Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File:                     7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier:          m7yUsmPWiQKhi7oWX+UO5FKr9K8G9LHLRpM5PdGekkg=
Subject key identifier:   C8:98:EF:BD:45:5D:63:E7:6C:D1:E0:45:2E:4A:14:FD:1D:D6:96:BF
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer:       /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial:       08A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number:          0898
Signing time:             Tue 22 Sep 2026 20:27:18 +0000
Manifest this update:     Tue 22 Sep 2026 20:27:18 +0000
Manifest next update:     Tue 29 Sep 2026 20:27:18 +0000
Files and hashes:         1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: R/osJTdoQGl+ixQtg9HAsVi5sdeW/n/GbRqZHXGqF0A=)
                          2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: 2EY7R7tVDdd7hDu3kyFJDxK/DA0IkkvmNGWO1GOsC/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
                          rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
        Validity
            Not Before: Sep 22 20:27:18 2026 GMT
            Not After : Sep 29 20:27:18 2026 GMT
        Subject: CN=6ab2e4a6-39a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:3b:4f:cd:ad:13:19:81:02:a4:1a:6f:48:
                    a8:6d:a6:56:32:f0:3e:05:b2:61:a0:c7:ca:10:9a:
                    04:67:fa:dd:1c:48:8f:26:67:95:ec:72:e7:5e:80:
                    39:8e:a9:66:12:11:8a:2c:af:65:5e:da:5c:e8:8a:
                    80:20:ad:3d:b8:07:f7:63:7f:c7:a3:7f:c9:65:12:
                    bf:78:43:a9:ed:00:05:ec:85:77:4b:6d:fe:e7:1a:
                    62:0a:74:c7:f2:9b:7b:d4:ad:19:c5:0f:d0:20:ee:
                    0b:ce:d7:d8:42:1a:41:48:db:9a:01:86:43:d8:13:
                    a4:26:ec:2c:af:51:15:ed:88:e4:c6:cc:c7:65:aa:
                    66:53:17:38:bb:37:ef:9d:0a:87:53:ca:d1:58:34:
                    18:b8:6d:50:14:b5:13:3e:ee:c8:4c:8a:cc:15:68:
                    c8:33:20:2e:0c:8a:30:9c:27:d3:7b:39:c0:54:60:
                    14:e3:e8:68:fe:1d:01:43:e6:2e:6f:f6:b3:76:7d:
                    12:82:cd:e1:22:2f:7b:2d:d8:ac:63:e8:3c:56:f3:
                    d9:ec:50:79:dd:ee:42:28:36:2f:ca:b3:93:6a:58:
                    9f:ec:b2:17:56:25:7f:61:cc:64:1f:52:55:28:55:
                    14:46:c8:71:56:de:cc:2e:65:8a:4f:80:89:49:e7:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:98:EF:BD:45:5D:63:E7:6C:D1:E0:45:2E:4A:14:FD:1D:D6:96:BF
            X509v3 Authority Key Identifier:
                keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:06:2e:7f:c1:c5:14:ab:13:bc:18:fd:49:41:30:95:48:
         f2:6d:af:6b:d1:5e:ff:ec:30:47:a8:09:f7:c0:9d:c0:f2:87:
         8f:42:af:24:c7:8f:88:ca:b1:88:1e:50:ed:99:db:fc:3b:e4:
         e6:c9:0a:4d:e5:66:99:2f:79:dd:c8:9a:0c:71:8f:a6:d9:b7:
         0b:69:eb:6b:25:dd:8c:a8:2d:ec:ad:d5:88:3c:02:33:25:cb:
         4a:91:9a:bb:4e:81:27:4a:b6:b0:8a:71:ac:ce:36:5c:31:ca:
         ac:89:6f:dd:ab:0e:ac:a9:8a:a6:9b:53:4d:41:36:c4:a7:f7:
         b5:b0:8d:32:f3:d1:d4:15:20:66:78:a9:07:2e:58:d4:0c:34:
         68:f6:94:2c:63:57:50:b7:c9:71:91:8c:88:1d:2b:97:79:ed:
         17:f3:2d:03:d4:63:c1:c2:c3:a3:8f:73:a9:23:3c:4c:1c:16:
         9c:ad:90:bd:bf:da:d0:d8:9f:d0:48:b3:f1:df:69:72:71:f9:
         21:a8:38:c4:44:84:fd:00:e7:c8:c6:cc:dd:e3:c8:6e:48:26:
         9f:0d:88:a0:a3:4b:d8:5d:13:2a:70:bb:7c:9f:3e:ed:bf:fa:
         d8:2b:b7:6a:2e:2a:df:31:4b:5c:51:be:7f:ea:f2:45:c8:2e:
         43:9f:2c:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBDRDMxMTAvBgNVBAUTKEVERjcyQzVDQjg1MkIyMkMyRjBGNTI1MjExMjI4RDQ1
MDdBM0Y5QzIwHhcNMjYwOTIyMjAyNzE4WhcNMjYwOTI5MjAyNzE4WjAYMRYwFAYD
VQQDEw02YWIyZTRhNi0zOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp8w7T82tExmBAqQab0iobaZWMvA+BbJhoMfKEJoEZ/rdHEiPJmeV7HLnXoA5
jqlmEhGKLK9lXtpc6IqAIK09uAf3Y3/Ho3/JZRK/eEOp7QAF7IV3S23+5xpiCnTH
8pt71K0ZxQ/QIO4LztfYQhpBSNuaAYZD2BOkJuwsr1EV7YjkxszHZapmUxc4uzfv
nQqHU8rRWDQYuG1QFLUTPu7ITIrMFWjIMyAuDIownCfTeznAVGAU4+ho/h0BQ+Yu
b/azdn0Sgs3hIi97LdisY+g8VvPZ7FB53e5CKDYvyrOTalif7LIXViV/YcxkH1JV
KFUURshxVt7MLmWKT4CJSec9+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMiY771F
XWPnbNHgRS5KFP0d1pa/MB8GA1UdIwQYMBaAFO33LFy4UrIsLw9SUhEijUUHo/nC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMENEMy85RjkzMERCMjA1
RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Npd3ZEMUpTRVNLTlJRZWot
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdmY3NYTGhTc2l3dkQxSlNFU0tOUlFlai1jSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MENEMy85RjkzMERCMjA1RDkxMUVCQUZGOTQ5NzBDNEY5QUUwMi83ZmNzWExoU3Np
d3ZEMUpTRVNLTlJRZWotY0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMxsGLn/BxRSrE7wY/UlBMJVI8m2va9Fe/+wwR6gJ98CdwPKHj0KvJMePiMqx
iB5Q7Znb/Dvk5skKTeVmmS953ciaDHGPptm3C2nrayXdjKgt7K3ViDwCMyXLSpGa
u06BJ0q2sIpxrM42XDHKrIlv3asOrKmKpptTTUE2xKf3tbCNMvPR1BUgZnipBy5Y
1Aw0aPaULGNXULfJcZGMiB0rl3ntF/MtA9RjwcLDo49zqSM8TBwWnK2Qvb/a0Nif
0Eiz8d9pcnH5Iag4xESE/QDnyMbM3ePIbkgmnw2IoKNL2F0TKnC7fJ8+7b/62Cu3
ai4q3zFLXFG+f+ryRcguQ58s1Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:42:41 2026 by rpki-client