Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File:                     PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier:          Bo2FcVw21y8hahXCbAsuYfdLfPQsCelGg7erPEmnkUo=
Subject key identifier:   80:9D:D1:42:1C:B5:74:55:FF:4C:26:8D:FA:36:20:0F:EA:40:07:F7
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer:       /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial:       0541
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number:          0539
Signing time:             Tue 06 Oct 2026 23:39:24 +0000
Manifest this update:     Tue 06 Oct 2026 23:39:23 +0000
Manifest next update:     Tue 13 Oct 2026 23:39:23 +0000
Files and hashes:         1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: VeJl/zqQxjilg0gP4MTd8AA6/BN2uVSh7L+PCE9iwN4=)
                          2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: MZAkwEcI/RhPtb0HLVaP6vZemaPmWHrryFBvzadhdrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 23:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
        Validity
            Not Before: Oct  6 23:39:23 2026 GMT
            Not After : Oct 13 23:39:23 2026 GMT
        Subject: CN=6ac586ab-0bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:65:d2:68:c4:9b:e4:5a:d2:13:94:a6:b4:
                    c6:48:b7:c0:20:47:e2:fa:f4:f0:7f:98:29:46:b2:
                    a3:e6:14:ef:f0:4b:41:00:fa:95:fa:13:0e:8b:42:
                    44:39:3a:3a:5f:ba:8b:3d:5d:dc:f0:15:b6:0c:6a:
                    e5:d6:64:0c:53:fd:92:f0:1b:75:5a:cd:fc:9e:5b:
                    ed:a1:f8:29:23:ea:cf:50:e9:f9:e4:c4:f3:6f:0c:
                    d6:7c:eb:85:ce:c5:5e:51:52:f9:3e:8f:e9:a2:b1:
                    03:4f:69:c1:5b:40:29:4d:41:e5:01:9e:a1:07:ff:
                    ee:e1:8b:b0:a5:6c:ff:5e:95:3c:12:99:cc:a1:52:
                    6f:7a:90:02:e1:21:6a:35:c4:73:c4:da:1c:f0:5f:
                    5d:f9:a9:6f:01:b1:f8:81:b9:b2:84:d5:1c:04:ed:
                    2c:00:8b:1f:ae:5e:21:28:bf:c9:e1:ac:3f:da:f1:
                    f9:44:be:58:54:53:f7:54:25:a7:d6:4c:de:8a:b8:
                    2d:43:8c:65:c3:a3:07:61:a2:43:b0:fc:a5:e3:38:
                    84:db:12:37:54:51:41:07:a2:cd:10:d5:aa:43:24:
                    37:3f:8e:ef:89:a9:f9:3c:f3:b5:f9:4f:9f:d3:5a:
                    38:12:48:db:ec:a5:93:2e:cf:0c:53:ab:d9:57:1c:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9D:D1:42:1C:B5:74:55:FF:4C:26:8D:FA:36:20:0F:EA:40:07:F7
            X509v3 Authority Key Identifier:
                keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8a:b6:96:3c:98:39:c9:5f:33:3c:d7:99:cf:a2:63:07:e5:
         b0:38:69:de:7d:33:34:6d:3d:c5:a0:46:f8:e8:2b:2a:96:8c:
         39:0c:7b:cf:68:fd:c2:4f:7a:8e:71:b7:d8:97:a9:37:60:b0:
         ea:1f:59:76:7c:4c:b9:2e:59:e6:e3:65:dc:aa:01:f3:4f:d0:
         fe:fa:fa:40:6f:ef:c6:69:b0:a8:18:fd:c7:68:0d:3e:78:9e:
         9e:4c:d4:2d:32:6f:06:cb:a1:1a:f5:84:93:a9:c8:28:72:d1:
         f3:3f:4f:8e:7c:bd:ab:ed:1e:44:3a:38:16:d4:f6:3d:0a:e8:
         a7:83:0e:7c:32:6c:16:d6:a9:10:1e:01:78:ae:f8:67:8d:87:
         fb:fd:e3:6b:82:b2:75:3a:26:a8:f6:af:4b:d4:88:9b:2e:63:
         8b:0b:37:80:72:1f:4e:f9:6c:3c:bd:da:10:3c:84:e0:f3:23:
         22:04:31:b3:53:6f:15:d5:d5:8c:a3:59:d6:46:b6:2b:e7:ac:
         ff:4d:4e:f1:1b:72:12:bf:47:91:9e:cb:25:3d:f0:70:7d:2c:
         08:09:75:9f:a6:52:e1:f5:56:80:22:de:02:9f:be:00:f8:a8:
         d2:fd:1a:d7:db:5e:f9:e7:77:9a:c8:f2:15:67:0d:ef:99:0b:
         7f:10:a3:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBFRjIxMTAvBgNVBAUTKDNENUQ4NjQ3QUJBOUJCNDA2MjVDM0M2NDNDRDgzNjdG
MTUwNzgwMUEwHhcNMjYxMDA2MjMzOTIzWhcNMjYxMDEzMjMzOTIzWjAYMRYwFAYD
VQQDEw02YWM1ODZhYi0wYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0Fl0mjEm+Ra0hOUprTGSLfAIEfi+vTwf5gpRrKj5hTv8EtBAPqV+hMOi0JE
OTo6X7qLPV3c8BW2DGrl1mQMU/2S8Bt1Ws38nlvtofgpI+rPUOn55MTzbwzWfOuF
zsVeUVL5Po/porEDT2nBW0ApTUHlAZ6hB//u4YuwpWz/XpU8EpnMoVJvepAC4SFq
NcRzxNoc8F9d+alvAbH4gbmyhNUcBO0sAIsfrl4hKL/J4aw/2vH5RL5YVFP3VCWn
1kzeirgtQ4xlw6MHYaJDsPyl4ziE2xI3VFFBB6LNENWqQyQ3P47vian5PPO1+U+f
01o4Ekjb7KWTLs8MU6vZVxwTewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFICd0UIc
tXRV/0wmjfo2IA/qQAf3MB8GA1UdIwQYMBaAFD1dhkerqbtAYlw8ZDzYNn8VB4Aa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9BQjZCMjdGNjVF
RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUwQmlYRHhrUE5nMmZ4VUhn
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1BWMkdSNnVwdTBCaVhEeGtQTmcyZnhVSGdCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEVGMi9BQjZCMjdGNjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9QVjJHUjZ1cHUw
QmlYRHhrUE5nMmZ4VUhnQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgoq2ljyYOclfMzzXmc+iYwflsDhp3n0zNG09xaBG+OgrKpaMOQx7z2j9wk96
jnG32JepN2Cw6h9ZdnxMuS5Z5uNl3KoB80/Q/vr6QG/vxmmwqBj9x2gNPnienkzU
LTJvBsuhGvWEk6nIKHLR8z9Pjny9q+0eRDo4FtT2PQrop4MOfDJsFtapEB4BeK74
Z42H+/3ja4KydTomqPavS9SImy5jiws3gHIfTvlsPL3aEDyE4PMjIgQxs1NvFdXV
jKNZ1ka2K+es/01O8RtyEr9HkZ7LJT3wcH0sCAl1n6ZS4fVWgCLeAp++APio0v0a
19te+ed3msjyFWcN75kLfxCjzA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:44:36 2026 by rpki-client