Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
File:                     cwR3XBzjhaykBAWGTqm5q_7ekbM.mft (raw, json)
Hash identifier:          l3IxXXRCvR/X9vMa2Uglj9UgsxudJEH2gR97ZOPvDOA=
Subject key identifier:   4C:F8:F7:14:BE:F9:31:03:0B:A2:8D:C7:C1:C9:A2:80:09:82:E3:00
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Certificate issuer:       /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial:       040A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
Manifest number:          0402
Signing time:             Fri 25 Sep 2026 00:14:08 +0000
Manifest this update:     Fri 25 Sep 2026 00:14:07 +0000
Manifest next update:     Fri 02 Oct 2026 00:14:07 +0000
Files and hashes:         1: cwR3XBzjhaykBAWGTqm5q_7ekbM.crl (hash: mt/pwac7VpbZcIZD+ALXxnbDASV/d+xxO0QosPAeO8c=)
                          2: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (hash: fEkscTOPczLjdNokDvAYNFJrvZePwXKN3ANl82TsKZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
                          rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1034 (0x40a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
        Validity
            Not Before: Sep 25 00:14:07 2026 GMT
            Not After : Oct  2 00:14:07 2026 GMT
        Subject: CN=6ab5bccf-48ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:8d:2e:55:c2:b4:df:fa:e8:02:1c:f2:56:
                    99:68:72:cf:0d:da:3f:66:9f:b2:48:9c:a1:93:13:
                    2a:bd:51:1a:8a:e7:13:b4:3c:7c:72:8b:36:ca:fc:
                    a3:8c:19:7d:69:58:30:ad:38:bc:a0:68:38:72:e3:
                    c5:65:96:c0:da:2b:ff:76:46:80:6a:de:0d:b8:ac:
                    63:c4:5e:ea:12:9e:0a:50:30:aa:fa:a2:91:d9:0a:
                    0f:a2:b9:59:54:20:f6:e2:5e:f6:65:24:43:a1:42:
                    69:80:67:47:04:48:da:ee:55:93:01:cc:95:cd:cc:
                    9f:88:90:5f:92:05:de:b5:39:8a:c4:e8:37:5e:14:
                    83:f5:7d:43:ef:5e:c5:49:a7:df:9f:80:04:96:fb:
                    21:13:89:82:78:af:17:be:01:ea:5d:d6:7d:b6:6c:
                    c3:57:4b:53:a7:21:97:ae:8e:fc:60:60:67:dc:ad:
                    cc:11:1e:56:b1:3d:aa:b2:3c:67:a6:4c:85:78:85:
                    2f:7f:20:8f:34:4b:29:36:9a:32:b8:7b:56:f2:87:
                    6c:1a:98:03:96:59:d8:5e:5d:ee:16:07:bd:99:da:
                    07:dc:e9:cd:2f:f7:e6:d9:92:99:af:32:f3:17:49:
                    2f:5c:50:af:6d:19:64:a7:db:06:db:43:44:0e:8d:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F8:F7:14:BE:F9:31:03:0B:A2:8D:C7:C1:C9:A2:80:09:82:E3:00
            X509v3 Authority Key Identifier:
                keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3f:06:ce:ad:fa:96:15:49:01:01:c9:f3:32:2c:8a:3d:65:
         13:80:8e:fc:3a:25:20:8b:9e:85:89:3a:29:af:a2:cb:a0:64:
         45:6e:54:99:97:59:03:30:d6:27:8f:d3:5f:41:eb:61:6e:79:
         d4:3c:27:e1:fe:e4:ec:f4:c4:76:fc:02:c7:e6:0f:3b:e0:bd:
         52:6e:e9:2d:f3:d5:31:ea:a2:72:fa:b0:36:3f:39:a5:e9:32:
         d7:00:d6:02:a2:53:f6:83:f6:25:c3:28:99:86:42:f0:5d:55:
         d8:7e:2e:02:c7:94:b8:2b:09:aa:7b:89:ca:60:c5:53:59:4a:
         ec:0b:45:55:6b:51:ed:b1:45:d3:3e:84:d5:a7:15:94:64:78:
         89:87:c4:6c:58:d9:0b:43:3c:5f:e8:2e:19:da:e1:d5:ca:53:
         cb:e9:d2:00:69:bd:85:c6:f7:10:35:c7:b4:c2:be:8e:8c:72:
         bf:1b:fc:f1:21:3b:c7:6b:7d:25:10:4a:65:9b:48:4e:4e:6c:
         bd:7d:d0:b8:22:fc:02:aa:c9:60:18:2f:b2:76:8d:e4:47:e1:
         8e:2e:5d:b7:ba:41:b8:a4:98:49:9d:d3:17:1d:77:47:0f:be:
         f5:04:af:54:b0:2a:72:67:69:e4:bb:14:16:53:73:2c:57:07:
         25:2a:ec:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU4MEExMTAvBgNVBAUTKDczMDQ3NzVDMUNFMzg1QUNBNDA0MDU4NjRFQTlCOUFC
RkVERTkxQjMwHhcNMjYwOTI1MDAxNDA3WhcNMjYxMDAyMDAxNDA3WjAYMRYwFAYD
VQQDEw02YWI1YmNjZi00OGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1lyNLlXCtN/66AIc8laZaHLPDdo/Zp+ySJyhkxMqvVEaiucTtDx8cos2yvyj
jBl9aVgwrTi8oGg4cuPFZZbA2iv/dkaAat4NuKxjxF7qEp4KUDCq+qKR2QoPorlZ
VCD24l72ZSRDoUJpgGdHBEja7lWTAcyVzcyfiJBfkgXetTmKxOg3XhSD9X1D717F
Saffn4AElvshE4mCeK8XvgHqXdZ9tmzDV0tTpyGXro78YGBn3K3MER5WsT2qsjxn
pkyFeIUvfyCPNEspNpoyuHtW8odsGpgDllnYXl3uFge9mdoH3OnNL/fm2ZKZrzLz
F0kvXFCvbRlkp9sG20NEDo1NnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEz49xS+
+TEDC6KNx8HJooAJguMAMB8GA1UdIwQYMBaAFHMEd1wc44WspAQFhk6puav+3pGz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTgwQS84NzhFOTg2RUQ0
REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhheWtCQVdHVHFtNXFfN2Vr
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N3UjNYQnpqaGF5a0JBV0dUcW01cV83ZWtiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTgwQS84NzhFOTg2RUQ0REUxMUVDQkNGQ0U3MjJDNEY5QUUwMi9jd1IzWEJ6amhh
eWtCQVdHVHFtNXFfN2VrYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkT8Gzq36lhVJAQHJ8zIsij1lE4CO/DolIIuehYk6Ka+iy6BkRW5UmZdZAzDW
J4/TX0HrYW551Dwn4f7k7PTEdvwCx+YPO+C9Um7pLfPVMeqicvqwNj85peky1wDW
AqJT9oP2JcMomYZC8F1V2H4uAseUuCsJqnuJymDFU1lK7AtFVWtR7bFF0z6E1acV
lGR4iYfEbFjZC0M8X+guGdrh1cpTy+nSAGm9hcb3EDXHtMK+joxyvxv88SE7x2t9
JRBKZZtITk5svX3QuCL8AqrJYBgvsnaN5Efhji5dt7pBuKSYSZ3TFx13Rw++9QSv
VLAqcmdp5LsUFlNzLFcHJSrs1w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:54:33 2026 by rpki-client