Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File:                     cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier:          kblfbDOz/k+BqE+mkKDCkpBEXbcIdUhtbnl+ZmfEw7I=
Subject key identifier:   93:DE:E1:6D:79:CE:36:91:65:5C:55:2A:8D:27:D9:FC:B7:16:B3:50
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       08AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number:          0886
Signing time:             Thu 24 Sep 2026 20:47:54 +0000
Manifest this update:     Thu 24 Sep 2026 20:47:53 +0000
Manifest next update:     Thu 01 Oct 2026 20:47:53 +0000
Files and hashes:         1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: 1dZTUUY/p0Zhiu9ECxLEKTKojlbgD8nDnlKt1r/DaU0=)
                          2: 99551366132E11F0B588DB49C4F9AE02.roa (hash: 730CsvKwep6Bjskp3sW1RKOSjDMQjfByDvmaL6lb+pQ=)
                          3: AoJXKTW6a976-lGfSTZSSLqRfVU.asa (hash: NinME7QbecrEtC4yA+6TI6aYRUOFyI2rxCV52kQzJ9U=)
                          4: 98657342132E11F0B588DB49C4F9AE02.roa (hash: 0iM/49fCWX66zeiMZs91UhGTC/SM04s/wq22TiEesQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2222 (0x8ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Sep 24 20:47:53 2026 GMT
            Not After : Oct  1 20:47:53 2026 GMT
        Subject: CN=6ab58c79-49d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:45:fd:d0:84:a2:1e:c5:b4:f7:7d:af:5d:
                    d6:25:59:92:cf:1f:a0:ff:d5:89:6e:6c:43:52:72:
                    53:ef:0b:90:f2:58:13:03:1a:eb:be:e3:b3:27:8f:
                    c7:0b:6e:76:9b:0d:bf:07:64:13:1f:4d:1a:78:73:
                    ea:47:44:d8:ae:92:db:3f:9f:ef:27:89:93:20:f0:
                    1b:dc:b2:26:0a:6c:d3:ed:26:2d:b7:81:25:b5:68:
                    c5:92:0b:91:ad:03:c8:71:78:7c:13:c4:eb:c6:4e:
                    31:8e:69:84:99:e9:a8:6b:b8:e0:61:54:10:62:d7:
                    a2:bc:ee:65:2a:38:22:ef:51:cf:a1:6d:33:82:7a:
                    b4:f4:70:3b:e0:9d:21:f3:6e:ce:4e:3e:1e:94:7c:
                    20:15:e0:a6:d6:87:a8:a6:1f:f6:d8:88:0a:08:91:
                    8b:db:01:0d:4f:25:c3:6b:76:59:66:10:1c:84:d5:
                    5b:13:e6:7b:b9:00:ea:67:3d:2f:97:23:6c:c5:c7:
                    27:e0:59:a6:ef:f5:b4:50:d2:67:9b:47:35:e8:f5:
                    f0:ae:d9:ee:9b:9e:ae:07:a2:b8:2f:f9:49:7d:ac:
                    f5:da:38:cb:08:71:7a:38:03:9d:aa:6d:b4:3d:8b:
                    25:a0:87:31:b8:d6:c6:40:24:f3:34:38:a9:34:00:
                    61:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:E1:6D:79:CE:36:91:65:5C:55:2A:8D:27:D9:FC:B7:16:B3:50
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:14:c5:da:d6:fa:e3:9e:db:ab:94:af:a8:76:df:d3:26:e4:
         58:69:be:51:96:9f:4e:f5:39:20:5c:54:25:2e:64:9e:c7:f7:
         22:6f:7b:f8:5b:57:50:f6:10:77:05:1c:1f:b4:9a:00:9d:5a:
         03:49:1e:d7:22:4e:89:17:3e:88:e3:2a:ab:9f:06:b4:86:19:
         b1:49:e4:2a:57:94:12:2d:c1:ed:f7:07:47:1f:5a:e3:65:30:
         83:15:ad:f4:6a:18:dd:fc:f5:a2:3f:76:1b:2e:f8:2d:4d:ba:
         1a:4e:13:a0:d3:0d:d4:9b:61:0c:20:54:d2:9e:51:5a:27:c3:
         d2:17:58:93:87:05:8a:78:84:64:c4:46:5d:06:6f:54:b5:55:
         63:4f:98:66:bc:61:71:17:34:1a:59:6e:f8:f7:39:a4:85:20:
         80:62:ab:95:b5:96:5e:be:3d:62:35:02:b4:4d:47:53:bd:7d:
         e4:40:58:c9:7a:7e:6a:86:b4:7a:e8:76:1d:aa:70:76:94:a2:
         b4:5f:69:e3:a4:e5:c8:8c:fc:49:5e:36:4d:80:8a:0f:5a:1f:
         5d:fc:be:04:fa:aa:dc:ba:ae:ab:53:f6:fd:e3:64:af:2c:72:
         ab:93:04:34:25:ef:93:dd:b8:51:07:9c:51:70:7c:8b:20:46:
         af:ac:6b:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC
NzM1NzZFOEEwHhcNMjYwOTI0MjA0NzUzWhcNMjYxMDAxMjA0NzUzWjAYMRYwFAYD
VQQDEw02YWI1OGM3OS00OWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHRF/dCEoh7FtPd9r13WJVmSzx+g/9WJbmxDUnJT7wuQ8lgTAxrrvuOzJ4/H
C252mw2/B2QTH00aeHPqR0TYrpLbP5/vJ4mTIPAb3LImCmzT7SYtt4EltWjFkguR
rQPIcXh8E8Trxk4xjmmEmemoa7jgYVQQYteivO5lKjgi71HPoW0zgnq09HA74J0h
827OTj4elHwgFeCm1oeoph/22IgKCJGL2wENTyXDa3ZZZhAchNVbE+Z7uQDqZz0v
lyNsxccn4Fmm7/W0UNJnm0c16PXwrtnum56uB6K4L/lJfaz12jjLCHF6OAOdqm20
PYsloIcxuNbGQCTzNDipNABhrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPe4W15
zjaRZVxVKo0n2fy3FrNQMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3
OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODA3RS9DNEI0RTJDNjE3OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhI
RWpZMUJhQ21UZE8zTlhib28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAehTF2tb6457bq5SvqHbf0ybkWGm+UZafTvU5IFxUJS5knsf3Im97+FtXUPYQ
dwUcH7SaAJ1aA0ke1yJOiRc+iOMqq58GtIYZsUnkKleUEi3B7fcHRx9a42UwgxWt
9GoY3fz1oj92Gy74LU26Gk4ToNMN1JthDCBU0p5RWifD0hdYk4cFiniEZMRGXQZv
VLVVY0+YZrxhcRc0Gllu+Pc5pIUggGKrlbWWXr49YjUCtE1HU7195EBYyXp+aoa0
euh2HapwdpSitF9p46TlyIz8SV42TYCKD1ofXfy+BPqq3Lquq1P2/eNkryxyq5ME
NCXvk924UQecUXB8iyBGr6xr3w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:51:58 2026 by rpki-client