Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
File:                     MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json)
Hash identifier:          XZ4pIqLmV/1pXOg0Os3nUMlkRkGVl05JbDOePwXAaP0=
Subject key identifier:   35:A7:84:B2:78:AC:14:9F:10:6D:16:3B:05:44:A3:EB:67:F6:D3:F4
Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3
Certificate issuer:       /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3
Certificate serial:       02DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
Manifest number:          02D2
Signing time:             Wed 23 Sep 2026 01:01:01 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:01 +0000
Manifest next update:     Wed 30 Sep 2026 01:01:01 +0000
Files and hashes:         1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: c9ICxp4xORGwy61uIIv5cnRjbBQRpmzJALbMJda4OKY=)
                          2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: Bm87RlMlg4Xidevl8SRmtxIfSm/0d4Z1zMRG2VbMLIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl
                          rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F08, serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3
        Validity
            Not Before: Sep 23 01:01:01 2026 GMT
            Not After : Sep 30 01:01:01 2026 GMT
        Subject: CN=6ab324cd-4ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:86:20:50:57:61:2d:18:2c:d5:56:f9:1a:6a:
                    34:8a:cd:1c:4f:30:4f:9e:a0:61:ea:74:3d:db:c6:
                    74:39:e6:db:88:a7:f8:db:a5:45:b4:fa:d8:cd:dd:
                    0d:01:eb:e5:7e:b0:c4:19:b6:ba:90:16:89:5c:42:
                    90:56:f4:65:b8:02:ec:13:c8:36:36:48:6a:77:8d:
                    64:fb:fc:21:ed:42:fb:d8:d0:7d:be:6f:c2:d9:a0:
                    71:c5:a5:62:b4:44:92:a9:a3:09:88:9c:4e:7e:82:
                    c6:dd:ae:e5:b0:a9:35:41:31:fc:cb:12:c3:59:1e:
                    53:d4:ce:29:c6:3c:8e:00:0a:46:93:45:bb:ef:d2:
                    16:49:ce:7f:63:2c:09:f0:0e:d5:7e:8b:c7:4f:ca:
                    5d:fb:7c:ed:88:87:1b:02:86:4b:89:b8:29:f6:a8:
                    fb:2f:f7:64:8e:82:a2:d2:8d:0d:0c:bb:9e:45:7a:
                    7a:de:69:b3:cf:91:89:0f:b2:90:7d:b0:cd:0d:9a:
                    06:2b:a3:91:18:30:1e:66:c2:09:51:75:af:b1:1c:
                    57:95:ae:35:e7:ef:5a:7c:f4:bc:75:4f:94:34:52:
                    e5:3d:c7:b9:d5:bb:7c:6a:ad:8e:89:e1:e5:cf:e7:
                    a7:8f:c0:12:1a:04:14:84:39:af:2b:7f:04:7f:99:
                    8d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A7:84:B2:78:AC:14:9F:10:6D:16:3B:05:44:A3:EB:67:F6:D3:F4
            X509v3 Authority Key Identifier:
                keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e3:18:d3:f4:1b:40:1c:6d:55:c0:ab:85:80:d7:3b:95:99:
         3d:97:a5:38:a6:f2:85:98:1d:49:60:71:4a:d9:fd:fc:cd:75:
         90:b5:07:7b:34:60:4a:8f:77:e9:bf:df:ef:f2:6e:a0:03:08:
         7e:a2:6f:10:c2:ea:8e:2b:fb:87:06:97:ba:4e:8e:ff:91:a3:
         3f:93:6d:40:53:10:71:ca:0a:2d:e4:f5:d6:9e:7c:16:89:3d:
         a8:64:0e:50:ab:a4:67:12:a9:3f:56:c3:9b:d1:d8:a7:25:a2:
         50:ab:da:3d:a4:00:cf:79:cb:c4:db:01:5f:e7:e8:a4:b5:cc:
         8e:32:3b:89:a7:b7:22:d6:c8:5e:3a:ef:82:37:df:4b:26:9c:
         b6:7b:86:35:07:cb:8f:20:ec:49:72:63:7c:d7:0d:62:32:19:
         09:b9:f1:35:fa:e4:60:83:3d:54:d8:52:41:83:9d:bc:d5:ee:
         35:40:f0:93:f3:25:bf:89:1e:c7:56:ea:e8:a7:2a:1b:c9:d0:
         29:76:b4:52:da:c9:ba:c7:f4:28:a9:95:d8:c6:4f:a9:45:e5:
         77:c0:a3:55:cd:65:9a:40:70:78:b0:d2:e7:e0:7a:4b:f4:3a:
         cc:94:2c:4b:d7:0b:25:b2:4b:60:c3:e5:6d:3b:45:d1:c8:3b:
         d3:c4:16:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVGMDgxMTAvBgNVBAUTKDMwM0NEM0NEQTc4NDI2QjVCRTg3NTFBNjM0RDY0OUFE
OEZCN0EwQzMwHhcNMjYwOTIzMDEwMTAxWhcNMjYwOTMwMDEwMTAxWjAYMRYwFAYD
VQQDEw02YWIzMjRjZC00Y2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6oYgUFdhLRgs1Vb5Gmo0is0cTzBPnqBh6nQ928Z0OebbiKf426VFtPrYzd0N
AevlfrDEGba6kBaJXEKQVvRluALsE8g2Nkhqd41k+/wh7UL72NB9vm/C2aBxxaVi
tESSqaMJiJxOfoLG3a7lsKk1QTH8yxLDWR5T1M4pxjyOAApGk0W779IWSc5/YywJ
8A7VfovHT8pd+3ztiIcbAoZLibgp9qj7L/dkjoKi0o0NDLueRXp63mmzz5GJD7KQ
fbDNDZoGK6ORGDAeZsIJUXWvsRxXla415+9afPS8dU+UNFLlPce51bt8aq2OieHl
z+enj8ASGgQUhDmvK38Ef5mNCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWnhLJ4
rBSfEG0WOwVEo+tn9tP0MB8GA1UdIwQYMBaAFDA8082nhCa1vodRpjTWSa2Pt6DD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYwOC8wMTZCQ0VERTZB
MkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpyVy1oMUdtTk5aSnJZLTNv
TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01EelR6YWVFSnJXLWgxR21OTlpKclktM29NTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NUYwOC8wMTZCQ0VERTZBMkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpy
Vy1oMUdtTk5aSnJZLTNvTU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN+MY0/QbQBxtVcCrhYDXO5WZPZelOKbyhZgdSWBxStn9/M11kLUHezRgSo93
6b/f7/JuoAMIfqJvEMLqjiv7hwaXuk6O/5GjP5NtQFMQccoKLeT11p58Fok9qGQO
UKukZxKpP1bDm9HYpyWiUKvaPaQAz3nLxNsBX+fopLXMjjI7iae3ItbIXjrvgjff
SyactnuGNQfLjyDsSXJjfNcNYjIZCbnxNfrkYIM9VNhSQYOdvNXuNUDwk/Mlv4ke
x1bq6KcqG8nQKXa0UtrJusf0KKmV2MZPqUXld8CjVc1lmkBweLDS5+B6S/Q6zJQs
S9cLJbJLYMPlbTtF0cg708QWEg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:03:48 2026 by rpki-client