Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
File:                     s9eTeQ4RSsj43IK64zwdkr29tes.mft (raw, json)
Hash identifier:          tveRaD32fdNw/0LQ5ZndSpSkmowqBHzhIDaHwLHLRCo=
Subject key identifier:   EE:AF:AC:7E:BF:E6:4D:9F:BE:CA:5E:59:9E:AB:C7:27:A2:A0:2B:2A
Authority key identifier: B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB
Certificate issuer:       /CN=A91F71E8/serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
Certificate serial:       0957
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
Manifest number:          1C10
Signing time:             Tue 06 Oct 2026 17:06:18 +0000
Manifest this update:     Tue 06 Oct 2026 17:06:17 +0000
Manifest next update:     Tue 13 Oct 2026 17:06:17 +0000
Files and hashes:         1: s9eTeQ4RSsj43IK64zwdkr29tes.crl (hash: Sv+tLwsO0Y3zWdv6ZG5BqioZUsR6eKCZY6+eRdOMIBY=)
                          2: F87AC94C35BB11EDB0314E29C4F9AE02.roa (hash: onIQBBgaYqQQQF/MByH2Uc0IXjytJM2CNUv7KzbvAOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl
                          rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2391 (0x957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F71E8, serialNumber=B3D793790E114AC8F8DC82BAE33C1D92BDBDB5EB
        Validity
            Not Before: Oct  6 17:06:17 2026 GMT
            Not After : Oct 13 17:06:17 2026 GMT
        Subject: CN=6ac52a8a-8513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:64:20:10:45:71:fc:bd:54:9d:61:c0:8c:6e:
                    b3:13:c6:c0:b9:07:28:7c:87:bc:0d:cf:0b:1c:63:
                    40:71:e1:ea:5a:64:a9:a2:e7:86:99:87:d3:aa:de:
                    74:f5:98:38:fa:71:11:17:3d:e8:54:88:b0:d3:1d:
                    67:aa:f5:0c:16:32:bb:8d:47:97:cd:3a:2c:86:bd:
                    18:05:9d:09:ff:04:40:34:02:c5:5c:f9:9b:1f:42:
                    06:bd:bf:f0:ac:26:1c:ec:fd:dd:7e:1c:3c:72:2e:
                    bd:3f:87:ef:87:13:49:1c:48:e2:4e:58:b7:98:dc:
                    b1:a0:c3:21:3c:ec:40:40:bd:aa:7d:2d:0c:cc:ab:
                    af:14:d2:f9:7b:ba:ad:ac:8b:9d:df:a2:51:7c:27:
                    aa:9f:7c:0d:26:ee:6b:9b:62:de:35:85:57:93:07:
                    d6:41:d9:8c:db:01:7c:51:fe:dd:ba:62:f0:a8:58:
                    9a:f1:e0:44:c7:bb:38:43:76:7a:72:45:40:cd:f9:
                    7c:ed:fb:c1:b5:af:3d:9c:9a:a7:8b:9a:95:30:b9:
                    b9:76:70:bb:62:55:54:56:ed:7b:33:12:bb:97:5e:
                    24:8c:af:37:e5:cf:8a:93:a0:dd:37:20:4f:73:d4:
                    db:3d:ba:09:2c:56:c6:7d:f2:12:8f:2c:95:a7:de:
                    3f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AF:AC:7E:BF:E6:4D:9F:BE:CA:5E:59:9E:AB:C7:27:A2:A0:2B:2A
            X509v3 Authority Key Identifier:
