Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
File:                     PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json)
Hash identifier:          TtkKCqgp2rqo7no0LftOZ9UGlKj9aDI00GnfanH+7rw=
Subject key identifier:   94:FD:26:F1:C0:15:2D:1B:B7:5B:B2:D5:DC:BE:10:59:62:47:5A:03
Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E
Certificate issuer:       /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
Certificate serial:       0896
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
Manifest number:          088E
Signing time:             Tue 18 Aug 2026 20:59:51 +0000
Manifest this update:     Tue 18 Aug 2026 20:59:50 +0000
Manifest next update:     Tue 25 Aug 2026 20:59:50 +0000
Files and hashes:         1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: s2bnpqBS0gEwAbIsHD7iAEerBLvF/xkUYt0Ib503Idg=)
                          2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: ttDGmX8Wz8ITP3sU4vGhTPNCup0+jAVIOIBp2YmhCbk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198 (0x896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E
        Validity
            Not Before: Aug 18 20:59:50 2026 GMT
            Not After : Aug 25 20:59:50 2026 GMT
        Subject: CN=6a84c7c7-964f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:4b:92:cf:3e:03:32:40:38:6b:b5:05:0b:
                    29:99:c8:b9:71:e4:28:1d:99:5c:ad:2c:d3:be:82:
                    5f:f1:b0:b7:59:b6:9d:ed:ec:63:34:2b:c7:d2:05:
                    f3:35:fd:a6:74:ee:53:d6:79:31:73:e3:40:ca:a2:
                    7a:a9:8c:c4:02:22:2b:d9:5d:4d:b8:84:8f:dc:65:
                    09:1b:60:b1:2d:51:3c:d9:13:89:ba:7d:f4:df:80:
                    fe:d9:06:5c:17:00:f4:b4:64:3c:97:16:f4:cf:26:
                    73:39:6f:ee:ed:b4:d0:16:6f:d5:02:32:bc:d6:b1:
                    e3:ac:88:a1:7f:9a:f7:4a:45:ed:b6:86:f4:9d:66:
                    0b:ae:f9:19:44:5e:b9:3f:f0:31:c9:ff:8b:64:e3:
                    4b:03:34:eb:59:ca:14:8b:11:ba:28:b5:44:1c:ea:
                    dd:f1:51:25:26:9c:29:6d:9e:cb:b7:e3:1e:8e:44:
                    1c:dd:62:11:33:57:b1:a7:00:b9:fb:5c:a5:23:32:
                    6d:51:3a:37:a8:fe:ea:04:d8:fb:f8:e4:93:35:a8:
                    63:2e:51:a3:07:3a:12:7a:36:8a:6c:b8:ad:5a:6c:
                    ae:c5:85:cc:d4:5b:d4:2d:78:7f:fb:dc:25:e6:4b:
                    e8:eb:99:92:70:01:87:af:ee:a7:b8:8a:ec:c2:57:
                    67:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FD:26:F1:C0:15:2D:1B:B7:5B:B2:D5:DC:BE:10:59:62:47:5A:03
            X509v3 Authority Key Identifier:
                keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:f1:1f:8b:ee:38:0f:28:ec:0e:de:e3:2a:6a:84:48:9f:28:
         f0:54:ec:25:34:bb:19:36:9e:b7:8b:74:48:5c:93:5b:59:72:
         3b:82:8c:65:5c:17:6d:f2:75:b0:dd:19:14:d4:e7:57:f0:c9:
         1d:2b:99:26:14:fd:94:7f:cb:60:85:f2:4d:5a:2d:66:22:17:
         08:a7:80:35:0a:11:5f:0a:fc:b0:ed:1c:93:e2:fe:90:e3:e6:
         d3:ef:05:9c:af:b6:45:ad:03:3d:83:69:3b:71:d6:b9:31:de:
         35:40:b6:a8:9a:bf:4e:08:2e:60:29:95:51:9c:d2:c2:cb:af:
         dc:9a:97:11:c5:3a:2d:3e:ca:06:4d:34:4a:8d:e7:37:b1:0d:
         a8:dd:d2:bb:89:9b:2c:6d:f4:4c:70:7f:48:e8:47:f3:86:5a:
         7c:4c:81:28:85:97:82:e7:98:07:ef:6a:1f:a4:e5:9d:aa:24:
         d3:ed:aa:c8:b5:1e:09:e9:60:a1:be:e6:a0:bd:03:ea:29:b2:
         91:6f:c0:07:09:2a:2d:e6:3b:98:1c:b5:7a:63:18:f7:15:03:
         2b:05:a3:cf:b4:3b:7e:5e:19:01:37:fa:8c:fa:10:72:1a:62:
         a1:35:39:12:3b:57:da:37:99:e4:50:3f:d9:8b:f6:2b:6d:3b:
         ea:f0:a7:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz
OEJFNTQwOUUwHhcNMjYwODE4MjA1OTUwWhcNMjYwODI1MjA1OTUwWjAYMRYwFAYD
VQQDEw02YTg0YzdjNy05NjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWhLks8+AzJAOGu1BQspmci5ceQoHZlcrSzTvoJf8bC3Wbad7exjNCvH0gXz
Nf2mdO5T1nkxc+NAyqJ6qYzEAiIr2V1NuISP3GUJG2CxLVE82ROJun3034D+2QZc
FwD0tGQ8lxb0zyZzOW/u7bTQFm/VAjK81rHjrIihf5r3SkXttob0nWYLrvkZRF65
P/Axyf+LZONLAzTrWcoUixG6KLVEHOrd8VElJpwpbZ7Lt+MejkQc3WIRM1expwC5
+1ylIzJtUTo3qP7qBNj7+OSTNahjLlGjBzoSejaKbLitWmyuxYXM1FvULXh/+9wl
5kvo65mScAGHr+6nuIrswldnVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJT9JvHA
FS0bt1uy1dy+EFliR1oDMB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy
QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq
d3pXelBFbUNwelk0dmxRSjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2/Efi+44DyjsDt7jKmqESJ8o8FTsJTS7GTaet4t0SFyTW1lyO4KMZVwXbfJ1
sN0ZFNTnV/DJHSuZJhT9lH/LYIXyTVotZiIXCKeANQoRXwr8sO0ck+L+kOPm0+8F
nK+2Ra0DPYNpO3HWuTHeNUC2qJq/TgguYCmVUZzSwsuv3JqXEcU6LT7KBk00So3n
N7ENqN3Su4mbLG30THB/SOhH84ZafEyBKIWXgueYB+9qH6Tlnaok0+2qyLUeCelg
ob7moL0D6imykW/ABwkqLeY7mBy1emMY9xUDKwWjz7Q7fl4ZATf6jPoQchpioTU5
EjtX2jeZ5FA/2Yv2K2076vCnVg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:59 2026 by rpki-client