Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft
File:                     Satd0R3JItzI8j3VqSxplN1wNQQ.mft (raw, json)
Hash identifier:          oRcKffndH9I62AMfV67O6KAJbi6BnrLIUmhNL7BCfT4=
Subject key identifier:   BC:61:07:3C:6B:E8:DE:48:42:7B:CE:12:18:E5:3C:4C:96:A8:A3:C3
Authority key identifier: 49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04
Certificate issuer:       /CN=A916593B/serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
Certificate serial:       0453
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft
Manifest number:          0446
Signing time:             Mon 21 Sep 2026 00:02:09 +0000
Manifest this update:     Mon 21 Sep 2026 00:02:08 +0000
Manifest next update:     Mon 28 Sep 2026 00:02:08 +0000
Files and hashes:         1: Satd0R3JItzI8j3VqSxplN1wNQQ.crl (hash: jN1A17+zkUeDdQ9oR38V0jUDzN7HSU1APNOy6G/8U+A=)
                          2: 718673B6BB7F11EC9E187F19C4F9AE02.roa (hash: vBsafuWlA5fDTGa/5s57fr9OWMHZTtKdoWY5g838LV8=)
                          3: 83A55CAE190111F1924FB715213D8C67.roa (hash: nlTRTD0+8MZz2UjHUQp1Ig/zh1Jia7bSOziI2rZb1o0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl
                          rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916593B, serialNumber=49AB5DD11DC922DCC8F23DD5A92C6994DD703504
        Validity
            Not Before: Sep 21 00:02:08 2026 GMT
            Not After : Sep 28 00:02:08 2026 GMT
        Subject: CN=6ab07401-7912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:81:76:43:b0:40:cb:24:63:02:53:9e:6a:
                    68:b9:95:8e:dd:92:7f:cb:b6:51:9a:73:c0:63:fe:
                    e1:13:41:78:5a:f9:8c:bc:ad:03:23:b8:b4:80:b9:
                    44:19:76:81:67:8a:06:37:60:53:6e:45:7f:55:8e:
                    59:0d:ba:25:a6:7f:fa:2f:6f:c4:35:ee:6c:01:34:
                    0d:e9:dd:7f:ab:bd:c4:49:71:59:70:00:44:e9:f7:
                    1e:0b:05:6a:bb:ae:00:48:d0:4d:3d:de:13:a4:54:
                    e6:18:ee:f5:0d:33:a0:82:90:68:e1:3e:8e:9e:9c:
                    9a:b4:56:8b:b0:38:ec:44:4d:ef:97:a7:34:7b:29:
                    bd:a5:2c:30:6f:37:de:e6:19:44:7c:3c:a6:51:eb:
                    2b:96:cb:11:d7:17:d7:52:30:a0:aa:9b:ce:da:d6:
                    50:78:b3:f1:ef:e5:26:eb:59:da:fa:20:f2:63:df:
                    cf:41:b4:71:2a:58:8e:48:15:3c:3f:e6:16:07:e6:
                    9b:05:80:0f:e9:d0:67:4f:8c:4b:46:a7:b3:a9:0f:
                    fe:59:d8:b4:34:17:f8:90:93:3d:31:19:40:51:ef:
                    7f:0e:0a:b8:c6:f9:94:90:ae:bd:60:1d:72:a4:76:
                    52:6f:a5:f4:78:b1:69:e5:2e:96:3c:45:62:3e:1a:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:61:07:3C:6B:E8:DE:48:42:7B:CE:12:18:E5:3C:4C:96:A8:A3:C3
            X509v3 Authority Key Identifier:
