Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File:                     Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier:          1fcKgZWwXHOzwYVCYx9mHW2PvBH6U1znDB3SwH9wf9Y=
Subject key identifier:   B3:76:43:AF:5A:DF:F6:BC:25:19:E9:BF:5D:82:3F:94:C2:FC:BE:4B
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer:       /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number:          0165
Signing time:             Tue 27 Oct 2026 05:20:43 +0000
Manifest this update:     Tue 27 Oct 2026 05:20:43 +0000
Manifest next update:     Tue 03 Nov 2026 05:20:43 +0000
Files and hashes:         1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: IeCs/xDaqB8o5Op7/RznE4tsMkH9Q7HoaP7GcKlxJQk=)
                          2: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=)
                          3: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
        Validity
            Not Before: Oct 27 05:20:43 2026 GMT
            Not After : Nov  3 05:20:43 2026 GMT
        Subject: CN=6ae034ab-97a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:70:48:06:80:46:ba:d9:59:09:a9:f6:3f:60:
                    1d:59:fc:7d:aa:e6:eb:cb:98:09:40:48:fb:43:31:
                    bc:16:fd:c9:2c:1d:34:63:e0:4e:6e:a5:2d:77:65:
                    61:d9:fd:96:97:8f:3b:54:4f:95:90:5c:b0:79:06:
                    5f:c1:11:8e:d1:14:39:4e:12:b9:4a:1b:d5:ab:80:
                    e0:4e:f3:42:0c:00:d1:27:d6:f7:38:fb:94:a6:1d:
                    94:66:c8:b3:ad:c7:b3:b7:72:83:c5:eb:92:e4:cf:
                    75:ba:87:75:75:27:43:0d:c5:89:e0:4e:84:42:c1:
                    37:e7:e2:5a:87:6e:e1:66:0a:e9:91:46:b6:74:27:
                    36:07:0d:c2:44:75:ac:d6:31:3b:3b:56:7e:0a:c7:
                    2f:6a:af:fc:85:da:0c:ad:70:15:c3:59:f3:66:89:
                    bf:fd:0b:66:ea:b6:e7:bf:51:63:c1:65:e1:d2:84:
                    2a:22:1c:f6:a9:19:04:4c:a4:97:82:2c:a0:18:9f:
                    6c:74:64:bd:02:9b:56:25:09:37:9d:dc:76:94:62:
                    84:54:4b:d8:f6:64:b2:8a:38:c3:e0:4b:88:89:5d:
                    8d:90:92:65:36:da:66:5b:46:b5:90:ad:cd:c4:5d:
                    ba:02:36:cb:4e:28:16:38:1c:30:da:f4:a4:68:b1:
                    ac:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:76:43:AF:5A:DF:F6:BC:25:19:E9:BF:5D:82:3F:94:C2:FC:BE:4B
            X509v3 Authority Key Identifier:
                keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:87:04:ad:b6:ed:e4:c9:d1:44:45:a9:66:0b:c5:ab:fc:20:
         2f:95:9d:94:79:76:46:53:b0:a9:29:50:5d:51:35:18:5a:f8:
         82:5b:9a:9f:a5:17:5c:25:c6:fe:2a:22:66:88:40:28:d7:a6:
         22:74:93:d1:e7:93:c9:02:6e:f4:b3:4b:04:1a:3a:fb:07:7f:
         59:c0:1e:5c:37:58:01:19:b3:0d:e2:75:69:95:6b:6c:c6:e9:
         7f:74:29:de:05:cb:c9:0f:fb:d0:1a:33:8f:78:9a:4e:69:16:
         7b:09:f4:42:75:9d:65:7e:5c:2e:7c:1d:ce:73:0e:71:89:7e:
         c7:1b:02:1b:ef:7a:23:67:ae:90:2d:ab:89:d0:06:62:93:d5:
         62:24:30:d2:91:46:9c:0d:89:ca:8e:50:80:09:10:4f:f8:bc:
         ba:f1:d6:f0:3e:6e:8f:7c:40:75:78:5f:6b:36:25:4e:a2:e8:
         21:43:d1:53:c0:46:78:e3:8a:65:5e:6f:e8:d4:29:0e:03:98:
         0c:19:c1:fe:59:64:1c:db:d1:59:c6:ca:5b:da:23:00:9f:3f:
         2e:74:0a:45:4d:5a:42:99:38:a6:a2:0d:e7:91:9e:ff:fc:5a:
         53:0e:19:8f:26:22:2a:bb:18:a4:d7:b6:6b:0b:17:c9:8d:ac:
         3c:70:a4:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFMEExMTAvBgNVBAUTKDY3MEUzQTA2NzIxNjg0QUI0NzNCQkJFNUNDMjJDRjA1
RDAyNEJGNkQwHhcNMjYxMDI3MDUyMDQzWhcNMjYxMTAzMDUyMDQzWjAYMRYwFAYD
VQQDEw02YWUwMzRhYi05N2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkXBIBoBGutlZCan2P2AdWfx9qubry5gJQEj7QzG8Fv3JLB00Y+BObqUtd2Vh
2f2Wl487VE+VkFyweQZfwRGO0RQ5ThK5ShvVq4DgTvNCDADRJ9b3OPuUph2UZsiz
rcezt3KDxeuS5M91uod1dSdDDcWJ4E6EQsE35+Jah27hZgrpkUa2dCc2Bw3CRHWs
1jE7O1Z+Cscvaq/8hdoMrXAVw1nzZom//Qtm6rbnv1FjwWXh0oQqIhz2qRkETKSX
giygGJ9sdGS9AptWJQk3ndx2lGKEVEvY9mSyijjD4EuIiV2NkJJlNtpmW0a1kK3N
xF26AjbLTigWOBww2vSkaLGsPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLN2Q69a
3/a8JRnpv12CP5TC/L5LMB8GA1UdIwQYMBaAFGcOOgZyFoSrRzu75cwizwXQJL9t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUwQS9EQUY2RDczNkI3
MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9adzQ2Qm5JV2hLdEhPN3ZsekNMUEJkQWt2
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3YyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUUwQS9EQUY2RDczNkI3MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9adzQ2Qm5JV2hL
dEhPN3ZsekNMUEJkQWt2MjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiocErbbt5MnRREWpZgvFq/wgL5WdlHl2RlOwqSlQXVE1GFr4gluan6UXXCXG
/ioiZohAKNemInST0eeTyQJu9LNLBBo6+wd/WcAeXDdYARmzDeJ1aZVrbMbpf3Qp
3gXLyQ/70Bozj3iaTmkWewn0QnWdZX5cLnwdznMOcYl+xxsCG+96I2eukC2ridAG
YpPVYiQw0pFGnA2Jyo5QgAkQT/i8uvHW8D5uj3xAdXhfazYlTqLoIUPRU8BGeOOK
ZV5v6NQpDgOYDBnB/llkHNvRWcbKW9ojAJ8/LnQKRU1aQpk4pqIN55Ge//xaUw4Z
jyYiKrsYpNe2awsXyY2sPHCkcA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:21:44 2026 by rpki-client