Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
File:                     lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json)
Hash identifier:          9GukpoWL8XbE3k2IiamWVO2b2cPKo7DsjtijZRWrR0A=
Subject key identifier:   82:D6:02:6B:49:81:16:F7:4D:CC:2D:75:4E:13:2B:02:02:7F:8D:54
Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B
Certificate issuer:       /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
Certificate serial:       0C6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
Manifest number:          0C64
Signing time:             Thu 24 Sep 2026 18:38:39 +0000
Manifest this update:     Thu 24 Sep 2026 18:38:39 +0000
Manifest next update:     Thu 01 Oct 2026 18:38:39 +0000
Files and hashes:         1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: vRFlIgwUod/QqtTmzNI5bB5sFkN0txFX2el2LlszsJQ=)
                          2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: mJ7FNfAsY8ilIUPeznnb6nLSUZbSai5AntD3LtENWkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl
                          rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3182 (0xc6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B
        Validity
            Not Before: Sep 24 18:38:39 2026 GMT
            Not After : Oct  1 18:38:39 2026 GMT
        Subject: CN=6ab56e2f-3550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:32:18:ba:87:a5:e2:30:4e:73:d6:37:c1:
                    75:68:73:dc:67:a4:f7:f6:d4:c3:cc:75:0d:07:ba:
                    4a:6a:16:66:f8:c0:9f:6e:98:c0:1b:fb:b4:26:41:
                    a0:ee:ce:77:1b:7d:ba:ce:6a:b3:60:15:7d:ac:8a:
                    a8:a4:02:95:a3:9f:46:62:7e:c1:d2:e5:54:1d:7e:
                    f6:66:66:dc:7a:96:88:d4:72:a0:18:20:be:35:98:
                    a3:53:1a:e5:71:c3:aa:fd:77:42:59:b8:66:36:01:
                    07:0c:33:b4:13:37:bf:62:b1:53:07:db:35:6e:e8:
                    c8:8f:9a:65:c8:fa:96:40:f8:71:0f:4f:9f:5a:0c:
                    c3:83:ed:13:85:7d:97:a0:6c:96:f5:c7:14:06:49:
                    16:35:9b:cb:6e:06:26:4d:5d:e3:94:78:cc:65:84:
                    7b:aa:2b:af:09:df:34:6f:61:08:c3:04:6a:18:ff:
                    e7:35:d2:c0:33:3c:5d:56:b3:ce:62:35:a1:53:55:
                    87:77:18:57:06:b3:3c:f2:96:83:69:04:01:f3:df:
                    56:7f:05:d3:e4:df:43:8f:6e:d7:be:8c:9a:d1:8f:
                    39:01:ff:8c:51:6d:61:1c:ae:80:a9:5a:37:6c:87:
                    f5:ab:a1:ab:e7:b1:ee:60:00:c2:15:67:f0:75:f4:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:02:6B:49:81:16:F7:4D:CC:2D:75:4E:13:2B:02:02:7F:8D:54
            X509v3 Authority Key Identifier:
                keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3a:8f:b9:09:e6:ad:e5:f8:36:5b:d0:45:65:4e:01:94:a2:
         0a:75:44:ea:34:d6:13:2f:e3:c4:95:ec:6e:bf:d0:d7:aa:1c:
         d0:54:91:cb:fd:f9:3d:11:26:c4:15:04:ef:a0:7f:d3:a4:2c:
         a2:e6:23:a6:14:1a:8c:5b:3b:48:75:46:ef:31:31:0b:1c:12:
         b2:ca:af:2d:06:93:ea:5a:f6:65:1e:74:d7:38:39:39:1a:69:
         36:17:a7:4c:2c:72:da:bb:bb:fc:ff:83:fb:a8:9f:fb:ab:8d:
         4c:69:63:fb:d9:0c:cd:73:29:da:d5:3a:49:ba:fb:f0:f5:d0:
         33:ee:9b:f0:f4:47:20:e9:2b:c0:59:e4:eb:f6:f0:63:1e:8d:
         eb:f5:2e:00:45:61:f7:46:3b:90:61:d7:68:f7:67:4e:8c:32:
         1e:1f:36:be:6a:9a:f8:8c:79:a9:18:be:5c:88:e8:48:25:50:
         6b:20:1c:f3:aa:a3:ea:7c:b8:c6:13:1d:f5:de:91:b6:59:fb:
         30:c1:bd:03:21:66:60:e2:b1:e1:79:23:67:88:14:95:1f:65:
         99:48:de:42:e9:99:87:16:32:f3:b5:75:82:8f:b3:9e:49:04:
         fb:26:81:32:39:03:1e:43:48:f0:f9:cb:c0:38:ba:9d:46:a9:
         b5:4a:37:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDG4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw
MUU2NUUzN0IwHhcNMjYwOTI0MTgzODM5WhcNMjYxMDAxMTgzODM5WjAYMRYwFAYD
VQQDEw02YWI1NmUyZi0zNTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpsyGLqHpeIwTnPWN8F1aHPcZ6T39tTDzHUNB7pKahZm+MCfbpjAG/u0JkGg
7s53G326zmqzYBV9rIqopAKVo59GYn7B0uVUHX72ZmbcepaI1HKgGCC+NZijUxrl
ccOq/XdCWbhmNgEHDDO0Eze/YrFTB9s1bujIj5plyPqWQPhxD0+fWgzDg+0ThX2X
oGyW9ccUBkkWNZvLbgYmTV3jlHjMZYR7qiuvCd80b2EIwwRqGP/nNdLAMzxdVrPO
YjWhU1WHdxhXBrM88paDaQQB899WfwXT5N9Dj27Xvoya0Y85Af+MUW1hHK6AqVo3
bIf1q6Gr57HuYADCFWfwdfRmEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILWAmtJ
gRb3TcwtdU4TKwICf41UMB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw
NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK
RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWjqPuQnmreX4NlvQRWVOAZSiCnVE6jTWEy/jxJXsbr/Q16oc0FSRy/35PREm
xBUE76B/06QsouYjphQajFs7SHVG7zExCxwSssqvLQaT6lr2ZR501zg5ORppNhen
TCxy2ru7/P+D+6if+6uNTGlj+9kMzXMp2tU6Sbr78PXQM+6b8PRHIOkrwFnk6/bw
Yx6N6/UuAEVh90Y7kGHXaPdnTowyHh82vmqa+Ix5qRi+XIjoSCVQayAc86qj6ny4
xhMd9d6Rtln7MMG9AyFmYOKx4XkjZ4gUlR9lmUjeQumZhxYy87V1go+znkkE+yaB
MjkDHkNI8PnLwDi6nUaptUo3+Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:28:35 2026 by rpki-client