Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
File:                     RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json)
Hash identifier:          EuREjBHLqT9qai1DaM4HtTcNEYw0V74DWAuf1iB9eBI=
Subject key identifier:   63:15:79:7E:76:6B:B0:F9:03:DD:84:16:F1:84:48:E4:19:77:F0:62
Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5
Certificate issuer:       /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
Manifest number:          B9
Signing time:             Wed 09 Sep 2026 07:07:05 +0000
Manifest this update:     Wed 09 Sep 2026 07:07:05 +0000
Manifest next update:     Wed 16 Sep 2026 07:07:05 +0000
Files and hashes:         1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: CTffJrWtoi/FYsIDAwNSqv/pXvkTk4wcJy7jF+1s4F0=)
                          2: 8EA99A70B53311F09D886D26C4F9AE02.roa (hash: 8wP/NlNE2Z/JRbzUdllp1czpJ2kBXEzpgll4z9yQeFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 07:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5
        Validity
            Not Before: Sep  9 07:07:05 2026 GMT
            Not After : Sep 16 07:07:05 2026 GMT
        Subject: CN=6aa10599-fa07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:55:b8:55:95:bd:0c:a2:f6:cc:32:ef:6a:8b:
                    36:a0:ba:f2:f8:b2:d2:f5:c7:52:44:6a:d6:58:ad:
                    63:d3:fa:0e:b9:33:ba:2b:91:43:1b:f3:6c:92:56:
                    25:10:6f:31:2c:5a:fb:43:d6:9b:6d:42:a8:27:4d:
                    09:e6:83:ad:31:ab:c5:1f:3f:49:63:92:e6:8c:b5:
                    5c:2b:f8:7f:27:d5:4e:c4:a2:b5:3b:28:99:bf:d3:
                    98:b0:31:a6:6c:98:63:b5:94:4b:9a:55:bd:7a:2c:
                    2a:d7:fe:c2:0c:ba:48:d4:d7:1b:27:6d:14:f9:c6:
                    41:2d:1c:03:75:c6:80:af:70:a1:46:65:ed:4c:3d:
                    ac:e1:82:c2:89:76:6b:ba:73:a5:3c:c5:55:f8:22:
                    c9:68:bd:59:75:e0:d1:0f:8d:a5:8b:62:07:99:72:
                    6a:04:99:16:6e:ff:21:ab:9e:17:41:c1:95:27:85:
                    13:1b:85:b1:ba:28:bd:30:a9:32:36:76:f5:c2:f5:
                    47:53:08:2c:cc:1e:7e:66:e4:53:fd:1c:4b:3d:53:
                    17:1d:05:34:8b:48:c4:7c:01:ba:ab:ad:dc:d7:e6:
                    ec:f2:3c:e7:91:b1:6e:91:5f:5b:02:cc:28:1f:ee:
                    e4:e3:cd:dd:f1:53:c3:eb:62:a9:fe:19:67:d5:30:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:15:79:7E:76:6B:B0:F9:03:DD:84:16:F1:84:48:E4:19:77:F0:62
            X509v3 Authority Key Identifier:
                keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:be:2a:20:32:4f:5a:9a:9d:aa:91:d2:51:65:fa:f3:e0:
         aa:94:22:1f:4b:2c:1e:fd:51:e0:d2:fe:05:41:50:91:4b:88:
         14:a6:b1:d9:61:01:e1:1e:08:2e:ad:cb:a9:71:1a:e8:54:7d:
         32:2b:31:37:0b:1c:25:dc:96:ae:0c:42:d4:2f:7a:42:70:1b:
         9f:08:36:96:ca:f6:fd:15:e9:8b:5d:8a:ea:6f:1a:0c:2e:e6:
         00:6b:66:71:1c:0e:a2:39:2a:3c:c4:73:61:7a:20:ce:2a:c7:
         79:bc:34:fb:80:9e:fc:9a:a8:aa:06:9a:e5:7d:6c:8a:57:f1:
         8c:b1:9f:d1:c0:3e:00:90:b1:fa:95:c0:91:b4:bb:d3:58:15:
         ca:eb:12:ac:8c:7f:25:28:e2:92:b4:9f:cd:9a:e3:b0:3c:6b:
         c3:3a:8d:71:90:8d:14:bc:b7:9f:83:b6:8c:02:01:12:9f:37:
         1f:82:1e:d4:43:f2:87:4d:07:33:cc:2c:73:0d:1d:dd:86:57:
         0c:50:4e:0f:88:af:e8:f7:1b:ae:77:18:1c:61:95:3b:b5:12:
         a6:a4:4f:76:98:20:e2:74:03:71:e9:a7:9e:97:38:b2:c9:47:
         d7:88:b4:7c:32:ce:3c:33:1f:41:3d:77:2c:f8:ef:46:09:80:
         52:cf:64:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCMDExMTAvBgNVBAUTKDQ0N0Q1OTgzQkYwREI5MTFBRDhGRENCNjc0MTQ1RjZD
NThGODNDRDUwHhcNMjYwOTA5MDcwNzA1WhcNMjYwOTE2MDcwNzA1WjAYMRYwFAYD
VQQDEw02YWExMDU5OS1mYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzFW4VZW9DKL2zDLvaos2oLry+LLS9cdSRGrWWK1j0/oOuTO6K5FDG/NsklYl
EG8xLFr7Q9abbUKoJ00J5oOtMavFHz9JY5LmjLVcK/h/J9VOxKK1OyiZv9OYsDGm
bJhjtZRLmlW9eiwq1/7CDLpI1NcbJ20U+cZBLRwDdcaAr3ChRmXtTD2s4YLCiXZr
unOlPMVV+CLJaL1ZdeDRD42li2IHmXJqBJkWbv8hq54XQcGVJ4UTG4Wxuii9MKky
Nnb1wvVHUwgszB5+ZuRT/RxLPVMXHQU0i0jEfAG6q63c1+bs8jznkbFukV9bAswo
H+7k483d8VPD62Kp/hln1TCFOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMVeX52
a7D5A92EFvGESOQZd/BiMB8GA1UdIwQYMBaAFER9WYO/DbkRrY/ctnQUX2xY+DzV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIwMS8zMkVFMEE2RTk5
RTkxMUYwOTc4RDQwNzJDNEY5QUUwMi9SSDFaZzc4TnVSR3RqOXkyZEJSZmJGajRQ
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBOVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUIwMS8zMkVFMEE2RTk5RTkxMUYwOTc4RDQwNzJDNEY5QUUwMi9SSDFaZzc4TnVS
R3RqOXkyZEJSZmJGajRQTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS7u+KiAyT1qanaqR0lFl+vPgqpQiH0ssHv1R4NL+BUFQkUuIFKax2WEB4R4I
Lq3LqXEa6FR9MisxNwscJdyWrgxC1C96QnAbnwg2lsr2/RXpi12K6m8aDC7mAGtm
cRwOojkqPMRzYXogzirHebw0+4Ce/Jqoqgaa5X1silfxjLGf0cA+AJCx+pXAkbS7
01gVyusSrIx/JSjikrSfzZrjsDxrwzqNcZCNFLy3n4O2jAIBEp83H4Ie1EPyh00H
M8wscw0d3YZXDFBOD4iv6PcbrncYHGGVO7USpqRPdpgg4nQDcemnnpc4sslH14i0
fDLOPDMfQT13LPjvRgmAUs9kKQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:30 2026 by rpki-client