Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
File:                     rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json)
Hash identifier:          TSdMXlv2VU3z2rt7TFtaP6ggFjVanhWbBU5rpkSBD+o=
Subject key identifier:   71:35:D6:F9:FE:0A:22:71:0D:96:A5:C5:E2:76:7C:92:20:4E:E7:FB
Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
Certificate issuer:       /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
Manifest number:          0162
Signing time:             Sun 27 Sep 2026 05:27:06 +0000
Manifest this update:     Sun 27 Sep 2026 05:27:06 +0000
Manifest next update:     Sun 04 Oct 2026 05:27:06 +0000
Files and hashes:         1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: 6Y+d5FAx3XMpu3AlMCffw6rC5sN4ZSYeQzD5URQbvis=)
                          2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: Hu4k/NqzAGOhZjU80rFAqOtaPO4XcnFZGlunYG4Pvw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
                          rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
        Validity
            Not Before: Sep 27 05:27:06 2026 GMT
            Not After : Oct  4 05:27:06 2026 GMT
        Subject: CN=6ab8a92a-f920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:36:5a:c6:9c:d2:eb:76:db:10:7c:9d:01:
                    ec:da:85:b1:4f:2c:da:58:fa:f1:a2:c6:e7:69:c2:
                    b0:57:d4:c1:e4:71:2e:af:ad:66:44:63:d4:57:5d:
                    62:56:f9:62:4f:ff:e7:87:0e:1f:5a:a3:4b:64:e2:
                    1a:4f:66:82:75:a3:e1:a1:98:d3:26:9a:52:6e:e2:
                    ca:1c:ce:fe:ed:18:d8:d6:cc:57:e8:f3:70:78:7b:
                    85:26:e6:e1:c5:b5:16:e1:71:77:ee:03:91:13:2b:
                    0c:f6:fa:c8:7c:54:e0:38:19:2e:6d:74:99:5f:f8:
                    5f:7e:78:c9:53:84:43:b9:d0:33:b0:69:56:d6:39:
                    e3:37:04:9c:e0:d6:5c:d0:3e:bf:4c:b6:fd:5d:2d:
                    bb:a6:49:3b:97:bd:f5:5f:56:d0:75:e6:0e:ba:83:
                    db:33:11:46:90:76:01:a7:c4:26:17:d1:68:42:8d:
                    1c:e5:f8:24:4e:dc:8c:e2:99:c9:08:0f:2c:07:e5:
                    a0:28:47:78:e2:2f:32:4c:3b:ff:c9:21:3c:39:ab:
                    94:4d:97:07:80:18:42:1e:1a:49:a4:44:e5:fd:b5:
                    57:e7:3e:40:5f:ad:4d:50:8e:2c:59:ac:34:38:09:
                    44:9e:c3:c8:d7:2c:17:ea:a9:e2:d3:cf:61:dc:8f:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:D6:F9:FE:0A:22:71:0D:96:A5:C5:E2:76:7C:92:20:4E:E7:FB
            X509v3 Authority Key Identifier:
                keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:c9:d3:cc:bf:a8:99:54:8d:ee:d8:30:1e:df:9a:fe:11:
         f3:33:e5:73:57:b5:f1:c4:e5:56:80:3d:f5:fc:61:ad:5b:09:
         06:2c:b3:d0:ce:21:fa:ab:d1:54:14:c9:39:4f:9e:94:46:df:
         eb:6f:ad:cd:6d:af:08:9d:4d:af:25:11:2f:d0:7c:11:2d:b5:
         59:06:8e:df:43:17:a9:4a:e0:c5:b4:2d:16:5e:22:af:7f:8f:
         b1:ef:5c:64:bd:ff:6d:51:c3:56:94:38:08:72:6f:37:b1:65:
         79:a4:1a:bd:2e:10:11:a1:b5:04:ed:0e:ea:02:5e:cb:b4:35:
         62:31:6d:bb:c9:80:0f:01:51:b8:d7:52:7c:8e:b4:3b:cd:87:
         49:e2:16:31:98:73:07:42:27:7e:28:a0:60:a0:ed:2e:68:a2:
         79:d1:27:b7:39:ef:46:9f:d7:77:a7:14:f4:45:de:0c:fe:26:
         a3:c3:52:16:08:ad:64:0f:85:29:fd:d2:8a:f0:0a:7d:4a:13:
         97:e6:4a:9c:3c:88:25:7b:c3:8c:5d:37:da:e4:2f:19:9b:51:
         44:31:16:f0:44:86:12:12:93:3f:81:ad:cc:9c:7e:8c:42:38:
         f0:62:94:57:9a:47:2d:1b:dc:a6:cf:f5:9f:35:b6:25:88:22:
         cd:db:f0:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVBNDYxMTAvBgNVBAUTKEFDMjhEQzJBNTU0QjRFMzM5QTM5OUM5NjQyQjRDRTAy
NjhBOERGQjAwHhcNMjYwOTI3MDUyNzA2WhcNMjYxMDA0MDUyNzA2WjAYMRYwFAYD
VQQDEw02YWI4YTkyYS1mOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp242Wsac0ut22xB8nQHs2oWxTyzaWPrxosbnacKwV9TB5HEur61mRGPUV11i
VvliT//nhw4fWqNLZOIaT2aCdaPhoZjTJppSbuLKHM7+7RjY1sxX6PNweHuFJubh
xbUW4XF37gOREysM9vrIfFTgOBkubXSZX/hffnjJU4RDudAzsGlW1jnjNwSc4NZc
0D6/TLb9XS27pkk7l731X1bQdeYOuoPbMxFGkHYBp8QmF9FoQo0c5fgkTtyM4pnJ
CA8sB+WgKEd44i8yTDv/ySE8OauUTZcHgBhCHhpJpETl/bVX5z5AX61NUI4sWaw0
OAlEnsPI1ywX6qni089h3I+icwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHE11vn+
CiJxDZalxeJ2fJIgTuf7MB8GA1UdIwQYMBaAFKwo3CpVS04zmjmclkK0zgJoqN+w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9EQkRBMkNDNDlD
MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRqT2FPWnlXUXJUT0FtaW8z
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUE0Ni9EQkRBMkNDNDlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRq
T2FPWnlXUXJUT0FtaW8zN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnJDJ08y/qJlUje7YMB7fmv4R8zPlc1e18cTlVoA99fxhrVsJBiyz0M4h+qvR
VBTJOU+elEbf62+tzW2vCJ1NryURL9B8ES21WQaO30MXqUrgxbQtFl4ir3+Pse9c
ZL3/bVHDVpQ4CHJvN7FleaQavS4QEaG1BO0O6gJey7Q1YjFtu8mADwFRuNdSfI60
O82HSeIWMZhzB0InfiigYKDtLmiiedEntznvRp/Xd6cU9EXeDP4mo8NSFgitZA+F
Kf3SivAKfUoTl+ZKnDyIJXvDjF032uQvGZtRRDEW8ESGEhKTP4GtzJx+jEI48GKU
V5pHLRvcps/1nzW2JYgizdvweg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:27:09 2026 by rpki-client