Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
File:                     -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json)
Hash identifier:          2b3QEaJ1f03YMscAprRfFQSVQiJLCdBo2wejuj2/BXI=
Subject key identifier:   43:FC:50:AB:9E:7D:4A:27:4C:D0:38:D9:2B:83:4B:78:AF:D4:DE:19
Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0
Certificate issuer:       /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
Manifest number:          022D
Signing time:             Mon 28 Sep 2026 15:30:05 +0000
Manifest this update:     Mon 28 Sep 2026 15:30:04 +0000
Manifest next update:     Mon 05 Oct 2026 15:30:04 +0000
Files and hashes:         1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: XYUNk35MKdJ3rGkZ74blO8ngnc7CDkaLsUtlclBZe3g=)
                          2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: u0AUuQ+24IMRETOkT+RbnVWhzKRT6X2WDxYpPB1no5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl
                          rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0
        Validity
            Not Before: Sep 28 15:30:04 2026 GMT
            Not After : Oct  5 15:30:04 2026 GMT
        Subject: CN=6aba87fd-d3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7d:fc:a0:cd:71:5c:b2:5c:30:55:90:5a:c0:
                    63:d3:61:b9:70:ed:0d:e2:d8:06:64:68:81:66:73:
                    d4:2d:9f:56:63:5c:8b:90:05:bc:93:d4:0c:93:b4:
                    47:9c:88:24:a7:d7:b5:29:4d:78:81:59:27:d0:66:
                    eb:05:35:57:7c:9a:5a:b3:56:5d:3d:05:7b:18:79:
                    e7:63:15:2e:19:3b:48:6e:91:f7:88:18:97:cd:7f:
                    2d:a4:01:c0:1e:d7:72:fd:c4:b3:c0:a5:e0:32:b1:
                    3f:f3:d7:b9:6f:10:c4:8a:68:68:1d:bd:8d:f2:7f:
                    72:76:50:1d:fc:30:d6:15:f0:94:86:3e:e9:c0:81:
                    dc:7f:8f:f8:a3:54:fc:21:b8:85:8e:ed:e9:63:b5:
                    0b:53:f7:95:20:78:32:43:e3:f6:87:90:c4:2e:ab:
                    1a:8a:9e:6d:9e:c8:15:3e:73:79:d9:b3:00:70:a2:
                    23:63:da:0e:96:43:1e:d2:fd:46:21:23:3d:b6:af:
                    5c:1e:af:1b:36:26:cc:6a:bf:7f:a0:57:b4:e5:6e:
                    66:50:75:9e:e4:d2:98:85:0e:ee:68:e1:8d:1c:57:
                    ba:e1:05:00:fb:7b:a8:b6:15:f4:31:ea:d2:9e:3d:
                    8f:7f:13:ee:5e:ae:09:a9:f3:78:36:62:02:b0:22:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FC:50:AB:9E:7D:4A:27:4C:D0:38:D9:2B:83:4B:78:AF:D4:DE:19
            X509v3 Authority Key Identifier:
                keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:00:52:60:38:b3:79:73:47:9b:1f:75:d2:a4:54:13:e3:
         25:61:58:0e:df:48:8d:bc:f8:39:6e:7f:d0:4b:fc:06:fc:03:
         b7:3f:75:32:02:42:4b:cd:66:08:8d:df:21:66:27:64:3d:52:
         ff:e8:12:51:7b:c3:c0:7a:00:a7:46:7d:18:06:62:45:f7:de:
         69:38:31:c2:cc:df:46:97:40:a5:67:2e:e7:f5:99:04:08:8b:
         53:22:4e:76:72:c8:f7:22:59:4f:c6:18:a4:7a:9c:85:ce:1f:
         d0:49:7d:89:07:9f:8f:00:9f:85:8d:c3:f4:5f:3a:3b:70:98:
         75:c8:50:59:39:01:87:f8:f3:a7:14:e3:d7:1b:c3:4b:79:fd:
         4f:d7:65:90:42:37:51:80:7d:b5:4c:46:31:db:17:27:13:e8:
         8b:29:42:a5:02:9b:c4:ad:a5:b2:06:f5:c1:6e:86:82:fb:04:
         f2:0f:3c:0f:5e:26:b9:28:07:7f:ba:c3:72:2a:4c:a8:9a:45:
         22:ea:12:e2:03:ea:c9:3b:eb:e4:37:da:14:6b:34:85:3a:d5:
         e6:fc:4f:91:21:72:99:3e:45:ae:ae:a9:7f:a3:ac:be:b8:9f:
         f0:ff:24:df:9f:93:d3:d4:70:a9:e1:18:00:44:ca:b2:e0:78:
         5e:e6:e5:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBNzIxMTAvBgNVBAUTKEZCNUI5Njk1M0NDREIxMUU5MjY4M0IzRUI1QjdBNDU3
NDk0QjI1RjAwHhcNMjYwOTI4MTUzMDA0WhcNMjYxMDA1MTUzMDA0WjAYMRYwFAYD
VQQDEw02YWJhODdmZC1kM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0X38oM1xXLJcMFWQWsBj02G5cO0N4tgGZGiBZnPULZ9WY1yLkAW8k9QMk7RH
nIgkp9e1KU14gVkn0GbrBTVXfJpas1ZdPQV7GHnnYxUuGTtIbpH3iBiXzX8tpAHA
Htdy/cSzwKXgMrE/89e5bxDEimhoHb2N8n9ydlAd/DDWFfCUhj7pwIHcf4/4o1T8
IbiFju3pY7ULU/eVIHgyQ+P2h5DELqsaip5tnsgVPnN52bMAcKIjY9oOlkMe0v1G
ISM9tq9cHq8bNibMar9/oFe05W5mUHWe5NKYhQ7uaOGNHFe64QUA+3uothX0MerS
nj2PfxPuXq4JqfN4NmICsCKKvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEP8UKue
fUonTNA42SuDS3iv1N4ZMB8GA1UdIwQYMBaAFPtblpU8zbEekmg7PrW3pFdJSyXw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi80RjU2QzAxQzc3
OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNSNlNhRHMtdGJla1YwbExK
ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy0xdVdsVHpOc1I2U2FEcy10YmVrVjBsTEpmQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkE3Mi80RjU2QzAxQzc3OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNS
NlNhRHMtdGJla1YwbExKZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFwoAUmA4s3lzR5sfddKkVBPjJWFYDt9Ijbz4OW5/0Ev8BvwDtz91MgJCS81m
CI3fIWYnZD1S/+gSUXvDwHoAp0Z9GAZiRffeaTgxwszfRpdApWcu5/WZBAiLUyJO
dnLI9yJZT8YYpHqchc4f0El9iQefjwCfhY3D9F86O3CYdchQWTkBh/jzpxTj1xvD
S3n9T9dlkEI3UYB9tUxGMdsXJxPoiylCpQKbxK2lsgb1wW6GgvsE8g88D14muSgH
f7rDcipMqJpFIuoS4gPqyTvr5DfaFGs0hTrV5vxPkSFymT5Frq6pf6Osvrif8P8k
35+T09RwqeEYAETKsuB4Xublng==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:46 2026 by rpki-client