e7:09:d5:3a:cb:58:ea:eb:0f:b1:
                    36:54:9c:f7:2a:17:30:3a:07:a8:3c:60:12:9f:1f:
                    85:c5:b0:18:77:a1:bb:72:aa:34:69:85:24:8c:fc:
                    a4:1e:c5:77:0c:38:05:c0:4a:45:79:a5:3a:0c:fb:
                    c1:1c:3f:ad:55:05:11:d5:99:1b:dd:55:41:0f:09:
                    e2:7d:f4:42:1e:42:a8:11:89:e9:a5:31:72:dd:49:
                    05:78:4b:51:b0:34:2f:0c:23:eb:7d:b6:18:65:5e:
                    37:56:de:a5:08:77:23:6a:fb:84:28:7c:d1:8c:8c:
                    ab:36:bc:36:9d:d4:6b:2c:52:57:a5:d6:b9:4c:b1:
                    0d:31:a4:c1:19:28:c9:a8:00:5e:2e:4b:0f:2b:14:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6D:F0:57:9D:97:72:3E:5F:96:29:4E:F7:EA:7B:8A:08:2A:80:45
            X509v3 Authority Key Identifier:
                keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:92:f1:f3:ee:74:83:3d:0d:85:de:cd:54:8a:69:a0:93:49:
         79:bb:61:40:83:9c:25:85:4d:45:a9:07:57:84:76:67:3f:42:
         d8:c3:c5:4a:50:fe:55:a9:8c:59:7b:c0:e8:b6:25:a3:b8:98:
         10:8f:ea:8c:db:78:7e:90:53:38:23:2e:50:1b:57:60:49:9c:
         d9:8b:67:fb:1f:f0:02:87:2c:cd:0c:bb:ca:83:fd:c9:12:55:
         70:25:d5:a2:cb:26:3e:90:cb:c1:aa:9f:43:6a:e0:38:d4:10:
         8e:65:a6:20:11:9a:e2:e8:5d:1e:12:b9:cc:51:51:ff:1a:dc:
         d5:a9:3d:3c:3c:e4:ec:fd:a0:4f:dd:c9:0d:d8:ac:80:3b:8f:
         ad:f1:a0:b1:8b:19:9b:dd:28:96:fc:bd:68:8a:52:75:5a:82:
         8e:c5:96:27:f4:0b:e0:0a:32:ca:c9:22:c6:a3:a1:48:be:8e:
         28:dc:bf:cf:96:c0:ff:9b:53:5d:f0:52:c9:be:ea:b6:e6:c2:
         ec:a9:21:09:68:bb:b6:55:cc:94:0d:84:91:b5:18:da:9f:f5:
         c1:1e:98:5e:c6:fe:ad:c3:29:8d:f3:8c:05:a2:99:d4:fa:74:
         e2:54:f7:4d:54:20:9e:d3:08:b7:42:2a:99:04:1f:b0:9b:e3:
         3d:32:75:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD
NkI2NzkzNUEwHhcNMjYxMDEwMTkyMDMyWhcNMjYxMDE3MTkyMDMyWjAYMRYwFAYD
VQQDEw02YWNhOTAwMC1mNzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusRvpHY6uqF1FAkETABaOjGt2GRfYHA2e1CFthitcJ1zhp+LIJLSpeyMy2IV
3oyFaihDvphkweQd8JrtR20lwRqdon6t5tmqCe0aD+xMEoISjszu8jdNwpAzuako
kfSzxDfYMduUiE0ke1s7yOcJ1TrLWOrrD7E2VJz3KhcwOgeoPGASnx+FxbAYd6G7
cqo0aYUkjPykHsV3DDgFwEpFeaU6DPvBHD+tVQUR1Zkb3VVBDwniffRCHkKoEYnp
pTFy3UkFeEtRsDQvDCPrfbYYZV43Vt6lCHcjavuEKHzRjIyrNrw2ndRrLFJXpda5
TLENMaTBGSjJqABeLksPKxQcBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpt8Fed
l3I+X5YpTvfqe4oIKoBFMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF
NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK
RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIZLx8+50gz0Nhd7NVIppoJNJebthQIOcJYVNRakHV4R2Zz9C2MPFSlD+VamM
WXvA6LYlo7iYEI/qjNt4fpBTOCMuUBtXYEmc2Ytn+x/wAocszQy7yoP9yRJVcCXV
ossmPpDLwaqfQ2rgONQQjmWmIBGa4uhdHhK5zFFR/xrc1ak9PDzk7P2gT93JDdis
gDuPrfGgsYsZm90olvy9aIpSdVqCjsWWJ/QL4AoyyskixqOhSL6OKNy/z5bA/5tT
XfBSyb7qtubC7KkhCWi7tlXMlA2EkbUY2p/1wR6YXsb+rcMpjfOMBaKZ1Pp04lT3
TVQgntMIt0IqmQQfsJvjPTJ1NQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:58:02 2026 by rpki-client