Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
File:                     72Nt-xWS8CIgFrAPrKJwNXP00oI.mft (raw, json)
Hash identifier:          QYLXFq2FVrtaBAhMDQQe/8b6CI8Nb59HnPzVo/8+tbE=
Subject key identifier:   81:84:25:81:B6:D7:DF:41:A5:31:59:98:E1:CA:0F:0E:EF:17:07:74
Authority key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82
Certificate issuer:       /CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
Manifest number:          024B
Signing time:             Mon 05 Oct 2026 02:42:30 +0000
Manifest this update:     Mon 05 Oct 2026 02:42:30 +0000
Manifest next update:     Mon 12 Oct 2026 02:42:30 +0000
Files and hashes:         1: 72Nt-xWS8CIgFrAPrKJwNXP00oI.crl (hash: OFg9nesFOf5Gw+efyNrR0/TXpN7yHspobkhrrIeVwu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8BD, serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
        Validity
            Not Before: Oct  5 02:42:30 2026 GMT
            Not After : Oct 12 02:42:30 2026 GMT
        Subject: CN=6ac30e96-6a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:ba:4f:c7:75:79:e6:8f:99:7a:10:71:2c:
                    30:b1:8f:04:42:be:85:d0:0e:d6:96:70:a8:9c:82:
                    17:88:16:31:fe:57:04:4c:d0:4d:f6:2d:37:71:a2:
                    44:5f:73:3e:43:6d:2d:a1:ec:eb:57:5b:d3:40:11:
                    f9:ca:d4:8d:f6:db:a5:a1:90:3c:37:cd:b0:47:fd:
                    a8:89:40:14:60:75:98:e8:90:a4:fd:bd:22:3d:52:
                    ea:45:c4:34:44:81:11:dc:d5:53:9d:bc:57:51:5d:
                    a9:0a:1e:b8:07:0d:22:d1:10:9c:cb:64:04:d0:bc:
                    61:70:ef:40:7f:f2:09:f7:45:8b:cb:d9:6b:a7:02:
                    11:c0:91:87:6a:49:2c:4c:b5:67:60:ce:e5:37:da:
                    ef:d3:ef:19:f9:e5:64:53:da:ab:55:8b:73:87:24:
                    2a:8d:f2:c4:39:1b:e0:c3:dd:eb:3d:c8:9e:b6:73:
                    30:54:db:77:14:9f:86:37:6b:bd:9d:3a:15:24:37:
                    bf:c7:19:73:b4:b4:f6:f9:61:97:0b:00:79:e6:a7:
                    9a:16:6e:76:f4:07:90:b0:5b:da:4c:48:89:bc:f7:
                    f2:f7:7e:53:b6:e4:bf:ad:ad:76:be:f9:9b:c8:02:
                    46:a3:e6:47:52:e4:7d:97:e4:1e:14:0f:83:a9:b4:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:84:25:81:B6:D7:DF:41:A5:31:59:98:E1:CA:0F:0E:EF:17:07:74
            X509v3 Authority Key Identifier:
                keyid:EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c1:5c:0e:1a:7f:93:5d:40:b7:a8:00:5e:30:7c:19:8e:ef:
         7a:37:6c:3c:f8:0d:c2:34:2c:56:9a:75:5f:11:d9:36:26:8b:
         6b:8e:34:28:d2:2b:89:c6:0b:82:65:e7:fe:22:01:09:3d:3c:
         34:04:55:fc:35:f5:94:4d:c1:5a:bb:dc:72:c3:7a:5c:c5:63:
         09:6d:4a:63:4f:93:30:bc:ea:48:e7:11:9d:a7:e2:7b:19:68:
         26:3b:bf:a0:83:c6:fc:7f:bd:c8:ca:8a:14:b1:90:db:d4:8b:
         dc:f6:85:cb:70:9f:91:99:03:4d:d5:d5:94:0c:a3:5e:a4:ee:
         f7:c1:aa:de:b2:10:dd:34:72:70:e2:1f:8b:9f:1b:af:b7:3f:
         44:77:6a:6b:d3:fe:99:0b:57:59:8d:6a:ca:28:9c:9b:e3:10:
         e1:8f:3f:9c:de:04:27:0f:2e:6e:9d:cd:93:46:31:ae:84:c0:
         d1:40:d0:8e:c0:30:67:a5:fd:46:f6:70:f1:a3:43:80:4d:4e:
         0e:fe:4f:4f:b6:c8:fb:e4:50:99:6a:59:3d:6b:8a:fd:b9:39:
         64:1c:27:47:12:d9:cd:e6:ed:05:85:bb:65:c2:ec:70:c7:15:
         ec:45:b7:17:2c:84:c4:f3:b1:94:e9:e5:42:c7:00:1b:95:6c:
         23:e8:71:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REM4QkQxMTAvBgNVBAUTKEVGNjM2REZCMTU5MkYwMjIyMDE2QjAwRkFDQTI3MDM1
NzNGNEQyODIwHhcNMjYxMDA1MDI0MjMwWhcNMjYxMDEyMDI0MjMwWjAYMRYwFAYD
VQQDEw02YWMzMGU5Ni02YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwxi6T8d1eeaPmXoQcSwwsY8EQr6F0A7WlnConIIXiBYx/lcETNBN9i03caJE
X3M+Q20toezrV1vTQBH5ytSN9tuloZA8N82wR/2oiUAUYHWY6JCk/b0iPVLqRcQ0
RIER3NVTnbxXUV2pCh64Bw0i0RCcy2QE0LxhcO9Af/IJ90WLy9lrpwIRwJGHakks
TLVnYM7lN9rv0+8Z+eVkU9qrVYtzhyQqjfLEORvgw93rPcietnMwVNt3FJ+GN2u9
nToVJDe/xxlztLT2+WGXCwB55qeaFm529AeQsFvaTEiJvPfy935TtuS/ra12vvmb
yAJGo+ZHUuR9l+QeFA+DqbS0jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGEJYG2
199BpTFZmOHKDw7vFwd0MB8GA1UdIwQYMBaAFO9jbfsVkvAiIBawD6yicDVz9NKC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhCRC8xMTlDQzIyMDQw
RkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhDSWdGckFQcktKd05YUDAw
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcyTnQteFdTOENJZ0ZyQVByS0p3TlhQMDBvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzhCRC8xMTlDQzIyMDQwRkQxMUVFQTZBRDI5MzVDNEY5QUUwMi83Mk50LXhXUzhD
SWdGckFQcktKd05YUDAwb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYsFcDhp/k11At6gAXjB8GY7vejdsPPgNwjQsVpp1XxHZNiaLa440KNIricYL
gmXn/iIBCT08NARV/DX1lE3BWrvccsN6XMVjCW1KY0+TMLzqSOcRnafiexloJju/
oIPG/H+9yMqKFLGQ29SL3PaFy3CfkZkDTdXVlAyjXqTu98Gq3rIQ3TRycOIfi58b
r7c/RHdqa9P+mQtXWY1qyiicm+MQ4Y8/nN4EJw8ubp3Nk0YxroTA0UDQjsAwZ6X9
RvZw8aNDgE1ODv5PT7bI++RQmWpZPWuK/bk5ZBwnRxLZzebtBYW7ZcLscMcV7EW3
FyyExPOxlOnlQscAG5VsI+hxKg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:56:39 2026 by rpki-client