Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File:                     T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier:          dWHWI/g3vs6GgPjbxmr63al7Wg/HIkPwIEBRs1aY5EU=
Subject key identifier:   56:C3:09:FE:0D:21:3B:42:43:81:85:1A:9A:7F:01:17:71:D9:6D:A6
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer:       /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial:       0475
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number:          046E
Signing time:             Thu 24 Sep 2026 23:56:09 +0000
Manifest this update:     Thu 24 Sep 2026 23:56:09 +0000
Manifest next update:     Thu 01 Oct 2026 23:56:09 +0000
Files and hashes:         1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: /7cTI5jDJ7ah9PERgQq4VUyh4CXme1dCqSnKLB6F7oc=)
                          2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: Orzj86vjC93cWR06+QsMgW2wBDc5SO3ZdbwzBN1Cn0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
                          rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
        Validity
            Not Before: Sep 24 23:56:09 2026 GMT
            Not After : Oct  1 23:56:09 2026 GMT
        Subject: CN=6ab5b899-b534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:53:da:a9:3e:da:6d:58:fd:70:d3:70:00:
                    ee:e8:2f:13:89:3a:7b:4e:35:e9:8b:26:95:7d:32:
                    5a:1d:c0:aa:0f:c2:ca:11:6c:24:18:db:50:17:11:
                    21:8b:6a:b1:a7:c3:67:16:e6:2b:de:c8:d4:c5:5f:
                    fe:4e:68:b4:eb:8d:12:4b:9c:58:06:07:7d:6a:a5:
                    15:e0:ac:95:70:ee:01:ff:c1:0d:96:73:93:e5:b3:
                    66:b0:31:18:ad:4b:3e:bb:1e:08:2b:67:7f:d9:19:
                    10:46:c9:44:8d:33:88:75:fe:fb:68:11:8f:61:a4:
                    ce:53:dd:80:e1:15:8c:45:8b:bf:da:2b:01:18:32:
                    77:9a:74:4f:71:95:44:16:20:47:78:6a:33:70:3c:
                    5e:9b:af:60:ca:9a:50:39:91:b4:51:e4:bf:39:23:
                    3f:ac:1c:4b:c8:14:15:25:03:f6:de:1b:60:74:82:
                    0b:63:cd:47:de:1a:ea:68:90:48:a3:5e:0c:6f:c8:
                    49:67:91:51:6d:95:dd:d7:05:4c:8e:c9:a1:12:a5:
                    e5:41:dc:6f:08:71:1f:6f:67:c2:97:c8:ae:b2:78:
                    c5:45:9d:1f:ee:2f:53:98:17:93:60:b8:ac:b8:f8:
                    ab:c5:66:24:4d:ff:4a:98:e0:4d:95:0e:33:3e:92:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C3:09:FE:0D:21:3B:42:43:81:85:1A:9A:7F:01:17:71:D9:6D:A6
            X509v3 Authority Key Identifier:
                keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:b7:f1:92:78:0b:de:b5:e3:b7:26:8c:03:1c:1e:25:ea:
         98:2d:de:f2:27:b9:26:b3:63:84:d0:40:e7:ab:75:52:f9:f4:
         39:87:1d:d5:bb:85:58:1d:c3:a8:64:4b:7a:66:ab:1b:9e:2a:
         3f:5a:71:52:c9:58:b2:02:cf:9a:4f:f7:99:d4:19:af:1d:e4:
         2b:10:cd:19:d9:b9:57:8a:d9:c4:ca:74:dc:5d:b3:6f:64:3e:
         bc:af:27:df:4c:89:4e:e1:0d:31:67:33:e0:02:49:61:e4:eb:
         ae:96:cc:b7:cb:3c:ef:71:f4:c3:3b:ae:df:58:97:1b:2d:e5:
         91:eb:00:a4:f4:05:6b:98:b1:7a:7f:02:b3:b0:18:e6:ee:1b:
         a5:46:10:14:ed:e3:01:0f:e1:81:47:90:95:b5:66:f3:94:5f:
         0b:7b:af:a6:09:fd:ee:9f:4e:18:ff:60:ad:e6:9c:a0:ff:f6:
         a6:26:15:b7:7e:37:ad:8e:f5:e6:70:99:0c:0b:dc:fc:8c:ee:
         78:e6:6f:62:ab:67:19:af:c4:27:10:ca:a6:6a:03:44:6b:89:
         27:58:52:47:4a:13:57:f2:85:b3:64:c9:7a:12:18:45:92:bb:
         58:77:95:6e:b2:5c:f0:bd:b2:34:b9:71:a5:21:b4:81:b8:4c:
         02:cb:6e:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRDN0MxMTAvBgNVBAUTKDRGODMwMEUxMERDQTI0RDU2NUQzM0YwMkFEMzg2RTZG
NTczOEY5MEEwHhcNMjYwOTI0MjM1NjA5WhcNMjYxMDAxMjM1NjA5WjAYMRYwFAYD
VQQDEw02YWI1Yjg5OS1iNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuylT2qk+2m1Y/XDTcADu6C8TiTp7TjXpiyaVfTJaHcCqD8LKEWwkGNtQFxEh
i2qxp8NnFuYr3sjUxV/+Tmi0640SS5xYBgd9aqUV4KyVcO4B/8ENlnOT5bNmsDEY
rUs+ux4IK2d/2RkQRslEjTOIdf77aBGPYaTOU92A4RWMRYu/2isBGDJ3mnRPcZVE
FiBHeGozcDxem69gyppQOZG0UeS/OSM/rBxLyBQVJQP23htgdIILY81H3hrqaJBI
o14Mb8hJZ5FRbZXd1wVMjsmhEqXlQdxvCHEfb2fCl8iusnjFRZ0f7i9TmBeTYLis
uPirxWYkTf9KmOBNlQ4zPpJiNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbDCf4N
ITtCQ4GFGpp/ARdx2W2mMB8GA1UdIwQYMBaAFE+DAOENyiTVZdM/Aq04bm9XOPkK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM3Qy82QUU3NjE1MkFC
MzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pOVmwwejhDclRodWIxYzQt
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q0TUE0UTNLSk5WbDB6OENyVGh1YjFjNC1Rby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REM3Qy82QUU3NjE1MkFCMzgxMUVDOEJEQjhDM0NDNEY5QUUwMi9UNE1BNFEzS0pO
VmwwejhDclRodWIxYzQtUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAG+K38ZJ4C96147cmjAMcHiXqmC3e8ie5JrNjhNBA56t1Uvn0OYcd1buFWB3D
qGRLemarG54qP1pxUslYsgLPmk/3mdQZrx3kKxDNGdm5V4rZxMp03F2zb2Q+vK8n
30yJTuENMWcz4AJJYeTrrpbMt8s873H0wzuu31iXGy3lkesApPQFa5ixen8Cs7AY
5u4bpUYQFO3jAQ/hgUeQlbVm85RfC3uvpgn97p9OGP9greacoP/2piYVt343rY71
5nCZDAvc/IzueOZvYqtnGa/EJxDKpmoDRGuJJ1hSR0oTV/KFs2TJehIYRZK7WHeV
brJc8L2yNLlxpSG0gbhMAstuQw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:17:23 2026 by rpki-client