Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File:                     0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier:          sR2ZIG2688Cm2+iuWM2sJDq8PGWgTf3xvoonafoLa6o=
Subject key identifier:   B3:3B:8A:93:8D:01:E9:E8:0B:2D:14:3C:FF:A9:8F:D6:CB:5A:F7:C9
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer:       /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial:       0BD3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number:          0BC9
Signing time:             Thu 08 Oct 2026 19:07:55 +0000
Manifest this update:     Thu 08 Oct 2026 19:07:54 +0000
Manifest next update:     Thu 15 Oct 2026 19:07:54 +0000
Files and hashes:         1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: xUGRJXW+rmjmQuwpf5pF33NEO0+SFUAsloB9iQa0l8s=)
                          2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: Cslgx6TP1vwc2kxEUex+I7Q7tERor+Z4yAGOK7JvT0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
                          rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3027 (0xbd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
        Validity
            Not Before: Oct  8 19:07:54 2026 GMT
            Not After : Oct 15 19:07:54 2026 GMT
        Subject: CN=6ac7ea0b-a46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:59:76:48:4d:91:94:ed:a2:94:89:70:5d:
                    2a:2d:d3:88:1a:6b:a5:9a:95:77:f8:5a:37:7f:bc:
                    b7:bd:53:70:88:6e:1e:f8:40:a6:c6:a3:3d:9c:2d:
                    17:9f:4b:ac:c1:f2:33:e4:c8:21:51:15:a5:bd:1a:
                    73:18:6f:40:d2:ef:31:d1:df:88:f3:30:8b:ac:2c:
                    fc:2c:da:ea:b4:d3:39:f6:f6:e1:5d:c5:ac:93:97:
                    45:9d:0e:ab:75:e6:b9:c0:4b:d8:a7:33:26:86:f9:
                    a5:2b:73:b0:af:1d:ae:4f:f9:76:57:84:24:9c:0d:
                    e9:c7:58:f2:f2:c3:12:14:65:2a:b9:d4:29:a7:3d:
                    3d:83:e1:99:fd:e6:28:1e:a6:d0:51:40:f6:58:07:
                    6b:e7:7c:e1:de:ec:12:e9:2d:e5:b2:e8:8c:3b:73:
                    28:5b:c0:f0:70:79:6a:25:9f:c4:5e:c7:ec:18:71:
                    4d:ff:d4:c1:34:99:92:80:04:4b:ad:9c:31:c8:a4:
                    ad:28:28:0f:b0:eb:b1:d3:5d:f1:3a:ba:97:af:8a:
                    3b:4b:88:85:10:4e:b9:7d:fe:72:35:c5:4e:25:3d:
                    21:c0:24:c3:34:b2:9b:d1:5b:ca:ed:c1:fe:df:33:
                    b0:cc:fe:6f:43:2b:3d:31:5a:55:62:0b:ef:fb:44:
                    cc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3B:8A:93:8D:01:E9:E8:0B:2D:14:3C:FF:A9:8F:D6:CB:5A:F7:C9
            X509v3 Authority Key Identifier:
                keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:da:b9:dc:47:34:4a:d0:ef:2d:d9:0d:03:10:ac:d0:0e:ee:
         5c:27:40:a1:6e:8e:31:ad:b4:a2:14:77:c2:56:b1:bf:b4:05:
         3e:3b:bc:e4:64:31:d4:96:1d:d2:71:96:92:ab:bd:0f:40:b0:
         cb:33:75:77:89:5e:80:34:a1:be:fc:6b:56:6d:1e:83:2b:39:
         9e:e5:7d:52:55:4c:7e:97:12:97:83:e4:67:7f:c6:a0:0c:5d:
         b7:a5:17:0a:d4:f6:8b:f6:39:4d:60:f9:5c:ee:d4:72:5f:79:
         72:d6:8d:15:49:23:14:8f:f6:a2:94:d7:f5:d1:09:9b:7c:95:
         44:63:57:ab:49:af:72:9d:0e:74:e4:11:a4:c6:3b:4e:0c:70:
         e2:4a:ad:8d:a1:e6:27:48:63:b7:7b:2e:5d:e0:96:c8:d9:94:
         40:d9:8c:e9:1c:4b:fb:5b:9a:43:26:c6:eb:6a:39:33:3f:9c:
         9c:60:19:65:a5:24:97:c1:68:e6:13:db:c2:da:34:46:17:cb:
         8e:4b:2e:86:84:d9:26:d0:f1:26:85:e8:4b:2f:37:32:9e:80:
         9d:06:ba:44:82:78:57:23:05:8e:0f:f7:fd:44:42:76:26:1d:
         a3:d5:bf:63:db:87:29:7e:5c:1d:8d:fe:79:60:8c:05:d5:dc:
         60:53:b2:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDg3Q0YxMTAvBgNVBAUTKEQyRUMwNzkwQkM0RUJEMzQwN0M5NTA3NEU2QjU2QjQw
MDAzODEyREEwHhcNMjYxMDA4MTkwNzU0WhcNMjYxMDE1MTkwNzU0WjAYMRYwFAYD
VQQDEw02YWM3ZWEwYi1hNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqu5ZdkhNkZTtopSJcF0qLdOIGmulmpV3+Fo3f7y3vVNwiG4e+ECmxqM9nC0X
n0uswfIz5MghURWlvRpzGG9A0u8x0d+I8zCLrCz8LNrqtNM59vbhXcWsk5dFnQ6r
dea5wEvYpzMmhvmlK3Owrx2uT/l2V4QknA3px1jy8sMSFGUqudQppz09g+GZ/eYo
HqbQUUD2WAdr53zh3uwS6S3lsuiMO3MoW8DwcHlqJZ/EXsfsGHFN/9TBNJmSgARL
rZwxyKStKCgPsOux013xOrqXr4o7S4iFEE65ff5yNcVOJT0hwCTDNLKb0VvK7cH+
3zOwzP5vQys9MVpVYgvv+0TMAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLM7ipON
AenoCy0UPP+pj9bLWvfJMB8GA1UdIwQYMBaAFNLsB5C8Tr00B8lQdOa1a0AAOBLa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODdDRi9FNjg1QjEyQTRF
RDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZUUUh5VkIwNXJWclFBQTRF
dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB1d0hrTHhPdlRRSHlWQjA1clZyUUFBNEV0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODdDRi9FNjg1QjEyQTRFRDcxMUVBODhFNjA1MUZDNEY5QUUwMi8wdXdIa0x4T3ZU
UUh5VkIwNXJWclFBQTRFdG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAItq53Ec0StDvLdkNAxCs0A7uXCdAoW6OMa20ohR3wlaxv7QFPju85GQx1JYd
0nGWkqu9D0CwyzN1d4legDShvvxrVm0egys5nuV9UlVMfpcSl4PkZ3/GoAxdt6UX
CtT2i/Y5TWD5XO7Ucl95ctaNFUkjFI/2opTX9dEJm3yVRGNXq0mvcp0OdOQRpMY7
Tgxw4kqtjaHmJ0hjt3suXeCWyNmUQNmM6RxL+1uaQybG62o5Mz+cnGAZZaUkl8Fo
5hPbwto0RhfLjksuhoTZJtDxJoXoSy83Mp6AnQa6RIJ4VyMFjg/3/URCdiYdo9W/
Y9uHKX5cHY3+eWCMBdXcYFOykA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 07:49:43 2026 by rpki-client