Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
File:                     4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft (raw, json)
Hash identifier:          8H2XvvT1mkL+yXI4EBsE15nSOLNRgDUHTVflAIQ6+QU=
Subject key identifier:   33:06:CA:46:2E:48:79:13:1B:2E:BA:7D:11:CB:EC:BF:CE:35:EC:BD
Authority key identifier: E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88
Certificate issuer:       /CN=A91E3441/serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
Manifest number:          8B
Signing time:             Mon 05 Oct 2026 07:58:40 +0000
Manifest this update:     Mon 05 Oct 2026 07:58:39 +0000
Manifest next update:     Mon 12 Oct 2026 07:58:39 +0000
Files and hashes:         1: 4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl (hash: u82ouK5xmBecsMdgnEHAVVhfHKRd0QkoUbuxVSPzpx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl
                          rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3441, serialNumber=E12923F7E0AA8BB2700DC889CFE90D90EA126188
        Validity
            Not Before: Oct  5 07:58:39 2026 GMT
            Not After : Oct 12 07:58:39 2026 GMT
        Subject: CN=6ac358b0-37da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:37:67:49:32:4b:78:b5:6f:bf:d5:08:da:
                    f3:8e:dd:16:25:76:07:f1:00:46:fe:ee:aa:ce:d7:
                    34:ed:52:fd:cf:71:1e:74:28:81:52:ad:76:16:a4:
                    eb:2b:ec:bc:73:28:dd:1f:67:bf:ee:45:21:65:dd:
                    a7:a8:aa:7b:b1:de:d0:04:0f:9a:ec:c9:b7:1c:67:
                    7d:c7:73:ea:63:2c:6b:85:60:27:b1:2f:10:fc:28:
                    6b:bc:81:6b:ba:fd:9e:5f:38:90:61:1d:45:8e:26:
                    0b:ac:b6:b7:62:5e:9e:f3:d9:5c:89:01:39:09:f9:
                    50:b9:cc:38:d3:57:7f:17:68:8f:46:e8:c2:45:b5:
                    18:3a:40:18:f0:80:36:a8:a1:ca:b3:be:fd:b4:a1:
                    24:4d:02:1b:29:b5:37:1b:92:e7:53:c4:c1:37:33:
                    ba:fd:26:86:88:e9:42:4f:fd:b8:f9:ed:86:da:01:
                    7e:70:03:fa:fd:3a:9d:3b:f0:bb:42:89:ba:26:26:
                    5a:18:3b:40:4b:92:c4:92:03:ed:de:e3:97:c8:79:
                    d9:82:a1:16:b1:b7:21:c2:d1:dc:ca:21:20:36:db:
                    7b:5d:b5:34:e3:a0:48:bf:98:b4:07:f1:c5:35:06:
                    23:a6:d9:a3:6f:ac:1e:85:eb:f0:c2:02:b3:cf:86:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:06:CA:46:2E:48:79:13:1B:2E:BA:7D:11:CB:EC:BF:CE:35:EC:BD
            X509v3 Authority Key Identifier:
