Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
File:                     7Ubg2mfUm_C8p7L9IOxIu86EepE.mft (raw, json)
Hash identifier:          Bc4k0vfBDLuvt26LjM2w7Y6mxh8QL6WvhohltRh7kvk=
Subject key identifier:   BB:A6:46:77:AC:09:02:3D:D4:B5:52:46:21:CC:BC:4B:0D:24:A3:D1
Authority key identifier: ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91
Certificate issuer:       /CN=A915E38A/serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
Certificate serial:       A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
Manifest number:          A8
Signing time:             Fri 25 Sep 2026 07:17:50 +0000
Manifest this update:     Fri 25 Sep 2026 07:17:50 +0000
Manifest next update:     Fri 02 Oct 2026 07:17:50 +0000
Files and hashes:         1: 7Ubg2mfUm_C8p7L9IOxIu86EepE.crl (hash: iI92RFDXSdj+BcKREXB+ghI4Ys7Um9BbeizLTMAFXVo=)
                          2: E2D6A7984F5F11F190C0BD46C4833773.roa (hash: DhEdJPW687P63CLaNT2Mz9aPqiwDP3BG1Z3glFSiYO8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl
                          rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E38A, serialNumber=ED46E0DA67D49BF0BCA7B2FD20EC48BBCE847A91
        Validity
            Not Before: Sep 25 07:17:50 2026 GMT
            Not After : Oct  2 07:17:50 2026 GMT
        Subject: CN=6ab6201e-affb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:12:aa:c1:f9:b9:78:1a:29:2f:4b:6f:03:
                    e4:31:5b:ca:25:a5:29:07:19:d4:d2:8d:6f:cc:77:
                    93:da:f0:32:fd:94:77:70:19:b4:03:14:d5:0c:16:
                    2c:d0:f6:0e:f6:91:06:ae:29:d3:4f:0d:01:34:86:
                    33:74:eb:63:f7:3e:e2:cc:0b:95:d3:23:06:31:e7:
                    ee:45:53:f7:ac:53:e7:e0:63:32:3b:bb:13:0a:49:
                    8f:df:8d:f1:bc:17:68:67:65:3f:9e:85:53:5d:76:
                    39:47:d0:d8:2a:13:bf:80:02:12:d6:36:fb:51:d2:
                    28:7e:25:1f:90:a7:ed:3a:99:71:1c:91:71:e3:e4:
                    f8:a8:b3:b1:f2:f4:2d:2a:4d:45:a9:3a:0d:b8:2e:
                    71:6d:c2:4b:df:26:5f:bf:bd:f0:9c:ab:e2:d5:00:
                    63:f4:2c:80:24:16:de:53:ba:d4:0c:dd:95:0a:9f:
                    18:f3:fe:09:97:e7:ef:20:8e:36:13:62:5f:e2:68:
                    6f:cf:87:21:52:11:8d:0b:fd:6f:03:87:69:56:f4:
                    bb:a7:20:c7:cd:c4:c7:e7:b0:e9:8f:bf:12:aa:8a:
                    9f:b6:2f:b2:fe:ac:c7:b4:f6:22:0a:60:f4:29:bc:
                    94:93:fa:cd:a0:a2:dd:f1:98:6b:f3:bc:0d:4d:a1:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A6:46:77:AC:09:02:3D:D4:B5:52:46:21:CC:BC:4B:0D:24:A3:D1
            X509v3 Authority Key Identifier:
                keyid:ED:46:E0:DA:67:D4:9B:F0:BC:A7:B2:FD:20:EC:48:BB:CE:84:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ubg2mfUm_C8p7L9IOxIu86EepE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/9BCEEC3CBFC911F097EE5619C4F9AE02/7Ubg2mfUm_C8p7L9IOxIu86EepE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e7:07:03:4f:0b:b7:03:50:61:29:f0:92:b7:6d:d4:9e:7f:
         52:a8:5b:0b:3e:c0:16:87:02:35:1d:60:9f:6c:d3:eb:45:39:
         24:b7:16:6d:13:6b:6e:08:57:c4:48:4c:28:28:9f:3e:ac:2b:
         4c:83:32:2d:71:4e:16:00:6e:d5:2c:7f:76:31:0a:66:bf:94:
         ab:2b:81:e7:8a:10:78:e3:f3:ff:0e:ca:eb:70:c0:6d:c7:1d:
         c6:27:ef:5b:59:fe:c2:c5:92:76:4d:6a:9a:37:72:ac:d2:b7:
         b4:c8:03:2d:c9:b1:b8:33:e3:d8:da:a9:67:bf:c4:a4:e7:7d:
         26:6a:9a:a1:75:95:85:3d:f2:ec:71:05:88:22:2b:1b:3c:f2:
         bd:09:71:af:da:4c:99:f9:ed:2f:21:cf:b3:79:f5:38:17:34:
         f4:7b:c2:af:88:33:9a:9d:03:79:f6:87:9d:e9:9f:bb:3e:e5:
         1c:94:71:c1:ca:ba:40:5d:a6:02:22:58:9b:f6:1a:73:94:86:
         06:5e:95:8a:0d:1c:7a:a4:7e:1c:38:1b:1a:33:ed:78:ca:e4:
         7e:dd:63:00:8f:b8:62:e3:02:3f:a1:f1:77:ed:e4:5b:9d:19:
         31:5c:8e:f8:8c:92:8c:d2:a2:9f:b7:5b:e0:27:c6:46:a0:6b:
         08:02:58:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUzOEExMTAvBgNVBAUTKEVENDZFMERBNjdENDlCRjBCQ0E3QjJGRDIwRUM0OEJC
Q0U4NDdBOTEwHhcNMjYwOTI1MDcxNzUwWhcNMjYxMDAyMDcxNzUwWjAYMRYwFAYD
VQQDEw02YWI2MjAxZS1hZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtm8SqsH5uXgaKS9LbwPkMVvKJaUpBxnU0o1vzHeT2vAy/ZR3cBm0AxTVDBYs
0PYO9pEGrinTTw0BNIYzdOtj9z7izAuV0yMGMefuRVP3rFPn4GMyO7sTCkmP343x
vBdoZ2U/noVTXXY5R9DYKhO/gAIS1jb7UdIofiUfkKftOplxHJFx4+T4qLOx8vQt
Kk1FqToNuC5xbcJL3yZfv73wnKvi1QBj9CyAJBbeU7rUDN2VCp8Y8/4Jl+fvII42
E2Jf4mhvz4chUhGNC/1vA4dpVvS7pyDHzcTH57Dpj78Sqoqfti+y/qzHtPYiCmD0
KbyUk/rNoKLd8Zhr87wNTaF+DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLumRnes
CQI91LVSRiHMvEsNJKPRMB8GA1UdIwQYMBaAFO1G4Npn1JvwvKey/SDsSLvOhHqR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTM4QS85QkNFRUMzQ0JG
QzkxMUYwOTdFRTU2MTlDNEY5QUUwMi83VWJnMm1mVW1fQzhwN0w5SU94SXU4NkVl
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdVYmcybWZVbV9DOHA3TDlJT3hJdTg2RWVwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTM4QS85QkNFRUMzQ0JGQzkxMUYwOTdFRTU2MTlDNEY5QUUwMi83VWJnMm1mVW1f
QzhwN0w5SU94SXU4NkVlcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPOcHA08LtwNQYSnwkrdt1J5/UqhbCz7AFocCNR1gn2zT60U5JLcWbRNrbghX
xEhMKCifPqwrTIMyLXFOFgBu1Sx/djEKZr+UqyuB54oQeOPz/w7K63DAbccdxifv
W1n+wsWSdk1qmjdyrNK3tMgDLcmxuDPj2NqpZ7/EpOd9JmqaoXWVhT3y7HEFiCIr
GzzyvQlxr9pMmfntLyHPs3n1OBc09HvCr4gzmp0DefaHnemfuz7lHJRxwcq6QF2m
AiJYm/Yac5SGBl6Vig0ceqR+HDgbGjPteMrkft1jAI+4YuMCP6Hxd+3kW50ZMVyO
+IySjNKin7db4CfGRqBrCAJYrA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:54:41 2026 by rpki-client