                keyid:B3:D7:93:79:0E:11:4A:C8:F8:DC:82:BA:E3:3C:1D:92:BD:BD:B5:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s9eTeQ4RSsj43IK64zwdkr29tes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/s9eTeQ4RSsj43IK64zwdkr29tes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9d:49:0c:bc:f2:8e:ab:e7:0e:68:cb:6e:31:6c:38:15:5d:
         b5:2f:87:f2:e4:1d:a9:5e:e4:c6:ca:f7:54:bb:bc:99:6f:ba:
         cd:ca:38:27:9c:2e:f4:10:46:a1:99:ed:15:2d:9f:c2:2f:70:
         3b:7b:7b:ee:82:eb:3d:5b:ae:69:2e:3c:97:71:6f:23:3e:db:
         c8:9d:21:d3:7a:22:f1:eb:13:b1:39:98:0f:e1:40:5b:58:b9:
         3a:68:72:c2:66:ea:c2:23:bf:2f:09:7a:8f:62:61:e2:08:13:
         8a:dc:49:5f:51:20:ea:d3:05:e3:46:40:55:ac:aa:b1:51:3d:
         34:e6:be:2d:ee:bc:a0:39:4f:46:ca:f0:98:8e:68:50:c7:78:
         9f:0e:6c:8e:e2:a5:e6:05:1e:b8:d8:f7:ad:f4:6f:fb:c9:5a:
         40:b8:71:45:ed:6b:8b:82:ed:f7:0d:ec:f2:3a:f1:0b:aa:1d:
         b7:23:b6:a3:63:b9:d1:e5:38:4e:49:00:c4:91:1f:03:a6:ee:
         8e:02:70:93:3e:6e:f4:ac:be:b8:93:17:10:ef:23:b0:0e:5f:
         d5:b1:9d:e0:fc:b4:58:46:a3:3e:69:ee:51:72:0d:ce:11:8a:
         ca:a6:04:3a:ad:92:8a:6f:37:e6:6e:d7:45:01:6d:d9:96:c9:
         a3:41:f6:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjcxRTgxMTAvBgNVBAUTKEIzRDc5Mzc5MEUxMTRBQzhGOERDODJCQUUzM0MxRDky
QkRCREI1RUIwHhcNMjYxMDA2MTcwNjE3WhcNMjYxMDEzMTcwNjE3WjAYMRYwFAYD
VQQDEw02YWM1MmE4YS04NTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmQgEEVx/L1UnWHAjG6zE8bAuQcofIe8Dc8LHGNAceHqWmSpoueGmYfTqt50
9Zg4+nERFz3oVIiw0x1nqvUMFjK7jUeXzToshr0YBZ0J/wRANALFXPmbH0IGvb/w
rCYc7P3dfhw8ci69P4fvhxNJHEjiTli3mNyxoMMhPOxAQL2qfS0MzKuvFNL5e7qt
rIud36JRfCeqn3wNJu5rm2LeNYVXkwfWQdmM2wF8Uf7dumLwqFia8eBEx7s4Q3Z6
ckVAzfl87fvBta89nJqni5qVMLm5dnC7YlVUVu17MxK7l14kjK835c+Kk6DdNyBP
c9TbPboJLFbGffISjyyVp94/WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO6vrH6/
5k2fvspeWZ6rxyeioCsqMB8GA1UdIwQYMBaAFLPXk3kOEUrI+NyCuuM8HZK9vbXr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF
RTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNzajQzSUs2NHp3ZGtyMjl0
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3M5ZVRlUTRSU3NqNDNJSzY0endka3IyOXRlcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9zOWVUZVE0UlNz
ajQzSUs2NHp3ZGtyMjl0ZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoJ1JDLzyjqvnDmjLbjFsOBVdtS+H8uQdqV7kxsr3VLu8mW+6zco4J5wu9BBG
oZntFS2fwi9wO3t77oLrPVuuaS48l3FvIz7byJ0h03oi8esTsTmYD+FAW1i5Omhy
wmbqwiO/Lwl6j2Jh4ggTitxJX1Eg6tMF40ZAVayqsVE9NOa+Le68oDlPRsrwmI5o
UMd4nw5sjuKl5gUeuNj3rfRv+8laQLhxRe1ri4Lt9w3s8jrxC6odtyO2o2O50eU4
TkkAxJEfA6bujgJwkz5u9Ky+uJMXEO8jsA5f1bGd4Py0WEajPmnuUXINzhGKyqYE
Oq2Sim835m7XRQFt2ZbJo0H2EA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:35:51 2026 by rpki-client