Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
File:                     SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json)
Hash identifier:          YwDAtOcWQ/yWrZGCNCZk0wIlqAkUXPAfpltacqmJwyc=
Subject key identifier:   99:97:C1:10:5A:4C:5C:84:28:39:D8:43:BF:87:AF:1D:34:33:C1:F0
Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
Certificate issuer:       /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
Manifest number:          0153
Signing time:             Fri 25 Sep 2026 05:21:38 +0000
Manifest this update:     Fri 25 Sep 2026 05:21:37 +0000
Manifest next update:     Fri 02 Oct 2026 05:21:37 +0000
Files and hashes:         1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: LgHuTV7wkClKTAzk2uklmWDgpXNJKEtCBRP9OyaOSnE=)
                          2: CCD3E270633311F1B8FA0C5C8D47A888.roa (hash: WNyFu7dMv+Z7bLOkmH8GMK0F61nUEfi8GoAz10fbi3Y=)
                          3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: AIZFydURKw6XqDJmBOYWV09bdGH4Y4iDWEmfI3xyTSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
                          rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
        Validity
            Not Before: Sep 25 05:21:37 2026 GMT
            Not After : Oct  2 05:21:37 2026 GMT
        Subject: CN=6ab604e2-f9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:b1:8a:14:20:22:35:d8:27:1e:74:49:97:
                    45:c1:3c:84:cb:f4:2e:38:30:09:86:ed:03:ff:52:
                    2b:84:a2:19:02:17:ab:57:59:5f:b0:c9:19:fd:5c:
                    27:9e:73:65:56:cf:72:59:32:e0:46:3c:fa:bc:83:
                    9e:be:8b:bf:46:17:96:4c:07:3e:ee:75:51:db:0d:
                    52:b1:85:ae:0a:34:3d:1b:0b:20:44:e3:78:7a:55:
                    1c:d1:b8:3f:fe:e5:7b:60:67:59:b5:05:f7:98:54:
                    e4:21:c0:ab:ab:07:31:02:ab:3a:a1:46:17:8b:df:
                    08:56:7c:5b:3a:a1:9e:45:39:8b:d3:96:09:f7:d9:
                    e2:5d:84:c9:63:c7:ec:21:8b:ea:c5:90:4c:6c:14:
                    53:32:c7:4f:ed:0b:b1:d8:b6:de:52:39:05:7a:f5:
                    c2:14:64:04:a2:60:c4:be:30:a0:45:ed:12:ba:81:
                    04:3c:6d:24:b4:d1:4f:d4:0d:a9:9e:62:46:54:fa:
                    c0:b1:22:da:0e:f3:e5:72:6b:e8:62:c9:dd:b8:58:
                    7a:89:26:8a:4b:90:70:6a:78:b9:0f:a8:b8:2e:8f:
                    9a:20:30:bf:da:80:59:6f:d3:c3:df:bd:7b:83:70:
                    ab:f5:48:3e:ec:b6:2b:83:40:2a:8f:33:3a:d2:3f:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:97:C1:10:5A:4C:5C:84:28:39:D8:43:BF:87:AF:1D:34:33:C1:F0
            X509v3 Authority Key Identifier:
                keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f0:a6:a0:bc:ce:9a:00:90:90:f6:3e:23:be:37:34:11:17:
         0a:74:4e:8c:ca:3e:75:f7:dc:9f:d9:b3:84:db:9c:c4:a0:3d:
         7f:0c:80:84:bc:ca:1e:31:81:9c:39:db:86:03:b7:e4:96:e9:
         68:53:bf:c0:a8:0b:54:63:eb:cd:25:91:61:fb:db:3c:55:31:
         6a:ec:94:d8:b4:f0:d8:03:9f:54:99:d1:48:25:9c:cd:11:8c:
         15:42:4e:d1:1a:d5:a1:95:ce:62:df:20:e1:b9:5b:90:4c:7e:
         70:79:45:22:8f:3c:7b:80:23:96:9d:ce:80:35:97:f1:78:36:
         10:08:55:ea:33:07:be:34:52:10:25:78:89:69:c4:f8:81:26:
         a9:d4:19:d9:33:3f:47:1e:68:ab:33:80:89:54:e0:71:2c:08:
         37:9e:ae:cc:49:b0:2c:ee:be:41:07:b2:92:ae:ac:1c:48:8d:
         2b:56:64:ab:9d:9e:e5:79:b3:2e:49:15:6d:21:f6:c1:3a:2f:
         e1:df:38:30:de:03:1e:cb:2b:ad:9b:99:66:13:11:71:9e:ba:
         08:b3:d0:ee:61:42:37:3b:70:5c:2f:c4:cc:6c:43:9a:43:02:
         43:3f:65:9a:f1:e5:2f:63:9b:bf:97:50:fe:df:40:0f:b1:7b:
         ad:64:ea:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRGMzQxMTAvBgNVBAUTKDRCMzEwOEJDNTc1ODg0M0Q2M0RGRjZGQzY0MDk3RjJC
MTY0NENCOEEwHhcNMjYwOTI1MDUyMTM3WhcNMjYxMDAyMDUyMTM3WjAYMRYwFAYD
VQQDEw02YWI2MDRlMi1mOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnFOxihQgIjXYJx50SZdFwTyEy/QuODAJhu0D/1IrhKIZAherV1lfsMkZ/Vwn
nnNlVs9yWTLgRjz6vIOevou/RheWTAc+7nVR2w1SsYWuCjQ9GwsgRON4elUc0bg/
/uV7YGdZtQX3mFTkIcCrqwcxAqs6oUYXi98IVnxbOqGeRTmL05YJ99niXYTJY8fs
IYvqxZBMbBRTMsdP7Qux2LbeUjkFevXCFGQEomDEvjCgRe0SuoEEPG0ktNFP1A2p
nmJGVPrAsSLaDvPlcmvoYsnduFh6iSaKS5Bwani5D6i4Lo+aIDC/2oBZb9PD3717
g3Cr9Ug+7LYrg0AqjzM60j8feQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmXwRBa
TFyEKDnYQ7+Hrx00M8HwMB8GA1UdIwQYMBaAFEsxCLxXWIQ9Y9/2/GQJfysWRMuK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEYzNC80RDIyRUVFMEJE
RTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhEMWozX2I4WkFsX0t4WkV5
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1N6RUl2RmRZaEQxajNfYjhaQWxfS3haRXk0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEYzNC80RDIyRUVFMEJERTkxMUVGQkZENTM4ODJDNEY5QUUwMi9TekVJdkZkWWhE
MWozX2I4WkFsX0t4WkV5NG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADvCmoLzOmgCQkPY+I743NBEXCnROjMo+dffcn9mzhNucxKA9fwyAhLzKHjGB
nDnbhgO35JbpaFO/wKgLVGPrzSWRYfvbPFUxauyU2LTw2AOfVJnRSCWczRGMFUJO
0RrVoZXOYt8g4blbkEx+cHlFIo88e4Ajlp3OgDWX8Xg2EAhV6jMHvjRSECV4iWnE
+IEmqdQZ2TM/Rx5oqzOAiVTgcSwIN56uzEmwLO6+QQeykq6sHEiNK1Zkq52e5Xmz
LkkVbSH2wTov4d84MN4DHssrrZuZZhMRcZ66CLPQ7mFCNztwXC/EzGxDmkMCQz9l
mvHlL2Obv5dQ/t9AD7F7rWTq1Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:36 2026 by rpki-client