Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
File:                     fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft (raw, json)
Hash identifier:          60nbMqUz04iQvQb1R4QAx2KF4Mxhz/CE0gHs5Fc/bvE=
Subject key identifier:   AC:59:50:B6:3C:52:C6:3C:86:43:18:B2:1E:E5:6E:9A:27:E9:96:D8
Authority key identifier: 7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D
Certificate issuer:       /CN=A91DF26F/serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
Certificate serial:       3586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
Manifest number:          357E
Signing time:             Fri 04 Sep 2026 14:38:23 +0000
Manifest this update:     Fri 04 Sep 2026 14:38:22 +0000
Manifest next update:     Fri 11 Sep 2026 14:38:22 +0000
Files and hashes:         1: fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl (hash: znBFqvFrOkidna1FlYFOSMX9PpaSRijxUlj140EwCCY=)
                          2: 3AF0F3E028CB11F195C91CE1BF833773.roa (hash: H6MyZAwL1N2/89I0jCajMU0eiEbSrWAvn6d7upb1hyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl
                          rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF26F, serialNumber=7CD4AEE47CB21DAE9877EFF41F04BE95D973686D
        Validity
            Not Before: Sep  4 14:38:22 2026 GMT
            Not After : Sep 11 14:38:22 2026 GMT
        Subject: CN=6a9ad7df-32e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:69:39:74:42:a5:ea:0e:6f:01:b0:29:8c:
                    68:6c:29:04:d3:d5:2f:2f:6e:42:88:37:41:aa:f9:
                    80:7d:36:eb:be:eb:40:ff:78:78:97:98:af:7b:01:
                    b0:35:2a:52:6d:ec:e5:dd:24:e0:da:34:0c:d3:cb:
                    ee:7e:e0:a3:48:b8:5b:ff:23:31:c0:63:05:1d:26:
                    4c:c1:18:e9:29:e2:13:3b:50:a6:6a:86:b8:30:59:
                    78:0a:e8:6a:f9:b9:65:4c:2e:21:4b:fe:07:a5:98:
                    3e:a2:b1:e7:7f:ba:f7:e9:6c:a9:ea:d1:5e:0a:ab:
                    95:6f:bb:61:cc:f5:a4:ea:79:dd:db:4e:5e:42:70:
                    1c:62:d8:13:dc:6b:27:b0:74:2b:b8:f6:e4:75:77:
                    6d:f3:4f:fd:8d:60:7b:e6:81:f2:e6:54:2a:05:ab:
                    a9:76:3f:fb:e3:1b:e0:04:50:80:b1:bd:d9:4a:47:
                    5e:a2:fe:c9:e3:8a:8a:f0:70:41:41:51:b4:cb:7a:
                    31:96:a1:8b:4b:77:53:b9:7f:ad:0a:38:67:7c:04:
                    6f:32:0c:e3:20:3a:3d:04:2d:f4:fd:66:78:1c:22:
                    da:c3:62:eb:5d:e8:92:8f:0d:d9:a3:e4:c1:55:a5:
                    23:a7:72:17:26:1f:6a:85:00:02:1e:11:cb:03:d5:
                    f0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:59:50:B6:3C:52:C6:3C:86:43:18:B2:1E:E5:6E:9A:27:E9:96:D8
            X509v3 Authority Key Identifier:
                keyid:7C:D4:AE:E4:7C:B2:1D:AE:98:77:EF:F4:1F:04:BE:95:D9:73:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF26F/879684961D8E11E2B151F0EC08B02CD2/fNSu5HyyHa6Yd-_0HwS-ldlzaG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:6b:97:7a:a8:6e:b7:59:60:44:d2:45:09:33:c5:e6:d1:68:
         75:42:6b:6d:11:64:4b:df:dc:00:be:1e:d9:f2:e9:1b:de:ec:
         2a:f3:e8:bf:06:bc:31:31:a9:82:b1:e0:74:f9:3a:ea:50:51:
         a4:06:30:93:7c:d7:79:9e:9c:15:9a:cb:f1:d6:03:bd:b7:9c:
         d3:49:bb:75:cd:19:ef:1e:1c:f6:64:69:6b:b6:1d:fb:58:1c:
         48:49:4a:c4:74:17:73:e1:93:23:31:12:40:dd:1f:93:73:b0:
         4f:55:7a:ca:e5:2e:f9:f2:7a:58:80:47:f2:1a:53:36:df:0f:
         e4:05:25:de:94:0b:d5:c5:fb:51:f9:14:bc:2f:6b:14:4e:b4:
         eb:05:c6:f2:aa:02:b3:66:4e:7e:22:c9:4b:99:c8:1f:64:70:
         ca:cb:51:90:1a:73:95:c4:f2:73:f8:18:85:43:2a:bf:cf:72:
         5b:a9:67:a3:d1:41:95:e0:ed:1f:d3:a6:00:fe:7f:07:81:21:
         d8:bc:ab:d0:ff:7f:64:81:b1:08:1a:16:09:1b:ea:08:1a:0f:
         1c:79:50:39:a1:8d:c0:1e:05:e8:b0:00:6d:36:50:5a:b5:9c:
         46:de:15:fc:ff:cd:94:5d:f4:65:33:3d:f9:41:7c:b1:ee:e9:
         e0:12:65:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REYyNkYxMTAvBgNVBAUTKDdDRDRBRUU0N0NCMjFEQUU5ODc3RUZGNDFGMDRCRTk1
RDk3MzY4NkQwHhcNMjYwOTA0MTQzODIyWhcNMjYwOTExMTQzODIyWjAYMRYwFAYD
VQQDEw02YTlhZDdkZi0zMmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtfJpOXRCpeoObwGwKYxobCkE09UvL25CiDdBqvmAfTbrvutA/3h4l5ivewGw
NSpSbezl3STg2jQM08vufuCjSLhb/yMxwGMFHSZMwRjpKeITO1Cmaoa4MFl4Cuhq
+bllTC4hS/4HpZg+orHnf7r36Wyp6tFeCquVb7thzPWk6nnd205eQnAcYtgT3Gsn
sHQruPbkdXdt80/9jWB75oHy5lQqBaupdj/74xvgBFCAsb3ZSkdeov7J44qK8HBB
QVG0y3oxlqGLS3dTuX+tCjhnfARvMgzjIDo9BC30/WZ4HCLaw2LrXeiSjw3Zo+TB
VaUjp3IXJh9qhQACHhHLA9XwTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKxZULY8
UsY8hkMYsh7lbpon6ZbYMB8GA1UdIwQYMBaAFHzUruR8sh2umHfv9B8EvpXZc2ht
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjI2Ri84Nzk2ODQ5NjFE
OEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhhNllkLV8wSHdTLWxkbHph
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZOU3U1SHl5SGE2WWQtXzBId1MtbGRsemFHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjI2Ri84Nzk2ODQ5NjFEOEUxMUUyQjE1MUYwRUMwOEIwMkNEMi9mTlN1NUh5eUhh
NllkLV8wSHdTLWxkbHphRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwWuXeqhut1lgRNJFCTPF5tFodUJrbRFkS9/cAL4e2fLpG97sKvPovwa8MTGp
grHgdPk66lBRpAYwk3zXeZ6cFZrL8dYDvbec00m7dc0Z7x4c9mRpa7Yd+1gcSElK
xHQXc+GTIzESQN0fk3OwT1V6yuUu+fJ6WIBH8hpTNt8P5AUl3pQL1cX7UfkUvC9r
FE606wXG8qoCs2ZOfiLJS5nIH2RwystRkBpzlcTyc/gYhUMqv89yW6lno9FBleDt
H9OmAP5/B4Eh2Lyr0P9/ZIGxCBoWCRvqCBoPHHlQOaGNwB4F6LAAbTZQWrWcRt4V
/P/NlF30ZTM9+UF8se7p4BJlzg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 12:35:46 2026 by rpki-client