Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
File:                     w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft (raw, json)
Hash identifier:          7W7dy1P8a3/YjB2IFCNvD3DtWiGLgf300v3aAeyIyZA=
Subject key identifier:   E9:15:78:45:40:6B:39:E6:DC:06:AC:4E:C8:31:21:93:1C:40:78:86
Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Certificate issuer:       /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Certificate serial:       04DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
Manifest number:          04D5
Signing time:             Tue 22 Sep 2026 23:00:23 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:22 +0000
Manifest next update:     Tue 29 Sep 2026 23:00:22 +0000
Files and hashes:         1: w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl (hash: zolmDV3rnAltnxVCJCen2xeBGVt32PrEKyirsR+bP1s=)
                          2: 9904EDFA857E11ECA6A4FB59C4F9AE02.roa (hash: Wkbpet28C/TvGY44smk3UYg7QZ7S+a0s1olNKrKnufY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
        Validity
            Not Before: Sep 22 23:00:22 2026 GMT
            Not After : Sep 29 23:00:22 2026 GMT
        Subject: CN=6ab30887-a6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:95:48:f2:4c:9c:9d:b4:66:72:85:78:ad:
                    ae:9c:5b:b5:18:3b:5d:9b:52:2f:1e:b4:84:95:a2:
                    60:58:e4:80:86:2a:12:28:f0:96:89:40:ed:41:51:
                    6b:6d:95:94:c1:5e:b5:32:e0:08:51:57:ae:01:dd:
                    1a:c8:a1:fe:35:3c:db:34:7d:50:21:cb:fd:c9:81:
                    51:81:2e:a5:3f:05:09:b3:34:51:c9:62:d3:45:17:
                    7a:71:1f:2e:1f:7a:fb:2c:83:d2:10:c7:5e:be:13:
                    6b:9a:79:4e:d7:9c:73:00:b4:ab:ba:9d:f4:a7:20:
                    ed:a2:69:15:41:52:ad:d8:b7:58:28:c6:72:03:95:
                    b3:1d:f1:4c:85:39:38:e4:63:a5:9a:f9:2f:c5:ed:
                    33:65:04:57:d2:e8:74:16:9b:23:f1:a5:90:d0:5e:
                    c8:c4:57:f6:d8:4e:dc:ec:25:48:e1:3b:4e:cc:a9:
                    b7:89:54:d5:a3:22:3b:cd:b3:db:a8:24:0e:85:74:
                    f3:36:fb:a4:c3:06:ff:b5:26:1f:ca:c7:79:36:45:
                    3f:e3:0c:39:94:5f:b9:8e:fb:4c:e2:aa:f4:54:a5:
                    f6:29:40:ff:df:dd:0e:b8:3f:a1:45:9a:6f:af:66:
                    c1:c4:b6:d7:78:e8:aa:ed:bd:6a:ea:35:fc:05:6f:
                    a4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:15:78:45:40:6B:39:E6:DC:06:AC:4E:C8:31:21:93:1C:40:78:86
            X509v3 Authority Key Identifier:
                keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9f:db:b5:03:4f:27:3e:56:31:37:c8:70:01:15:44:de:8a:
         73:0f:8c:85:af:73:ac:70:99:24:7a:4c:bf:61:9e:12:e4:04:
         32:ca:c4:6a:28:11:60:c8:d0:8d:a9:59:ac:94:f6:bf:5e:4d:
         2c:71:17:6a:26:e8:2d:f3:dc:b6:61:7d:3d:23:b7:d3:aa:de:
         c5:4a:b3:20:e2:76:e7:8c:80:67:6b:0e:51:79:84:df:e4:3f:
         97:0c:27:1a:11:8e:3d:3f:87:df:f1:7a:e6:cd:a5:bf:f5:33:
         ba:37:d9:26:1e:9f:8d:ca:31:03:98:23:ae:e9:6d:a6:5e:24:
         43:70:d4:cd:e8:a2:07:dd:b9:e1:93:f8:d9:b9:40:0d:58:c4:
         16:5c:22:47:15:d6:0b:96:2f:30:58:8a:66:ac:6a:07:98:8d:
         0c:8c:00:d8:ec:47:36:4b:0c:3b:b6:b4:34:f5:24:71:d9:63:
         ca:8b:bb:f2:bb:53:06:7b:46:07:ea:60:a8:5d:cb:e0:96:fe:
         1f:17:c0:da:19:62:56:66:ba:5c:b8:24:03:a3:a6:2e:c4:54:
         60:a9:5b:c7:d7:3a:a3:42:5f:d1:9e:42:99:24:3e:27:cc:d5:
         8f:94:66:48:f4:ed:fe:01:00:95:64:f2:12:d7:17:2c:f0:94:
         9a:e9:fe:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAwODAxMTAvBgNVBAUTKEMzQzNCNkEyQUJDRDcxNURFNTlBMzBCMzVERkM2MTQ5
MDVCRkU2NDMwHhcNMjYwOTIyMjMwMDIyWhcNMjYwOTI5MjMwMDIyWjAYMRYwFAYD
VQQDEw02YWIzMDg4Ny1hNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9eVSPJMnJ20ZnKFeK2unFu1GDtdm1IvHrSElaJgWOSAhioSKPCWiUDtQVFr
bZWUwV61MuAIUVeuAd0ayKH+NTzbNH1QIcv9yYFRgS6lPwUJszRRyWLTRRd6cR8u
H3r7LIPSEMdevhNrmnlO15xzALSrup30pyDtomkVQVKt2LdYKMZyA5WzHfFMhTk4
5GOlmvkvxe0zZQRX0uh0Fpsj8aWQ0F7IxFf22E7c7CVI4TtOzKm3iVTVoyI7zbPb
qCQOhXTzNvukwwb/tSYfysd5NkU/4ww5lF+5jvtM4qr0VKX2KUD/390OuD+hRZpv
r2bBxLbXeOiq7b1q6jX8BW+kcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkVeEVA
aznm3AasTsgxIZMcQHiGMB8GA1UdIwQYMBaAFMPDtqKrzXFd5Zows138YUkFv+ZD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8xODVBRThBMjg1
NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNWM2xtakN6WGZ4aFNRV181
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3c4TzJvcXZOY1YzbG1qQ3pYZnhoU1FXXzVrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDA4MC8xODVBRThBMjg1NzAxMUVDOTgyMEU4MzdDNEY5QUUwMi93OE8yb3F2TmNW
M2xtakN6WGZ4aFNRV181a00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZp/btQNPJz5WMTfIcAEVRN6Kcw+Mha9zrHCZJHpMv2GeEuQEMsrEaigRYMjQ
jalZrJT2v15NLHEXaiboLfPctmF9PSO306rexUqzIOJ254yAZ2sOUXmE3+Q/lwwn
GhGOPT+H3/F65s2lv/UzujfZJh6fjcoxA5gjrultpl4kQ3DUzeiiB9254ZP42blA
DVjEFlwiRxXWC5YvMFiKZqxqB5iNDIwA2OxHNksMO7a0NPUkcdljyou78rtTBntG
B+pgqF3L4Jb+HxfA2hliVma6XLgkA6OmLsRUYKlbx9c6o0Jf0Z5CmSQ+J8zVj5Rm
SPTt/gEAlWTyEtcXLPCUmun+7A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:04:17 2026 by rpki-client