Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
File:                     A4zy4oB33yytpFdW-12ZpuJA_Qk.mft (raw, json)
Hash identifier:          yazf2p5ZP/bqrJMIp2yNgjDCABKf/Vtp80USIDkTnIA=
Subject key identifier:   39:8D:C0:45:BF:1A:AC:4C:DC:B5:99:B7:52:0C:25:81:41:76:47:EE
Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
Certificate issuer:       /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Certificate serial:       3591
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
Manifest number:          3584
Signing time:             Tue 22 Sep 2026 15:06:15 +0000
Manifest this update:     Tue 22 Sep 2026 15:06:15 +0000
Manifest next update:     Tue 29 Sep 2026 15:06:15 +0000
Files and hashes:         1: A4zy4oB33yytpFdW-12ZpuJA_Qk.crl (hash: K77102neNzzBeLHJjahiF/Pr/XC7Ghu/qD3OBdSlojk=)
                          2: 55A4C5C004AA11E8935B7021C4F9AE02.roa (hash: qfvcgZVUflsdf2vdMxE8qxvPQTjGmtT1vRqCh+Z14oM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
                          rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13713 (0x3591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
        Validity
            Not Before: Sep 22 15:06:15 2026 GMT
            Not After : Sep 29 15:06:15 2026 GMT
        Subject: CN=6ab29967-5645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:d3:71:6d:1e:5b:23:dd:5e:b5:0c:64:e3:
                    4c:02:cc:6a:8f:78:cd:02:98:02:29:b7:7f:75:ec:
                    37:f8:a3:e5:2c:1f:7c:59:03:ed:07:1a:b6:2c:62:
                    ee:2d:86:4a:eb:78:db:cd:18:a0:55:b9:fe:3a:a7:
                    80:6e:c6:81:3c:28:9e:9d:ba:09:66:fb:e5:90:c1:
                    24:da:45:26:7d:e9:a2:40:70:71:64:d3:9e:97:c5:
                    d7:c3:86:70:0d:f7:c7:91:f3:a7:67:37:25:e8:ee:
                    65:d6:c3:d1:d5:a8:24:e9:32:9c:b9:93:fc:61:d0:
                    a4:d7:07:72:c2:5d:10:ed:81:a9:2b:d8:d4:74:02:
                    42:02:74:0d:f9:4d:a4:62:09:db:51:d4:2d:dd:ba:
                    1f:5e:dc:4d:25:a0:6c:1c:de:9d:a4:94:5b:80:c5:
                    f6:17:b4:4a:03:cb:e7:94:97:35:ad:21:d4:4c:24:
                    cc:1c:c2:6e:7d:95:a2:97:7e:57:46:51:88:6a:15:
                    e3:2a:e8:21:e0:3e:df:eb:c1:da:61:e6:a7:33:56:
                    2a:90:2e:96:a6:e8:25:3f:bb:55:41:da:26:55:6d:
                    9b:90:ca:63:1c:bc:2d:5b:f9:fa:12:29:18:9c:75:
                    ed:4d:5e:53:a5:9f:d2:e7:e7:dc:a1:89:f4:99:57:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:C0:45:BF:1A:AC:4C:DC:B5:99:B7:52:0C:25:81:41:76:47:EE
            X509v3 Authority Key Identifier:
                keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:89:72:8f:d4:f7:c6:ee:4e:8d:bd:60:5d:5b:e9:99:68:51:
         02:7f:76:ad:8d:e3:d4:42:18:d0:02:f2:28:65:be:b6:41:d6:
         37:4b:70:55:e5:0b:14:66:82:38:3e:80:eb:1b:a3:87:a7:2b:
         e1:65:4b:03:bd:b0:06:cb:c5:c0:97:90:01:82:d9:32:ff:a3:
         3d:08:81:5d:2f:2c:24:02:ab:06:ed:0c:1f:7e:a2:c7:1e:9c:
         ee:3a:cc:7b:0a:b3:c2:c2:bb:35:15:81:33:92:76:62:08:79:
         72:bd:b3:2b:13:6b:e0:3b:0e:10:ac:53:ed:5d:09:4e:ba:e9:
         6d:45:7e:1b:dd:ee:73:8d:64:1e:68:bc:da:45:e8:8c:ec:c4:
         54:da:98:75:97:1e:7b:92:ca:ce:fb:9d:de:30:ec:02:29:37:
         7e:c4:e0:fa:d5:c8:7f:97:75:e2:28:d5:6b:db:e1:cf:41:f9:
         3b:51:23:2a:cb:2a:4f:9d:7b:41:07:f3:d2:18:36:b4:5e:28:
         e4:fb:76:24:8d:84:e4:68:7d:5a:36:3b:11:00:7c:e9:f6:15:
         60:73:0d:1f:75:be:67:47:16:25:35:d4:cd:ce:4f:9f:7d:f3:
         21:94:1b:2d:80:19:fa:70:81:42:70:58:72:a3:13:7e:2f:81:
         29:a0:64:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJDRUMxMTAvBgNVBAUTKDAzOENGMkUyODA3N0RGMkNBREE0NTc1NkZCNUQ5OUE2
RTI0MEZEMDkwHhcNMjYwOTIyMTUwNjE1WhcNMjYwOTI5MTUwNjE1WjAYMRYwFAYD
VQQDEw02YWIyOTk2Ny01NjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwVHTcW0eWyPdXrUMZONMAsxqj3jNApgCKbd/dew3+KPlLB98WQPtBxq2LGLu
LYZK63jbzRigVbn+OqeAbsaBPCienboJZvvlkMEk2kUmfemiQHBxZNOel8XXw4Zw
DffHkfOnZzcl6O5l1sPR1agk6TKcuZP8YdCk1wdywl0Q7YGpK9jUdAJCAnQN+U2k
YgnbUdQt3bofXtxNJaBsHN6dpJRbgMX2F7RKA8vnlJc1rSHUTCTMHMJufZWil35X
RlGIahXjKugh4D7f68HaYeanM1YqkC6WpuglP7tVQdomVW2bkMpjHLwtW/n6EikY
nHXtTV5TpZ/S5+fcoYn0mVfBRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDmNwEW/
GqxM3LWZt1IMJYFBdkfuMB8GA1UdIwQYMBaAFAOM8uKAd98sraRXVvtdmabiQP0J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkNFQy9COEIwQzc4ODFE
QTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5eXRwRmRXLTEyWnB1SkFf
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E0enk0b0IzM3l5dHBGZFctMTJacHVKQV9Ray5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkNFQy9COEIwQzc4ODFEQTQxMUUyOEM5M0U3OUEwOEIwMkNEMi9BNHp5NG9CMzN5
eXRwRmRXLTEyWnB1SkFfUWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFolyj9T3xu5Ojb1gXVvpmWhRAn92rY3j1EIY0ALyKGW+tkHWN0twVeULFGaC
OD6A6xujh6cr4WVLA72wBsvFwJeQAYLZMv+jPQiBXS8sJAKrBu0MH36ixx6c7jrM
ewqzwsK7NRWBM5J2Ygh5cr2zKxNr4DsOEKxT7V0JTrrpbUV+G93uc41kHmi82kXo
jOzEVNqYdZcee5LKzvud3jDsAik3fsTg+tXIf5d14ijVa9vhz0H5O1EjKssqT517
QQfz0hg2tF4o5Pt2JI2E5Gh9WjY7EQB86fYVYHMNH3W+Z0cWJTXUzc5Pn33zIZQb
LYAZ+nCBQnBYcqMTfi+BKaBk+w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:12:01 2026 by rpki-client