Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
File:                     0gZrYZNOd88mep3MOL9d7iHwe6M.mft (raw, json)
Hash identifier:          v1MrfvE2iJ5292SSSNJ7HBxJqE9hx0jLcuE3gUcURYg=
Subject key identifier:   37:CD:7D:16:0B:C0:EA:A8:42:BC:65:35:2D:1F:D4:EB:6F:2B:FA:A1
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Certificate issuer:       /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
Manifest number:          0108
Signing time:             Tue 29 Sep 2026 06:42:29 +0000
Manifest this update:     Tue 29 Sep 2026 06:42:29 +0000
Manifest next update:     Tue 06 Oct 2026 06:42:29 +0000
Files and hashes:         1: 0gZrYZNOd88mep3MOL9d7iHwe6M.crl (hash: NuqOQMpgUmyZDHg5FR0zV+QVHEO5YX6NqeqKliWDQFE=)
                          2: 4F895700924A11F191BBE0403711F970.roa (hash: o8rIUX0iXF0/vLlaYop34iZteYCZTpdvvS4dPkBqo4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 06:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
        Validity
            Not Before: Sep 29 06:42:29 2026 GMT
            Not After : Oct  6 06:42:29 2026 GMT
        Subject: CN=6abb5dd5-1445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:9a:5c:53:e4:52:ad:ab:c2:25:2b:70:32:
                    6c:73:df:a8:bb:26:d8:09:d5:29:fe:24:89:21:3f:
                    e3:43:79:8e:f0:bb:c2:0d:2d:27:1c:49:ee:51:00:
                    72:98:25:ed:01:10:f0:2d:9e:d9:a9:4b:d1:01:46:
                    8e:d9:ca:68:f6:2c:3f:a0:c1:da:3e:fb:b7:39:b6:
                    bf:23:77:5b:98:c7:4e:00:db:25:25:d3:4b:ff:90:
                    a8:bc:b2:96:97:25:6e:50:5b:5e:18:68:99:ca:6d:
                    71:07:8c:20:12:e7:ab:cf:46:da:14:36:0c:2e:7f:
                    66:f8:c6:ed:3a:da:55:2a:1b:a5:6b:0c:c3:3d:7c:
                    b2:0e:bf:79:46:b0:8b:cd:2f:f1:d2:90:92:75:52:
                    1b:05:3e:5f:b3:df:da:87:13:07:d3:51:e2:46:7e:
                    24:8d:90:fd:a8:01:73:47:da:7d:cc:54:74:b3:09:
                    17:44:bc:ed:56:35:24:64:8c:48:81:4b:54:ee:5f:
                    7e:b7:eb:18:02:53:4d:83:74:d0:5d:c6:4b:68:13:
                    d5:4f:66:64:10:bc:d5:8d:ea:da:f1:e2:58:bd:ef:
                    1a:eb:d9:7c:fa:c4:32:c3:15:18:c4:4e:fe:bc:6f:
                    a9:08:da:41:9f:9d:c9:32:58:b6:3d:7c:4f:51:16:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CD:7D:16:0B:C0:EA:A8:42:BC:65:35:2D:1F:D4:EB:6F:2B:FA:A1
            X509v3 Authority Key Identifier:
                keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:36:bb:2d:72:95:94:91:76:23:7f:96:07:b2:5d:5c:bc:ee:
         31:f2:28:ee:ab:f3:a2:7f:ae:f9:b9:fc:1a:3a:a4:6a:fd:c3:
         fb:90:11:e4:82:18:b6:c2:77:5a:a5:d0:16:4d:0e:d7:86:a9:
         ff:dd:06:ee:f3:68:cf:89:c0:f8:d8:f0:a6:91:61:6e:55:f7:
         3d:38:f4:be:b1:5e:88:ca:6a:df:bb:dd:db:30:25:10:8a:95:
         93:f5:d9:a7:46:4e:2f:a6:08:e2:48:fd:e9:fb:41:d9:79:c4:
         54:26:58:94:c3:36:45:78:3c:d5:77:5d:6f:38:27:f6:d5:9c:
         2a:14:23:d7:82:fd:39:42:14:2d:0e:81:91:a4:cd:37:96:0c:
         2e:7e:6e:5a:30:4b:8f:d2:1c:88:98:a5:ff:a2:ad:d8:23:b1:
         46:dc:97:13:d6:a3:05:59:10:6e:b3:0e:22:ee:26:86:b4:94:
         40:a2:75:66:5f:76:dc:7c:0e:96:11:18:1a:2f:27:57:d0:80:
         03:b4:62:1f:4f:60:70:9b:93:5d:ed:d9:04:95:79:3a:7c:93:
         df:68:c0:fe:b0:84:12:10:08:dd:27:d7:5f:17:4a:9e:9c:b6:
         57:f9:c8:0a:e9:cb:af:a9:8d:b2:25:45:7a:fa:2b:34:bd:15:
         2e:1d:84:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJCQUYxMTAvBgNVBAUTKEQyMDY2QjYxOTM0RTc3Q0YyNjdBOURDQzM4QkY1REVF
MjFGMDdCQTMwHhcNMjYwOTI5MDY0MjI5WhcNMjYxMDA2MDY0MjI5WjAYMRYwFAYD
VQQDEw02YWJiNWRkNS0xNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt16aXFPkUq2rwiUrcDJsc9+ouybYCdUp/iSJIT/jQ3mO8LvCDS0nHEnuUQBy
mCXtARDwLZ7ZqUvRAUaO2cpo9iw/oMHaPvu3Oba/I3dbmMdOANslJdNL/5CovLKW
lyVuUFteGGiZym1xB4wgEuerz0baFDYMLn9m+MbtOtpVKhulawzDPXyyDr95RrCL
zS/x0pCSdVIbBT5fs9/ahxMH01HiRn4kjZD9qAFzR9p9zFR0swkXRLztVjUkZIxI
gUtU7l9+t+sYAlNNg3TQXcZLaBPVT2ZkELzVjera8eJYve8a69l8+sQywxUYxE7+
vG+pCNpBn53JMli2PXxPURZgEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfNfRYL
wOqoQrxlNS0f1OtvK/qhMB8GA1UdIwQYMBaAFNIGa2GTTnfPJnqdzDi/Xe4h8Huj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkJBRi8xMEMxOUQzMDM2
REQxMUYwOTY4NjIxNjZDNEY5QUUwMi8wZ1pyWVpOT2Q4OG1lcDNNT0w5ZDdpSHdl
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBnWnJZWk5PZDg4bWVwM01PTDlkN2lId2U2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkJBRi8xMEMxOUQzMDM2REQxMUYwOTY4NjIxNjZDNEY5QUUwMi8wZ1pyWVpOT2Q4
OG1lcDNNT0w5ZDdpSHdlNk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlTa7LXKVlJF2I3+WB7JdXLzuMfIo7qvzon+u+bn8Gjqkav3D+5AR5IIYtsJ3
WqXQFk0O14ap/90G7vNoz4nA+NjwppFhblX3PTj0vrFeiMpq37vd2zAlEIqVk/XZ
p0ZOL6YI4kj96ftB2XnEVCZYlMM2RXg81Xddbzgn9tWcKhQj14L9OUIULQ6BkaTN
N5YMLn5uWjBLj9IciJil/6Kt2COxRtyXE9ajBVkQbrMOIu4mhrSUQKJ1Zl923HwO
lhEYGi8nV9CAA7RiH09gcJuTXe3ZBJV5OnyT32jA/rCEEhAI3SfXXxdKnpy2V/nI
CunLr6mNsiVFevorNL0VLh2EfA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:46:12 2026 by rpki-client