Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
File:                     fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json)
Hash identifier:          v47oo1GNw1kQbtfx1sapJeFNe5wYVETU/CopI0QhJco=
Subject key identifier:   92:F8:44:75:85:A1:F4:B8:80:3B:3E:6B:3A:02:9A:E4:8E:1D:32:1B
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Certificate issuer:       /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial:       0D43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
Manifest number:          0D38
Signing time:             Tue 22 Sep 2026 18:05:53 +0000
Manifest this update:     Tue 22 Sep 2026 18:05:52 +0000
Manifest next update:     Tue 29 Sep 2026 18:05:52 +0000
Files and hashes:         1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: LcdQcZjrEqFOjEHH34wzwR+Ph4CODK6oxTOW+q451ac=)
                          2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: taMg9ABZmz3UBA8VdUB5OiDUtv+I/OZVxR13yJafYfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
                          rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3395 (0xd43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
        Validity
            Not Before: Sep 22 18:05:52 2026 GMT
            Not After : Sep 29 18:05:52 2026 GMT
        Subject: CN=6ab2c381-2b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:de:73:9a:74:48:34:50:9a:45:db:3f:4b:
                    f5:26:bf:a6:82:d0:3d:a8:9b:3c:7d:6b:d5:d5:71:
                    8a:bd:7d:80:ab:2e:23:b9:45:8c:b8:46:6a:d9:39:
                    1d:51:b8:8d:98:50:a2:bd:7a:37:92:d2:da:db:10:
                    e9:71:77:38:f4:00:bb:be:4a:b0:1b:0e:6a:80:5a:
                    20:62:11:3a:0f:30:13:ff:0c:f7:36:75:be:12:04:
                    47:a9:92:42:f8:fc:bd:e0:ae:80:fa:ad:35:83:50:
                    4a:2f:ee:f0:ed:91:d4:1d:f2:ad:90:8f:7c:83:ab:
                    70:16:3f:0e:23:40:da:84:0a:db:5b:14:59:60:c5:
                    e1:0b:e5:2b:71:50:a3:82:56:ef:65:8e:6d:8e:f4:
                    c9:f9:de:72:28:c7:36:9f:bb:be:28:cd:16:ae:58:
                    0d:ae:4b:08:e2:1e:09:c0:08:ad:59:9d:30:e8:19:
                    43:41:9f:81:a1:73:6f:a1:72:34:0c:e3:52:23:d0:
                    99:28:8f:2c:d4:8f:6d:70:12:56:22:d4:90:c7:61:
                    21:33:43:8f:e6:68:66:79:7f:06:5e:ea:64:2e:1e:
                    5b:ab:ae:7a:44:46:e0:9c:e1:13:6d:48:a8:67:08:
                    e9:2d:33:e4:a3:8c:a8:3a:dd:91:35:46:f5:bf:9a:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:44:75:85:A1:F4:B8:80:3B:3E:6B:3A:02:9A:E4:8E:1D:32:1B
            X509v3 Authority Key Identifier:
                keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:42:f6:5c:82:31:92:5c:4a:33:15:f9:72:9e:35:56:2f:a6:
         1b:e5:f9:57:1e:f6:5c:95:0b:91:46:0e:84:da:18:8d:31:1c:
         d5:f4:4e:51:71:92:cf:d9:e8:54:a3:9f:01:f5:a9:45:cf:5f:
         30:15:74:40:72:19:d0:7d:a3:9e:ba:37:ff:d4:7b:0c:d8:af:
         29:c5:69:6d:39:d0:bd:cc:db:9a:32:a1:18:95:7a:fe:4b:c7:
         a3:1e:77:a3:07:64:f7:63:e2:ae:f1:45:fe:84:a4:68:52:c4:
         c5:a4:96:0d:97:8e:16:8d:9f:df:19:10:3a:a7:2a:0e:d4:88:
         9c:17:15:60:30:f8:de:37:5c:d9:00:c1:af:e4:3e:14:7a:41:
         d6:59:01:8d:4e:65:cd:73:5a:eb:41:8e:34:20:9b:fa:8e:7b:
         6c:dd:ba:55:83:bf:9f:cb:0a:20:f3:29:cf:ed:6d:5a:c2:f4:
         e3:68:bd:60:04:59:2b:26:29:0c:0c:f7:fa:ef:0a:2f:ef:0c:
         0d:64:19:fc:0e:90:98:95:02:13:80:fb:57:4e:ae:81:6f:a5:
         dc:85:53:6a:2b:6c:9c:d1:30:72:fe:c8:7b:3f:dd:ad:d6:8c:
         b7:28:c9:d1:11:da:52:b9:6f:e4:63:c7:62:7f:12:b7:7a:e0:
         96:53:38:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE
NDZBNjIyNjEwHhcNMjYwOTIyMTgwNTUyWhcNMjYwOTI5MTgwNTUyWjAYMRYwFAYD
VQQDEw02YWIyYzM4MS0yYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqB7ec5p0SDRQmkXbP0v1Jr+mgtA9qJs8fWvV1XGKvX2Aqy4juUWMuEZq2Tkd
UbiNmFCivXo3ktLa2xDpcXc49AC7vkqwGw5qgFogYhE6DzAT/wz3NnW+EgRHqZJC
+Py94K6A+q01g1BKL+7w7ZHUHfKtkI98g6twFj8OI0DahArbWxRZYMXhC+UrcVCj
glbvZY5tjvTJ+d5yKMc2n7u+KM0WrlgNrksI4h4JwAitWZ0w6BlDQZ+BoXNvoXI0
DONSI9CZKI8s1I9tcBJWItSQx2EhM0OP5mhmeX8GXupkLh5bq656REbgnOETbUio
ZwjpLTPko4yoOt2RNUb1v5oINwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJL4RHWF
ofS4gDs+azoCmuSOHTIbMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2
RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ
T2JKR2Y5WERtbXJVYW1JbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAR0L2XIIxklxKMxX5cp41Vi+mG+X5Vx72XJULkUYOhNoYjTEc1fROUXGSz9no
VKOfAfWpRc9fMBV0QHIZ0H2jnro3/9R7DNivKcVpbTnQvczbmjKhGJV6/kvHox53
owdk92PirvFF/oSkaFLExaSWDZeOFo2f3xkQOqcqDtSInBcVYDD43jdc2QDBr+Q+
FHpB1lkBjU5lzXNa60GONCCb+o57bN26VYO/n8sKIPMpz+1tWsL042i9YARZKyYp
DAz3+u8KL+8MDWQZ/A6QmJUCE4D7V06ugW+l3IVTaitsnNEwcv7Iez/drdaMtyjJ
0RHaUrlv5GPHYn8St3rgllM40w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:42:23 2026 by rpki-client