Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
File:                     voedoSIo9Sr7TRD2P4DgJvSFFqA.mft (raw, json)
Hash identifier:          n4ARWgg5qxfGARKnGNujkOkT7sjMQB2Ut7cHJAuh95U=
Subject key identifier:   93:EF:38:F3:8B:19:39:6C:48:B7:E0:C6:B3:31:60:75:9F:F2:1D:D5
Authority key identifier: BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0
Certificate issuer:       /CN=A9124096/serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
Certificate serial:       AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
Manifest number:          A8
Signing time:             Wed 23 Sep 2026 06:56:20 +0000
Manifest this update:     Wed 23 Sep 2026 06:56:20 +0000
Manifest next update:     Wed 30 Sep 2026 06:56:20 +0000
Files and hashes:         1: voedoSIo9Sr7TRD2P4DgJvSFFqA.crl (hash: LMGroihT3Sipl2KHL2RJ3gXDf4PlOLGZWuRDbOG2Ey0=)
                          2: 0E3F5E5CBBB811F0B7A3E30BC4F9AE02.roa (hash: 4zRuuR1sO9CKHH38Jna18wV19qizi3M0wtTY0eQl8yM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl
                          rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124096, serialNumber=BE879DA12228F52AFB4D10F63F80E026F48516A0
        Validity
            Not Before: Sep 23 06:56:20 2026 GMT
            Not After : Sep 30 06:56:20 2026 GMT
        Subject: CN=6ab37814-574d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5b:fc:28:2f:38:e1:45:8f:4d:06:15:4a:48:
                    77:f6:e9:48:30:cb:c1:73:38:37:24:6f:c6:8b:b1:
                    8e:b5:a0:34:98:04:6b:07:c3:cf:a8:bb:8a:8b:96:
                    2c:b0:16:4a:a1:16:14:11:f6:ee:05:01:04:ee:19:
                    7a:a5:30:2c:79:bc:4f:29:76:2b:6e:82:e7:ef:03:
                    71:90:20:26:5b:ca:05:59:28:1d:25:8c:9d:d6:85:
                    d1:42:ed:73:de:63:1a:a7:84:48:76:f7:36:54:91:
                    96:0c:a5:f8:3e:8a:c0:c8:78:da:19:65:8f:c9:ea:
                    72:48:67:90:b7:40:a3:41:c1:51:65:05:18:64:56:
                    2d:56:1f:dc:e7:2e:4d:b1:fd:3e:84:8e:e4:1b:74:
                    3a:be:36:24:d8:02:cd:7b:6d:4c:c5:2a:db:c3:a7:
                    1b:97:a3:82:43:8a:36:35:f0:6c:fa:3a:8d:98:3a:
                    91:66:57:d5:12:90:fa:ec:de:82:67:d4:cd:ba:34:
                    a4:7c:a2:71:04:5b:a1:1d:d0:2e:8f:ba:5d:ee:3e:
                    d5:b0:9e:3e:b9:90:44:ad:d4:52:4a:f4:cc:7c:16:
                    d3:0b:96:b9:e7:49:c6:c2:58:0c:bb:46:c1:7f:4c:
                    f7:3b:51:48:df:66:30:f1:53:40:a1:fc:6f:6a:e6:
                    0e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EF:38:F3:8B:19:39:6C:48:B7:E0:C6:B3:31:60:75:9F:F2:1D:D5
            X509v3 Authority Key Identifier:
