Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
File:                     An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json)
Hash identifier:          f5fN5xWTCcs6iD+g+1eq+YXYoNmCxKR3B/06/GITAlM=
Subject key identifier:   CE:58:06:CD:62:69:12:99:98:A2:E2:2E:54:1A:DA:40:59:AA:D2:53
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Certificate issuer:       /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial:       030E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
Manifest number:          02FD
Signing time:             Fri 25 Sep 2026 00:58:13 +0000
Manifest this update:     Fri 25 Sep 2026 00:58:13 +0000
Manifest next update:     Fri 02 Oct 2026 00:58:13 +0000
Files and hashes:         1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: g6H/zdKTQh99MwkYZ1W0/fMU1TbwFMEDLMbl1AX1AoQ=)
                          2: ED55D842ADB111F08582AD1BC4F9AE02.roa (hash: vnOg2u5nZQ11gsb7K4vHWE+A+A3DwNil5+tqHXo/+no=)
                          3: BEDFF33EAD8F11F0B669681EC4F9AE02.roa (hash: EzUITh41blxqcV425viSW52eQ/6/TgoZvTBJG30visg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
                          rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737
        Validity
            Not Before: Sep 25 00:58:13 2026 GMT
            Not After : Oct  2 00:58:13 2026 GMT
        Subject: CN=6ab5c725-a11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:81:20:42:1a:c8:f8:59:6b:5c:08:52:e8:
                    e7:ad:1b:98:6e:57:1c:84:57:a0:da:31:f3:0b:56:
                    91:6c:51:ba:8c:ed:ae:f5:4e:23:84:ba:49:c0:17:
                    a0:0b:c3:78:08:4a:28:a8:40:0a:85:e2:55:00:0f:
                    e1:72:a7:29:e2:8f:f7:11:2c:e5:c1:5c:df:71:3f:
                    f6:e5:44:b1:e9:f3:a0:0d:3c:6e:35:20:7b:f7:70:
                    e7:d7:8e:2d:54:d3:72:00:81:82:46:67:a9:ec:17:
                    4b:57:0d:c3:39:2c:de:6a:9e:ca:76:3f:6d:bc:51:
                    a6:3f:9a:4e:ba:7a:a2:02:33:60:02:e3:81:d7:c6:
                    b0:67:a5:07:f2:ac:91:be:27:62:59:5c:fd:bd:5f:
                    c6:c8:cb:70:f5:e0:3f:1d:b1:99:9e:6d:c5:5e:53:
                    5f:cf:de:7c:49:b3:aa:6a:bd:00:09:96:75:0b:10:
                    cc:36:b4:59:81:ff:de:d7:ba:0f:92:26:30:dd:08:
                    2e:f8:95:f1:7c:4a:60:0f:e3:d9:ac:1f:65:d5:be:
                    bf:4e:e8:76:eb:e5:7c:10:03:3a:03:ee:89:b7:1f:
                    dc:f2:3e:66:a9:71:a6:0c:51:cd:88:fb:58:21:bc:
                    ca:79:71:2a:ce:9f:13:ed:fb:31:e5:1e:e1:cc:98:
                    58:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:58:06:CD:62:69:12:99:98:A2:E2:2E:54:1A:DA:40:59:AA:D2:53
