Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
File:                     8CpdEC9_M7JhEbSih0L3ui8empk.mft (raw, json)
Hash identifier:          P6LqzB0Ao0jhph4CeuXQB6xDzhwotiFHc2JL63tZ0/k=
Subject key identifier:   BE:78:E5:3D:6E:DB:DD:0C:EA:B2:0C:84:CA:7C:A2:F2:A7:32:50:3F
Authority key identifier: F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99
Certificate issuer:       /CN=A913CB5F/serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
Certificate serial:       043E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
Manifest number:          0437
Signing time:             Fri 25 Sep 2026 00:04:34 +0000
Manifest this update:     Fri 25 Sep 2026 00:04:33 +0000
Manifest next update:     Fri 02 Oct 2026 00:04:33 +0000
Files and hashes:         1: 8CpdEC9_M7JhEbSih0L3ui8empk.crl (hash: +0MGTp6BtSa50o4VAXoebJUjkLXufXCgv8vu3lvRsgw=)
                          2: 688AF35CC09511EC8CFFDB10C4F9AE02.roa (hash: GmrvF9q2dTq3b8GyefG/oexNHNjvwnXO2pwjnxyLh6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl
                          rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086 (0x43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CB5F, serialNumber=F02A5D102F7F33B26111B4A28742F7BA2F1E9A99
        Validity
            Not Before: Sep 25 00:04:33 2026 GMT
            Not After : Oct  2 00:04:33 2026 GMT
        Subject: CN=6ab5ba92-b4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:1b:40:58:14:f9:70:1e:10:26:f5:4a:78:
                    1e:59:84:97:82:eb:62:20:3c:15:4c:46:3b:62:0f:
                    06:5c:e3:bb:b0:97:e6:86:7c:39:42:34:a7:9d:02:
                    4d:b5:c6:c6:fc:7b:f6:54:15:13:bb:ef:80:7d:04:
                    61:f7:d0:c7:61:26:e3:49:6a:cc:b2:5f:7c:0a:21:
                    f4:c8:76:5b:e5:2d:68:fc:b2:94:2e:ad:2c:bf:e2:
                    51:2e:19:98:eb:d0:53:0f:61:21:d8:92:73:9c:de:
                    6b:10:f7:ba:71:8d:67:1d:60:07:c9:70:02:ce:02:
                    16:98:d0:7b:c1:13:f5:01:d0:a7:9d:b7:a9:f0:5f:
                    f2:02:76:fb:10:41:a7:67:55:d1:3f:79:e3:b3:b9:
                    8c:aa:f6:42:53:ae:dc:47:84:60:e3:4c:85:e7:71:
                    3d:1e:44:40:65:e0:59:16:43:c2:44:4e:7a:bc:2d:
                    1f:8b:33:9e:cd:f6:17:51:a0:cd:06:ab:69:7e:26:
                    14:37:14:9b:ab:27:4c:d4:af:55:c9:aa:f5:85:b2:
                    87:f8:05:01:fb:2d:d1:9c:1e:36:f8:93:b0:e9:06:
                    09:63:df:bc:d8:f0:4f:2b:8e:62:ed:6e:66:b8:65:
                    6d:0b:54:89:9c:de:4c:16:6b:90:2c:d2:9d:36:88:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:E5:3D:6E:DB:DD:0C:EA:B2:0C:84:CA:7C:A2:F2:A7:32:50:3F
            X509v3 Authority Key Identifier:
