Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
File:                     u7dF5o0mJdldbQcyKFARSry-_wQ.mft (raw, json)
Hash identifier:          t81q5T07Kfy3Agfk76IV4IoY72KYa2Qv+NR9Mcigdac=
Subject key identifier:   27:6E:0D:41:B0:6D:CE:35:51:DD:DB:94:85:0A:6A:67:24:FB:89:EF
Authority key identifier: BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04
Certificate issuer:       /CN=A9168F50/serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
Manifest number:          9C
Signing time:             Wed 23 Sep 2026 07:05:30 +0000
Manifest this update:     Wed 23 Sep 2026 07:05:30 +0000
Manifest next update:     Wed 30 Sep 2026 07:05:30 +0000
Files and hashes:         1: u7dF5o0mJdldbQcyKFARSry-_wQ.crl (hash: MLn0Z7V1ShbYQzTbAfeKQXHM/uMFJmJQuAkDBehYkrw=)
                          2: 8FD832B4C9B311F0BC2AD366C4F9AE02.roa (hash: cQJLuCSOM+o2aUzG2mT2OZwzOyveUbTM2bM6yH/VclY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl
                          rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168F50, serialNumber=BBB745E68D2625D95D6D07322850114ABCBEFF04
        Validity
            Not Before: Sep 23 07:05:30 2026 GMT
            Not After : Sep 30 07:05:30 2026 GMT
        Subject: CN=6ab37a3a-2315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:15:4e:4c:21:5c:97:c1:8c:65:a9:c4:7d:
                    6b:a2:18:51:a8:41:61:35:75:c7:cb:f7:db:b9:eb:
                    a1:4a:c6:3f:d7:b8:2d:17:20:e2:47:fd:7b:ba:95:
                    49:eb:ff:aa:9e:b4:96:8f:e1:82:df:a3:e7:74:e0:
                    55:40:8e:d8:f2:c6:7e:0e:ca:5d:33:f5:2d:7f:21:
                    ec:e5:d4:47:9f:21:f9:64:2b:0b:89:85:82:aa:eb:
                    00:51:18:57:11:9a:de:16:aa:0b:1e:72:ab:d1:da:
                    68:f2:47:db:1b:a2:e4:38:4f:be:a0:ed:20:f7:fc:
                    f3:4c:ad:d1:89:59:43:57:a8:10:59:cd:2c:c5:7e:
                    74:00:2c:8d:84:53:5b:ba:9c:d0:ee:11:3d:5c:7f:
                    36:10:6a:ce:70:7a:e4:bf:35:05:b9:ec:b6:37:d6:
                    04:e4:8a:2a:b5:bb:30:37:8a:11:12:99:f0:ef:03:
                    dd:3d:8f:5d:a3:3c:67:e3:84:45:59:1a:8e:aa:cd:
                    82:db:70:dc:7a:0f:4d:03:aa:83:7b:73:f7:85:e6:
                    f7:2f:78:a2:0a:1f:a5:c2:0b:0a:b9:6d:da:19:8d:
                    ab:ab:c6:2b:71:ab:99:7c:51:73:94:72:e8:e5:e3:
                    d1:72:ea:22:48:50:c8:f5:4f:3e:f5:46:f7:e0:43:
                    9e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6E:0D:41:B0:6D:CE:35:51:DD:DB:94:85:0A:6A:67:24:FB:89:EF
            X509v3 Authority Key Identifier:
