Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
File:                     o93avj1GtEgCYdq75SmgZrYgXYs.mft (raw, json)
Hash identifier:          uLIXYRj2rFF5+BONcBAp/eQzjBgSnHjbsRNjzbWsZGc=
Subject key identifier:   D4:B6:58:72:7E:5B:31:9F:67:27:3B:38:52:79:DB:78:03:A9:33:5C
Authority key identifier: A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B
Certificate issuer:       /CN=A91FAFBA/serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
Certificate serial:       06C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
Manifest number:          06C0
Signing time:             Fri 02 Oct 2026 22:39:48 +0000
Manifest this update:     Fri 02 Oct 2026 22:39:47 +0000
Manifest next update:     Fri 09 Oct 2026 22:39:47 +0000
Files and hashes:         1: o93avj1GtEgCYdq75SmgZrYgXYs.crl (hash: RWCbf+f7jwnx16qsu3+2baUq8QEv2KnQHQjAC4KI2P8=)
                          2: 416E569CC1F911EB91796381C4F9AE02.roa (hash: 2vUhihaED6w0NtltV5YY0cnZSdZY6BU1ckAfgYDMpvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl
                          rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735 (0x6c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAFBA, serialNumber=A3DDDABE3D46B4480261DABBE529A066B6205D8B
        Validity
            Not Before: Oct  2 22:39:47 2026 GMT
            Not After : Oct  9 22:39:47 2026 GMT
        Subject: CN=6ac032b4-f2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:18:3a:86:e8:83:15:cb:e2:1f:f3:95:14:
                    be:4b:a1:8b:f1:b0:d9:1e:55:12:c1:da:49:ea:46:
                    54:cb:69:dd:03:8a:29:e7:cb:60:bc:d6:ab:77:0c:
                    35:c8:37:23:91:c3:c4:ed:58:f0:9e:3e:0f:78:37:
                    50:4f:c3:33:02:d1:79:9c:11:17:32:05:e6:5b:29:
                    9b:9d:b6:f7:28:32:c5:ef:6d:8c:c7:ba:65:82:83:
                    3e:6c:45:a0:74:82:d6:e7:e4:01:23:a9:4f:9b:d7:
                    90:a3:37:90:6e:9e:5b:b9:2a:cf:9f:c6:b9:eb:70:
                    f4:0d:fe:9a:77:59:e1:61:7e:1f:f4:93:bb:f5:bb:
                    29:a2:db:bf:5f:81:2d:34:c7:ea:53:92:d7:eb:b5:
                    db:50:11:55:7f:33:45:20:ba:34:e0:39:6d:79:72:
                    ab:41:10:db:85:66:d9:37:31:3f:77:a8:ba:65:fc:
                    f0:2f:74:71:23:c1:1a:d1:62:c2:4b:de:71:c4:51:
                    14:ad:30:8f:ad:4f:f2:9d:d7:0d:ee:0d:e3:53:93:
                    28:82:3a:e5:95:66:8f:b9:29:5c:a8:9c:5b:46:89:
                    b7:da:5d:9b:6e:6a:05:d2:63:f1:ad:62:be:5c:d8:
                    42:73:19:e7:e5:fe:b1:d2:45:1d:e3:5f:77:c2:33:
                    95:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:58:72:7E:5B:31:9F:67:27:3B:38:52:79:DB:78:03:A9:33:5C
            X509v3 Authority Key Identifier:
