Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
File:                     0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json)
Hash identifier:          Zb1TDbcJThPqXdIR4yWWj5lJ3WFRDc3K04tEC2EKOgA=
Subject key identifier:   03:2F:A0:88:7F:BC:0D:F5:C2:0E:0A:6E:8F:40:F7:37:7F:C6:91:48
Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
Certificate issuer:       /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Certificate serial:       07D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
Manifest number:          07D0
Signing time:             Sun 04 Oct 2026 21:26:40 +0000
Manifest this update:     Sun 04 Oct 2026 21:26:40 +0000
Manifest next update:     Sun 11 Oct 2026 21:26:40 +0000
Files and hashes:         1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: K6E9PNQJwC6D/qvEY61EvQBo0yQM/LLSqgubg2IMu9k=)
                          2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: KDHec1NuQnRFPj3fy0LeUs+7NE3BsKDvmh07xKvSLiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
                          rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 21:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2008 (0x7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
        Validity
            Not Before: Oct  4 21:26:40 2026 GMT
            Not After : Oct 11 21:26:40 2026 GMT
        Subject: CN=6ac2c490-81b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:69:fd:c6:a9:cd:e3:b8:05:2a:f5:5d:83:
                    bf:af:3e:ff:df:de:f2:42:e9:a8:88:38:0b:e6:e7:
                    18:96:4b:bd:0c:78:7c:33:be:3f:a9:5d:cc:97:e8:
                    ad:e6:a2:f7:92:02:93:f4:96:b4:db:2c:fa:dd:9e:
                    5d:e4:ff:4f:90:7f:e6:f3:03:73:55:b1:6c:2e:57:
                    e7:3c:e2:9f:1b:36:50:91:49:7e:1b:71:d6:ef:c7:
                    c5:7f:b8:b5:82:3a:14:74:5e:5c:2a:ce:9f:53:f5:
                    ea:03:de:ea:9a:2b:2b:52:e0:5d:cc:49:6d:3c:3b:
                    61:eb:c0:48:02:f2:99:60:ce:61:4c:4b:f2:88:de:
                    3a:d1:9a:f5:b7:ba:a1:29:33:c3:d0:7a:1a:8a:bb:
                    87:81:cd:cd:6e:07:98:07:34:95:b4:c1:98:24:57:
                    ac:55:fe:4e:55:30:74:87:30:51:f8:07:1b:3e:1d:
                    b7:6b:84:df:f3:4a:ec:5e:0a:bd:b4:d7:30:b4:cd:
                    08:6a:a4:e5:c0:21:4a:87:7d:31:54:87:4a:bd:7a:
                    dd:f3:c8:af:a4:38:46:b0:15:b6:dc:91:f6:39:0e:
                    79:1e:a9:4c:02:60:56:0a:64:b9:0c:c6:8a:25:5f:
                    cf:3f:85:f3:e7:e5:7d:9f:71:65:9d:85:d3:bd:09:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2F:A0:88:7F:BC:0D:F5:C2:0E:0A:6E:8F:40:F7:37:7F:C6:91:48
            X509v3 Authority Key Identifier:
                keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:90:62:d7:e7:b9:d7:ee:90:3f:a4:94:1d:56:76:e9:d5:b7:
         c9:36:7f:fe:c7:40:62:4f:e5:9a:3c:7d:b7:3c:a9:d3:c9:14:
         39:3c:b9:1b:92:6f:31:5a:a2:2d:b9:6a:cc:e9:9a:1b:ef:ff:
         f8:a8:93:9a:1a:fa:e6:df:74:a5:8f:2d:1b:f6:0f:54:50:d8:
         33:f0:fa:4a:1f:50:b7:4f:6d:ad:5e:13:51:20:30:96:27:f1:
         c2:3f:c9:2e:1f:96:63:0e:73:0a:76:e6:51:ea:ec:87:c7:6f:
         2d:f9:80:80:f3:57:2a:34:94:90:39:bf:75:c2:75:2e:61:14:
         90:dc:0e:d9:99:10:48:d2:31:24:1a:0e:bb:4f:20:83:db:f7:
         3e:6e:e2:26:af:1e:76:77:34:55:7e:54:f7:fa:85:a9:64:33:
         56:da:84:26:58:9d:b3:00:0e:e1:b7:03:00:16:86:d4:ce:0f:
         e1:aa:69:79:34:d2:23:b9:23:87:a0:18:cb:3e:1b:c3:74:82:
         4a:c7:9d:92:34:dd:9c:c6:bd:0c:85:74:35:52:2c:44:95:62:
         9b:af:28:c1:dc:f6:ff:68:04:0e:69:0e:98:62:4d:c0:23:c1:
         9f:34:55:90:f3:ad:dc:e8:4b:27:54:ee:0a:28:82:98:a7:c5:
         73:24:88:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RURFQzgxMTAvBgNVBAUTKEQzMEI4MDRENDJBQjdEMDIwQzVGMUY3NkYzQjNERDFG
MjkyRDg2NkEwHhcNMjYxMDA0MjEyNjQwWhcNMjYxMDExMjEyNjQwWjAYMRYwFAYD
VQQDEw02YWMyYzQ5MC04MWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsC5p/capzeO4BSr1XYO/rz7/397yQumoiDgL5ucYlku9DHh8M74/qV3Ml+it
5qL3kgKT9Ja02yz63Z5d5P9PkH/m8wNzVbFsLlfnPOKfGzZQkUl+G3HW78fFf7i1
gjoUdF5cKs6fU/XqA97qmisrUuBdzEltPDth68BIAvKZYM5hTEvyiN460Zr1t7qh
KTPD0HoairuHgc3NbgeYBzSVtMGYJFesVf5OVTB0hzBR+AcbPh23a4Tf80rsXgq9
tNcwtM0IaqTlwCFKh30xVIdKvXrd88ivpDhGsBW23JH2OQ55HqlMAmBWCmS5DMaK
JV/PP4Xz5+V9n3FlnYXTvQk2zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMvoIh/
vA31wg4Kbo9A9zd/xpFIMB8GA1UdIwQYMBaAFNMLgE1Cq30CDF8fdvOz3R8pLYZq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREVDOC84QTA1MDk4ODU2
RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZRSU1YeDkyODdQZEh5a3Ro
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB3dUFUVUtyZlFJTVh4OTI4N1BkSHlrdGhtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REVDOC84QTA1MDk4ODU2RTExMUVCQUFDQkVFNzNDNEY5QUUwMi8wd3VBVFVLcmZR
SU1YeDkyODdQZEh5a3RobW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFpBi1+e51+6QP6SUHVZ26dW3yTZ//sdAYk/lmjx9tzyp08kUOTy5G5JvMVqi
LblqzOmaG+//+KiTmhr65t90pY8tG/YPVFDYM/D6Sh9Qt09trV4TUSAwlifxwj/J
Lh+WYw5zCnbmUersh8dvLfmAgPNXKjSUkDm/dcJ1LmEUkNwO2ZkQSNIxJBoOu08g
g9v3Pm7iJq8ednc0VX5U9/qFqWQzVtqEJlidswAO4bcDABaG1M4P4appeTTSI7kj
h6AYyz4bw3SCSsedkjTdnMa9DIV0NVIsRJVim68owdz2/2gEDmkOmGJNwCPBnzRV
kPOt3OhLJ1TuCiiCmKfFcySI8Q==
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:58:14 2026 by rpki-client