                keyid:BE:87:9D:A1:22:28:F5:2A:FB:4D:10:F6:3F:80:E0:26:F4:85:16:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voedoSIo9Sr7TRD2P4DgJvSFFqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124096/08B40C3ABB9F11F0AF9A5D1AC4F9AE02/voedoSIo9Sr7TRD2P4DgJvSFFqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bf:d8:76:a0:03:52:fe:b0:00:13:00:30:30:04:0a:92:46:
         5d:b3:f0:21:7d:b6:01:0d:75:f6:d0:74:08:9e:19:e8:fd:f6:
         a3:6c:d7:c9:ec:d9:82:24:5b:b5:11:d8:f4:fc:61:5d:d5:af:
         5f:c9:49:5c:d8:fd:32:9b:ba:24:22:15:6f:0d:7c:2d:a3:4b:
         32:ed:13:b4:73:89:1c:9f:54:e5:9b:42:25:81:f4:e9:f1:80:
         46:1a:46:54:43:3f:3f:eb:b0:12:51:20:64:36:0d:a6:62:df:
         f5:47:16:4b:4f:9a:06:10:a3:fd:34:a3:f4:4c:a8:55:26:83:
         37:33:46:05:4c:0c:46:c2:c0:76:a9:26:44:06:56:58:5d:8b:
         11:eb:ad:24:6e:97:10:67:84:84:34:be:b8:0c:e8:c5:b4:d7:
         b0:86:35:9b:dd:1d:18:27:d8:e6:4f:2b:2d:56:f1:dd:ef:5e:
         e5:34:34:49:0a:ff:27:ba:91:92:57:28:ed:00:59:78:21:ba:
         c8:9e:35:b8:3b:3c:4c:88:16:f9:54:1c:28:74:29:36:32:a8:
         d1:c3:98:bc:2b:39:ca:28:23:f0:0c:e2:74:f9:e2:46:26:9a:
         7a:ba:57:6c:37:a7:f3:3b:25:55:c6:27:f1:3f:f2:47:9c:19:
         10:6f:a8:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQwOTYxMTAvBgNVBAUTKEJFODc5REExMjIyOEY1MkFGQjREMTBGNjNGODBFMDI2
RjQ4NTE2QTAwHhcNMjYwOTIzMDY1NjIwWhcNMjYwOTMwMDY1NjIwWjAYMRYwFAYD
VQQDEw02YWIzNzgxNC01NzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Fv8KC844UWPTQYVSkh39ulIMMvBczg3JG/Gi7GOtaA0mARrB8PPqLuKi5Ys
sBZKoRYUEfbuBQEE7hl6pTAsebxPKXYrboLn7wNxkCAmW8oFWSgdJYyd1oXRQu1z
3mMap4RIdvc2VJGWDKX4PorAyHjaGWWPyepySGeQt0CjQcFRZQUYZFYtVh/c5y5N
sf0+hI7kG3Q6vjYk2ALNe21MxSrbw6cbl6OCQ4o2NfBs+jqNmDqRZlfVEpD67N6C
Z9TNujSkfKJxBFuhHdAuj7pd7j7VsJ4+uZBErdRSSvTMfBbTC5a550nGwlgMu0bB
f0z3O1FI32Yw8VNAofxvauYOkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJPvOPOL
GTlsSLfgxrMxYHWf8h3VMB8GA1UdIwQYMBaAFL6HnaEiKPUq+00Q9j+A4Cb0hRag
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA5Ni8wOEI0MEMzQUJC
OUYxMUYwQUY5QTVEMUFDNEY5QUUwMi92b2Vkb1NJbzlTcjdUUkQyUDREZ0p2U0ZG
cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZvZWRvU0lvOVNyN1RSRDJQNERnSnZTRkZxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDA5Ni8wOEI0MEMzQUJCOUYxMUYwQUY5QTVEMUFDNEY5QUUwMi92b2Vkb1NJbzlT
cjdUUkQyUDREZ0p2U0ZGcUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWL/YdqADUv6wABMAMDAECpJGXbPwIX22AQ119tB0CJ4Z6P32o2zXyezZgiRb
tRHY9PxhXdWvX8lJXNj9Mpu6JCIVbw18LaNLMu0TtHOJHJ9U5ZtCJYH06fGARhpG
VEM/P+uwElEgZDYNpmLf9UcWS0+aBhCj/TSj9EyoVSaDNzNGBUwMRsLAdqkmRAZW
WF2LEeutJG6XEGeEhDS+uAzoxbTXsIY1m90dGCfY5k8rLVbx3e9e5TQ0SQr/J7qR
klco7QBZeCG6yJ41uDs8TIgW+VQcKHQpNjKo0cOYvCs5yigj8AzidPniRiaaerpX
bDen8zslVcYn8T/yR5wZEG+opw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:10:24 2026 by rpki-client