Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
File:                     CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json)
Hash identifier:          hlASRK0NDUapsMjKiWCaezIck7JPnaLpl/DRyVjHOwQ=
Subject key identifier:   07:2B:0A:E8:EA:5A:CE:97:B2:AD:F4:9B:60:AC:D9:D5:E3:62:F8:B4
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Certificate issuer:       /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial:       05A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
Manifest number:          057B
Signing time:             Tue 22 Sep 2026 23:00:37 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:36 +0000
Manifest next update:     Tue 29 Sep 2026 23:00:36 +0000
Files and hashes:         1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: q2lhvRhr6dfuZVYFSBbZLroWJTh3x8SX75flbm/3iP8=)
                          2: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: VCY6VieVb7TG2U03HIBFTaPiwgKuFeeeP7S9R6dlJ6E=)
                          3: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: XS0xAK4nnF7Dq2UBrvrKqZgDFOkN/XmKJyB81kCEows=)
                          4: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: 6vDTx1Sxq8tUZv93hoBcq2yOxm15beDyF9zkAam3IFw=)
                          5: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: veDCLElENt6wbI9mRj7E75/CdxbPil5hBlzZcPWTVIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
                          rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
        Validity
            Not Before: Sep 22 23:00:36 2026 GMT
            Not After : Sep 29 23:00:36 2026 GMT
        Subject: CN=6ab30895-33b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cb:ce:a5:1e:0a:d8:15:e5:ca:62:ff:d2:d6:
                    83:5a:a4:99:e7:21:fe:54:3e:31:68:d8:4a:18:41:
                    db:ee:fd:4b:cb:9f:d8:0d:fe:85:00:bc:4a:30:5f:
                    ac:42:24:e5:cf:54:85:59:aa:e8:c7:47:5a:1b:23:
                    2d:43:8e:8f:05:8c:1d:5d:67:4b:54:9b:b2:1b:77:
                    4b:47:52:1a:d0:85:66:20:d5:9f:b9:8e:52:b6:f8:
                    cf:8f:7f:a8:a6:ba:e1:47:f7:9f:4b:94:2e:fa:93:
                    cc:18:4c:af:ec:05:3c:21:63:33:1a:0d:d9:c8:1f:
                    6f:a5:f4:bc:37:2e:9f:29:cd:2c:52:51:14:de:b7:
                    77:23:4c:c4:a9:c8:e8:2c:fd:de:99:35:95:a9:6a:
                    c3:f3:9f:37:6b:57:a4:4a:76:52:5e:18:ac:e2:5c:
                    42:c1:68:43:94:4c:e5:e2:0e:9f:6f:c4:83:76:a6:
                    de:7c:ca:bf:5f:29:37:58:7d:71:1a:2f:1a:ce:29:
                    a7:7a:e9:4c:59:dd:6c:11:f3:bc:7d:82:f2:87:b8:
                    61:cb:5e:7c:16:4e:cb:fa:02:bd:fb:29:23:07:d8:
                    f7:73:86:09:71:8c:12:ef:7d:39:8b:c9:57:fa:4f:
                    b3:61:f7:71:15:01:f4:1a:f1:20:5f:5d:ce:d0:06:
                    e4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2B:0A:E8:EA:5A:CE:97:B2:AD:F4:9B:60:AC:D9:D5:E3:62:F8:B4
            X509v3 Authority Key Identifier:
                keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:83:e1:21:22:9d:ad:d6:b7:99:af:8d:82:37:04:19:89:6a:
         dd:68:14:df:c0:ab:f0:59:bc:53:aa:63:15:f3:c7:e2:46:60:
         a1:ff:15:8a:7b:f7:e9:01:b6:d6:ed:43:ce:77:e7:b4:20:e3:
         31:6a:d7:41:d9:c7:b0:7d:44:74:ff:ab:2e:97:b4:94:f5:07:
         06:ed:45:6a:57:33:e5:59:b1:e9:21:5c:13:2c:75:2d:4a:64:
         82:19:ca:56:36:0a:4c:8b:46:db:2d:af:20:ee:2e:8a:71:eb:
         12:0f:49:21:f9:9b:24:61:e1:53:28:d8:ef:d9:1e:6c:67:af:
         eb:9d:b5:94:21:53:1b:43:c1:b2:89:9f:bd:48:66:61:b3:10:
         5b:3a:6f:a9:a9:6c:87:a3:e5:68:3b:2c:31:0d:0e:ba:a6:98:
         37:4d:21:59:ce:9d:84:64:79:6b:7d:15:85:c1:20:57:79:09:
         8d:a6:82:df:c3:22:a6:0f:f7:a3:d4:41:e4:7b:f2:cd:e2:2a:
         af:0b:39:ad:f2:38:2a:07:8d:f5:d7:af:04:19:32:c7:c9:98:
         62:91:a4:57:e4:27:8c:99:02:7f:77:ec:96:fe:22:2a:29:ed:
         79:97:60:56:6b:91:42:70:ea:55:2f:8d:2d:52:d1:1d:11:c7:
         69:b9:c7:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx
OTAwNzE1RUQwHhcNMjYwOTIyMjMwMDM2WhcNMjYwOTI5MjMwMDM2WjAYMRYwFAYD
VQQDEw02YWIzMDg5NS0zM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzcvOpR4K2BXlymL/0taDWqSZ5yH+VD4xaNhKGEHb7v1Ly5/YDf6FALxKMF+s
QiTlz1SFWarox0daGyMtQ46PBYwdXWdLVJuyG3dLR1Ia0IVmINWfuY5StvjPj3+o
prrhR/efS5Qu+pPMGEyv7AU8IWMzGg3ZyB9vpfS8Ny6fKc0sUlEU3rd3I0zEqcjo
LP3emTWVqWrD8583a1ekSnZSXhis4lxCwWhDlEzl4g6fb8SDdqbefMq/Xyk3WH1x
Gi8azimneulMWd1sEfO8fYLyh7hhy158Fk7L+gK9+ykjB9j3c4YJcYwS7305i8lX
+k+zYfdxFQH0GvEgX13O0AbkZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcrCujq
Ws6Xsq30m2Cs2dXjYvi0MB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2
RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0NGRi85QTVFQzE2QzQ2RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpY
S1BKUHF0akxHbDhaQUhGZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo4PhISKdrda3ma+NgjcEGYlq3WgU38Cr8Fm8U6pjFfPH4kZgof8Vinv36QG2
1u1DznfntCDjMWrXQdnHsH1EdP+rLpe0lPUHBu1Falcz5Vmx6SFcEyx1LUpkghnK
VjYKTItG2y2vIO4uinHrEg9JIfmbJGHhUyjY79kebGev6521lCFTG0PBsomfvUhm
YbMQWzpvqalsh6PlaDssMQ0OuqaYN00hWc6dhGR5a30VhcEgV3kJjaaC38Mipg/3
o9RB5HvyzeIqrws5rfI4KgeN9devBBkyx8mYYpGkV+QnjJkCf3fslv4iKinteZdg
VmuRQnDqVS+NLVLRHRHHabnHCg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:12:46 2026 by rpki-client