Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
File:                     1IztGPaMoiaYP5-ZmhQGNidbalU.mft (raw, json)
Hash identifier:          MbcTSlxuKQrhyHTx9cfxekf037rl/oMne87PmpeeGQg=
Subject key identifier:   DE:09:94:F9:DF:9D:E8:40:89:E3:F1:5E:1E:DA:68:54:6E:6D:D6:CD
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
Manifest number:          020A
Signing time:             Sun 27 Sep 2026 03:39:57 +0000
Manifest this update:     Sun 27 Sep 2026 03:39:57 +0000
Manifest next update:     Sun 04 Oct 2026 03:39:57 +0000
Files and hashes:         1: 1IztGPaMoiaYP5-ZmhQGNidbalU.crl (hash: 7hbt8eWYK8zVvJnCXqiFZxTqluI3xy111bZGF3ARsko=)
                          2: FC98D5921DD311F1A4A9CCCC0B3D8C67.roa (hash: ++fsQ0/jJTKdEu1JkASqMR02WrvMLM0KHw5n4mNel4A=)
                          3: A17C3508168911EFBF38F580C4F9AE02.roa (hash: virvE8MNeacbpPBupuEDzS3TVIUvnhiLbybl98L+CAc=)
                          4: 1328B7DCBA6711EE9A63996FC4F9AE02.roa (hash: tsA6mcx7ucUTughH+97Dx7IXBusCUvi+yLFT4jUjZ20=)
                          5: A3048576EC3911EEA6178B13C4F9AE02.roa (hash: CA0JuNkvVVXyVT5toC5IeijiB5JBV7T65rHh34RkVIc=)
                          6: EB3C8154EC3911EE98E62214C4F9AE02.roa (hash: 0fG/vVdhETGxvUxsnTXZR1Zd2MfoUspa8W6pNyP2sU0=)
                          7: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (hash: X0b3ZN/Eb7T73dnsboUoSmhWFfXS5G0F5wbtUheErQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Sep 27 03:39:57 2026 GMT
            Not After : Oct  4 03:39:57 2026 GMT
        Subject: CN=6ab8900d-3d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:dc:b2:e9:93:d2:fd:56:50:fe:22:ab:b5:
                    33:b1:34:55:8c:a4:ac:b7:70:e5:d2:c0:81:ed:ed:
                    40:34:32:c0:32:79:15:2c:85:84:9c:b0:db:13:48:
                    2b:a4:64:55:61:60:8e:dc:f2:c1:f6:98:2f:77:f5:
                    d6:fd:49:47:a3:8d:b3:35:3d:d2:79:a3:9f:c8:b2:
                    0f:d5:c5:77:21:38:37:c3:c7:33:32:9a:f8:f2:b9:
                    37:22:a5:0b:57:32:4c:ea:d6:5e:38:d3:6a:11:6b:
                    d8:9e:bf:6b:12:fa:37:ef:20:10:b0:d0:99:f8:ac:
                    12:29:c2:c8:f3:45:61:23:30:12:ca:63:3d:dd:f7:
                    7f:1f:9b:59:d4:61:da:ea:b0:fb:25:11:4d:91:0c:
                    8b:93:18:85:ae:5f:4c:41:71:5d:4d:1d:04:8a:db:
                    21:83:bc:72:d1:c7:4b:eb:4d:0a:4f:49:f2:01:fa:
                    cf:7a:28:41:09:d5:b8:38:57:c0:38:d6:98:ca:3e:
                    31:8c:a5:35:82:03:0f:bd:29:7a:00:3c:86:bd:23:
                    29:37:2b:6b:74:93:33:e9:1a:41:c7:30:5f:18:3f:
                    68:3b:81:96:db:c3:e9:45:ae:d0:c5:07:6b:01:25:
