Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
File:                     4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json)
Hash identifier:          gJJLNPKLsk2WLsjleLJIPf+foACeBlE75qtcrc9m8Xs=
Subject key identifier:   3B:F4:BD:6F:13:38:69:D9:8A:12:E1:08:20:3C:2C:43:56:17:02:ED
Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A
Certificate issuer:       /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
Certificate serial:       0C17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
Manifest number:          0C0D
Signing time:             Thu 08 Oct 2026 18:58:17 +0000
Manifest this update:     Thu 08 Oct 2026 18:58:16 +0000
Manifest next update:     Thu 15 Oct 2026 18:58:16 +0000
Files and hashes:         1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: g0zhtuScLQ70TgpEI/+8b+yYPmcjw8GzjKAqzynNhvE=)
                          2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: K1S8Q65Z3w1SElyF5atmBbQ9pOqRtecrW95mrmJVLwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 18:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3095 (0xc17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A
        Validity
            Not Before: Oct  8 18:58:16 2026 GMT
            Not After : Oct 15 18:58:16 2026 GMT
        Subject: CN=6ac7e7c8-dcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:7e:f5:46:df:32:54:9c:12:6b:c0:1a:08:
                    b2:32:c5:a9:ad:5f:ab:92:01:98:3a:26:6e:4d:6d:
                    c1:49:c0:cc:91:a7:14:20:95:19:0d:91:b8:1b:da:
                    77:c4:8b:8c:af:3f:30:2d:3e:d5:f7:a3:d4:a0:b3:
                    46:db:fa:a5:7e:fe:fd:bd:65:de:9a:98:8a:4d:fc:
                    9e:5a:4f:81:c5:3a:6d:95:17:ab:b3:d2:0c:60:80:
                    5f:a8:9c:d7:6a:99:3b:de:dd:bb:b4:13:7f:fa:af:
                    ac:2c:9e:f5:f3:38:72:8f:20:5b:1f:3d:f6:84:3b:
                    5d:70:65:44:e8:95:be:15:1e:54:bf:56:e3:b3:2b:
                    e6:8d:6d:32:02:11:b3:6a:8b:42:a0:07:08:d6:02:
                    62:02:3c:1d:71:7e:fb:f7:68:e4:24:ce:f0:f5:63:
                    f5:28:e5:b3:af:be:07:df:fe:45:16:cc:5c:c9:ca:
                    b6:37:1e:34:38:f3:59:e3:eb:4a:82:9d:79:53:d3:
                    ec:f3:9f:04:09:b0:49:dc:97:8d:49:5d:e6:fa:c2:
                    38:1d:75:06:60:98:49:2f:a5:ad:2e:88:30:e5:ab:
                    3b:28:f4:2c:d3:e4:53:a2:84:30:4a:2a:f1:a3:e0:
                    e4:57:eb:77:61:fe:ae:a0:df:f2:ba:8a:1b:c9:5d:
                    65:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F4:BD:6F:13:38:69:D9:8A:12:E1:08:20:3C:2C:43:56:17:02:ED
            X509v3 Authority Key Identifier:
                keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:2c:02:c8:89:0e:43:6d:04:db:2e:0e:30:07:e9:b6:d8:99:
         f5:ea:6e:17:f4:5e:7e:10:23:9e:44:f4:1e:b8:1e:3d:53:0a:
         5f:63:3d:04:ea:53:22:e3:19:47:fc:15:07:cc:eb:d3:ff:8c:
         78:25:9f:40:f4:8c:c4:a2:01:c6:bc:59:04:c6:c0:78:60:c4:
         66:e2:1e:c6:10:31:60:30:0a:83:e1:7e:09:9c:02:8d:58:88:
         07:83:f1:c1:9a:d0:36:27:c8:22:d9:34:4b:d6:20:74:77:d0:
         04:0e:80:35:c7:50:7b:34:9b:f1:e6:b1:1c:74:82:94:ac:06:
         91:18:dc:9a:15:ff:2c:28:c4:83:39:39:53:47:2c:2f:6a:00:
         55:e1:97:51:6e:e3:54:3d:ae:be:f3:0c:64:61:74:b4:dc:20:
         3e:2d:8d:60:b0:83:ac:f5:cb:c1:53:4d:4e:5a:6f:e3:aa:9f:
         5d:63:c5:67:aa:89:b5:4d:70:56:87:f2:17:b3:0f:50:a4:76:
         f1:2d:c4:55:4e:db:af:82:15:62:0d:35:24:1b:74:d0:65:e5:
         c1:cc:a2:8d:be:fc:99:52:2f:c5:b0:69:e1:33:30:a2:99:dc:
         22:ec:74:3a:73:30:05:b4:70:5a:94:72:20:a4:17:75:18:81:
         f6:48:dc:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1
MjBENzRCMkEwHhcNMjYxMDA4MTg1ODE2WhcNMjYxMDE1MTg1ODE2WjAYMRYwFAYD
VQQDEw02YWM3ZTdjOC1kY2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2QV+9UbfMlScEmvAGgiyMsWprV+rkgGYOiZuTW3BScDMkacUIJUZDZG4G9p3
xIuMrz8wLT7V96PUoLNG2/qlfv79vWXempiKTfyeWk+BxTptlRers9IMYIBfqJzX
apk73t27tBN/+q+sLJ718zhyjyBbHz32hDtdcGVE6JW+FR5Uv1bjsyvmjW0yAhGz
aotCoAcI1gJiAjwdcX7792jkJM7w9WP1KOWzr74H3/5FFsxcycq2Nx40OPNZ4+tK
gp15U9Ps858ECbBJ3JeNSV3m+sI4HXUGYJhJL6WtLogw5as7KPQs0+RTooQwSirx
o+DkV+t3Yf6uoN/yuoobyV1lRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDv0vW8T
OGnZihLhCCA8LENWFwLtMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx
QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH
aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuywCyIkOQ20E2y4OMAfpttiZ9epuF/RefhAjnkT0HrgePVMKX2M9BOpTIuMZ
R/wVB8zr0/+MeCWfQPSMxKIBxrxZBMbAeGDEZuIexhAxYDAKg+F+CZwCjViIB4Px
wZrQNifIItk0S9YgdHfQBA6ANcdQezSb8eaxHHSClKwGkRjcmhX/LCjEgzk5U0cs
L2oAVeGXUW7jVD2uvvMMZGF0tNwgPi2NYLCDrPXLwVNNTlpv46qfXWPFZ6qJtU1w
VofyF7MPUKR28S3EVU7br4IVYg01JBt00GXlwcyijb78mVIvxbBp4TMwopncIux0
OnMwBbRwWpRyIKQXdRiB9kjcPw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:39:36 2026 by rpki-client