Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File:                     fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier:          0I3vZR9hvMAOqhfvibwcppyjx5oc76vdWJPr9k5FmkE=
Subject key identifier:   46:68:B6:79:A2:88:5C:A6:B0:FE:ED:8F:10:68:7A:9D:40:38:0D:45
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer:       /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial:       0738
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number:          0730
Signing time:             Thu 24 Sep 2026 21:53:08 +0000
Manifest this update:     Thu 24 Sep 2026 21:53:07 +0000
Manifest next update:     Thu 01 Oct 2026 21:53:07 +0000
Files and hashes:         1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: eHJZgpn0NqhuneiNJubNYITiMrT+W2YwvoQHmc8lqVg=)
                          2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: QaYEG2WSdhaWEdoGVElFyYGDrqVJROikfBh2ov/24oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
                          rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
        Validity
            Not Before: Sep 24 21:53:07 2026 GMT
            Not After : Oct  1 21:53:07 2026 GMT
        Subject: CN=6ab59bc4-5b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:de:a1:dc:fa:e3:0d:bb:b7:c1:89:45:17:
                    84:43:84:51:d2:26:17:95:5c:ad:41:88:21:d1:5e:
                    dc:55:e7:ca:ee:f3:7f:0b:69:29:86:7a:62:6a:13:
                    54:ad:53:cc:f4:7d:4e:be:e3:a7:9c:62:41:46:bf:
                    87:a7:d7:0c:d9:e1:72:f5:e5:6e:74:ff:7e:7b:57:
                    8f:69:cf:03:d7:f0:21:96:ba:e0:d7:df:a9:8c:0c:
                    db:c7:6c:fc:9d:c8:3d:56:2a:8e:39:5b:ea:69:aa:
                    ed:43:2a:8c:1c:5c:3b:5d:5a:40:82:d1:ba:1f:0a:
                    09:fe:7f:75:cb:7e:4c:41:83:c0:fe:71:a2:83:f5:
                    6f:ac:c8:26:d9:4c:ab:1f:4a:aa:c2:75:44:d0:d0:
                    50:88:f0:b4:3a:21:44:64:45:f8:a4:43:7e:34:f1:
                    32:07:e8:54:ac:4a:ff:61:73:c2:70:24:3e:74:50:
                    d4:01:38:4b:4c:a0:e7:4d:36:0d:bb:9c:03:c3:35:
                    d1:54:5e:3c:60:ed:67:c7:d8:68:0e:23:b6:cc:a7:
                    4f:58:58:28:d1:5a:aa:90:48:5f:96:a7:96:ea:b9:
                    84:7a:73:b1:0c:73:6d:92:0d:86:00:8d:d2:9a:67:
                    e2:b0:2c:cb:27:8f:a8:54:aa:59:d7:93:de:82:3f:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:68:B6:79:A2:88:5C:A6:B0:FE:ED:8F:10:68:7A:9D:40:38:0D:45
            X509v3 Authority Key Identifier:
                keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ad:8d:dc:6a:bb:bc:03:7b:1b:91:64:48:d3:b3:89:32:16:
         4a:9e:0e:f5:09:20:c2:af:40:5b:c5:27:58:94:ea:a8:62:cb:
         30:cd:ba:d9:2d:21:a1:6b:b6:c6:f3:5d:69:15:b5:e3:88:2c:
         dd:be:e4:5e:8d:bb:af:4d:b6:2b:c0:b5:fb:37:9a:ec:cb:a7:
         6b:f2:25:78:66:7d:35:47:9d:6a:28:7b:e8:28:7c:f7:d3:7b:
         c7:a1:f5:b8:da:4f:cb:d7:d7:70:2e:a0:ab:44:e7:90:91:d4:
         7b:bb:4c:e3:9b:6e:27:5f:1f:39:d3:bc:31:fe:07:47:56:27:
         7a:d7:ad:f9:54:23:bc:0c:3f:3d:6b:a0:05:01:56:f7:eb:6e:
         e5:39:a6:ef:23:6f:0e:c2:6e:d5:12:b9:29:3e:af:c8:4e:dc:
         4b:18:c4:68:7e:7a:67:ad:40:f4:c4:c2:34:5a:f0:2d:f3:84:
         3f:be:87:71:a8:09:16:e2:b8:a1:3d:79:60:e9:1f:b2:f4:f0:
         29:75:a4:47:0c:0a:fe:44:3f:da:95:93:01:2f:d6:44:a1:8d:
         40:98:aa:47:cc:0a:c1:a6:59:86:a4:a7:ec:64:35:e2:86:48:
         14:aa:91:f7:50:d6:e1:00:23:41:4a:f1:38:0c:02:7d:a4:52:
         a0:4e:2c:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJBNEUxMTAvBgNVBAUTKDdENzNFRjExNUIwMkM1RTAxMDIzODQ3QTkxQjBCMEYw
NzhCNUYwMkIwHhcNMjYwOTI0MjE1MzA3WhcNMjYxMDAxMjE1MzA3WjAYMRYwFAYD
VQQDEw02YWI1OWJjNC01YjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulPeodz64w27t8GJRReEQ4RR0iYXlVytQYgh0V7cVefK7vN/C2kphnpiahNU
rVPM9H1OvuOnnGJBRr+Hp9cM2eFy9eVudP9+e1ePac8D1/Ahlrrg19+pjAzbx2z8
ncg9ViqOOVvqaartQyqMHFw7XVpAgtG6HwoJ/n91y35MQYPA/nGig/VvrMgm2Uyr
H0qqwnVE0NBQiPC0OiFEZEX4pEN+NPEyB+hUrEr/YXPCcCQ+dFDUAThLTKDnTTYN
u5wDwzXRVF48YO1nx9hoDiO2zKdPWFgo0VqqkEhflqeW6rmEenOxDHNtkg2GAI3S
mmfisCzLJ4+oVKpZ15Pegj9vvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEZotnmi
iFymsP7tjxBoep1AOA1FMB8GA1UdIwQYMBaAFH1z7xFbAsXgECOEepGwsPB4tfAr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkE0RS9FM0UwODQ2NDk1
QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hlQVFJNFI2a2JDdzhIaTE4
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZYUHZFVnNDeGVBUUk0UjZrYkN3OEhpMThDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkE0RS9FM0UwODQ2NDk1QkIxMUVCOTQ5RkU1MzVDNEY5QUUwMi9mWFB2RVZzQ3hl
QVFJNFI2a2JDdzhIaTE4Q3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAba2N3Gq7vAN7G5FkSNOziTIWSp4O9Qkgwq9AW8UnWJTqqGLLMM262S0hoWu2
xvNdaRW144gs3b7kXo27r022K8C1+zea7Muna/IleGZ9NUedaih76Ch899N7x6H1
uNpPy9fXcC6gq0TnkJHUe7tM45tuJ18fOdO8Mf4HR1Ynetet+VQjvAw/PWugBQFW
9+tu5Tmm7yNvDsJu1RK5KT6vyE7cSxjEaH56Z61A9MTCNFrwLfOEP76HcagJFuK4
oT15YOkfsvTwKXWkRwwK/kQ/2pWTAS/WRKGNQJiqR8wKwaZZhqSn7GQ14oZIFKqR
91DW4QAjQUrxOAwCfaRSoE4sKQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 15:48:41 2026 by rpki-client