Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
File:                     m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft (raw, json)
Hash identifier:          LLIsbjKz3TH+zZAPBwqBAQ7ruzgj9cxougeLC0Z1Mwo=
Subject key identifier:   D6:EE:C8:39:FF:F3:D1:CF:B9:63:61:CA:1C:68:0A:95:9C:9D:3E:F6
Authority key identifier: 9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4
Certificate issuer:       /CN=A9164DAC/serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
Manifest number:          C2
Signing time:             Fri 25 Sep 2026 06:56:23 +0000
Manifest this update:     Fri 25 Sep 2026 06:56:23 +0000
Manifest next update:     Fri 02 Oct 2026 06:56:23 +0000
Files and hashes:         1: m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl (hash: QVQdoMm3D17hJ4fEYD1256jAybJfWWHlqNFJId1l8rk=)
                          2: A8AFC432909711F0BDFBAA86C4F9AE02.roa (hash: ytR9UWHv5UKuKu91/TPYCw14tTBXAhBwvU9a8IiHbpk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl
                          rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164DAC, serialNumber=9BB6B14EFB52248E84BBFB6C8379FDAEDB099CF4
        Validity
            Not Before: Sep 25 06:56:23 2026 GMT
            Not After : Oct  2 06:56:23 2026 GMT
        Subject: CN=6ab61b17-aaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:73:b1:df:5f:19:72:57:59:88:9d:6d:e1:af:
                    6d:52:d0:9f:63:c4:f1:0a:56:61:3d:67:e4:96:55:
                    3c:08:10:28:5d:00:2e:23:d6:16:a2:82:c7:4d:ca:
                    e6:40:f6:cf:85:c9:68:82:67:c2:fa:ac:80:4c:97:
                    f3:72:2e:c4:b3:cb:44:fa:8f:b5:f5:89:c3:35:bf:
                    40:c3:f4:c2:1e:09:13:87:96:e8:25:58:b7:81:32:
                    93:18:49:7c:d3:a4:c1:b4:42:8b:01:b9:71:20:f2:
                    41:65:2c:0d:00:1b:f2:bb:20:00:f3:5c:cd:17:bf:
                    10:79:8b:31:45:d1:13:11:5f:43:6d:f4:83:13:c8:
                    12:44:c1:ff:0a:f2:e6:93:48:f0:3f:03:c2:02:2d:
                    4d:bd:c4:64:2a:25:a0:04:6f:a1:95:51:0f:08:29:
                    7f:51:dd:0c:c7:21:f4:de:d5:13:81:2a:fb:be:d9:
                    b3:3c:a8:59:58:17:38:fe:d4:b1:33:f3:35:34:10:
                    c2:1c:90:1e:0f:d8:9d:d6:15:47:09:30:a8:0e:20:
                    52:ff:05:ea:a8:27:97:9a:74:59:1b:6d:b1:bf:ba:
                    33:a0:d7:2e:1c:25:aa:da:92:52:3b:bb:f3:30:3d:
                    e6:e8:e8:d3:0a:67:78:02:9b:12:ac:13:3f:3f:4f:
                    ea:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EE:C8:39:FF:F3:D1:CF:B9:63:61:CA:1C:68:0A:95:9C:9D:3E:F6
            X509v3 Authority Key Identifier:
