Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
File:                     -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json)
Hash identifier:          WzAzkMYiMQPKE0TypB/gaEbnLj2Bia6eTVAqHy/+tyE=
Subject key identifier:   39:2B:80:B3:CF:62:43:BA:4A:84:56:2F:CE:66:07:72:2D:55:1E:B9
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Certificate issuer:       /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
Manifest number:          0185
Signing time:             Fri 11 Sep 2026 04:39:44 +0000
Manifest this update:     Fri 11 Sep 2026 04:39:44 +0000
Manifest next update:     Fri 18 Sep 2026 04:39:44 +0000
Files and hashes:         1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: 9BnLIBE/6j72H/3XAl7c8n6+eAkifXKVy6oVZ0zGAeE=)
                          2: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: deIU7Zl7zxSEqTIjGaroE4xnq1wHqEBfpYOwiKotx0g=)
                          3: DF6D4464818211F097447962C4F9AE02.roa (hash: jhQL0W/2W5KHiOPkasyItTgEf7kv9NJDTrAi7+qfj00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 04:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
        Validity
            Not Before: Sep 11 04:39:44 2026 GMT
            Not After : Sep 18 04:39:44 2026 GMT
        Subject: CN=6aa38610-73d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:60:ca:6b:3c:f2:56:53:b8:6a:55:0c:d5:
                    cf:49:d6:c8:b1:33:dd:80:c8:ec:f8:67:0c:70:25:
                    63:49:ac:3b:65:b4:33:2a:66:46:61:87:e2:1c:89:
                    3f:89:1a:46:20:71:62:1c:39:03:4f:81:bc:2b:5c:
                    b8:ad:67:a5:26:18:04:cc:fe:b1:2c:0a:81:74:5a:
                    df:59:7a:32:40:16:89:91:5f:ba:ff:f1:1f:ec:99:
                    5f:21:18:dc:c5:69:2f:ef:db:66:d6:79:81:39:df:
                    56:bd:11:a4:e6:81:f8:09:73:d1:16:5b:15:8a:17:
                    4b:4c:75:c3:01:33:34:5e:d6:4f:c0:79:9c:3c:36:
                    9e:0c:dd:30:8b:43:e0:9c:0f:2b:27:1e:3c:4f:b9:
                    c4:2f:00:04:e6:85:a6:6e:e8:25:1d:f3:6e:38:5a:
                    0d:ea:51:e0:46:a6:40:9c:cf:94:cf:3b:cb:48:04:
                    c4:b2:4b:af:bd:ee:07:04:bf:a5:2e:a8:11:69:88:
                    5a:6a:17:9f:e3:26:2b:d7:f3:35:5b:3a:cd:7c:c2:
                    4a:ac:3b:0f:9c:d2:80:4a:1c:fe:0e:7c:2a:7d:6a:
                    71:f8:61:28:ee:56:00:30:7c:12:5a:d4:8f:df:ec:
                    d2:2b:37:8d:73:15:1c:1b:41:03:10:c0:9e:f1:47:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2B:80:B3:CF:62:43:BA:4A:84:56:2F:CE:66:07:72:2D:55:1E:B9
            X509v3 Authority Key Identifier:
                keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7d:ae:8c:81:f2:8e:06:ac:01:72:37:dc:4d:a7:93:5f:1a:
         1d:63:21:04:00:9f:10:85:9f:3c:c7:a3:57:e8:f7:5c:1c:f3:
         3c:d2:17:6f:84:a8:7c:11:65:de:32:3c:9c:b9:5b:0b:02:7f:
         d2:94:1e:46:bd:10:04:cb:aa:4c:e6:65:1c:7a:a2:78:a7:b2:
         eb:e9:5d:0b:53:29:68:d4:0b:a6:35:2b:2f:ab:d8:c4:15:84:
         7c:2c:ff:45:d2:7b:07:bb:3e:5b:36:ac:d6:35:2c:e0:9d:ef:
         5f:26:2a:ad:23:28:64:a3:6b:e2:c6:b4:96:a1:fe:3f:1b:e0:
         04:f9:58:fb:88:83:5a:5d:30:d6:54:14:17:30:62:60:1f:72:
         7a:99:46:bf:02:2b:92:47:84:22:d1:f2:fd:1d:fa:4e:62:33:
         88:8e:77:15:d0:21:32:34:56:c2:d0:7f:88:91:09:47:13:be:
         71:f2:6b:ce:92:15:6f:8c:19:64:48:d4:83:2b:05:b6:23:43:
         f7:4b:3d:36:2b:66:4c:f6:0d:43:00:f2:77:b1:ab:c4:cc:d5:
         a2:5b:13:da:b5:f8:ed:db:28:be:20:4c:3a:1d:c3:5b:ce:48:
         84:bd:17:5d:c4:80:4e:46:35:fa:4e:5b:65:8f:60:54:70:c7:
         7c:75:d3:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC
NDlCMkM3MjYwHhcNMjYwOTExMDQzOTQ0WhcNMjYwOTE4MDQzOTQ0WjAYMRYwFAYD
VQQDEw02YWEzODYxMC03M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzThgyms88lZTuGpVDNXPSdbIsTPdgMjs+GcMcCVjSaw7ZbQzKmZGYYfiHIk/
iRpGIHFiHDkDT4G8K1y4rWelJhgEzP6xLAqBdFrfWXoyQBaJkV+6//Ef7JlfIRjc
xWkv79tm1nmBOd9WvRGk5oH4CXPRFlsVihdLTHXDATM0XtZPwHmcPDaeDN0wi0Pg
nA8rJx48T7nELwAE5oWmbuglHfNuOFoN6lHgRqZAnM+UzzvLSATEskuvve4HBL+l
LqgRaYhaahef4yYr1/M1WzrNfMJKrDsPnNKAShz+DnwqfWpx+GEo7lYAMHwSWtSP
3+zSKzeNcxUcG0EDEMCe8UeNgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkrgLPP
YkO6SoRWL85mB3ItVR65MB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx
NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4
eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq
ZFVjZU8xU0hUOEswbXl4eVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEH2ujIHyjgasAXI33E2nk18aHWMhBACfEIWfPMejV+j3XBzzPNIXb4SofBFl
3jI8nLlbCwJ/0pQeRr0QBMuqTOZlHHqieKey6+ldC1MpaNQLpjUrL6vYxBWEfCz/
RdJ7B7s+Wzas1jUs4J3vXyYqrSMoZKNr4sa0lqH+PxvgBPlY+4iDWl0w1lQUFzBi
YB9yeplGvwIrkkeEItHy/R36TmIziI53FdAhMjRWwtB/iJEJRxO+cfJrzpIVb4wZ
ZEjUgysFtiND90s9NitmTPYNQwDyd7GrxMzVolsT2rX47dsoviBMOh3DW85IhL0X
XcSATkY1+k5bZY9gVHDHfHXTrw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 16:30:14 2026 by rpki-client