Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
File:                     aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json)
Hash identifier:          CvhWK11L9nGkHKqOrTzSMhgGLMWFch4IRgLQ9E2T7Wg=
Subject key identifier:   DA:3A:65:DE:B8:1C:65:A7:F5:49:87:48:1D:DC:50:4C:62:83:81:CA
Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33
Certificate issuer:       /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
Certificate serial:       0F03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
Manifest number:          0EE5
Signing time:             Sat 26 Sep 2026 17:43:51 +0000
Manifest this update:     Sat 26 Sep 2026 17:43:51 +0000
Manifest next update:     Sat 03 Oct 2026 17:43:51 +0000
Files and hashes:         1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: qK4KPR7JtL9nNBOykJMJE6mCUIbtx/b2Y/OKLuZ1hsQ=)
                          2: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: uIYeCaBuRDEfSa74mfNr2LSTxBd9PK1A2yHp2J/i9kM=)
                          3: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: Gz9eqekiWDiK9v3eDHt3H2hLACZfxZzIPs/2qncX1gM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl
                          rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3843 (0xf03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233
        Validity
            Not Before: Sep 26 17:43:51 2026 GMT
            Not After : Oct  3 17:43:51 2026 GMT
        Subject: CN=6ab80457-36e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:47:7e:c7:50:46:fe:17:07:ee:0c:70:a0:
                    c5:8e:6f:9b:16:83:5f:29:b5:a9:7d:bb:92:a0:16:
                    eb:c8:0d:0a:bb:67:e9:2b:38:16:f1:15:96:3c:93:
                    5f:5f:7b:ce:ff:a2:53:49:39:1a:d1:84:69:e1:14:
                    51:6e:79:46:70:1f:d4:af:a1:bc:25:8f:ae:b6:55:
                    8e:36:6d:91:eb:4e:d2:13:c0:be:ff:b2:d3:d1:9d:
                    3b:3b:19:cc:f2:d8:33:0b:1b:91:d9:06:22:7f:2f:
                    07:b4:60:ce:13:5e:4b:cb:17:82:12:1e:4b:4c:e8:
                    49:20:ae:2d:d5:4b:d2:9b:8a:5d:d1:a9:e0:9c:45:
                    ea:fe:86:41:18:4d:fb:0d:5e:67:e6:d9:f7:ec:0b:
                    11:7a:87:ec:3c:82:b9:f6:9e:b3:51:bd:ab:18:ba:
                    30:41:54:26:28:8d:b2:59:40:41:a4:7c:5e:49:f2:
                    17:7d:0f:3f:7c:1e:58:60:64:30:df:2e:28:9e:36:
                    8d:12:e2:94:9e:b7:82:c2:d3:e6:ff:b4:55:2b:b2:
                    45:f6:4c:b0:53:c2:19:51:43:57:65:4e:b7:f1:8e:
                    7a:2f:7a:48:42:5c:e0:6a:1d:3b:06:27:9e:01:cb:
                    be:c1:e3:d8:8a:5f:d6:74:e7:f8:8b:63:75:69:04:
                    65:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:65:DE:B8:1C:65:A7:F5:49:87:48:1D:DC:50:4C:62:83:81:CA
            X509v3 Authority Key Identifier:
                keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8d:e4:2b:61:63:19:39:c8:2f:1f:2b:39:d3:a3:86:ac:0a:
         b7:10:74:8f:02:9e:4e:2f:13:ba:11:6f:7a:d1:b7:92:c8:77:
         95:09:f5:db:90:56:23:93:f5:90:70:5f:01:bd:f2:d9:7b:0a:
         40:2d:05:aa:3c:a8:bd:bc:ee:6b:f8:22:47:84:38:09:92:71:
         04:a4:ec:6d:4a:36:51:f9:10:16:5d:0a:a3:fc:be:a4:b1:ae:
         1b:18:d3:c2:28:3e:95:6e:b3:6f:32:d2:ab:4a:ff:7b:8a:32:
         bc:ed:6e:d9:1d:3a:e4:cc:5b:c8:59:80:79:17:c2:af:5c:98:
         66:05:0c:af:dd:0e:25:19:0b:3b:f9:c7:71:55:bd:7e:d2:81:
         0a:07:72:d3:9f:ab:4a:60:33:b3:69:0c:2f:94:bb:bb:a7:08:
         f7:01:b6:5a:d6:70:58:4e:1c:96:af:1d:0f:fc:8e:b4:0b:91:
         d3:2f:c9:8e:d2:38:90:f9:65:24:ba:71:c2:e6:b7:3f:9c:58:
         f1:4d:85:4a:42:a1:17:24:6d:9f:f4:51:b1:7c:ec:2d:ca:8e:
         6f:f4:52:d7:dc:c5:25:41:15:02:ed:c0:e3:47:f3:89:92:ee:
         51:9f:3b:77:5e:48:f8:53:d9:8f:2f:ea:63:1e:a8:c6:0b:88:
         d8:34:36:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEZFRDMxMTAvBgNVBAUTKDY5OUY1MUE5RDlFMTQ1NkQxNjAxQkU4M0Q4Qjk0QUQ1
OUE0MzgyMzMwHhcNMjYwOTI2MTc0MzUxWhcNMjYxMDAzMTc0MzUxWjAYMRYwFAYD
VQQDEw02YWI4MDQ1Ny0zNmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAordHfsdQRv4XB+4McKDFjm+bFoNfKbWpfbuSoBbryA0Ku2fpKzgW8RWWPJNf
X3vO/6JTSTka0YRp4RRRbnlGcB/Ur6G8JY+utlWONm2R607SE8C+/7LT0Z07OxnM
8tgzCxuR2QYify8HtGDOE15LyxeCEh5LTOhJIK4t1UvSm4pd0angnEXq/oZBGE37
DV5n5tn37AsReofsPIK59p6zUb2rGLowQVQmKI2yWUBBpHxeSfIXfQ8/fB5YYGQw
3y4onjaNEuKUnreCwtPm/7RVK7JF9kywU8IZUUNXZU638Y56L3pIQlzgah07Biee
Acu+wePYil/WdOf4i2N1aQRlkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNo6Zd64
HGWn9UmHSB3cUExig4HKMB8GA1UdIwQYMBaAFGmfUanZ4UVtFgG+g9i5StWaQ4Iz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkVEMy9GODU4NEY3Q0Iz
OEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJXMFdBYjZEMkxsSzFacERn
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FaOVJxZG5oUlcwV0FiNkQyTGxLMVpwRGdqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RkVEMy9GODU4NEY3Q0IzOEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJX
MFdBYjZEMkxsSzFacERnak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiY3kK2FjGTnILx8rOdOjhqwKtxB0jwKeTi8TuhFvetG3ksh3lQn125BWI5P1
kHBfAb3y2XsKQC0Fqjyovbzua/giR4Q4CZJxBKTsbUo2UfkQFl0Ko/y+pLGuGxjT
wig+lW6zbzLSq0r/e4oyvO1u2R065MxbyFmAeRfCr1yYZgUMr90OJRkLO/nHcVW9
ftKBCgdy05+rSmAzs2kML5S7u6cI9wG2WtZwWE4clq8dD/yOtAuR0y/JjtI4kPll
JLpxwua3P5xY8U2FSkKhFyRtn/RRsXzsLcqOb/RS19zFJUEVAu3A40fziZLuUZ87
d15I+FPZjy/qYx6oxguI2DQ2sg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:35:20 2026 by rpki-client