Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
File:                     faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json)
Hash identifier:          alrC1yPbyS3zoaTjXF3wlx5ZPI4atfJI/rxre9OiDM0=
Subject key identifier:   99:E1:E6:AC:38:F5:6E:BD:5C:50:AA:16:5B:5F:5B:B5:1B:7D:55:F0
Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E
Certificate issuer:       /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
Certificate serial:       1149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
Manifest number:          1137
Signing time:             Tue 06 Oct 2026 17:19:51 +0000
Manifest this update:     Tue 06 Oct 2026 17:19:51 +0000
Manifest next update:     Tue 13 Oct 2026 17:19:51 +0000
Files and hashes:         1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: GrksGrI6AT3Lc7pQK/r0v8B9qL1qtsktkxD15fzjFfM=)
                          2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: fd0G1Zn2iUvsWfsjyzVAL9KEbxpQOhqZpnlGAiKgfII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl
                          rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4425 (0x1149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E
        Validity
            Not Before: Oct  6 17:19:51 2026 GMT
            Not After : Oct 13 17:19:51 2026 GMT
        Subject: CN=6ac52db7-9c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:db:0d:2e:5b:ca:25:a2:55:43:0b:bf:1c:
                    91:bc:b0:8b:04:21:0e:31:4f:3f:ca:d8:dd:34:ab:
                    eb:c2:bc:1f:36:14:44:5a:ed:f9:7f:b2:9d:84:c4:
                    c3:3f:9d:d0:7d:ec:7e:be:01:07:3a:c2:86:18:dd:
                    99:3e:2e:6c:b7:15:3d:ee:f2:85:3d:cd:20:50:9b:
                    66:3f:a0:a5:4a:e2:00:e8:63:c9:5d:93:2e:43:b3:
                    3e:ba:6b:79:54:47:60:ba:fd:53:6d:1e:93:cf:9a:
                    4a:6e:1a:40:7d:12:a3:ec:5b:18:7b:35:1c:54:26:
                    13:ed:21:fd:f9:a5:a1:c5:84:f8:f0:10:3c:62:24:
                    ec:ad:9d:c0:84:9b:a2:f2:a0:10:eb:8a:d4:09:1d:
                    78:74:5e:60:d7:8f:bd:b6:96:b3:f8:fa:c9:98:b5:
                    71:64:a9:32:cc:6c:95:09:a3:06:65:fd:0f:af:d0:
                    87:2c:aa:f0:18:6f:f6:25:d5:7f:5f:6d:6b:18:a6:
                    6d:17:5a:da:e6:48:dc:91:3d:b7:e7:96:25:7b:bb:
                    df:d2:2c:5f:88:74:36:f9:da:a2:45:3a:ba:c8:d5:
                    5b:a8:12:82:6d:ab:7b:b4:31:7a:db:e4:3b:d6:1d:
                    7f:e8:d5:81:01:c0:16:6f:b0:46:c2:09:33:e9:7c:
                    14:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E1:E6:AC:38:F5:6E:BD:5C:50:AA:16:5B:5F:5B:B5:1B:7D:55:F0
            X509v3 Authority Key Identifier:
                keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:42:35:ab:03:88:ba:11:7a:41:36:b1:bd:f9:5e:83:46:ab:
         4f:9a:db:07:e0:71:0c:55:33:c3:94:ea:88:4b:d7:9a:0f:7b:
         29:9a:84:88:14:c6:11:75:e8:ca:bb:6b:b5:d6:e6:e1:13:fb:
         88:49:d4:54:78:8c:40:e8:58:85:c4:de:2e:59:4c:75:4c:7c:
         c3:af:f3:8f:88:1f:e5:22:c1:39:65:a3:04:4f:2a:c4:bd:51:
         67:07:b0:47:70:5d:40:9a:51:af:61:f5:dd:f5:01:a6:5a:9d:
         79:d8:b9:a5:42:f1:42:22:07:19:37:ab:70:dc:c1:1a:9c:0a:
         0b:fb:73:88:9f:b6:ff:58:4e:86:c9:d9:ab:0f:2f:65:0b:13:
         4b:7e:eb:bb:9e:bc:7f:79:19:64:56:5a:6d:9c:b4:42:db:f1:
         dc:f3:3a:d0:58:92:e3:51:3f:2d:89:45:42:ac:19:4e:e9:6c:
         47:fb:c3:86:36:dc:b3:86:f4:02:51:18:85:ab:f7:40:2a:34:
         73:e1:1b:3b:fa:82:19:c6:f0:d9:9c:66:73:97:58:09:fe:79:
         b7:0d:55:2b:15:64:69:6e:30:fd:66:0c:15:27:91:4c:ee:3a:
         87:4b:66:01:c5:28:e0:cc:36:ff:a1:1a:1d:ca:84:bd:97:a0:
         2c:52:3a:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz
NkUxNjAyN0UwHhcNMjYxMDA2MTcxOTUxWhcNMjYxMDEzMTcxOTUxWjAYMRYwFAYD
VQQDEw02YWM1MmRiNy05YzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjy/bDS5byiWiVUMLvxyRvLCLBCEOMU8/ytjdNKvrwrwfNhREWu35f7KdhMTD
P53Qfex+vgEHOsKGGN2ZPi5stxU97vKFPc0gUJtmP6ClSuIA6GPJXZMuQ7M+umt5
VEdguv1TbR6Tz5pKbhpAfRKj7FsYezUcVCYT7SH9+aWhxYT48BA8YiTsrZ3AhJui
8qAQ64rUCR14dF5g14+9tpaz+PrJmLVxZKkyzGyVCaMGZf0Pr9CHLKrwGG/2JdV/
X21rGKZtF1ra5kjckT2355Yle7vf0ixfiHQ2+dqiRTq6yNVbqBKCbat7tDF62+Q7
1h1/6NWBAcAWb7BGwgkz6XwUIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnh5qw4
9W69XFCqFltfW7UbfVXwMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG
QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs
ekVoZ1BST0VJamsyNFdBbjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi0I1qwOIuhF6QTaxvfleg0arT5rbB+BxDFUzw5TqiEvXmg97KZqEiBTGEXXo
yrtrtdbm4RP7iEnUVHiMQOhYhcTeLllMdUx8w6/zj4gf5SLBOWWjBE8qxL1RZwew
R3BdQJpRr2H13fUBplqdedi5pULxQiIHGTercNzBGpwKC/tziJ+2/1hOhsnZqw8v
ZQsTS37ru568f3kZZFZabZy0Qtvx3PM60FiS41E/LYlFQqwZTulsR/vDhjbcs4b0
AlEYhav3QCo0c+EbO/qCGcbw2Zxmc5dYCf55tw1VKxVkaW4w/WYMFSeRTO46h0tm
AcUo4Mw2/6EaHcqEvZegLFI6WA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 05:58:24 2026 by rpki-client