Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
File:                     _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json)
Hash identifier:          UHWqsk+APzkuk4stpIdPYf1ligSIhb6lmJ4EdyhyrGE=
Subject key identifier:   BE:F8:2B:27:31:72:60:3F:81:64:05:79:F9:FF:06:42:D4:0D:49:C6
Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
Certificate issuer:       /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
Manifest number:          0101
Signing time:             Mon 21 Sep 2026 06:09:45 +0000
Manifest this update:     Mon 21 Sep 2026 06:09:44 +0000
Manifest next update:     Mon 28 Sep 2026 06:09:44 +0000
Files and hashes:         1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: pFij4n/yrp4L3U3kB9r9xT3E5EL5i8SfZ3NA7/6MRHs=)
                          2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: LfCoz7Dnyj7tBchjned94Fjoj2Azlhk3SF6mzP2Fido=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl
                          rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
        Validity
            Not Before: Sep 21 06:09:44 2026 GMT
            Not After : Sep 28 06:09:44 2026 GMT
        Subject: CN=6ab0ca29-ca9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6d:81:08:60:b9:fd:83:4f:b8:c3:c7:39:0a:
                    79:b5:db:2d:af:9b:0a:c5:97:49:b6:88:c9:2b:ad:
                    40:16:47:dc:63:e7:55:80:67:cc:44:8b:37:f1:a1:
                    5c:2d:98:d9:53:b7:51:3a:ce:7a:fc:cb:83:b2:11:
                    fb:ba:ce:62:88:17:39:aa:99:d8:58:11:d4:b0:b1:
                    1c:2b:01:3c:35:3f:8e:6b:e8:fd:ec:8e:82:e1:ff:
                    7b:d3:15:56:2f:43:e6:6e:65:bb:f8:02:64:4f:a2:
                    8d:5d:a5:8a:99:0b:4e:63:8f:e7:1f:23:52:cc:49:
                    03:79:04:62:9e:08:7c:b6:0f:e3:a6:c5:89:37:ac:
                    7a:41:d8:d4:0c:5c:08:05:3c:ca:06:cc:95:b9:9e:
                    a9:d7:23:2f:65:6f:2a:d6:d6:4f:bf:1c:c8:52:e4:
                    e9:35:ea:d9:1d:16:59:54:59:f0:1d:75:24:d7:3d:
                    35:cd:1a:b6:ef:ea:83:7d:d5:79:ab:fd:c8:1b:96:
                    a9:94:fc:64:3e:22:c1:13:ac:e9:e5:d9:57:59:02:
                    56:57:23:d4:9e:5b:5e:43:90:79:c3:c6:b3:d9:a1:
                    fe:b5:3a:98:8e:7e:76:47:1a:cc:7e:ee:5e:f0:49:
                    93:7a:27:55:f4:7b:b9:ad:1c:96:e3:07:84:8d:dc:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F8:2B:27:31:72:60:3F:81:64:05:79:F9:FF:06:42:D4:0D:49:C6
            X509v3 Authority Key Identifier:
                keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6e:fe:d8:f1:b3:90:b3:9f:06:a1:16:26:01:85:4d:56:ad:
         61:99:6e:61:77:6d:4f:34:3c:f7:d1:26:57:b2:0f:e2:97:bd:
         af:b8:82:47:a3:d6:c7:ee:c1:4d:eb:57:5d:83:aa:da:8c:3d:
         55:45:d2:b8:54:87:24:b5:58:3f:2e:a2:c3:eb:4a:38:2d:fb:
         cf:d0:b6:88:2e:84:81:2d:1a:a1:f2:46:99:3d:da:5d:95:1d:
         0b:7d:5b:5a:09:67:a8:29:92:90:f5:4c:08:d6:47:59:18:11:
         af:22:34:92:bb:b9:a0:2d:b9:1f:b6:7f:46:2e:e4:9c:8a:f6:
         6f:c0:59:85:6e:b6:59:9a:ca:35:a0:57:7f:4b:ca:18:b1:a1:
         d5:31:15:17:a0:21:b3:5e:29:18:67:61:44:ff:53:ba:f1:f5:
         5d:03:e9:0a:71:57:75:0a:d9:53:75:b3:a4:ae:b0:39:c7:0e:
         3d:7c:e3:74:95:cf:f3:0b:22:a9:55:f7:2b:92:b3:4d:31:6d:
         9c:d8:b6:0e:14:12:72:1e:15:bc:ea:2a:3f:98:24:1e:66:08:
         4a:df:20:b9:a7:62:a1:1d:56:1c:29:e9:64:2a:b9:be:83:3f:
         f7:e0:77:8a:a1:7c:9c:05:4e:3f:26:78:d4:56:f8:b3:c7:ea:
         59:9a:49:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTdGQTExMTAvBgNVBAUTKEZERTBEOEFDODhEQkZDNkFERTY3REZGRjVBM0FDMkVG
MjY2QzVDREMwHhcNMjYwOTIxMDYwOTQ0WhcNMjYwOTI4MDYwOTQ0WjAYMRYwFAYD
VQQDEw02YWIwY2EyOS1jYTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2W2BCGC5/YNPuMPHOQp5tdstr5sKxZdJtojJK61AFkfcY+dVgGfMRIs38aFc
LZjZU7dROs56/MuDshH7us5iiBc5qpnYWBHUsLEcKwE8NT+Oa+j97I6C4f970xVW
L0PmbmW7+AJkT6KNXaWKmQtOY4/nHyNSzEkDeQRingh8tg/jpsWJN6x6QdjUDFwI
BTzKBsyVuZ6p1yMvZW8q1tZPvxzIUuTpNerZHRZZVFnwHXUk1z01zRq27+qDfdV5
q/3IG5aplPxkPiLBE6zp5dlXWQJWVyPUnlteQ5B5w8az2aH+tTqYjn52RxrMfu5e
8EmTeidV9Hu5rRyW4weEjdx5fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL74Kycx
cmA/gWQFefn/BkLUDUnGMB8GA1UdIwQYMBaAFP3g2KyI2/xq3mff/1o6wu8mbFzc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0ZBMS9CRjkwNzRFMjJG
QTAxMUYwOEEwNkMwNTdDNEY5QUUwMi9fZURZcklqYl9HcmVaOV9fV2pyQzd5WnNY
TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19lRFlySWpiX0dyZVo5X19XanJDN3lac1hOdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
N0ZBMS9CRjkwNzRFMjJGQTAxMUYwOEEwNkMwNTdDNEY5QUUwMi9fZURZcklqYl9H
cmVaOV9fV2pyQzd5WnNYTncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkG7+2PGzkLOfBqEWJgGFTVatYZluYXdtTzQ899EmV7IP4pe9r7iCR6PWx+7B
TetXXYOq2ow9VUXSuFSHJLVYPy6iw+tKOC37z9C2iC6EgS0aofJGmT3aXZUdC31b
WglnqCmSkPVMCNZHWRgRryI0kru5oC25H7Z/Ri7knIr2b8BZhW62WZrKNaBXf0vK
GLGh1TEVF6Ahs14pGGdhRP9TuvH1XQPpCnFXdQrZU3WzpK6wOccOPXzjdJXP8wsi
qVX3K5KzTTFtnNi2DhQSch4VvOoqP5gkHmYISt8guadioR1WHCnpZCq5voM/9+B3
iqF8nAVOPyZ41Fb4s8fqWZpJRg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:21:15 2026 by rpki-client