Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
File:                     F61gXQbH7QoUSFwCoS8AFwmiLWI.mft (raw, json)
Hash identifier:          f/MbVU/0jHOZ0rTGJDkw/EsDafvUzNg/JDn1pjGQ8d8=
Subject key identifier:   42:74:7C:15:20:18:CE:EB:F5:5A:FD:62:54:13:81:FC:36:C9:B2:D7
Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62
Certificate issuer:       /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
Manifest number:          0244
Signing time:             Sun 27 Sep 2026 02:47:46 +0000
Manifest this update:     Sun 27 Sep 2026 02:47:45 +0000
Manifest next update:     Sun 04 Oct 2026 02:47:45 +0000
Files and hashes:         1: F61gXQbH7QoUSFwCoS8AFwmiLWI.crl (hash: iH9crvYSr0DFWV5cGSpD0cIe6ue7Obc/ZBZfeDxUEHk=)
                          2: 0294C902459511EE982FBC6DC4F9AE02.roa (hash: dCOu9SWE3pUxFDJykl6C0mTQJtKqMJIuuUM8T2xcP1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl
                          rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
        Validity
            Not Before: Sep 27 02:47:45 2026 GMT
            Not After : Oct  4 02:47:45 2026 GMT
        Subject: CN=6ab883d1-cdc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:ac:d8:ca:1b:17:cf:cf:1f:a4:b4:c3:89:
                    73:06:40:b1:bb:bf:fb:7f:d0:92:0d:bc:91:00:44:
                    73:18:6b:a7:e0:0f:cb:e1:5a:68:5d:66:9f:7e:55:
                    c7:78:95:19:37:98:28:32:ef:29:ea:ad:de:56:29:
                    3e:69:06:ac:4a:a9:a8:d5:8a:bc:32:bf:28:95:78:
                    a7:de:5d:ce:68:6e:ca:af:b2:a8:1d:97:38:c9:7f:
                    62:fc:88:7d:f3:02:9a:57:f8:8a:e8:2b:fa:96:da:
                    d3:13:a2:12:85:f6:a3:8f:cf:c4:af:26:91:2f:0f:
                    41:9f:30:e6:39:ec:09:ab:92:7a:07:5f:3a:25:84:
                    24:e0:8f:a4:f1:e9:21:18:f3:f2:a3:b6:f7:6e:6b:
                    9a:c6:a3:c8:8e:4a:ca:a4:84:f5:3a:59:de:ab:34:
                    8b:90:94:7c:2c:21:60:3f:5e:ad:c6:c7:4c:7f:92:
                    11:c2:45:7a:f8:cc:1c:19:4f:60:20:ff:cb:80:4e:
                    9a:1d:93:d1:b5:a2:70:89:8d:68:36:bf:a6:6e:5f:
                    c2:e0:14:75:9e:72:43:bd:ea:e1:21:0a:1c:8c:0f:
                    cf:d4:b3:d0:80:b6:e9:f9:5d:67:a2:db:4a:74:04:
                    40:f8:68:f0:57:05:21:25:c6:84:5f:31:e2:19:e7:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:74:7C:15:20:18:CE:EB:F5:5A:FD:62:54:13:81:FC:36:C9:B2:D7
            X509v3 Authority Key Identifier:
                keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b2:49:e5:75:e2:83:0a:d2:95:c9:ec:88:4a:a4:aa:af:ab:
         87:2d:cb:f3:33:e2:ee:e6:3e:36:c0:99:da:e5:28:00:1a:cc:
         92:5f:93:c4:52:0f:86:08:6b:f6:85:af:6e:6a:4b:c7:3c:69:
         29:25:3f:c5:47:fd:2a:09:34:f5:6c:99:19:2b:2e:09:21:75:
         21:c0:8f:bd:ae:e1:27:f8:cb:6c:b6:52:d2:37:8e:9d:bf:6b:
         17:eb:05:7a:9b:32:a6:3a:a6:a2:d4:ee:e5:45:85:c6:08:2a:
         68:d6:84:69:d5:85:e2:ee:c8:ba:83:a1:d0:4b:92:a2:3f:cf:
         b5:a1:57:a6:83:93:a7:fd:6d:5f:fe:08:91:d6:6a:5a:5e:9d:
         58:47:67:f5:00:52:eb:e7:48:93:8c:37:c2:27:14:7e:51:8e:
         05:4e:87:dc:ae:65:be:c9:24:51:0c:96:d9:d3:d0:22:ec:20:
         38:be:eb:d9:1b:e4:40:47:d1:09:ac:f8:40:2d:c2:66:e9:96:
         9d:12:ce:84:1e:e8:b8:19:90:70:4d:e6:63:c6:81:52:be:c9:
         63:e4:ed:31:a6:52:92:af:59:14:2f:e1:19:61:1b:ae:b3:38:
         15:5c:66:8f:ea:7d:c8:88:3c:72:cb:07:4a:14:85:f2:ca:9f:
         a3:8a:00:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJFQTcxMTAvBgNVBAUTKDE3QUQ2MDVEMDZDN0VEMEExNDQ4NUMwMkExMkYwMDE3
MDlBMjJENjIwHhcNMjYwOTI3MDI0NzQ1WhcNMjYxMDA0MDI0NzQ1WjAYMRYwFAYD
VQQDEw02YWI4ODNkMS1jZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hWs2MobF8/PH6S0w4lzBkCxu7/7f9CSDbyRAERzGGun4A/L4VpoXWafflXH
eJUZN5goMu8p6q3eVik+aQasSqmo1Yq8Mr8olXin3l3OaG7Kr7KoHZc4yX9i/Ih9
8wKaV/iK6Cv6ltrTE6IShfajj8/EryaRLw9BnzDmOewJq5J6B186JYQk4I+k8ekh
GPPyo7b3bmuaxqPIjkrKpIT1OlneqzSLkJR8LCFgP16txsdMf5IRwkV6+MwcGU9g
IP/LgE6aHZPRtaJwiY1oNr+mbl/C4BR1nnJDverhIQocjA/P1LPQgLbp+V1nottK
dARA+GjwVwUhJcaEXzHiGefqWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJ0fBUg
GM7r9Vr9YlQTgfw2ybLXMB8GA1UdIwQYMBaAFBetYF0Gx+0KFEhcAqEvABcJoi1i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkVBNy9CRTY3RDcxMDQ1
OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdRb1VTRndDb1M4QUZ3bWlM
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Y2MWdYUWJIN1FvVVNGd0NvUzhBRndtaUxXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkVBNy9CRTY3RDcxMDQ1OTQxMUVFODU0NTJFNkRDNEY5QUUwMi9GNjFnWFFiSDdR
b1VTRndDb1M4QUZ3bWlMV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADbJJ5XXigwrSlcnsiEqkqq+rhy3L8zPi7uY+NsCZ2uUoABrMkl+TxFIPhghr
9oWvbmpLxzxpKSU/xUf9Kgk09WyZGSsuCSF1IcCPva7hJ/jLbLZS0jeOnb9rF+sF
epsypjqmotTu5UWFxggqaNaEadWF4u7IuoOh0EuSoj/PtaFXpoOTp/1tX/4IkdZq
Wl6dWEdn9QBS6+dIk4w3wicUflGOBU6H3K5lvskkUQyW2dPQIuwgOL7r2RvkQEfR
Caz4QC3CZumWnRLOhB7ouBmQcE3mY8aBUr7JY+TtMaZSkq9ZFC/hGWEbrrM4FVxm
j+p9yIg8cssHShSF8sqfo4oAFQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:03 2026 by rpki-client