                keyid:F0:2A:5D:10:2F:7F:33:B2:61:11:B4:A2:87:42:F7:BA:2F:1E:9A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8CpdEC9_M7JhEbSih0L3ui8empk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB5F/005E59ACC09211EC8044C164C4F9AE02/8CpdEC9_M7JhEbSih0L3ui8empk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3a:ce:44:17:1b:ab:99:ea:01:f7:42:c4:0b:0c:0d:81:31:
         8b:b2:54:8b:a2:2b:2d:27:c8:77:dd:2f:33:12:a6:09:98:25:
         1e:52:cd:60:d0:0f:35:a5:36:7a:68:39:04:a6:37:55:ad:29:
         37:86:dc:7c:6f:a9:65:9a:ff:2b:48:da:78:b4:e2:2a:cf:bc:
         01:ca:91:13:8b:0a:25:1d:3f:a7:c3:6c:0f:5a:fc:33:de:52:
         98:01:cf:0b:3b:4f:3b:43:df:a8:8d:1f:14:a2:0e:93:73:89:
         40:03:f5:0f:4d:95:94:72:8e:69:a2:1e:93:a5:ff:a3:77:8a:
         1c:c2:c4:63:ce:ff:b3:15:3f:90:2e:d9:1b:b4:70:86:02:0a:
         4f:ac:38:97:d3:e0:c1:1e:fb:d8:73:c4:73:40:d9:1a:0f:6a:
         48:f7:43:bd:63:23:22:3b:cd:b8:d7:21:1b:2c:bb:06:1b:a3:
         94:5b:65:04:5a:df:d5:9d:7c:e6:3c:53:ab:99:cd:30:c0:96:
         59:e6:6c:4b:2b:4e:1b:0c:de:89:d1:a6:32:27:d3:80:7c:14:
         f4:36:3f:5c:c2:fe:af:1e:b3:56:7d:22:25:25:ef:a9:ed:7e:
         ad:90:a8:4a:1c:d4:a8:24:c0:b7:cf:6c:f3:3f:14:82:f6:2a:
         b0:4c:db:66
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NCNUYxMTAvBgNVBAUTKEYwMkE1RDEwMkY3RjMzQjI2MTExQjRBMjg3NDJGN0JB
MkYxRTlBOTkwHhcNMjYwOTI1MDAwNDMzWhcNMjYxMDAyMDAwNDMzWjAYMRYwFAYD
VQQDEw02YWI1YmE5Mi1iNGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqFsbQFgU+XAeECb1SngeWYSXgutiIDwVTEY7Yg8GXOO7sJfmhnw5QjSnnQJN
tcbG/Hv2VBUTu++AfQRh99DHYSbjSWrMsl98CiH0yHZb5S1o/LKULq0sv+JRLhmY
69BTD2Eh2JJznN5rEPe6cY1nHWAHyXACzgIWmNB7wRP1AdCnnbep8F/yAnb7EEGn
Z1XRP3njs7mMqvZCU67cR4Rg40yF53E9HkRAZeBZFkPCRE56vC0fizOezfYXUaDN
BqtpfiYUNxSbqydM1K9Vyar1hbKH+AUB+y3RnB42+JOw6QYJY9+82PBPK45i7W5m
uGVtC1SJnN5MFmuQLNKdNoha7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL545T1u
290M6rIMhMp8ovKnMlA/MB8GA1UdIwQYMBaAFPAqXRAvfzOyYRG0oodC97ovHpqZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0I1Ri8wMDVFNTlBQ0Mw
OTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003SmhFYlNpaDBMM3VpOGVt
cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhDcGRFQzlfTTdKaEViU2loMEwzdWk4ZW1way5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0I1Ri8wMDVFNTlBQ0MwOTIxMUVDODA0NEMxNjRDNEY5QUUwMi84Q3BkRUM5X003
SmhFYlNpaDBMM3VpOGVtcGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmTrORBcbq5nqAfdCxAsMDYExi7JUi6IrLSfId90vMxKmCZglHlLNYNAPNaU2
emg5BKY3Va0pN4bcfG+pZZr/K0jaeLTiKs+8AcqRE4sKJR0/p8NsD1r8M95SmAHP
CztPO0PfqI0fFKIOk3OJQAP1D02VlHKOaaIek6X/o3eKHMLEY87/sxU/kC7ZG7Rw
hgIKT6w4l9PgwR772HPEc0DZGg9qSPdDvWMjIjvNuNchGyy7BhujlFtlBFrf1Z18
5jxTq5nNMMCWWeZsSytOGwzeidGmMifTgHwU9DY/XML+rx6zVn0iJSXvqe1+rZCo
ShzUqCTAt89s8z8UgvYqsEzbZg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:34:46 2026 by rpki-client