Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File:                     2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier:          UcaGZMkE+mXgAEzXajFigvlVUQ9LRa5n6/8JSHazv/I=
Subject key identifier:   8F:67:0F:C6:83:06:DC:B7:0E:5F:9E:B8:E5:6F:C0:38:4A:3B:13:31
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer:       /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial:       1849
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number:          1823
Signing time:             Tue 22 Sep 2026 16:28:55 +0000
Manifest this update:     Tue 22 Sep 2026 16:28:54 +0000
Manifest next update:     Tue 29 Sep 2026 16:28:54 +0000
Files and hashes:         1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: 0CA1r4I21sHbfhCu7oavDdtzl0wJAVO0350dp4UzJRA=)
                          2: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: axL4DxRLdN4w1oidCM91AwY0+Ml6Zzq4wlYIpZ72Alw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
                          rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6217 (0x1849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
        Validity
            Not Before: Sep 22 16:28:54 2026 GMT
            Not After : Sep 29 16:28:54 2026 GMT
        Subject: CN=6ab2acc7-eadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:bf:6a:b0:e3:58:7e:16:10:d1:02:2d:d9:
                    f2:a4:34:bb:08:4f:2b:b3:3e:64:45:02:ce:bc:89:
                    d0:ec:13:f4:a2:17:9d:f3:08:47:6b:6b:a8:ed:4c:
                    4e:0c:17:68:5d:6e:b0:70:ad:d2:af:3b:66:ef:11:
                    0e:20:3f:fd:58:7f:9c:d2:82:b5:ab:31:de:0d:34:
                    9c:24:c2:ff:3c:e4:e1:e8:97:d0:fb:ce:aa:ea:67:
                    53:74:09:4a:23:ea:0a:08:65:b5:d3:ac:86:a3:9d:
                    bb:0c:18:e5:97:a0:94:85:78:0d:0a:78:bb:41:a4:
                    d5:f3:ca:d7:c7:88:14:9f:c3:a0:f1:61:49:f0:99:
                    31:bd:b2:f6:65:d8:94:d2:d5:17:75:cb:e6:1a:5f:
                    84:66:2f:4e:fd:5c:90:7b:cc:b3:33:74:bf:58:43:
                    27:f2:9a:89:9a:8b:84:3a:1b:dc:c9:4d:48:0c:8d:
                    6f:39:38:cc:5d:7a:52:68:a0:4d:f3:bd:14:02:3a:
                    be:f0:9c:76:70:f5:21:7e:d9:67:53:78:43:aa:2c:
                    39:c3:48:6d:da:5a:dd:24:d8:e3:dc:01:9b:47:60:
                    ea:df:4d:e3:3c:43:36:37:1d:9a:ea:1e:15:d1:e7:
                    72:65:da:fe:d2:93:8e:b2:86:00:be:a1:f1:55:db:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:67:0F:C6:83:06:DC:B7:0E:5F:9E:B8:E5:6F:C0:38:4A:3B:13:31
            X509v3 Authority Key Identifier:
                keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:56:e0:04:8d:5c:2b:2a:53:90:37:56:36:66:e8:38:d0:
         c1:52:59:d9:56:c2:3b:a7:54:7b:ca:ce:25:9d:04:2e:08:8d:
         20:54:06:23:d5:47:f4:ec:6b:a5:f3:24:c7:d0:d1:c2:26:62:
         ca:64:8a:76:ab:f6:39:14:d1:ed:5f:57:32:46:9b:75:bb:7d:
         fb:26:dd:79:8c:1f:65:6b:8b:08:b8:14:bc:35:00:a9:1f:7e:
         ee:07:d4:a1:f9:2c:c4:e7:73:e5:19:89:44:f1:6c:9d:e4:3e:
         67:cd:62:e9:e6:d4:79:7d:33:92:74:6a:f3:51:97:89:dc:11:
         bd:68:2d:9f:1c:15:b5:44:e1:df:bc:9c:a4:76:d4:23:f0:b2:
         01:0c:52:c4:83:06:0f:46:b9:59:9e:1d:25:67:ea:64:d5:79:
         27:4a:3b:e7:f7:12:d4:b1:a7:f5:9a:1c:31:7f:0a:46:b9:10:
         86:a9:09:5d:79:a9:46:a3:28:cb:0d:f5:4d:2e:5a:9a:b3:42:
         cc:5a:6a:24:cd:6b:36:6c:4d:01:80:94:e4:75:b0:85:81:9e:
         41:7e:af:90:1d:df:2d:a7:a1:47:ce:8a:1b:ff:b6:7e:2f:99:
         50:e4:5e:12:39:3d:29:b1:d8:ea:40:84:62:31:3a:cb:18:79:
         f4:f9:a8:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg2MkQxMTAvBgNVBAUTKEQ4QzY3MzA5NUU4MkE5QjdFN0RGQ0Q0NjU4MEY3ODMx
QThEMThBQ0EwHhcNMjYwOTIyMTYyODU0WhcNMjYwOTI5MTYyODU0WjAYMRYwFAYD
VQQDEw02YWIyYWNjNy1lYWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmkS/arDjWH4WENECLdnypDS7CE8rsz5kRQLOvInQ7BP0ohed8whHa2uo7UxO
DBdoXW6wcK3Srztm7xEOID/9WH+c0oK1qzHeDTScJML/POTh6JfQ+86q6mdTdAlK
I+oKCGW106yGo527DBjll6CUhXgNCni7QaTV88rXx4gUn8Og8WFJ8JkxvbL2ZdiU
0tUXdcvmGl+EZi9O/VyQe8yzM3S/WEMn8pqJmouEOhvcyU1IDI1vOTjMXXpSaKBN
870UAjq+8Jx2cPUhftlnU3hDqiw5w0ht2lrdJNjj3AGbR2Dq303jPEM2Nx2a6h4V
0edyZdr+0pOOsoYAvqHxVds9nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI9nD8aD
Bty3Dl+euOVvwDhKOxMxMB8GA1UdIwQYMBaAFNjGcwlegqm359/NRlgPeDGo0YrK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODYyRC8zMjg3OUQzQUU4
QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3FiZm4zODFHV0E5NE1halJp
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJNWnpDVjZDcWJmbjM4MUdXQTk0TWFqUmlzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODYyRC8zMjg3OUQzQUU4QkExMUU3OEE2QTcwNDJDNEY5QUUwMi8yTVp6Q1Y2Q3Fi
Zm4zODFHV0E5NE1halJpc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdjtW4ASNXCsqU5A3VjZm6DjQwVJZ2VbCO6dUe8rOJZ0ELgiNIFQGI9VH9Oxr
pfMkx9DRwiZiymSKdqv2ORTR7V9XMkabdbt9+ybdeYwfZWuLCLgUvDUAqR9+7gfU
ofksxOdz5RmJRPFsneQ+Z81i6ebUeX0zknRq81GXidwRvWgtnxwVtUTh37ycpHbU
I/CyAQxSxIMGD0a5WZ4dJWfqZNV5J0o75/cS1LGn9ZocMX8KRrkQhqkJXXmpRqMo
yw31TS5amrNCzFpqJM1rNmxNAYCU5HWwhYGeQX6vkB3fLaehR86KG/+2fi+ZUORe
Ejk9KbHY6kCEYjE6yxh59PmoQw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:01:31 2026 by rpki-client