                keyid:E1:29:23:F7:E0:AA:8B:B2:70:0D:C8:89:CF:E9:0D:90:EA:12:61:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Skj9-Cqi7JwDciJz-kNkOoSYYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3441/E9C50338EE9D11F0ACE25C9D666F56BC/4Skj9-Cqi7JwDciJz-kNkOoSYYg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:9b:cf:84:0e:75:85:b7:45:6d:6f:04:68:c4:5e:fb:b4:d7:
         ac:87:7a:ee:31:be:5a:21:e1:a4:cd:95:d6:b2:52:aa:04:91:
         07:a8:03:96:a6:74:88:6f:64:2c:40:6d:14:3f:13:17:91:8b:
         9d:a7:9b:b4:bf:ed:5d:0d:6f:21:5b:ca:55:48:72:cd:94:a5:
         64:19:e2:07:cc:a7:d5:35:d2:d0:8a:3c:4a:38:25:d8:bb:29:
         2d:1e:71:f1:b8:fe:de:be:7b:f5:ab:51:52:e7:32:c8:48:61:
         f1:c9:de:f1:df:88:d4:2e:c8:a0:cb:f8:69:da:66:bf:06:80:
         f1:22:d9:44:d5:d8:dc:02:7c:e7:64:95:98:8f:5d:09:ca:15:
         dd:35:2d:bf:cb:bb:a9:94:76:db:bc:3e:b6:fb:b0:09:73:1a:
         80:54:19:63:39:ce:d5:c7:ee:0f:dd:99:02:5c:7a:99:2a:26:
         01:da:dd:99:33:3a:5b:f1:51:90:8d:0a:85:76:c4:a0:c7:28:
         33:0f:76:aa:a5:ae:5d:4c:85:3d:96:46:c2:c8:1d:c7:98:5b:
         db:7f:19:f9:94:9e:3c:44:c0:84:54:34:dc:b2:49:ea:90:83:
         db:44:db:bd:c6:45:e9:85:f7:58:d5:ea:6d:8a:71:33:32:88:
         ae:89:62:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM0NDExMTAvBgNVBAUTKEUxMjkyM0Y3RTBBQThCQjI3MDBEQzg4OUNGRTkwRDkw
RUExMjYxODgwHhcNMjYxMDA1MDc1ODM5WhcNMjYxMDEyMDc1ODM5WjAYMRYwFAYD
VQQDEw02YWMzNThiMC0zN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Sg3Z0kyS3i1b7/VCNrzjt0WJXYH8QBG/u6qztc07VL9z3EedCiBUq12FqTr
K+y8cyjdH2e/7kUhZd2nqKp7sd7QBA+a7Mm3HGd9x3PqYyxrhWAnsS8Q/ChrvIFr
uv2eXziQYR1FjiYLrLa3Yl6e89lciQE5CflQucw401d/F2iPRujCRbUYOkAY8IA2
qKHKs779tKEkTQIbKbU3G5LnU8TBNzO6/SaGiOlCT/24+e2G2gF+cAP6/TqdO/C7
Qom6JiZaGDtAS5LEkgPt3uOXyHnZgqEWsbchwtHcyiEgNtt7XbU046BIv5i0B/HF
NQYjptmjb6wehevwwgKzz4aJUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMGykYu
SHkTGy66fRHL7L/ONey9MB8GA1UdIwQYMBaAFOEpI/fgqouycA3Iic/pDZDqEmGI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzQ0MS9FOUM1MDMzOEVF
OUQxMUYwQUNFMjVDOUQ2NjZGNTZCQy80U2tqOS1DcWk3SndEY2lKei1rTmtPb1NZ
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRTa2o5LUNxaTdKd0RjaUp6LWtOa09vU1lZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzQ0MS9FOUM1MDMzOEVFOUQxMUYwQUNFMjVDOUQ2NjZGNTZCQy80U2tqOS1DcWk3
SndEY2lKei1rTmtPb1NZWWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGZvPhA51hbdFbW8EaMRe+7TXrId67jG+WiHhpM2V1rJSqgSRB6gDlqZ0iG9k
LEBtFD8TF5GLnaebtL/tXQ1vIVvKVUhyzZSlZBniB8yn1TXS0Io8Sjgl2LspLR5x
8bj+3r579atRUucyyEhh8cne8d+I1C7IoMv4adpmvwaA8SLZRNXY3AJ852SVmI9d
CcoV3TUtv8u7qZR227w+tvuwCXMagFQZYznO1cfuD92ZAlx6mSomAdrdmTM6W/FR
kI0KhXbEoMcoMw92qqWuXUyFPZZGwsgdx5hb238Z+ZSePETAhFQ03LJJ6pCD20Tb
vcZF6YX3WNXqbYpxMzKIroli0g==
-----END CERTIFICATE-----
Generated at Tue Oct 6 03:43:51 2026 by rpki-client