Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
File:                     7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json)
Hash identifier:          k31mSYYsyVYQG+J1gG/3RlIQT1VezfY+3LP/XGvd/AU=
Subject key identifier:   4E:C1:68:4A:C7:E4:88:F6:05:5C:12:62:BA:65:43:E8:08:13:6B:51
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Certificate issuer:       /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
Manifest number:          01C1
Signing time:             Wed 23 Sep 2026 03:45:02 +0000
Manifest this update:     Wed 23 Sep 2026 03:45:01 +0000
Manifest next update:     Wed 30 Sep 2026 03:45:01 +0000
Files and hashes:         1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: nA4iPc4x4+7Qig8/VHljIfIM+PSnnw/gkISJDtgT6sU=)
                          2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: yK/WcBJQdA4buA3EZ+0KrWMfv9XG+NNlOPVNviCvGZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
                          rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
        Validity
            Not Before: Sep 23 03:45:01 2026 GMT
            Not After : Sep 30 03:45:01 2026 GMT
        Subject: CN=6ab34b3d-e7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4b:ee:95:23:af:19:37:5c:d3:eb:ba:f1:bd:
                    6e:7f:49:9e:1a:11:2d:8f:e2:de:3b:1c:18:42:1f:
                    a2:c4:0b:54:e6:b4:39:e3:4f:3c:85:cc:90:d6:14:
                    23:18:08:8f:34:a4:dc:9b:ec:79:bf:9b:4a:2b:67:
                    2f:d2:7e:81:ff:24:99:c1:db:ae:7d:4e:6c:e7:aa:
                    2c:46:cd:01:49:8e:e0:27:18:79:ea:24:5b:18:ae:
                    ff:2c:d7:df:92:56:6e:05:08:4c:ff:48:e0:ca:bf:
                    4d:67:cd:10:00:af:08:88:40:ae:af:80:98:0b:c1:
                    11:26:db:ff:4e:d5:bc:28:cf:3a:b5:f3:d7:b3:91:
                    cd:c4:97:04:a4:10:e0:29:6e:95:50:9c:59:0b:6b:
                    c4:35:9c:f0:65:3b:fc:a2:39:d7:a9:66:9c:8a:3d:
                    97:b0:89:55:5d:2e:27:91:44:80:ad:f3:04:46:66:
                    57:72:9f:c3:43:cb:fb:b9:8d:32:ce:ca:bf:36:dd:
                    2d:ac:94:67:3b:d0:88:2d:1d:00:3a:0d:a3:ff:9a:
                    1e:ed:d2:d4:c3:14:df:49:89:8d:70:d0:79:38:df:
                    74:a7:32:c8:31:b1:e8:97:43:ca:f9:d1:be:71:af:
                    b0:13:2e:e3:3c:68:66:3c:33:34:af:41:4a:54:13:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C1:68:4A:C7:E4:88:F6:05:5C:12:62:BA:65:43:E8:08:13:6B:51
            X509v3 Authority Key Identifier:
                keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:90:aa:2e:46:06:99:cf:3a:2f:26:06:3a:5f:a2:7d:77:
         dd:ed:d8:12:99:e8:e3:1e:35:6e:a6:2f:5d:78:8b:d2:31:fa:
         a7:08:e6:ed:aa:11:45:1b:50:44:9f:19:e1:c7:1d:5c:37:d7:
         da:74:44:cf:32:a4:5c:5c:66:80:d4:d2:9e:72:b3:e6:d5:f6:
         48:aa:49:e6:4d:1a:36:4c:72:91:e1:5e:1d:73:a9:5b:a6:58:
         9e:00:4b:37:38:e7:56:e9:e7:6a:6f:e5:d8:f7:3d:fe:27:a4:
         7e:44:28:1a:87:7c:41:76:db:82:e1:12:69:c9:db:08:4b:3f:
         04:3b:1e:7a:76:f1:35:28:03:34:9e:b4:85:10:34:53:be:dc:
         95:81:f7:e5:d7:60:ab:76:34:7d:d6:be:53:a4:e3:5a:e0:a8:
         34:d0:79:71:3d:08:07:25:76:d5:c1:01:f5:d0:68:cc:ae:f3:
         7d:90:3c:d2:41:33:91:b8:0f:94:26:05:13:e6:4e:ca:c4:91:
         d8:d7:ff:32:c4:31:08:2c:ac:88:e2:12:1b:0d:e6:55:da:29:
         34:7c:4c:15:f7:d8:e8:04:f5:4a:7c:6d:b7:69:32:3b:e2:8d:
         5f:db:9b:9c:7a:21:fc:ee:9e:c3:8f:12:df:c9:f0:9b:6a:c1:
         b7:19:f2:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx
ODdEOTdGMzMwHhcNMjYwOTIzMDM0NTAxWhcNMjYwOTMwMDM0NTAxWjAYMRYwFAYD
VQQDEw02YWIzNGIzZC1lN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA70vulSOvGTdc0+u68b1uf0meGhEtj+LeOxwYQh+ixAtU5rQ54088hcyQ1hQj
GAiPNKTcm+x5v5tKK2cv0n6B/ySZwduufU5s56osRs0BSY7gJxh56iRbGK7/LNff
klZuBQhM/0jgyr9NZ80QAK8IiECur4CYC8ERJtv/TtW8KM86tfPXs5HNxJcEpBDg
KW6VUJxZC2vENZzwZTv8ojnXqWacij2XsIlVXS4nkUSArfMERmZXcp/DQ8v7uY0y
zsq/Nt0trJRnO9CILR0AOg2j/5oe7dLUwxTfSYmNcNB5ON90pzLIMbHol0PK+dG+
ca+wEy7jPGhmPDM0r0FKVBNo0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7BaErH
5Ij2BVwSYrplQ+gIE2tRMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy
OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha
U05rcG40cFBrcHdZZlpmek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAociQqi5GBpnPOi8mBjpfon133e3YEpno4x41bqYvXXiL0jH6pwjm7aoRRRtQ
RJ8Z4ccdXDfX2nREzzKkXFxmgNTSnnKz5tX2SKpJ5k0aNkxykeFeHXOpW6ZYngBL
NzjnVunnam/l2Pc9/iekfkQoGod8QXbbguESacnbCEs/BDseenbxNSgDNJ60hRA0
U77clYH35ddgq3Y0fda+U6TjWuCoNNB5cT0IByV21cEB9dBozK7zfZA80kEzkbgP
lCYFE+ZOysSR2Nf/MsQxCCysiOISGw3mVdopNHxMFffY6AT1Snxtt2kyO+KNX9ub
nHoh/O6ew48S38nwm2rBtxnyBg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:49:28 2026 by rpki-client