Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File:                     hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier:          MZLqH7hwSVyFnU7ek+hsY6GEOsQe2OXVUfQH7V5iEgw=
Subject key identifier:   48:46:8A:BE:86:D6:33:1A:14:71:CF:9D:A3:44:A8:D9:45:F7:77:07
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer:       /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number:          91
Signing time:             Sat 03 Oct 2026 08:11:53 +0000
Manifest this update:     Sat 03 Oct 2026 08:11:52 +0000
Manifest next update:     Sat 10 Oct 2026 08:11:52 +0000
Files and hashes:         1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: Ae1M4Z8KeUPJ39qP3lo6FG6DaFzjKr2Ndk6lEM4zglM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
        Validity
            Not Before: Oct  3 08:11:52 2026 GMT
            Not After : Oct 10 08:11:52 2026 GMT
        Subject: CN=6ac0b8c9-090c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:b7:b0:c2:3b:25:6e:81:2b:c6:97:07:2b:
                    a2:fb:4c:3d:65:cd:92:41:7f:cc:31:77:e3:ea:3f:
                    9c:12:32:78:c0:9d:24:92:9c:9d:c6:05:bd:3e:1c:
                    88:5e:6b:bf:e3:34:fc:99:97:4e:e9:dd:8a:8d:91:
                    31:2b:6c:c6:ac:6a:0a:a5:2c:37:cf:93:94:be:ec:
                    bb:05:63:e2:df:6b:ab:0a:33:70:f7:4e:e3:bc:5a:
                    e4:12:4c:de:72:cc:73:66:28:5b:b1:36:1f:e7:04:
                    a0:e5:6d:95:9d:02:89:cb:97:f0:2f:8c:a4:5a:07:
                    0c:2a:4c:bf:e3:9a:ca:ab:9a:82:2d:7b:27:00:22:
                    cf:d9:65:79:3e:31:3f:d0:b8:d9:8d:f4:ea:ad:20:
                    f9:3d:a1:86:61:6a:36:d1:16:59:50:67:3b:a6:c9:
                    9a:d4:2d:05:89:b3:37:de:8b:a7:fe:01:cb:09:3c:
                    7f:39:91:52:38:6c:88:f9:66:25:a6:2f:a8:d2:b4:
                    32:f1:3e:79:33:74:74:20:59:eb:94:3e:0a:53:c4:
                    ea:61:13:fb:8d:1e:65:90:d2:9b:42:dd:65:d2:cb:
                    79:c5:4c:9c:23:39:a7:c1:ed:9b:a7:ef:ee:81:b8:
                    ab:8d:cb:e3:15:b1:25:94:dd:b9:ac:c0:32:90:24:
                    73:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:46:8A:BE:86:D6:33:1A:14:71:CF:9D:A3:44:A8:D9:45:F7:77:07
            X509v3 Authority Key Identifier:
                keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:41:2d:71:3b:0e:56:03:64:85:56:55:98:ed:45:d7:c4:8f:
         33:22:ac:86:22:e0:b4:d8:36:4d:71:ac:32:62:ae:1d:bc:d6:
         47:a0:0f:55:17:35:fa:41:6a:77:ff:4e:90:c6:82:78:19:09:
         e8:01:52:b4:6a:fc:b1:f4:26:8c:7d:f7:79:5a:e7:c7:ee:50:
         d7:64:56:b8:ae:fc:a8:50:1d:68:7d:65:a5:1b:d0:8d:da:9d:
         d0:41:b9:c6:48:74:f7:f5:cd:b6:73:91:d4:45:b9:cb:27:51:
         5e:bc:8f:a6:e4:e4:12:85:6a:a2:7a:d6:a8:16:14:0c:4f:f3:
         92:e4:3d:bd:da:f4:57:f1:00:21:75:c9:d5:29:c7:3c:f2:f5:
         11:8f:ca:5c:63:88:7a:56:0b:07:fb:27:69:ac:ce:1f:cb:65:
         35:73:b2:a3:c4:59:53:97:f9:5b:f8:bc:bf:ac:92:dc:e9:5e:
         3c:7b:ec:37:56:62:80:6b:7a:22:13:4e:aa:ff:06:9d:f8:29:
         fb:50:5a:e6:97:63:3c:b6:7a:aa:6e:0d:e5:2e:46:65:9d:4b:
         1e:61:ec:fe:86:ee:8e:d4:56:25:ef:3f:61:7e:bb:e6:e3:23:
         db:a6:d2:4f:12:17:38:da:1c:52:ef:1b:12:1a:f0:8b:4e:a1:
         70:d5:64:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUzMzQxMTAvBgNVBAUTKDg1OEJCQzkwMkMwNzdGNkUwMzEzQUVEQzQ5REIzNkU2
RkVGMjM0QjIwHhcNMjYxMDAzMDgxMTUyWhcNMjYxMDEwMDgxMTUyWjAYMRYwFAYD
VQQDEw02YWMwYjhjOS0wOTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp7q3sMI7JW6BK8aXByui+0w9Zc2SQX/MMXfj6j+cEjJ4wJ0kkpydxgW9PhyI
Xmu/4zT8mZdO6d2KjZExK2zGrGoKpSw3z5OUvuy7BWPi32urCjNw907jvFrkEkze
csxzZihbsTYf5wSg5W2VnQKJy5fwL4ykWgcMKky/45rKq5qCLXsnACLP2WV5PjE/
0LjZjfTqrSD5PaGGYWo20RZZUGc7psma1C0FibM33oun/gHLCTx/OZFSOGyI+WYl
pi+o0rQy8T55M3R0IFnrlD4KU8TqYRP7jR5lkNKbQt1l0st5xUycIzmnwe2bp+/u
gbirjcvjFbEllN25rMAykCRzoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhGir6G
1jMaFHHPnaNEqNlF93cHMB8GA1UdIwQYMBaAFIWLvJAsB39uAxOu3EnbNub+8jSy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMzNC9DNTEyNkNDRUU1
NzkxMUYwODM2RUVBQTE0MTZGNTZCQy9oWXU4a0N3SGYyNERFNjdjU2RzMjV2N3lO
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hZdThrQ3dIZjI0REU2N2NTZHMyNXY3eU5MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTMzNC9DNTEyNkNDRUU1NzkxMUYwODM2RUVBQTE0MTZGNTZCQy9oWXU4a0N3SGYy
NERFNjdjU2RzMjV2N3lOTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB0EtcTsOVgNkhVZVmO1F18SPMyKshiLgtNg2TXGsMmKuHbzWR6APVRc1+kFq
d/9OkMaCeBkJ6AFStGr8sfQmjH33eVrnx+5Q12RWuK78qFAdaH1lpRvQjdqd0EG5
xkh09/XNtnOR1EW5yydRXryPpuTkEoVqonrWqBYUDE/zkuQ9vdr0V/EAIXXJ1SnH
PPL1EY/KXGOIelYLB/snaazOH8tlNXOyo8RZU5f5W/i8v6yS3OlePHvsN1ZigGt6
IhNOqv8Gnfgp+1Ba5pdjPLZ6qm4N5S5GZZ1LHmHs/obujtRWJe8/YX675uMj26bS
TxIXONocUu8bEhrwi06hcNVkyA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:29:32 2026 by rpki-client