                keyid:A3:DD:DA:BE:3D:46:B4:48:02:61:DA:BB:E5:29:A0:66:B6:20:5D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o93avj1GtEgCYdq75SmgZrYgXYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAFBA/D4420E90C1F511EBAB77977BC4F9AE02/o93avj1GtEgCYdq75SmgZrYgXYs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8d:da:0d:d1:34:a6:a8:5d:7d:bf:32:84:6f:1d:9d:3c:24:
         b7:f4:d7:5e:a7:04:db:2c:5c:67:2c:f5:d5:38:fd:cc:96:8c:
         d3:b0:a0:49:ef:50:1a:d0:14:98:e0:79:ea:81:30:e6:ab:17:
         f0:3c:7d:b0:ee:bb:e4:7d:62:eb:e5:cd:bf:46:38:9f:bb:14:
         50:4c:9e:9c:85:17:83:17:6d:9a:80:4a:bb:48:c7:28:56:91:
         a0:f2:16:13:f9:bc:19:80:f3:75:c2:39:63:ce:d7:51:b3:f0:
         0d:51:f7:1a:dc:5b:59:cc:e1:40:6e:2a:a3:ac:0c:a8:a9:66:
         3a:79:a3:b9:e8:d8:de:9d:6a:76:14:e0:2c:b9:c9:00:2e:6c:
         72:74:3d:86:48:da:23:5e:a6:d2:2b:0e:cf:85:7d:42:46:6f:
         00:47:ad:23:aa:c0:b2:50:9f:ae:4f:7d:fb:d1:c6:99:31:b6:
         27:af:2e:ea:1a:ff:38:1c:e5:1a:5a:7b:3a:72:60:5b:d7:cf:
         98:3a:a5:c3:e0:d5:da:03:a8:b7:9c:2a:60:ce:bb:5f:43:f3:
         b8:43:49:41:0b:2f:d9:87:4d:8f:92:95:25:2f:19:b7:08:b0:
         f4:6a:e5:33:00:57:a3:cf:1c:2a:d5:8e:02:73:6e:ab:9e:01:
         56:5d:fa:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFGQkExMTAvBgNVBAUTKEEzREREQUJFM0Q0NkI0NDgwMjYxREFCQkU1MjlBMDY2
QjYyMDVEOEIwHhcNMjYxMDAyMjIzOTQ3WhcNMjYxMDA5MjIzOTQ3WjAYMRYwFAYD
VQQDEw02YWMwMzJiNC1mMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoz8YOobogxXL4h/zlRS+S6GL8bDZHlUSwdpJ6kZUy2ndA4op58tgvNardww1
yDcjkcPE7Vjwnj4PeDdQT8MzAtF5nBEXMgXmWymbnbb3KDLF722Mx7plgoM+bEWg
dILW5+QBI6lPm9eQozeQbp5buSrPn8a563D0Df6ad1nhYX4f9JO79bspotu/X4Et
NMfqU5LX67XbUBFVfzNFILo04DlteXKrQRDbhWbZNzE/d6i6ZfzwL3RxI8Ea0WLC
S95xxFEUrTCPrU/yndcN7g3jU5MogjrllWaPuSlcqJxbRom32l2bbmoF0mPxrWK+
XNhCcxnn5f6x0kUd4193wjOVyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNS2WHJ+
WzGfZyc7OFJ523gDqTNcMB8GA1UdIwQYMBaAFKPd2r49RrRIAmHau+UpoGa2IF2L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUZCQS9ENDQyMEU5MEMx
RjUxMUVCQUI3Nzk3N0JDNEY5QUUwMi9vOTNhdmoxR3RFZ0NZZHE3NVNtZ1pyWWdY
WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285M2F2ajFHdEVnQ1lkcTc1U21nWnJZZ1hZcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUZCQS9ENDQyMEU5MEMxRjUxMUVCQUI3Nzk3N0JDNEY5QUUwMi9vOTNhdmoxR3RF
Z0NZZHE3NVNtZ1pyWWdYWXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUo3aDdE0pqhdfb8yhG8dnTwkt/TXXqcE2yxcZyz11Tj9zJaM07CgSe9QGtAU
mOB56oEw5qsX8Dx9sO675H1i6+XNv0Y4n7sUUEyenIUXgxdtmoBKu0jHKFaRoPIW
E/m8GYDzdcI5Y87XUbPwDVH3GtxbWczhQG4qo6wMqKlmOnmjuejY3p1qdhTgLLnJ
AC5scnQ9hkjaI16m0isOz4V9QkZvAEetI6rAslCfrk99+9HGmTG2J68u6hr/OBzl
Glp7OnJgW9fPmDqlw+DV2gOot5wqYM67X0PzuENJQQsv2YdNj5KVJS8Ztwiw9Grl
MwBXo88cKtWOAnNuq54BVl36fw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:11:25 2026 by rpki-client