Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File:                     D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier:          85WJBur2CUvhWS9huiICF8aVmWdcN2l1ArIDd/4V404=
Subject key identifier:   C2:87:9B:83:D3:AB:16:F1:82:83:EB:C0:5D:D6:2B:BC:3C:FA:4D:30
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0D33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number:          0D0E
Signing time:             Thu 24 Sep 2026 18:21:20 +0000
Manifest this update:     Thu 24 Sep 2026 18:21:20 +0000
Manifest next update:     Thu 01 Oct 2026 18:21:20 +0000
Files and hashes:         1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: p1jm0qs5S5L99uJRzPxIQwRTCV9GNdS1WSVhfViVVYA=)
                          2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: p394FBhliDkNgoB99ryNw/y0SY40oLYwgw+ljbC9OLc=)
                          3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: ZfQ6vCvmZcjNcIncHT507Vz1iEI/7E5CygjpXRzzNSI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3379 (0xd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Sep 24 18:21:20 2026 GMT
            Not After : Oct  1 18:21:20 2026 GMT
        Subject: CN=6ab56a20-0018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:bf:a5:fb:c4:d5:47:00:6f:9b:57:a4:a7:
                    97:68:be:26:da:f6:10:87:8f:79:be:68:05:1f:4a:
                    1c:bb:9a:27:75:1a:d9:04:87:04:bb:da:7b:ae:84:
                    b5:40:13:d1:5b:1e:48:35:45:96:a2:ca:ce:33:bb:
                    d7:88:b0:fb:aa:95:3d:8c:bd:e0:95:1c:54:d7:a7:
                    e1:6a:a9:88:65:75:1e:96:8c:63:ae:28:5d:32:a5:
                    80:3a:58:11:09:72:3e:65:c4:17:fc:85:3d:23:8b:
                    bf:1b:11:63:fb:90:b5:76:43:30:9b:cf:fa:fe:e2:
                    29:51:53:e4:59:ba:e0:a9:10:3d:20:ab:ee:a9:ee:
                    b0:b8:eb:d7:2a:0c:f7:2c:69:dd:a3:b2:b0:83:7e:
                    d1:c8:4d:97:04:3b:47:ed:fc:c3:72:1e:b1:5f:3a:
                    80:60:78:f4:a4:78:00:bf:ad:9e:bf:93:c1:44:a3:
                    a7:c1:07:e1:32:5f:76:1d:35:d7:da:40:21:c6:b6:
                    c4:3f:2c:0a:3a:4b:48:0a:04:b4:c6:f5:28:69:5b:
                    80:8a:17:ca:87:cf:be:24:f1:57:d1:6c:1f:97:8c:
                    00:c0:d3:d5:e1:39:9f:91:a0:e3:4f:86:40:95:2d:
                    d7:a4:19:2d:ba:96:4f:b5:67:56:75:07:61:59:1c:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:87:9B:83:D3:AB:16:F1:82:83:EB:C0:5D:D6:2B:BC:3C:FA:4D:30
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:12:30:75:01:72:0a:46:c7:71:66:bd:07:93:51:c0:6c:8f:
         1f:c8:d5:a1:14:1a:b2:f6:59:18:a9:08:01:06:4c:4d:26:a7:
         66:be:47:69:30:e6:83:9b:f1:28:b4:2b:3d:94:7c:e3:42:28:
         d7:53:c0:d0:d5:ad:ba:d9:2f:ea:5a:49:84:37:07:98:6a:ee:
         21:7f:2c:64:48:da:f7:9f:b3:ce:bc:1e:a1:b6:a5:bc:da:cb:
         77:44:56:ee:65:5d:5a:15:cb:06:ae:14:9f:fe:0c:4e:22:82:
         15:35:28:52:ca:c3:bf:27:96:be:2e:47:aa:34:d0:6b:ef:28:
         c7:5c:17:44:27:80:7e:38:02:bf:e6:42:0a:0c:4a:23:cc:3d:
         c1:0f:4d:d4:92:3a:09:4b:3d:eb:c6:67:01:e3:cc:31:a0:a2:
         69:6b:50:6b:33:8c:73:77:b0:4b:78:8e:f8:b2:90:9b:a6:1b:
         86:bb:94:1f:cb:cb:54:36:48:ab:51:f4:b2:b4:fa:9d:e9:ca:
         b8:90:88:00:c8:2d:0b:bc:fe:26:12:57:ab:13:30:73:0a:51:
         b8:ea:73:32:95:0c:4d:16:fc:08:ee:72:17:3c:f6:2d:7d:0a:
         ac:12:32:6b:ea:2b:4a:1e:e3:45:77:fc:50:e4:a0:c3:4c:b0:
         29:cb:a4:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0NTUxMTAvBgNVBAUTKDBGQTlFNTMzRTg1QTE4M0MxNDUzMDAwOEE4Qjk2MjNG
ODU2RDVERUIwHhcNMjYwOTI0MTgyMTIwWhcNMjYxMDAxMTgyMTIwWjAYMRYwFAYD
VQQDEw02YWI1NmEyMC0wMDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtDu/pfvE1UcAb5tXpKeXaL4m2vYQh495vmgFH0ocu5ondRrZBIcEu9p7roS1
QBPRWx5INUWWosrOM7vXiLD7qpU9jL3glRxU16fhaqmIZXUeloxjrihdMqWAOlgR
CXI+ZcQX/IU9I4u/GxFj+5C1dkMwm8/6/uIpUVPkWbrgqRA9IKvuqe6wuOvXKgz3
LGndo7Kwg37RyE2XBDtH7fzDch6xXzqAYHj0pHgAv62ev5PBRKOnwQfhMl92HTXX
2kAhxrbEPywKOktICgS0xvUoaVuAihfKh8++JPFX0Wwfl4wAwNPV4TmfkaDjT4ZA
lS3XpBktupZPtWdWdQdhWRxWRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKHm4PT
qxbxgoPrwF3WK7w8+k0wMB8GA1UdIwQYMBaAFA+p5TPoWhg8FFMACKi5Yj+FbV3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQ1NS9BNTVFNEY5NjEx
RjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdEd1VVd0FJcUxsaVA0VnRY
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q2bmxNLWhhR0R3VVV3QUlxTGxpUDRWdFhlcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDQ1NS9BNTVFNEY5NjExRjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdE
d1VVd0FJcUxsaVA0VnRYZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAohIwdQFyCkbHcWa9B5NRwGyPH8jVoRQasvZZGKkIAQZMTSanZr5HaTDmg5vx
KLQrPZR840Io11PA0NWtutkv6lpJhDcHmGruIX8sZEja95+zzrweobalvNrLd0RW
7mVdWhXLBq4Un/4MTiKCFTUoUsrDvyeWvi5HqjTQa+8ox1wXRCeAfjgCv+ZCCgxK
I8w9wQ9N1JI6CUs968ZnAePMMaCiaWtQazOMc3ewS3iO+LKQm6YbhruUH8vLVDZI
q1H0srT6nenKuJCIAMgtC7z+JhJXqxMwcwpRuOpzMpUMTRb8CO5yFzz2LX0KrBIy
a+orSh7jRXf8UOSgw0ywKcukrw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:53:27 2026 by rpki-client