                keyid:9B:B6:B1:4E:FB:52:24:8E:84:BB:FB:6C:83:79:FD:AE:DB:09:9C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164DAC/DB480FB8909611F09CB46385C4F9AE02/m7axTvtSJI6Eu_tsg3n9rtsJnPQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:44:54:17:21:9f:7e:01:da:44:fd:2d:19:52:81:2a:bd:b6:
         ae:77:0c:c6:fe:d6:6a:d9:62:8f:d4:a8:7b:b1:71:c1:a7:54:
         50:ac:f6:77:86:39:9b:20:c5:7b:16:b2:74:7c:22:d1:9b:ed:
         f8:06:66:bc:28:de:fb:75:03:6d:84:f2:03:af:bf:9a:99:5b:
         a1:b1:df:4e:ae:1f:5d:1b:8d:9b:8b:f8:81:21:96:f6:80:f5:
         94:a6:1c:da:d8:24:4d:fb:a8:be:06:66:f5:88:58:a1:6d:5d:
         a1:dd:86:90:d3:0e:b5:0d:63:f2:7e:bd:27:49:00:78:8c:21:
         e3:f2:d9:a1:71:56:0f:23:22:fe:8e:9e:a3:0d:69:04:e5:12:
         9b:4c:eb:01:02:64:eb:d0:90:d1:cd:ca:7d:01:f3:a9:a4:e3:
         a6:06:e2:cf:ba:9e:c0:b8:42:52:09:2b:de:e9:83:7d:27:95:
         d7:07:7a:c6:b7:12:21:9b:bc:d3:6c:7a:fc:7d:e2:d5:1b:64:
         49:f4:6a:9e:b2:c2:32:bf:2d:39:40:2a:48:a3:ab:84:29:00:
         2b:d2:77:bb:31:5d:ad:bc:d0:c2:56:d2:34:02:e4:93:fd:52:
         45:30:f4:bc:9c:30:5c:b9:74:30:bd:cf:35:e5:0e:83:9e:21:
         f8:95:dd:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjREQUMxMTAvBgNVBAUTKDlCQjZCMTRFRkI1MjI0OEU4NEJCRkI2QzgzNzlGREFF
REIwOTlDRjQwHhcNMjYwOTI1MDY1NjIzWhcNMjYxMDAyMDY1NjIzWjAYMRYwFAYD
VQQDEw02YWI2MWIxNy1hYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjnOx318ZcldZiJ1t4a9tUtCfY8TxClZhPWfkllU8CBAoXQAuI9YWooLHTcrm
QPbPhclogmfC+qyATJfzci7Es8tE+o+19YnDNb9Aw/TCHgkTh5boJVi3gTKTGEl8
06TBtEKLAblxIPJBZSwNABvyuyAA81zNF78QeYsxRdETEV9DbfSDE8gSRMH/CvLm
k0jwPwPCAi1NvcRkKiWgBG+hlVEPCCl/Ud0MxyH03tUTgSr7vtmzPKhZWBc4/tSx
M/M1NBDCHJAeD9id1hVHCTCoDiBS/wXqqCeXmnRZG22xv7ozoNcuHCWq2pJSO7vz
MD3m6OjTCmd4ApsSrBM/P0/qDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbuyDn/
89HPuWNhyhxoCpWcnT72MB8GA1UdIwQYMBaAFJu2sU77UiSOhLv7bIN5/a7bCZz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NERBQy9EQjQ4MEZCODkw
OTYxMUYwOUNCNDYzODVDNEY5QUUwMi9tN2F4VHZ0U0pJNkV1X3RzZzNuOXJ0c0pu
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL203YXhUdnRTSkk2RXVfdHNnM245cnRzSm5QUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NERBQy9EQjQ4MEZCODkwOTYxMUYwOUNCNDYzODVDNEY5QUUwMi9tN2F4VHZ0U0pJ
NkV1X3RzZzNuOXJ0c0puUFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACERUFyGffgHaRP0tGVKBKr22rncMxv7Watlij9Soe7FxwadUUKz2d4Y5myDF
exaydHwi0Zvt+AZmvCje+3UDbYTyA6+/mplbobHfTq4fXRuNm4v4gSGW9oD1lKYc
2tgkTfuovgZm9YhYoW1dod2GkNMOtQ1j8n69J0kAeIwh4/LZoXFWDyMi/o6eow1p
BOUSm0zrAQJk69CQ0c3KfQHzqaTjpgbiz7qewLhCUgkr3umDfSeV1wd6xrcSIZu8
02x6/H3i1RtkSfRqnrLCMr8tOUAqSKOrhCkAK9J3uzFdrbzQwlbSNALkk/1SRTD0
vJwwXLl0ML3PNeUOg54h+JXdQw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:42:31 2026 by rpki-client