                keyid:BB:B7:45:E6:8D:26:25:D9:5D:6D:07:32:28:50:11:4A:BC:BE:FF:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7dF5o0mJdldbQcyKFARSry-_wQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/0CEDD1CEC9B311F09B34FC78C4F9AE02/u7dF5o0mJdldbQcyKFARSry-_wQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:b8:ae:5d:39:41:6e:1c:2d:75:25:cb:1a:89:36:e7:60:b4:
         41:72:84:7f:2e:c4:cb:83:c3:31:34:12:46:5c:55:d3:95:c9:
         97:90:95:05:29:dc:80:eb:92:68:7c:d4:4c:1b:92:a5:77:b8:
         f2:15:be:67:fa:6a:be:dd:c2:69:9b:64:14:ad:56:1e:cc:51:
         6d:b1:af:18:1e:d9:13:3f:87:e9:c0:95:b2:3f:36:e3:96:b9:
         95:b3:14:41:a8:c4:be:3f:eb:52:81:f9:2a:02:a4:4f:ba:69:
         3f:f7:96:6e:25:ed:f1:86:fa:c3:62:a2:c9:68:5b:8e:d5:b6:
         b9:3d:23:bd:d1:dc:af:0d:80:ed:19:ba:4e:82:5f:92:a2:8a:
         75:17:c5:bf:fe:f0:80:58:df:d7:a4:60:ff:ea:3b:07:34:25:
         77:7d:d4:2a:78:e4:a7:0e:64:be:d8:9a:d7:dc:bc:1d:a9:67:
         95:9a:6e:12:a9:c0:9d:b4:f0:21:e7:4a:61:d8:fd:17:99:03:
         42:39:5d:b0:2f:58:33:c6:fa:7b:8e:70:98:e9:bb:6b:e0:6f:
         e7:3e:3e:fd:6f:05:cc:46:8b:0d:3b:0c:6f:0d:f8:54:de:e1:
         2f:9c:75:2a:a4:3a:cf:89:16:56:89:d5:37:7b:44:86:f4:c3:
         12:54:dc:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhGNTAxMTAvBgNVBAUTKEJCQjc0NUU2OEQyNjI1RDk1RDZEMDczMjI4NTAxMTRB
QkNCRUZGMDQwHhcNMjYwOTIzMDcwNTMwWhcNMjYwOTMwMDcwNTMwWjAYMRYwFAYD
VQQDEw02YWIzN2EzYS0yMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm2QVTkwhXJfBjGWpxH1rohhRqEFhNXXHy/fbueuhSsY/17gtFyDiR/17upVJ
6/+qnrSWj+GC36PndOBVQI7Y8sZ+DspdM/UtfyHs5dRHnyH5ZCsLiYWCqusAURhX
EZreFqoLHnKr0dpo8kfbG6LkOE++oO0g9/zzTK3RiVlDV6gQWc0sxX50ACyNhFNb
upzQ7hE9XH82EGrOcHrkvzUFuey2N9YE5IoqtbswN4oREpnw7wPdPY9dozxn44RF
WRqOqs2C23Dceg9NA6qDe3P3heb3L3iiCh+lwgsKuW3aGY2rq8YrcauZfFFzlHLo
5ePRcuoiSFDI9U8+9Ub34EOezQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCduDUGw
bc41Ud3blIUKamck+4nvMB8GA1UdIwQYMBaAFLu3ReaNJiXZXW0HMihQEUq8vv8E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEY1MC8wQ0VERDFDRUM5
QjMxMUYwOUIzNEZDNzhDNEY5QUUwMi91N2RGNW8wbUpkbGRiUWN5S0ZBUlNyeS1f
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U3ZEY1bzBtSmRsZGJRY3lLRkFSU3J5LV93US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEY1MC8wQ0VERDFDRUM5QjMxMUYwOUIzNEZDNzhDNEY5QUUwMi91N2RGNW8wbUpk
bGRiUWN5S0ZBUlNyeS1fd1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA67iuXTlBbhwtdSXLGok252C0QXKEfy7Ey4PDMTQSRlxV05XJl5CVBSncgOuS
aHzUTBuSpXe48hW+Z/pqvt3CaZtkFK1WHsxRbbGvGB7ZEz+H6cCVsj8245a5lbMU
QajEvj/rUoH5KgKkT7ppP/eWbiXt8Yb6w2KiyWhbjtW2uT0jvdHcrw2A7Rm6ToJf
kqKKdRfFv/7wgFjf16Rg/+o7BzQld33UKnjkpw5kvtia19y8HalnlZpuEqnAnbTw
IedKYdj9F5kDQjldsC9YM8b6e45wmOm7a+Bv5z4+/W8FzEaLDTsMbw34VN7hL5x1
KqQ6z4kWVonVN3tEhvTDElTcmA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:16:45 2026 by rpki-client