Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
File:                     8cgPvdVMGAKQLIXOmQoRLtMLX18.mft (raw, json)
Hash identifier:          /MdGQKaHCH/sAMgj7LAVzXp9lcfrjVgUyxG1XnApvYI=
Subject key identifier:   46:D9:2F:72:7A:C0:1A:30:BF:93:7B:39:28:38:64:3F:60:6A:92:91
Authority key identifier: F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
Certificate issuer:       /CN=A915AC36/serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
Manifest number:          9C
Signing time:             Wed 23 Sep 2026 07:07:04 +0000
Manifest this update:     Wed 23 Sep 2026 07:07:03 +0000
Manifest next update:     Wed 30 Sep 2026 07:07:03 +0000
Files and hashes:         1: 8cgPvdVMGAKQLIXOmQoRLtMLX18.crl (hash: WTQAwVteBUsS/NR/c7w5ipmwdqO07LN2qXVy+AuDEM4=)
                          2: 4E7FF5F8CF4011F093323D50C4F9AE02.roa (hash: tKUyqADQNHpmGouxD/J8Dml9YhqA+hcHH8c4dolMR/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
                          rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AC36, serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
        Validity
            Not Before: Sep 23 07:07:03 2026 GMT
            Not After : Sep 30 07:07:03 2026 GMT
        Subject: CN=6ab37a98-cb12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:98:4e:a3:eb:88:21:7c:75:be:13:ee:a7:
                    9a:6d:62:dd:37:ba:c7:02:fb:1b:b3:b0:73:c5:60:
                    e8:68:f8:37:b8:59:23:38:7f:bb:9a:60:06:7b:0f:
                    98:32:e8:55:0c:c3:0a:ea:d5:23:8f:60:90:d7:c5:
                    48:3b:45:f6:3a:23:30:91:8f:50:c1:d3:88:23:80:
                    1b:b2:c0:fb:a4:b3:b4:1b:74:27:d1:5d:4b:fb:ce:
                    70:cf:af:6c:18:f8:2c:20:ca:be:11:47:c6:82:9c:
                    a6:6f:72:c9:c6:f9:1b:dd:e2:a1:0c:9a:32:62:d7:
                    3d:6e:90:be:0d:a6:6b:aa:2b:e1:b1:63:37:a7:53:
                    a7:72:82:6a:41:1b:80:95:a3:fa:2b:9d:df:38:2d:
                    af:97:0b:33:b8:9c:14:00:87:f8:34:15:3e:f7:e7:
                    5a:54:f7:86:24:92:b6:4e:62:c7:a9:e6:bf:bd:a3:
                    29:e6:72:28:dd:4d:8e:6b:77:d9:fe:ea:6b:cb:99:
                    4d:f1:92:69:3c:80:db:a0:25:6e:23:e9:12:fe:32:
                    5c:1b:0a:1a:ff:45:a8:af:98:80:21:46:a5:89:15:
                    7a:d4:17:5d:a5:49:c2:b0:9f:9e:d4:30:86:9a:b7:
                    d0:27:26:37:4a:87:f9:f8:af:74:80:82:b9:1c:54:
                    35:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D9:2F:72:7A:C0:1A:30:BF:93:7B:39:28:38:64:3F:60:6A:92:91
            X509v3 Authority Key Identifier:
                keyid:F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:fb:96:a3:7e:d1:30:c2:a7:a5:16:a4:d9:40:3c:6a:59:
         55:c8:e2:dc:d5:86:2e:4f:43:cd:2d:5a:13:87:52:2c:13:4f:
         23:56:7f:74:3e:24:61:83:ba:f9:41:f2:96:1e:fa:98:e6:8d:
         d4:cb:4b:47:09:8b:17:57:88:51:be:a0:3a:9c:4f:42:7e:83:
         c9:b6:3e:9d:e8:45:51:a9:4d:e7:35:20:79:0a:63:bc:3b:89:
         5f:cd:0a:b3:b7:2d:8f:8c:71:5b:5c:57:8f:b2:35:9a:3b:ab:
         be:c8:c9:d8:17:9f:ba:af:cc:d6:20:22:f5:ae:59:14:90:68:
         e0:5e:2c:1a:ef:f9:ef:7d:16:39:b2:4b:6b:0a:28:bd:4a:4d:
         f2:80:1e:34:ff:53:55:dd:f4:81:b0:22:36:61:19:14:9e:4d:
         db:ab:c3:3a:73:6d:fb:70:f0:59:a6:27:a5:73:09:c1:82:32:
         01:c7:f3:ed:1e:5d:f1:92:4d:4e:f9:5a:9c:5f:bc:16:89:a6:
         82:c8:d8:0d:d9:61:48:0a:ed:46:fa:a5:89:aa:61:bd:5a:7b:
         5d:da:ad:73:b1:c0:99:a1:91:e5:c3:d2:04:96:d6:fc:89:75:
         a7:20:72:87:d5:3e:2c:fa:d9:59:83:ed:c6:2b:6c:c3:0f:39:
         66:81:82:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFDMzYxMTAvBgNVBAUTKEYxQzgwRkJERDU0QzE4MDI5MDJDODVDRTk5MEExMTJF
RDMwQjVGNUYwHhcNMjYwOTIzMDcwNzAzWhcNMjYwOTMwMDcwNzAzWjAYMRYwFAYD
VQQDEw02YWIzN2E5OC1jYjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0SKYTqPriCF8db4T7qeabWLdN7rHAvsbs7BzxWDoaPg3uFkjOH+7mmAGew+Y
MuhVDMMK6tUjj2CQ18VIO0X2OiMwkY9QwdOII4AbssD7pLO0G3Qn0V1L+85wz69s
GPgsIMq+EUfGgpymb3LJxvkb3eKhDJoyYtc9bpC+DaZrqivhsWM3p1OncoJqQRuA
laP6K53fOC2vlwszuJwUAIf4NBU+9+daVPeGJJK2TmLHqea/vaMp5nIo3U2Oa3fZ
/upry5lN8ZJpPIDboCVuI+kS/jJcGwoa/0Wor5iAIUaliRV61BddpUnCsJ+e1DCG
mrfQJyY3Sof5+K90gIK5HFQ1gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbZL3J6
wBowv5N7OSg4ZD9gapKRMB8GA1UdIwQYMBaAFPHID73VTBgCkCyFzpkKES7TC19f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUMzNi9FNDIyQTk5OEND
MUIxMUYwQjkzRDhGMkNDNEY5QUUwMi84Y2dQdmRWTUdBS1FMSVhPbVFvUkx0TUxY
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhjZ1B2ZFZNR0FLUUxJWE9tUW9STHRNTFgxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QUMzNi9FNDIyQTk5OENDMUIxMUYwQjkzRDhGMkNDNEY5QUUwMi84Y2dQdmRWTUdB
S1FMSVhPbVFvUkx0TUxYMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOpf7lqN+0TDCp6UWpNlAPGpZVcji3NWGLk9DzS1aE4dSLBNPI1Z/dD4kYYO6
+UHylh76mOaN1MtLRwmLF1eIUb6gOpxPQn6DybY+nehFUalN5zUgeQpjvDuJX80K
s7ctj4xxW1xXj7I1mjurvsjJ2Befuq/M1iAi9a5ZFJBo4F4sGu/5730WObJLawoo
vUpN8oAeNP9TVd30gbAiNmEZFJ5N26vDOnNt+3DwWaYnpXMJwYIyAcfz7R5d8ZJN
TvlanF+8FommgsjYDdlhSArtRvqliaphvVp7Xdqtc7HAmaGR5cPSBJbW/Il1pyBy
h9U+LPrZWYPtxitsww85ZoGCNQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:36:39 2026 by rpki-client