Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
File:                     W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft (raw, json)
Hash identifier:          CmW3E5P0Z8AC+DcOsYNt3NsaOEwPU8NOdkrigCnOIQs=
Subject key identifier:   A5:A7:52:5D:6B:28:4B:E9:CB:A5:CE:E5:F1:1C:05:17:49:DD:27:7F
Authority key identifier: 5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C
Certificate issuer:       /CN=A91D1E29/serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
Certificate serial:       09D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
Manifest number:          09CA
Signing time:             Tue 06 Oct 2026 20:00:49 +0000
Manifest this update:     Tue 06 Oct 2026 20:00:48 +0000
Manifest next update:     Tue 13 Oct 2026 20:00:48 +0000
Files and hashes:         1: W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl (hash: 3nAJiiXZFQDgyzgW1ka0vknXcbfQ8OrC4WNHuiOnz6Q=)
                          2: 108B7DAAB2A711EAABBE8663C4F9AE02.roa (hash: L0XlyD9IQ5UK2oTPJFeGWgq2LdSfkLF1YmwJHO8pA/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E29, serialNumber=5BF6243990A9464C85B7823DB426E2AB96720A3C
        Validity
            Not Before: Oct  6 20:00:48 2026 GMT
            Not After : Oct 13 20:00:48 2026 GMT
        Subject: CN=6ac55370-9746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:1e:fb:ac:22:64:7b:51:7c:c8:f7:b0:d2:
                    64:58:2f:f6:63:c9:7a:5f:fb:40:6d:54:14:c5:83:
                    77:80:04:37:d1:85:ec:71:3e:07:61:a4:37:bb:ed:
                    f4:2d:d2:5c:f6:5f:c3:27:76:e8:1d:20:19:4f:cd:
                    17:a6:a8:ee:a9:6f:a7:7d:f6:98:2a:81:5f:fe:2d:
                    7b:01:13:36:71:5a:09:89:b1:24:40:17:05:cd:9b:
                    f9:10:40:5c:52:ba:4e:82:a4:0a:48:f9:05:04:95:
                    5b:93:31:a0:db:f7:97:ff:5f:b9:0b:68:dc:46:b3:
                    88:60:7e:dc:0a:02:35:72:a1:92:79:6a:29:38:fc:
                    f6:5c:38:84:07:52:0b:4a:b1:1b:34:b7:84:ff:f1:
                    c1:bf:06:4d:45:62:6e:64:93:5b:5e:71:9d:d0:af:
                    3f:42:d0:5e:9d:33:c5:15:1c:e7:65:a4:8b:af:c3:
                    3a:df:0b:32:d4:fe:a8:80:4b:13:14:af:a8:4e:5d:
                    ce:76:bd:d3:b7:da:f0:de:cc:24:23:01:f0:4f:8c:
                    99:42:4a:e2:1d:a3:06:6f:d7:22:13:d6:00:51:47:
                    a7:8d:c5:dc:11:a0:49:41:e2:3c:3d:c7:6b:88:fe:
                    78:72:2e:da:83:a3:7f:ba:ed:ae:5e:f5:34:c1:8a:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:52:5D:6B:28:4B:E9:CB:A5:CE:E5:F1:1C:05:17:49:DD:27:7F
            X509v3 Authority Key Identifier:
                keyid:5B:F6:24:39:90:A9:46:4C:85:B7:82:3D:B4:26:E2:AB:96:72:0A:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E29/DD13F8F0B29F11EA9380C04BC4F9AE02/W_YkOZCpRkyFt4I9tCbiq5ZyCjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e2:c2:12:75:16:b2:08:4d:86:2c:40:af:99:a0:86:57:e3:
         da:82:42:14:b3:19:3e:71:b5:15:99:c7:d8:8d:3e:80:a8:41:
         f6:be:4d:be:69:03:71:5f:32:fb:eb:9b:fd:95:88:4c:5c:b4:
         e5:99:ed:c4:ec:d6:74:db:de:8e:0c:72:d8:d0:40:5f:d4:1e:
         85:02:4b:38:39:6a:a7:d3:56:e8:48:3e:08:b1:c2:65:80:7f:
         a8:41:f2:24:17:d4:a5:0b:5c:fb:26:5e:2c:a1:79:70:06:06:
         68:71:50:58:87:65:f6:a6:d9:01:f2:30:e8:24:e5:ad:7c:81:
         10:c0:d3:05:b1:32:dc:52:45:19:5d:aa:5c:c3:11:14:e9:90:
         01:d1:8d:dc:3e:20:b6:38:bd:62:bf:89:c2:54:bc:ee:10:bf:
         88:55:2b:0b:31:37:80:a3:ff:03:cd:91:af:63:44:dc:5a:d3:
         e0:8b:f3:93:6f:6d:dd:58:a2:5a:9d:d6:43:da:8d:da:da:4d:
         45:a3:43:fc:f1:7a:77:4a:44:0f:d5:31:03:03:32:19:97:a5:
         fd:04:84:70:82:28:ab:a2:27:4c:c9:73:d2:91:e6:b6:4e:d1:
         8f:1b:7b:93:ab:90:8f:cd:3f:5d:51:51:eb:f6:36:03:26:52:
         1a:c2:6a:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFFMjkxMTAvBgNVBAUTKDVCRjYyNDM5OTBBOTQ2NEM4NUI3ODIzREI0MjZFMkFC
OTY3MjBBM0MwHhcNMjYxMDA2MjAwMDQ4WhcNMjYxMDEzMjAwMDQ4WjAYMRYwFAYD
VQQDEw02YWM1NTM3MC05NzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxvIe+6wiZHtRfMj3sNJkWC/2Y8l6X/tAbVQUxYN3gAQ30YXscT4HYaQ3u+30
LdJc9l/DJ3boHSAZT80XpqjuqW+nffaYKoFf/i17ARM2cVoJibEkQBcFzZv5EEBc
UrpOgqQKSPkFBJVbkzGg2/eX/1+5C2jcRrOIYH7cCgI1cqGSeWopOPz2XDiEB1IL
SrEbNLeE//HBvwZNRWJuZJNbXnGd0K8/QtBenTPFFRznZaSLr8M63wsy1P6ogEsT
FK+oTl3Odr3Tt9rw3swkIwHwT4yZQkriHaMGb9ciE9YAUUenjcXcEaBJQeI8Pcdr
iP54ci7ag6N/uu2uXvU0wYqoowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWnUl1r
KEvpy6XO5fEcBRdJ3Sd/MB8GA1UdIwQYMBaAFFv2JDmQqUZMhbeCPbQm4quWcgo8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUyOS9ERDEzRjhGMEIy
OUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJreUZ0NEk5dENiaXE1WnlD
ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dfWWtPWkNwUmt5RnQ0STl0Q2JpcTVaeUNqdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUUyOS9ERDEzRjhGMEIyOUYxMUVBOTM4MEMwNEJDNEY5QUUwMi9XX1lrT1pDcFJr
eUZ0NEk5dENiaXE1WnlDancubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoeLCEnUWsghNhixAr5mghlfj2oJCFLMZPnG1FZnH2I0+gKhB9r5NvmkDcV8y
++ub/ZWITFy05ZntxOzWdNvejgxy2NBAX9QehQJLODlqp9NW6Eg+CLHCZYB/qEHy
JBfUpQtc+yZeLKF5cAYGaHFQWIdl9qbZAfIw6CTlrXyBEMDTBbEy3FJFGV2qXMMR
FOmQAdGN3D4gtji9Yr+JwlS87hC/iFUrCzE3gKP/A82Rr2NE3FrT4Ivzk29t3Vii
Wp3WQ9qN2tpNRaND/PF6d0pED9UxAwMyGZel/QSEcIIoq6InTMlz0pHmtk7Rjxt7
k6uQj80/XVFR6/Y2AyZSGsJqug==
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:49:55 2026 by rpki-client