Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
File:                     7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json)
Hash identifier:          9ygoHP7HwhLAK/QkPO03WCsGEP8IwKqfVias+W6qGts=
Subject key identifier:   37:42:52:79:1C:0C:C8:2E:21:5B:A7:3F:8F:6A:BE:5B:B7:B8:4D:AC
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Certificate issuer:       /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial:       1A54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
Manifest number:          1A36
Signing time:             Thu 24 Sep 2026 16:19:41 +0000
Manifest this update:     Thu 24 Sep 2026 16:19:40 +0000
Manifest next update:     Thu 01 Oct 2026 16:19:40 +0000
Files and hashes:         1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: l56S6ADDiUgXJ2D2kHuWKHhPjpt9bwssoGGDl8cack4=)
                          2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: l9ywiWPAeZBBe/6fsfXA0bzKhKSNr4Vqwudp1u9EGOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
                          rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6740 (0x1a54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
        Validity
            Not Before: Sep 24 16:19:40 2026 GMT
            Not After : Oct  1 16:19:40 2026 GMT
        Subject: CN=6ab54d9d-0153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:6a:b1:d7:e1:f3:dc:a6:54:67:ee:fc:a8:
                    ac:82:7f:0a:10:da:09:33:9c:86:a5:ba:84:35:b8:
                    62:1b:5c:91:74:a5:8e:ec:6a:68:c9:38:be:4a:a6:
                    51:03:e7:15:97:2d:61:3e:33:33:59:1d:9f:95:ae:
                    ac:61:13:f7:02:4e:31:31:e6:37:37:4a:71:48:0b:
                    88:f1:48:23:b5:12:a1:61:e4:6c:02:2c:ef:26:93:
                    98:36:a9:bc:d3:ac:75:12:db:42:be:7e:bc:37:2a:
                    12:a4:fa:c6:0b:3d:73:6c:34:c1:8a:51:18:fd:f3:
                    24:ba:a0:f4:49:db:88:a7:8c:9b:cb:19:69:2f:1d:
                    7c:b9:8b:0b:11:59:00:fc:8e:41:13:a3:ca:12:87:
                    fb:ab:1d:e5:be:6e:a8:da:2b:7e:46:8c:1d:db:8f:
                    eb:bf:9a:a2:f2:77:d9:d8:53:79:39:7b:ad:c4:a6:
                    f2:69:43:f8:a3:76:ce:d2:dd:74:17:a8:58:89:ef:
                    3e:d3:4f:45:22:5d:42:0e:34:5b:5e:9a:7b:d1:2f:
                    80:2a:6c:db:6b:83:71:67:0e:7f:6f:f1:04:49:37:
                    34:1a:66:4d:30:eb:46:87:15:c9:3a:dc:99:59:76:
                    c6:81:a2:f1:c8:39:54:e3:fb:b0:3b:7a:74:1b:a2:
                    b1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:42:52:79:1C:0C:C8:2E:21:5B:A7:3F:8F:6A:BE:5B:B7:B8:4D:AC
            X509v3 Authority Key Identifier:
                keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:0a:46:b7:a1:85:42:3c:bd:59:09:df:40:0b:21:15:8f:71:
         25:31:b9:29:40:3a:71:c8:d9:e3:37:22:b9:d2:4d:f9:16:35:
         7f:fe:30:c3:d5:b6:e3:6a:0f:9a:4c:6a:21:13:3d:68:e0:5c:
         fd:28:5e:86:fd:34:2a:b7:d7:ea:14:f8:d2:4f:94:25:76:cb:
         b9:41:cd:3e:7d:43:2b:ae:f4:96:b2:8d:97:93:04:98:9c:7f:
         2e:77:9c:d8:84:c2:d7:84:c5:37:2c:de:c0:41:00:d1:62:39:
         a0:ae:77:6e:38:ae:5b:33:ea:0b:7b:26:32:ec:4c:05:f5:b0:
         b0:d0:e3:fe:6c:c1:a8:1a:25:29:09:a9:51:04:55:ff:b2:b8:
         59:e4:60:81:ea:fd:4f:dc:b6:de:11:ac:f8:1c:9d:7f:5a:74:
         c8:c1:12:48:b1:cf:46:0e:95:44:68:13:1f:8e:36:da:af:b7:
         86:68:16:f1:81:81:74:65:e3:8a:dc:13:83:f7:27:b1:dc:ba:
         2b:b1:35:99:ed:80:03:9f:b4:0e:99:ed:82:96:a0:17:c6:69:
         e8:1d:0f:5a:ca:09:8c:fb:67:17:5d:a9:96:ba:08:0c:1f:4d:
         11:bc:3c:ae:0f:d9:1a:1e:31:93:4b:19:46:2b:3c:1a:c7:59:
         59:39:14:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM3MjUxMTAvBgNVBAUTKEVEMTdEMUJFM0Q1NzExQzZDOThDOENDQzU5QUFGNzM3
RTg2NUMzODQwHhcNMjYwOTI0MTYxOTQwWhcNMjYxMDAxMTYxOTQwWjAYMRYwFAYD
VQQDEw02YWI1NGQ5ZC0wMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4QRqsdfh89ymVGfu/Kisgn8KENoJM5yGpbqENbhiG1yRdKWO7GpoyTi+SqZR
A+cVly1hPjMzWR2fla6sYRP3Ak4xMeY3N0pxSAuI8UgjtRKhYeRsAizvJpOYNqm8
06x1EttCvn68NyoSpPrGCz1zbDTBilEY/fMkuqD0SduIp4ybyxlpLx18uYsLEVkA
/I5BE6PKEof7qx3lvm6o2it+Rowd24/rv5qi8nfZ2FN5OXutxKbyaUP4o3bO0t10
F6hYie8+009FIl1CDjRbXpp70S+AKmzba4NxZw5/b/EESTc0GmZNMOtGhxXJOtyZ
WXbGgaLxyDlU4/uwO3p0G6KxKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdCUnkc
DMguIVunP49qvlu3uE2sMB8GA1UdIwQYMBaAFO0X0b49VxHGyYyMzFmq9zfoZcOE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzcyNS8zMTg0NEMzNjgw
OUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVjYkpqSXpNV2FyM04taGx3
NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdSZlJ2ajFYRWNiSmpJek1XYXIzTi1obHc0US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzcyNS8zMTg0NEMzNjgwOUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVj
YkpqSXpNV2FyM04taGx3NFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArwpGt6GFQjy9WQnfQAshFY9xJTG5KUA6ccjZ4zciudJN+RY1f/4ww9W242oP
mkxqIRM9aOBc/Shehv00KrfX6hT40k+UJXbLuUHNPn1DK670lrKNl5MEmJx/Lnec
2ITC14TFNyzewEEA0WI5oK53bjiuWzPqC3smMuxMBfWwsNDj/mzBqBolKQmpUQRV
/7K4WeRgger9T9y23hGs+Bydf1p0yMESSLHPRg6VRGgTH4422q+3hmgW8YGBdGXj
itwTg/cnsdy6K7E1me2AA5+0DpntgpagF8Zp6B0PWsoJjPtnF12plroIDB9NEbw8
rg/ZGh4xk0sZRis8GsdZWTkU0A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:57:59 2026 by rpki-client