Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft
File:                     wQgOZhsN-mIOsJqrLerWA0uCjrw.mft (raw, json)
Hash identifier:          b7Uqzdb6lB7KIhPici4RbbdSf5KPfFdTcb2XFa2EKos=
Subject key identifier:   51:D9:6C:2D:C4:20:52:6F:27:7F:06:E8:10:97:D9:BA:32:EA:22:EA
Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC
Certificate issuer:       /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC
Certificate serial:       19EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft
Manifest number:          19E3
Signing time:             Tue 06 Oct 2026 16:24:21 +0000
Manifest this update:     Tue 06 Oct 2026 16:24:21 +0000
Manifest next update:     Tue 13 Oct 2026 16:24:21 +0000
Files and hashes:         1: wQgOZhsN-mIOsJqrLerWA0uCjrw.crl (hash: vrfe3xMlvvfHBnp9fsgjco7wnB2uh/9o6VawmesJgzI=)
                          2: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (hash: GXe2tm7Td8dX1Lrha+7jXekKG7vTEBadOSGynY1Vs4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl
                          rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6639 (0x19ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB0C1, serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC
        Validity
            Not Before: Oct  6 16:24:21 2026 GMT
            Not After : Oct 13 16:24:21 2026 GMT
        Subject: CN=6ac520b5-f358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:ec:41:65:d6:90:25:42:eb:79:44:8f:bd:
                    43:3e:9e:16:f5:55:c0:db:27:de:97:7b:fd:26:9b:
                    6a:2a:1f:aa:48:54:f4:d0:ec:76:ec:8f:0c:cb:06:
                    79:b9:f0:17:00:83:e8:25:7d:fd:74:04:d3:50:6a:
                    52:da:4a:5d:34:55:62:52:3f:8c:55:d4:0e:cf:6e:
                    5d:49:d6:1c:d4:bc:f7:4b:8c:39:bf:17:2a:f2:16:
                    85:a3:21:94:6c:e0:fd:f8:05:91:92:36:4b:bb:b6:
                    ff:c9:6b:a3:72:d1:b7:d6:50:d9:e3:14:86:1a:e1:
                    4a:66:e2:a7:2f:fe:4e:73:a1:6c:18:ae:f6:bc:ec:
                    b6:82:23:b5:b6:6d:0e:d9:a6:1a:67:2a:81:36:64:
                    39:b6:b5:10:65:d0:14:48:80:4d:ed:f4:f6:12:2c:
                    45:71:ec:0b:b0:35:24:67:e2:94:27:1f:b8:e9:ad:
                    44:8b:c1:6e:da:0b:71:f0:d3:81:bf:94:1c:59:55:
                    d1:a7:32:c3:16:9e:84:77:7d:c0:5d:31:01:12:0a:
                    56:f1:f9:f1:d5:0d:b3:92:62:82:e6:53:32:6c:15:
                    80:15:d4:f1:65:a0:94:64:f0:fa:04:a9:c6:8f:16:
                    9d:52:31:99:93:9e:4e:26:e9:22:29:97:6e:5e:38:
                    ec:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D9:6C:2D:C4:20:52:6F:27:7F:06:E8:10:97:D9:BA:32:EA:22:EA
            X509v3 Authority Key Identifier:
                keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ac:b2:42:47:c0:55:56:fd:2a:d4:c1:4b:e7:cb:80:be:33:
         95:c5:74:70:75:9a:31:a2:91:6f:a3:6f:1f:0c:58:fe:8e:fb:
         70:f2:f8:4f:0a:bb:e9:bd:56:7c:0e:bd:93:9e:ec:a7:36:cc:
         58:fa:85:1e:24:45:4b:39:54:b0:5f:73:15:1b:93:5e:76:9c:
         0f:21:a0:d6:7f:03:d0:3b:00:1d:08:f1:21:d6:68:3e:44:0d:
         df:52:f3:57:d3:9b:c6:3d:46:be:22:44:c1:b3:3c:f8:b8:a6:
         fc:50:aa:a6:ed:fd:f4:ce:0b:c9:f9:fa:cb:22:ac:ca:7a:ae:
         52:f8:fe:f5:bf:4f:dc:25:84:83:6a:d6:d1:9a:64:98:94:6d:
         37:87:41:b7:c1:68:49:2b:82:ec:c5:3d:0e:d6:43:70:97:2b:
         25:c9:e0:d7:06:db:54:5e:8e:14:e7:70:2b:10:ac:6d:8c:05:
         47:e7:43:b4:dd:05:4f:36:da:7d:33:32:f8:9f:ad:a0:3d:ca:
         e9:5a:db:bc:02:1a:a4:55:7b:76:06:c7:29:76:4a:3d:6e:26:
         fd:14:2b:da:9c:c2:c0:6e:07:08:8c:6e:1b:2e:17:d4:8d:f5:
         6e:6d:94:02:69:79:86:1b:0d:92:9a:61:c2:82:65:7d:36:b7:
         25:d7:91:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REIwQzExMTAvBgNVBAUTKEMxMDgwRTY2MUIwREZBNjIwRUIwOUFBQjJERUFENjAz
NEI4MjhFQkMwHhcNMjYxMDA2MTYyNDIxWhcNMjYxMDEzMTYyNDIxWjAYMRYwFAYD
VQQDEw02YWM1MjBiNS1mMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr1rsQWXWkCVC63lEj71DPp4W9VXA2yfel3v9JptqKh+qSFT00Ox27I8MywZ5
ufAXAIPoJX39dATTUGpS2kpdNFViUj+MVdQOz25dSdYc1Lz3S4w5vxcq8haFoyGU
bOD9+AWRkjZLu7b/yWujctG31lDZ4xSGGuFKZuKnL/5Oc6FsGK72vOy2giO1tm0O
2aYaZyqBNmQ5trUQZdAUSIBN7fT2EixFcewLsDUkZ+KUJx+46a1Ei8Fu2gtx8NOB
v5QcWVXRpzLDFp6Ed33AXTEBEgpW8fnx1Q2zkmKC5lMybBWAFdTxZaCUZPD6BKnG
jxadUjGZk55OJukiKZduXjjs1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHZbC3E
IFJvJ38G6BCX2boy6iLqMB8GA1UdIwQYMBaAFMEIDmYbDfpiDrCaqy3q1gNLgo68
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMS84MDJDMjQzMjhB
N0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1tSU9zSnFyTGVyV0EwdUNq
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dRZ09aaHNOLW1JT3NKcXJMZXJXQTB1Q2pydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjBDMS84MDJDMjQzMjhBN0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1t
SU9zSnFyTGVyV0EwdUNqcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmKyyQkfAVVb9KtTBS+fLgL4zlcV0cHWaMaKRb6NvHwxY/o77cPL4Twq76b1W
fA69k57spzbMWPqFHiRFSzlUsF9zFRuTXnacDyGg1n8D0DsAHQjxIdZoPkQN31Lz
V9Obxj1GviJEwbM8+Lim/FCqpu399M4Lyfn6yyKsynquUvj+9b9P3CWEg2rW0Zpk
mJRtN4dBt8FoSSuC7MU9DtZDcJcrJcng1wbbVF6OFOdwKxCsbYwFR+dDtN0FTzba
fTMy+J+toD3K6VrbvAIapFV7dgbHKXZKPW4m/RQr2pzCwG4HCIxuGy4X1I31bm2U
Aml5hhsNkpphwoJlfTa3JdeREg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:57:11 2026 by rpki-client