Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
File:                     M5P50HCy5wlJrKKqzI5l6JDnQJk.mft (raw, json)
Hash identifier:          V2baylgeK9mApYjiq/VJ0ExMKzraRZkYIzB/kGnE2jk=
Subject key identifier:   9F:29:76:76:BB:22:7E:3B:E9:CE:5B:D1:57:C2:1B:CC:8F:1C:50:65
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       01B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
Manifest number:          01A8
Signing time:             Wed 23 Sep 2026 03:57:19 +0000
Manifest this update:     Wed 23 Sep 2026 03:57:18 +0000
Manifest next update:     Wed 30 Sep 2026 03:57:18 +0000
Files and hashes:         1: M5P50HCy5wlJrKKqzI5l6JDnQJk.crl (hash: WSk0A7kcpxi5ZuTBtxQKiHVhW+VV9dNK+Ipx9SETouo=)
                          2: 92F925C231F511EFA1744F0EC4F9AE02.roa (hash: DkaWQMkaE5vWQ9UkMjaqB0efcfb37G5TJ9A0Ez8ePPQ=)
                          3: 81C87DDE6C8311EFB20D5276C4F9AE02.roa (hash: 8IuopY47+jC5fpO4yB/mgjJBuoiM2BBuM5j++8YQWHA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Sep 23 03:57:18 2026 GMT
            Not After : Sep 30 03:57:18 2026 GMT
        Subject: CN=6ab34e1f-833b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:8c:1d:84:b3:92:eb:23:ae:9e:54:f2:6b:
                    ae:72:68:20:6e:e0:95:6e:ee:6f:9e:fa:17:b0:b3:
                    fe:3f:6a:8e:b3:5d:6d:45:43:3d:d4:85:73:6f:e1:
                    00:68:4c:2e:d1:87:95:ed:4f:3c:4a:fc:3b:e6:99:
                    68:68:5c:52:78:9f:30:cb:e7:39:32:61:c5:17:47:
                    7b:f0:37:f9:34:1f:7e:2b:50:89:d9:3e:09:4f:e1:
                    02:2d:93:d6:b7:d5:11:37:d4:fb:77:30:c8:f2:9d:
                    dd:2b:47:d2:aa:ae:7f:f7:43:60:98:2c:30:91:57:
                    c6:a3:fa:8b:ee:27:7b:35:17:7d:22:30:43:a2:fc:
                    e5:44:18:a7:66:c6:7f:02:3b:e3:49:12:30:93:49:
                    56:15:44:f5:a6:b4:fc:29:52:8b:67:c1:21:8e:0c:
                    dd:3a:ff:ee:4b:f7:5b:42:d5:aa:76:fe:79:8c:16:
                    b3:0b:9f:e6:0e:c3:40:c3:80:97:f8:c5:f4:b8:f0:
                    c3:1d:61:82:e3:cb:fd:55:3e:81:eb:74:b6:fe:b6:
                    9b:48:65:b3:96:51:0f:33:09:96:56:af:2a:cb:01:
                    87:01:43:86:50:50:c0:96:c9:f5:e6:34:4b:06:29:
                    69:d5:ef:e6:6b:3c:81:88:2c:a2:54:55:c0:f4:55:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:29:76:76:BB:22:7E:3B:E9:CE:5B:D1:57:C2:1B:CC:8F:1C:50:65
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:3a:83:e0:3c:e4:f9:80:59:41:35:7a:45:f9:8c:9b:3b:b5:
         f9:1c:9d:fd:a6:e6:60:6e:46:65:a8:a7:c0:3d:da:31:fe:d5:
         2b:d1:4c:71:f2:c9:6f:44:b8:bc:0f:42:9a:d7:6e:b7:a0:50:
         00:3e:42:8a:ce:c6:8c:48:0e:46:0f:77:3a:03:ff:d3:f0:b2:
         62:fe:6b:82:82:a0:59:90:54:f9:7e:97:e2:c4:6c:49:9f:65:
         34:e1:cf:79:22:3f:35:f6:85:6d:bb:7b:3b:ad:11:81:fe:d8:
         c9:83:7a:2d:9c:0d:e5:54:db:0e:77:93:d9:56:7a:ef:20:e3:
         64:aa:e4:5e:f6:be:9b:83:c6:97:35:38:73:50:ad:55:c5:41:
         a9:f4:54:0c:fb:1f:7f:33:5f:c0:35:7a:a4:4a:ff:a1:66:bb:
         86:34:11:61:c3:0a:2a:72:1a:db:bf:7a:a8:01:b6:06:5d:6c:
         2a:65:6d:1c:b8:6a:86:71:4d:98:e2:56:05:df:d4:8c:cb:8b:
         a9:f9:12:46:b5:84:5e:ae:60:b5:82:ce:ac:10:ff:82:04:60:
         fc:63:95:03:fd:10:9d:6f:3a:97:2e:88:9a:69:66:94:06:b7:
         97:1e:e1:19:70:2b:8a:40:e1:58:5f:a5:cd:30:c1:15:31:94:
         22:e4:02:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4
OTBFNzQwOTkwHhcNMjYwOTIzMDM1NzE4WhcNMjYwOTMwMDM1NzE4WjAYMRYwFAYD
VQQDEw02YWIzNGUxZi04MzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAliWMHYSzkusjrp5U8muucmggbuCVbu5vnvoXsLP+P2qOs11tRUM91IVzb+EA
aEwu0YeV7U88Svw75ploaFxSeJ8wy+c5MmHFF0d78Df5NB9+K1CJ2T4JT+ECLZPW
t9URN9T7dzDI8p3dK0fSqq5/90NgmCwwkVfGo/qL7id7NRd9IjBDovzlRBinZsZ/
AjvjSRIwk0lWFUT1prT8KVKLZ8EhjgzdOv/uS/dbQtWqdv55jBazC5/mDsNAw4CX
+MX0uPDDHWGC48v9VT6B63S2/rabSGWzllEPMwmWVq8qywGHAUOGUFDAlsn15jRL
Bilp1e/mazyBiCyiVFXA9FVllwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8pdna7
In476c5b0VfCG8yPHFBlMB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx
RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REI3Mi84NjExRTYyRTMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3
bEpyS0txekk1bDZKRG5RSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvjqD4Dzk+YBZQTV6RfmMmzu1+Ryd/abmYG5GZainwD3aMf7VK9FMcfLJb0S4
vA9Cmtdut6BQAD5Cis7GjEgORg93OgP/0/CyYv5rgoKgWZBU+X6X4sRsSZ9lNOHP
eSI/NfaFbbt7O60Rgf7YyYN6LZwN5VTbDneT2VZ67yDjZKrkXva+m4PGlzU4c1Ct
VcVBqfRUDPsffzNfwDV6pEr/oWa7hjQRYcMKKnIa2796qAG2Bl1sKmVtHLhqhnFN
mOJWBd/UjMuLqfkSRrWEXq5gtYLOrBD/ggRg/GOVA/0QnW86ly6ImmlmlAa3lx7h
GXArikDhWF+lzTDBFTGUIuQCEQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:30:49 2026 by rpki-client