Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
File:                     kROhaGm30B54nuCf4m5q-jfPPkc.mft (raw, json)
Hash identifier:          GQZN+qSQXgvdmpWF1lGzDq74bpKZjMAigA7AAfUQBLo=
Subject key identifier:   51:B7:2E:2F:5D:FE:6E:69:3F:70:39:77:82:31:33:0D:ED:2C:3F:5E
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Certificate issuer:       /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial:       0542
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
Manifest number:          0534
Signing time:             Thu 10 Sep 2026 23:25:04 +0000
Manifest this update:     Thu 10 Sep 2026 23:25:03 +0000
Manifest next update:     Thu 17 Sep 2026 23:25:03 +0000
Files and hashes:         1: kROhaGm30B54nuCf4m5q-jfPPkc.crl (hash: TZTnaiOEfEJxrETNjRSfBZqDJQfNupPSHvHirh9oTRg=)
                          2: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (hash: n3UNJ83TlZkHD6+TDV3hr4HHxdPAJoRzYmt6WvpCYj0=)
                          3: 8628E1BA210611F082BE7E10C4F9AE02.roa (hash: 6GOb57PaiaApAF0iXlJZz9FHSsE1JEzbnMGnVso/Dyc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
                          rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3814, serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
        Validity
            Not Before: Sep 10 23:25:03 2026 GMT
            Not After : Sep 17 23:25:03 2026 GMT
        Subject: CN=6aa33c50-746e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:52:77:9a:94:85:4f:65:cc:d8:ad:ad:44:
                    26:36:de:8b:59:22:09:f8:6c:a0:60:5d:56:8a:dd:
                    5d:0e:a0:a9:af:9a:25:37:00:b8:10:d7:69:af:b8:
                    dc:cb:70:42:71:75:e0:23:13:99:ab:ad:1d:bc:32:
                    af:25:2f:6d:37:10:43:6d:e8:b5:2f:3e:d4:34:69:
                    e8:8e:85:f8:61:78:27:23:04:4b:3d:40:36:ca:e8:
                    dd:31:ad:86:09:ec:9f:66:34:3c:6d:d6:8d:08:de:
                    3e:58:1f:f7:50:da:ae:1a:41:cc:cf:7c:de:49:9d:
                    1c:c2:74:67:11:4f:a4:ae:81:03:fa:92:20:6c:ce:
                    3a:75:09:d7:42:f6:a6:1d:8a:3c:17:b0:b8:81:bd:
                    d8:0b:f8:f0:3f:2d:86:33:40:ec:e7:e3:24:0d:e5:
                    8a:e8:a5:04:48:96:22:bc:a7:8b:53:fa:e9:e1:b0:
                    ed:59:12:d0:a0:26:7b:84:18:ee:91:70:b3:8b:bf:
                    30:5f:da:fd:63:a8:37:11:e4:df:ed:70:c3:4f:0c:
                    05:9f:3b:cf:23:09:96:27:61:4b:1c:63:42:d7:7c:
                    1a:d2:e2:fd:4b:83:14:ad:e6:93:c3:f0:57:4a:c4:
                    6a:82:07:49:12:1b:27:87:a5:b3:f8:44:e3:a2:76:
                    1e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B7:2E:2F:5D:FE:6E:69:3F:70:39:77:82:31:33:0D:ED:2C:3F:5E
            X509v3 Authority Key Identifier:
                keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:04:f8:66:15:63:8f:de:13:71:e4:e0:98:a3:f2:98:4d:76:
         4a:50:6f:ee:bd:7a:00:6b:65:45:54:45:84:b2:5d:cd:d1:8e:
         3d:3e:49:63:10:58:fb:ad:43:48:e1:98:e7:35:05:11:22:5c:
         eb:c9:b7:e5:a7:05:a5:7b:88:88:4f:ba:ef:fe:da:36:34:59:
         c5:e5:64:06:98:af:96:c6:7c:bc:27:05:fb:af:f5:af:9c:0e:
         67:c8:32:f8:ac:f4:5a:7d:db:74:e5:f1:bf:82:e7:25:c5:8e:
         02:0d:27:f6:51:7d:cc:4f:f6:d3:39:5c:7e:c7:69:3b:ab:96:
         df:6b:b1:a6:67:c8:d8:64:ae:99:a2:8c:1d:17:6d:38:d9:0e:
         d3:c3:93:48:0d:7b:45:ca:05:83:6b:53:20:be:3b:48:99:75:
         9a:63:de:65:f3:d2:be:e0:34:f7:50:36:5b:75:68:a0:fc:ce:
         5b:ad:77:d4:0c:6d:16:e3:67:9f:80:16:05:b6:89:0e:94:71:
         09:be:b6:7d:7c:71:22:48:cf:fd:de:b6:db:ad:fb:c4:08:58:
         35:57:50:dc:0a:1f:cd:27:e5:8e:56:71:e1:d8:4b:d4:22:64:
         a1:ed:7f:08:91:14:d9:06:83:ab:59:d2:85:22:2c:79:ff:d0:
         eb:d7:d2:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM4MTQxMTAvBgNVBAUTKDkxMTNBMTY4NjlCN0QwMUU3ODlFRTA5RkUyNkU2QUZB
MzdDRjNFNDcwHhcNMjYwOTEwMjMyNTAzWhcNMjYwOTE3MjMyNTAzWjAYMRYwFAYD
VQQDEw02YWEzM2M1MC03NDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA12tSd5qUhU9lzNitrUQmNt6LWSIJ+GygYF1Wit1dDqCpr5olNwC4ENdpr7jc
y3BCcXXgIxOZq60dvDKvJS9tNxBDbei1Lz7UNGnojoX4YXgnIwRLPUA2yujdMa2G
CeyfZjQ8bdaNCN4+WB/3UNquGkHMz3zeSZ0cwnRnEU+kroED+pIgbM46dQnXQvam
HYo8F7C4gb3YC/jwPy2GM0Ds5+MkDeWK6KUESJYivKeLU/rp4bDtWRLQoCZ7hBju
kXCzi78wX9r9Y6g3EeTf7XDDTwwFnzvPIwmWJ2FLHGNC13wa0uL9S4MUreaTw/BX
SsRqggdJEhsnh6Wz+ETjonYe/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFG3Li9d
/m5pP3A5d4IxMw3tLD9eMB8GA1UdIwQYMBaAFJEToWhpt9AeeJ7gn+Juavo3zz5H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzgxNC8yNTQyQjQyMjVE
NzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBCNTRudUNmNG01cS1qZlBQ
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tST2hhR20zMEI1NG51Q2Y0bTVxLWpmUFBrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzgxNC8yNTQyQjQyMjVENzExMUVDOTkwODkxNERDNEY5QUUwMi9rUk9oYUdtMzBC
NTRudUNmNG01cS1qZlBQa2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwgT4ZhVjj94TceTgmKPymE12SlBv7r16AGtlRVRFhLJdzdGOPT5JYxBY+61D
SOGY5zUFESJc68m35acFpXuIiE+67/7aNjRZxeVkBpivlsZ8vCcF+6/1r5wOZ8gy
+Kz0Wn3bdOXxv4LnJcWOAg0n9lF9zE/20zlcfsdpO6uW32uxpmfI2GSumaKMHRdt
ONkO08OTSA17RcoFg2tTIL47SJl1mmPeZfPSvuA091A2W3VooPzOW6131AxtFuNn
n4AWBbaJDpRxCb62fXxxIkjP/d622637xAhYNVdQ3AofzSfljlZx4dhL1CJkoe1/
CJEU2QaDq1nShSIsef/Q69fSww==
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:01 2026 by rpki-client