            X509v3 Authority Key Identifier:
                keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c1:e9:28:39:8a:0e:2e:ab:4e:17:fd:fe:bc:f3:d3:a2:c3:
         83:b4:ce:65:bf:d4:1c:ad:ce:42:b9:98:fd:b9:a2:44:6b:cb:
         e1:c4:52:28:0f:06:0f:35:2e:29:ce:a1:b8:a9:f1:f2:76:c8:
         73:8a:f7:3c:31:b1:a2:53:48:d0:4a:fd:52:15:d2:c1:c6:d7:
         34:f2:17:26:92:d1:f4:ec:5f:6a:a0:ff:d5:d0:5e:61:75:7b:
         1c:ae:ed:6a:21:b0:c6:22:7a:c3:bb:9c:0b:21:17:8a:5b:fe:
         d9:ee:45:ec:22:a0:69:65:53:91:ac:2d:f8:20:44:40:94:83:
         f4:3e:e6:23:9c:ad:62:82:53:1a:85:fd:92:15:bb:aa:7d:7f:
         55:b7:27:f6:87:2f:91:60:8c:ef:d2:8d:29:cd:b5:37:4b:16:
         2b:50:55:42:55:bb:4d:95:d5:9e:a5:52:73:a9:c7:ac:cc:eb:
         b5:75:c6:34:24:53:da:23:43:af:2a:d6:dd:b0:f1:e5:c6:78:
         4b:77:3e:36:1b:57:87:6a:d8:7e:ad:64:f1:8c:66:30:99:8d:
         20:d4:62:c6:30:95:7e:c0:d3:e0:2a:66:c3:ed:e9:f0:81:0b:
         d4:4b:39:f3:cb:55:f4:8b:2c:c3:73:89:64:77:6e:27:2c:1d:
         ed:1e:1a:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UwNDIxMTAvBgNVBAUTKDAyN0YwNTUyNTE0RjI0NEE5NEVFM0YwNjU3MkE0QUY3
MzM1NjU3MzcwHhcNMjYwOTI1MDA1ODEzWhcNMjYxMDAyMDA1ODEzWjAYMRYwFAYD
VQQDEw02YWI1YzcyNS1hMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjWBIEIayPhZa1wIUujnrRuYblcchFeg2jHzC1aRbFG6jO2u9U4jhLpJwBeg
C8N4CEooqEAKheJVAA/hcqcp4o/3ESzlwVzfcT/25USx6fOgDTxuNSB793Dn144t
VNNyAIGCRmep7BdLVw3DOSzeap7Kdj9tvFGmP5pOunqiAjNgAuOB18awZ6UH8qyR
vidiWVz9vV/GyMtw9eA/HbGZnm3FXlNfz958SbOqar0ACZZ1CxDMNrRZgf/e17oP
kiYw3Qgu+JXxfEpgD+PZrB9l1b6/Tuh26+V8EAM6A+6Jtx/c8j5mqXGmDFHNiPtY
IbzKeXEqzp8T7fsx5R7hzJhY5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5YBs1i
aRKZmKLiLlQa2kBZqtJTMB8GA1UdIwQYMBaAFAJ/BVJRTyRKlO4/BlcqSvczVlc3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA0Mi9BRTlCMUI2RTNF
NEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpFcVU3ajhHVnlwSzl6TldW
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FuOEZVbEZQSkVxVTdqOEdWeXBLOXpOV1Z6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTA0Mi9BRTlCMUI2RTNFNEExMUVEQkMwNjUzN0RDNEY5QUUwMi9BbjhGVWxGUEpF
cVU3ajhHVnlwSzl6TldWemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEcHpKDmKDi6rThf9/rzz06LDg7TOZb/UHK3OQrmY/bmiRGvL4cRSKA8GDzUu
Kc6huKnx8nbIc4r3PDGxolNI0Er9UhXSwcbXNPIXJpLR9OxfaqD/1dBeYXV7HK7t
aiGwxiJ6w7ucCyEXilv+2e5F7CKgaWVTkawt+CBEQJSD9D7mI5ytYoJTGoX9khW7
qn1/Vbcn9ocvkWCM79KNKc21N0sWK1BVQlW7TZXVnqVSc6nHrMzrtXXGNCRT2iND
ryrW3bDx5cZ4S3c+NhtXh2rYfq1k8YxmMJmNINRixjCVfsDT4Cpmw+3p8IEL1Es5
88tV9Issw3OJZHduJywd7R4aQg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:05:52 2026 by rpki-client