Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File:                     CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier:          G94scmyg7IsqRQm+iBdQBCKrCZQyogTM5al1BClEi+c=
Subject key identifier:   DD:92:7D:62:10:B1:8E:1D:E6:9B:FD:31:30:21:6C:C5:B6:14:1A:67
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer:       /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial:       0219
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number:          0213
Signing time:             Fri 25 Sep 2026 03:00:44 +0000
Manifest this update:     Fri 25 Sep 2026 03:00:44 +0000
Manifest next update:     Fri 02 Oct 2026 03:00:44 +0000
Files and hashes:         1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: GOiVbEzGX+6LNLyFj34hIk2IfzHI2yoiJtcFhGbSvFw=)
                          2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
                          rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
        Validity
            Not Before: Sep 25 03:00:44 2026 GMT
            Not After : Oct  2 03:00:44 2026 GMT
        Subject: CN=6ab5e3dc-176d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:2a:36:9b:67:30:72:93:7e:92:14:4f:1d:
                    84:10:43:4e:4c:15:1d:8f:58:a1:8b:de:e3:29:f4:
                    79:c9:9d:8c:ad:56:f4:a2:c7:39:67:d3:71:66:57:
                    fc:81:7d:ef:0b:f2:32:d9:a7:d9:84:86:23:1c:88:
                    c2:c0:85:41:65:42:d3:f0:bd:e4:fc:0a:51:a9:be:
                    f7:db:e4:c6:d6:4f:06:58:e1:fb:43:11:f2:45:be:
                    ca:a9:31:46:88:03:3d:9e:ce:1a:87:a2:0a:df:90:
                    ac:c7:5d:9e:85:d5:f8:7d:22:7a:d8:13:75:8f:fd:
                    92:66:8f:5f:bd:3d:d7:34:be:88:78:48:e5:ee:2b:
                    a6:00:ad:7a:1d:df:68:14:54:84:77:fc:ae:68:c3:
                    df:98:3a:21:aa:f6:70:fa:27:08:1a:d4:4e:54:8b:
                    db:31:72:1b:27:f1:2f:d9:12:59:af:ac:f7:35:17:
                    42:29:1e:cf:84:da:b4:d5:06:14:d3:c8:40:e3:ca:
                    d6:9e:22:6c:4c:98:d9:21:1f:c6:96:35:b7:88:52:
                    8e:93:23:8f:ae:16:24:09:aa:a0:b2:74:0f:71:ea:
                    d4:bc:0c:e1:bd:c2:d8:ed:ac:17:f4:d4:d0:77:24:
                    53:77:3e:14:2b:2f:d6:50:81:b6:2f:56:92:da:86:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:92:7D:62:10:B1:8E:1D:E6:9B:FD:31:30:21:6C:C5:B6:14:1A:67
            X509v3 Authority Key Identifier:
                keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:88:72:d6:9a:51:9d:19:a9:0f:ae:68:a5:3b:b5:05:84:9c:
         3b:96:3e:58:7e:dc:e8:ba:d0:4e:8a:7f:42:76:2e:5d:ae:91:
         97:f0:f9:00:78:16:64:18:bf:98:fe:a3:70:43:43:15:95:c6:
         cc:e4:d7:be:bc:54:62:f6:da:e6:3a:7d:08:6a:71:ef:16:0a:
         30:e6:88:69:b1:04:ff:61:5d:95:78:23:9e:2b:eb:73:17:2a:
         a6:4c:09:5d:78:ba:82:c4:a2:f3:e7:9b:34:a5:e2:02:df:62:
         bd:dd:f2:60:64:8e:28:e5:e1:ea:c6:ec:5c:30:4e:17:22:ac:
         34:0b:df:d2:01:2d:fe:c2:90:33:9b:68:27:48:f2:69:88:d0:
         db:9d:ea:0a:04:e9:19:41:31:45:9a:8c:3c:be:b7:f6:88:94:
         1c:7a:36:9c:96:5a:1c:fe:5b:a3:8f:c7:e1:0d:05:ae:45:76:
         fd:d9:2b:b4:50:21:23:e4:fa:bc:49:e3:1b:28:90:ca:c4:39:
         c2:02:84:84:72:30:aa:8e:e6:47:97:98:49:a9:1d:e5:26:4b:
         e7:34:75:bb:19:9c:36:d0:7e:81:a5:1b:9c:e0:58:df:9b:81:
         24:36:dd:2c:a7:f1:7b:4e:34:ce:d1:c8:5e:3f:20:3a:7c:6b:
         e1:9a:c4:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENCMjIxMTAvBgNVBAUTKDA5NTg4NjE0Mzg3MjEwRThCNjlBRDNDMzFBNzM2MTlE
NzU1RUQwQzAwHhcNMjYwOTI1MDMwMDQ0WhcNMjYxMDAyMDMwMDQ0WjAYMRYwFAYD
VQQDEw02YWI1ZTNkYy0xNzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlJgqNptnMHKTfpIUTx2EEENOTBUdj1ihi97jKfR5yZ2MrVb0osc5Z9NxZlf8
gX3vC/Iy2afZhIYjHIjCwIVBZULT8L3k/ApRqb732+TG1k8GWOH7QxHyRb7KqTFG
iAM9ns4ah6IK35Csx12ehdX4fSJ62BN1j/2SZo9fvT3XNL6IeEjl7iumAK16Hd9o
FFSEd/yuaMPfmDohqvZw+icIGtROVIvbMXIbJ/Ev2RJZr6z3NRdCKR7PhNq01QYU
08hA48rWniJsTJjZIR/GljW3iFKOkyOPrhYkCaqgsnQPcerUvAzhvcLY7awX9NTQ
dyRTdz4UKy/WUIG2L1aS2oZ3uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2SfWIQ
sY4d5pv9MTAhbMW2FBpnMB8GA1UdIwQYMBaAFAlYhhQ4chDotprTwxpzYZ11XtDA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0IyMi82NjAyRTk3ODhD
RDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVPaTJtdFBER25OaG5YVmUw
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NWaUdGRGh5RU9pMm10UERHbk5oblhWZTBNQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0IyMi82NjAyRTk3ODhDRDExMUVFQjYxRkM2MzhDNEY5QUUwMi9DVmlHRkRoeUVP
aTJtdFBER25OaG5YVmUwTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApIhy1ppRnRmpD65opTu1BYScO5Y+WH7c6LrQTop/QnYuXa6Rl/D5AHgWZBi/
mP6jcENDFZXGzOTXvrxUYvba5jp9CGpx7xYKMOaIabEE/2FdlXgjnivrcxcqpkwJ
XXi6gsSi8+ebNKXiAt9ivd3yYGSOKOXh6sbsXDBOFyKsNAvf0gEt/sKQM5toJ0jy
aYjQ253qCgTpGUExRZqMPL639oiUHHo2nJZaHP5bo4/H4Q0FrkV2/dkrtFAhI+T6
vEnjGyiQysQ5wgKEhHIwqo7mR5eYSakd5SZL5zR1uxmcNtB+gaUbnOBY35uBJDbd
LKfxe040ztHIXj8gOnxr4ZrEPA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:21:12 2026 by rpki-client