                keyid:49:AB:5D:D1:1D:C9:22:DC:C8:F2:3D:D5:A9:2C:69:94:DD:70:35:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Satd0R3JItzI8j3VqSxplN1wNQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916593B/103C7D1CBB7A11EC829EE80DC4F9AE02/Satd0R3JItzI8j3VqSxplN1wNQQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ef:b4:cb:1b:36:5a:79:a9:7d:73:c7:de:89:30:f4:ea:8c:
         ca:ba:8d:cd:1e:d4:a8:d2:e9:70:c6:ec:6b:ad:d0:fc:85:02:
         05:92:59:f1:cd:f3:9e:d1:99:ec:44:18:8c:90:1d:d6:bd:4b:
         37:57:63:fe:fa:a5:78:76:75:b2:fe:d0:0b:d9:b2:93:67:79:
         58:29:b0:82:f4:10:09:62:c1:e5:b4:e1:58:42:08:f4:04:56:
         8b:b9:d0:2d:4c:56:f1:34:05:79:7e:22:47:76:71:aa:b3:4f:
         a8:91:f5:91:92:03:f9:60:19:7e:f5:68:9a:23:b1:12:67:fe:
         94:88:48:a0:d2:57:cd:32:6b:d6:07:e6:64:f0:42:80:b8:55:
         f8:8b:da:16:2a:9d:08:db:c4:c5:3e:62:a7:cb:58:31:10:25:
         cf:3c:6a:e9:a0:db:2b:46:47:62:1f:8a:88:61:d0:71:5d:23:
         2b:0d:a8:dc:39:a8:4e:16:94:87:2a:7b:17:27:b1:d3:80:99:
         26:93:65:0a:a8:78:1b:20:36:8e:05:e9:37:19:d3:cc:25:3a:
         88:e2:cb:dc:72:29:82:20:d4:18:04:fb:29:c0:e6:07:67:f1:
         5d:63:b6:56:2f:b2:dd:ea:56:5e:6b:9c:cc:45:dc:44:93:70:
         1b:7d:4e:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU5M0IxMTAvBgNVBAUTKDQ5QUI1REQxMURDOTIyRENDOEYyM0RENUE5MkM2OTk0
REQ3MDM1MDQwHhcNMjYwOTIxMDAwMjA4WhcNMjYwOTI4MDAwMjA4WjAYMRYwFAYD
VQQDEw02YWIwNzQwMS03OTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsEmBdkOwQMskYwJTnmpouZWO3ZJ/y7ZRmnPAY/7hE0F4WvmMvK0DI7i0gLlE
GXaBZ4oGN2BTbkV/VY5ZDbolpn/6L2/ENe5sATQN6d1/q73ESXFZcABE6fceCwVq
u64ASNBNPd4TpFTmGO71DTOggpBo4T6OnpyatFaLsDjsRE3vl6c0eym9pSwwbzfe
5hlEfDymUesrlssR1xfXUjCgqpvO2tZQeLPx7+Um61na+iDyY9/PQbRxKliOSBU8
P+YWB+abBYAP6dBnT4xLRqezqQ/+Wdi0NBf4kJM9MRlAUe9/Dgq4xvmUkK69YB1y
pHZSb6X0eLFp5S6WPEViPhr2RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxhBzxr
6N5IQnvOEhjlPEyWqKPDMB8GA1UdIwQYMBaAFEmrXdEdySLcyPI91aksaZTdcDUE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTkzQi8xMDNDN0QxQ0JC
N0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0ekk4ajNWcVN4cGxOMXdO
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NhdGQwUjNKSXR6SThqM1ZxU3hwbE4xd05RUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTkzQi8xMDNDN0QxQ0JCN0ExMUVDODI5RUU4MERDNEY5QUUwMi9TYXRkMFIzSkl0
ekk4ajNWcVN4cGxOMXdOUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsu+0yxs2WnmpfXPH3okw9OqMyrqNzR7UqNLpcMbsa63Q/IUCBZJZ8c3zntGZ
7EQYjJAd1r1LN1dj/vqleHZ1sv7QC9myk2d5WCmwgvQQCWLB5bThWEII9ARWi7nQ
LUxW8TQFeX4iR3ZxqrNPqJH1kZID+WAZfvVomiOxEmf+lIhIoNJXzTJr1gfmZPBC
gLhV+IvaFiqdCNvExT5ip8tYMRAlzzxq6aDbK0ZHYh+KiGHQcV0jKw2o3DmoThaU
hyp7Fyex04CZJpNlCqh4GyA2jgXpNxnTzCU6iOLL3HIpgiDUGAT7KcDmB2fxXWO2
Vi+y3epWXmuczEXcRJNwG31Org==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:57:09 2026 by rpki-client