Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
File:                     CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json)
Hash identifier:          w/D4oZR1LH0sNSB4vD+mPWDByz4nA0X+eqSwyfoda7U=
Subject key identifier:   B9:66:62:2F:7C:CC:2F:ED:85:64:82:1F:3E:A8:11:8C:8C:91:CA:F1
Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27
Certificate issuer:       /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
Certificate serial:       1338
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
Manifest number:          1C1E
Signing time:             Thu 24 Sep 2026 16:58:26 +0000
Manifest this update:     Thu 24 Sep 2026 16:58:26 +0000
Manifest next update:     Thu 01 Oct 2026 16:58:26 +0000
Files and hashes:         1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: UJF8YrjbtpygKITLIUeenRnX+caMaRadXx1Ur2/JmBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl
                          rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4920 (0x1338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127
        Validity
            Not Before: Sep 24 16:58:26 2026 GMT
            Not After : Oct  1 16:58:26 2026 GMT
        Subject: CN=6ab556b2-bbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:8d:66:b3:c9:95:3f:73:64:c3:8e:d2:4f:
                    d2:bd:b5:1e:23:2d:9e:89:0e:72:26:ee:22:64:1b:
                    8e:ab:49:be:02:5d:dc:37:d5:ac:48:56:eb:5b:15:
                    45:67:c4:ba:b8:13:c1:d1:64:0a:81:38:9d:d4:a0:
                    5e:c0:d7:f1:3d:bf:67:5b:7a:43:ab:e4:6e:51:03:
                    0b:16:55:0f:0a:cd:03:35:4b:62:56:2a:b4:23:64:
                    74:c2:67:2c:10:06:99:c1:b3:17:c7:2c:3c:fa:ff:
                    1d:46:fb:22:65:88:bb:52:49:c5:3d:60:8d:d0:27:
                    1b:7a:5e:4e:08:e9:c4:9d:0a:ba:29:91:f1:f1:4d:
                    89:1d:bb:02:5c:51:64:40:02:f8:6a:d2:67:52:c6:
                    bd:81:c1:3a:bd:9f:99:86:8e:b3:a0:b4:d8:db:9e:
                    59:1e:93:79:6b:b6:9f:c9:3f:bc:cd:d6:ff:7d:af:
                    da:28:32:cf:d4:09:c9:c8:6f:70:f1:42:3b:35:95:
                    47:ff:db:80:a2:3b:a7:93:fd:4c:2d:07:61:11:61:
                    71:c9:49:b5:e1:b6:f9:fa:ac:66:b1:3a:37:b2:ac:
                    f7:53:b3:b0:86:cd:d2:93:c1:00:32:f8:79:23:2c:
                    6d:83:ac:99:73:9f:1e:0b:59:ce:62:0f:09:ac:af:
                    22:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:66:62:2F:7C:CC:2F:ED:85:64:82:1F:3E:A8:11:8C:8C:91:CA:F1
            X509v3 Authority Key Identifier:
                keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:56:99:eb:87:27:4e:bf:56:bb:a3:d7:1b:02:e4:80:5d:86:
         b5:22:ee:b0:76:75:d7:21:4f:30:65:ce:94:31:f4:4d:dd:7e:
         a7:c1:2d:8c:a4:fb:b3:41:47:8b:4a:f6:43:43:fe:29:ca:b6:
         64:2a:b0:23:ee:4d:2c:39:bf:9e:1a:86:3d:6f:58:33:bd:25:
         45:3e:93:49:f0:58:76:7d:58:7e:2d:bd:c1:15:83:6b:d4:39:
         fd:45:e5:a0:98:ae:84:26:f5:e0:e5:38:d3:62:88:d9:3c:ab:
         62:62:bf:4f:19:01:46:01:06:69:23:f4:0d:16:8b:37:42:78:
         a9:8a:90:e4:32:78:74:30:e5:b1:f1:91:16:16:92:f2:57:82:
         65:fc:50:ac:f4:e4:48:4c:64:69:96:5e:83:e6:4d:a6:41:57:
         01:5b:9a:c8:67:d2:d0:9c:43:62:a9:74:a9:6d:67:6c:4a:7d:
         34:f4:9a:4c:e4:e1:38:f1:87:e6:f5:4c:0d:83:db:0b:0a:73:
         85:a5:92:36:6d:60:91:09:e8:f0:04:ce:67:59:b9:b3:1e:98:
         f3:49:71:6c:29:7c:65:12:8a:06:54:d9:04:10:54:7e:2b:5b:
         f6:c4:59:02:6f:2a:f0:75:3e:c0:6e:3a:eb:99:95:41:90:53:
         67:95:7d:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG
MkJEQ0UxMjcwHhcNMjYwOTI0MTY1ODI2WhcNMjYxMDAxMTY1ODI2WjAYMRYwFAYD
VQQDEw02YWI1NTZiMi1iYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApG+NZrPJlT9zZMOO0k/SvbUeIy2eiQ5yJu4iZBuOq0m+Al3cN9WsSFbrWxVF
Z8S6uBPB0WQKgTid1KBewNfxPb9nW3pDq+RuUQMLFlUPCs0DNUtiViq0I2R0wmcs
EAaZwbMXxyw8+v8dRvsiZYi7UknFPWCN0Ccbel5OCOnEnQq6KZHx8U2JHbsCXFFk
QAL4atJnUsa9gcE6vZ+Zho6zoLTY255ZHpN5a7afyT+8zdb/fa/aKDLP1AnJyG9w
8UI7NZVH/9uAojunk/1MLQdhEWFxyUm14bb5+qxmsTo3sqz3U7Owhs3Sk8EAMvh5
Iyxtg6yZc58eC1nOYg8JrK8ikQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLlmYi98
zC/thWSCHz6oEYyMkcrxMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB
NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl
WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB1aZ64cnTr9Wu6PXGwLkgF2GtSLusHZ11yFPMGXOlDH0Td1+p8EtjKT7s0FH
i0r2Q0P+Kcq2ZCqwI+5NLDm/nhqGPW9YM70lRT6TSfBYdn1Yfi29wRWDa9Q5/UXl
oJiuhCb14OU402KI2TyrYmK/TxkBRgEGaSP0DRaLN0J4qYqQ5DJ4dDDlsfGRFhaS
8leCZfxQrPTkSExkaZZeg+ZNpkFXAVuayGfS0JxDYql0qW1nbEp9NPSaTOThOPGH
5vVMDYPbCwpzhaWSNm1gkQno8ATOZ1m5sx6Y80lxbCl8ZRKKBlTZBBBUfitb9sRZ
Am8q8HU+wG4665mVQZBTZ5V9UA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:30:22 2026 by rpki-client