                    96:64:0a:ff:f1:e5:ae:82:ef:04:a7:f7:8a:92:59:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:09:94:F9:DF:9D:E8:40:89:E3:F1:5E:1E:DA:68:54:6E:6D:D6:CD
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:be:fc:74:a2:09:d9:89:ff:e5:ee:7f:4a:00:4c:33:91:3f:
         f1:20:04:e9:b3:f4:8b:7e:94:90:6e:d2:e7:81:97:62:9f:49:
         bf:de:ff:39:f8:c5:62:7f:3c:7e:e2:7c:8d:b4:2d:0e:6f:db:
         b9:1c:39:9d:3e:70:4e:66:e3:4f:55:06:14:3d:f1:0d:07:4e:
         e3:33:5d:e0:d9:0f:24:23:6a:45:47:26:89:1f:c3:20:e4:4f:
         00:53:90:5e:e2:15:a0:7e:34:ec:5d:46:0b:02:f8:b0:2b:28:
         57:ce:ca:ea:c6:88:7a:60:9b:83:75:31:c5:8b:34:36:97:3a:
         2f:fe:8e:f5:47:d8:0e:20:41:a9:f6:c9:15:13:96:a8:81:99:
         53:26:d6:4a:01:94:00:78:30:54:58:d2:d3:45:76:6b:ba:be:
         50:8c:08:40:c1:54:d1:ba:eb:10:ca:e0:8d:3a:4c:75:54:d8:
         22:f2:26:ab:0a:df:be:4f:85:ea:22:fd:0a:e5:98:7e:c3:dd:
         dd:61:2e:e3:2c:c5:69:a0:48:b2:bf:64:77:6d:58:05:bd:dc:
         6d:3d:5a:a8:ba:6f:b9:58:be:2c:6f:bc:6c:92:b7:0e:97:4e:
         9e:ab:3b:15:bc:af:0f:85:f5:11:21:34:51:12:e8:66:b4:1e:
         f6:5e:0e:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY1MzUxMTAvBgNVBAUTKEQ0OENFRDE4RjY4Q0EyMjY5ODNGOUY5OTlBMTQwNjM2
Mjc1QjZBNTUwHhcNMjYwOTI3MDMzOTU3WhcNMjYxMDA0MDMzOTU3WjAYMRYwFAYD
VQQDEw02YWI4OTAwZC0zZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlgLcsumT0v1WUP4iq7UzsTRVjKSst3Dl0sCB7e1ANDLAMnkVLIWEnLDbE0gr
pGRVYWCO3PLB9pgvd/XW/UlHo42zNT3SeaOfyLIP1cV3ITg3w8czMpr48rk3IqUL
VzJM6tZeONNqEWvYnr9rEvo37yAQsNCZ+KwSKcLI80VhIzASymM93fd/H5tZ1GHa
6rD7JRFNkQyLkxiFrl9MQXFdTR0Eitshg7xy0cdL600KT0nyAfrPeihBCdW4OFfA
ONaYyj4xjKU1ggMPvSl6ADyGvSMpNytrdJMz6RpBxzBfGD9oO4GW28PpRa7QxQdr
ASWWZAr/8eWugu8Ep/eKklnV3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN4JlPnf
nehAiePxXh7aaFRubdbNMB8GA1UdIwQYMBaAFNSM7Rj2jKImmD+fmZoUBjYnW2pV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82OUE1ODA3OEJB
NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9pYVlQNS1abWhRR05pZGJh
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi8xSXp0R1BhTW9p
YVlQNS1abWhRR05pZGJhbFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAL78dKIJ2Yn/5e5/SgBMM5E/8SAE6bP0i36UkG7S54GXYp9Jv97/OfjFYn88
fuJ8jbQtDm/buRw5nT5wTmbjT1UGFD3xDQdO4zNd4NkPJCNqRUcmiR/DIORPAFOQ
XuIVoH407F1GCwL4sCsoV87K6saIemCbg3UxxYs0Npc6L/6O9UfYDiBBqfbJFROW
qIGZUybWSgGUAHgwVFjS00V2a7q+UIwIQMFU0brrEMrgjTpMdVTYIvImqwrfvk+F
6iL9CuWYfsPd3WEu4yzFaaBIsr9kd21YBb3cbT1aqLpvuVi+LG+8bJK3DpdOnqs7
FbyvD4X1ESE0URLoZrQe9l4O+Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:35:11 2026 by rpki-client