Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
File:                     -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json)
Hash identifier:          ISyelDywL81hjipk7Ixuk0JSEdJdJJKVyY5PUGss0/s=
Subject key identifier:   13:22:1B:B6:97:B7:E5:30:7A:65:DF:1F:0B:EE:38:64:4E:B0:C0:A0
Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B
Certificate issuer:       /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
Certificate serial:       022C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
Manifest number:          0226
Signing time:             Mon 21 Sep 2026 02:49:24 +0000
Manifest this update:     Mon 21 Sep 2026 02:49:23 +0000
Manifest next update:     Mon 28 Sep 2026 02:49:23 +0000
Files and hashes:         1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: I9VhfZaj8QzmMvMAPXF81TCWdv7i5Bzs/+Pp57kwl4A=)
                          2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: 6elmUBo2LCLHNVffzDRSvobuzp7VmAli5Sb5KYW9bm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl
                          rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B
        Validity
            Not Before: Sep 21 02:49:23 2026 GMT
            Not After : Sep 28 02:49:23 2026 GMT
        Subject: CN=6ab09b34-7a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:e8:ed:aa:7f:e1:3d:78:7d:5d:ba:df:99:
                    0f:ff:bc:58:0e:9b:b1:a5:3d:fa:5f:ac:d5:c8:e1:
                    3d:d0:98:64:1a:55:d5:2e:cd:05:91:2f:72:5b:62:
                    4b:3f:60:8e:5a:f6:c7:28:c7:38:3a:97:fd:c5:0a:
                    c0:be:b4:08:e5:ca:59:ce:30:e4:79:7e:ce:2a:7e:
                    ca:8a:a6:a6:54:74:5b:18:3d:4d:e7:8f:59:33:62:
                    21:7b:4a:4e:03:d9:78:70:18:df:29:d7:d8:ef:d8:
                    e5:07:52:75:14:d8:35:e6:d6:ee:46:d5:4a:77:91:
                    0f:2d:22:15:55:e7:4d:f8:2a:b2:bf:ba:f3:12:34:
                    a8:a5:e8:eb:fd:b1:0a:a3:55:83:2b:c5:f5:c0:84:
                    0f:87:4f:31:82:2e:ea:39:55:41:cf:83:30:5c:4f:
                    7e:d6:ea:15:2c:2f:d3:b3:be:37:19:ab:6c:dd:e4:
                    3e:83:3e:48:ad:20:7a:f0:e4:d8:0f:fb:e8:d7:ca:
                    30:0d:e6:a2:3b:6d:29:ba:08:82:80:8d:bd:cf:6b:
                    75:7a:8c:c5:ed:f7:f5:b4:98:a8:0f:dc:3b:0f:d8:
                    d5:12:c0:f9:d1:b0:f2:3c:cf:9e:51:ca:b9:25:c5:
                    57:36:e8:38:36:8d:d0:dd:42:4f:1b:75:8e:c8:da:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:22:1B:B6:97:B7:E5:30:7A:65:DF:1F:0B:EE:38:64:4E:B0:C0:A0
            X509v3 Authority Key Identifier:
                keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0a:39:c0:36:7f:11:30:f2:29:47:3d:ef:bd:e4:5a:b6:9b:
         75:15:20:41:c3:ba:46:5c:fa:9b:7a:cc:ec:3f:d6:a9:88:25:
         03:53:5f:53:18:70:4a:21:dd:06:df:2b:ca:0a:a4:fe:73:ac:
         bc:28:59:2c:c7:06:f3:74:01:1e:8a:40:5d:c9:6a:18:02:f4:
         cb:fd:13:61:f6:40:17:65:aa:36:aa:ee:b1:39:35:6f:e6:12:
         2a:6a:5b:6e:a5:2a:54:99:1e:66:be:d3:26:df:91:8d:c2:d5:
         67:ee:48:da:c2:92:6c:0d:b9:28:b2:17:84:d8:b2:3b:40:ae:
         e4:c8:07:f5:fa:6e:d7:d6:87:85:c7:ac:0f:dd:90:dc:a5:0c:
         97:33:5a:78:f6:94:61:32:4d:f7:35:e4:26:d2:17:2a:b2:e7:
         cc:52:37:31:cb:bf:83:3f:99:af:3f:59:80:66:ce:a9:76:1f:
         e8:6b:4b:be:23:59:f5:d3:89:8f:46:c4:b9:53:94:73:7e:c8:
         dd:a8:02:b3:11:3b:32:aa:85:98:9b:42:a2:22:67:9d:1a:89:
         21:96:07:ed:09:4c:22:53:09:fd:6b:37:c8:31:3e:d7:30:53:
         14:f1:2f:40:1d:67:37:d9:6e:cc:cd:23:a5:2e:f8:c7:42:fe:
         00:e0:d9:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy
MTFEOUREMkIwHhcNMjYwOTIxMDI0OTIzWhcNMjYwOTI4MDI0OTIzWjAYMRYwFAYD
VQQDEw02YWIwOWIzNC03YTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAthzo7ap/4T14fV2635kP/7xYDpuxpT36X6zVyOE90JhkGlXVLs0FkS9yW2JL
P2COWvbHKMc4Opf9xQrAvrQI5cpZzjDkeX7OKn7KiqamVHRbGD1N549ZM2Ihe0pO
A9l4cBjfKdfY79jlB1J1FNg15tbuRtVKd5EPLSIVVedN+Cqyv7rzEjSopejr/bEK
o1WDK8X1wIQPh08xgi7qOVVBz4MwXE9+1uoVLC/Ts743Gats3eQ+gz5IrSB68OTY
D/vo18owDeaiO20pugiCgI29z2t1eozF7ff1tJioD9w7D9jVEsD50bDyPM+eUcq5
JcVXNug4No3Q3UJPG3WOyNqCzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBMiG7aX
t+UwemXfHwvuOGROsMCgMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG
NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh
QnN5UWZFN1FTOW9oSFozU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKQo5wDZ/ETDyKUc9773kWrabdRUgQcO6Rlz6m3rM7D/WqYglA1NfUxhwSiHd
Bt8rygqk/nOsvChZLMcG83QBHopAXclqGAL0y/0TYfZAF2WqNqrusTk1b+YSKmpb
bqUqVJkeZr7TJt+RjcLVZ+5I2sKSbA25KLIXhNiyO0Cu5MgH9fpu19aHhcesD92Q
3KUMlzNaePaUYTJN9zXkJtIXKrLnzFI3Mcu/gz+Zrz9ZgGbOqXYf6GtLviNZ9dOJ
j0bEuVOUc37I3agCsxE7MqqFmJtCoiJnnRqJIZYH7QlMIlMJ/Ws3yDE+1zBTFPEv
QB1nN9luzM0jpS74x0L+AODZrw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:50:48 2026 by rpki-client