Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
File:                     1CVu3CvBHIRdtQe3wKiTVEYutj0.mft (raw, json)
Hash identifier:          Q4UQwIxiisJlivrKfnZx7wGkGr/tiJBPx/rjVm5he20=
Subject key identifier:   A5:3A:09:AD:80:A1:7F:2B:EA:CD:83:C5:31:84:49:50:0B:3C:D5:2D
Authority key identifier: D4:25:6E:DC:2B:C1:1C:84:5D:B5:07:B7:C0:A8:93:54:46:2E:B6:3D
Certificate issuer:       /CN=A9170DA5/serialNumber=D4256EDC2BC11C845DB507B7C0A89354462EB63D
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
Manifest number:          E8
Signing time:             Mon 21 Sep 2026 06:27:04 +0000
Manifest this update:     Mon 21 Sep 2026 06:27:03 +0000
Manifest next update:     Mon 28 Sep 2026 06:27:03 +0000
Files and hashes:         1: 1CVu3CvBHIRdtQe3wKiTVEYutj0.crl (hash: Lcs4eFVFaKzfRKUz3DGYazKUplfuhJMfyQJEHIYt/j0=)
                          2: F91ECAD6571B11F093AD0C10C4F9AE02.roa (hash: 8AGZO85cQ0zve4907lQJt8AAdjmdYVHacVOojhqCgwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.crl
                          rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170DA5, serialNumber=D4256EDC2BC11C845DB507B7C0A89354462EB63D
        Validity
            Not Before: Sep 21 06:27:03 2026 GMT
            Not After : Sep 28 06:27:03 2026 GMT
        Subject: CN=6ab0ce38-e066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:e9:85:5f:7c:d8:5b:4d:09:56:a7:d8:d2:
                    7a:90:a1:d1:21:3d:12:aa:03:4b:fa:70:27:1c:cf:
                    d1:12:a8:c2:4e:1c:53:0c:01:a5:11:63:d5:68:8d:
                    42:70:7b:9a:c4:80:2e:b5:ad:a1:8b:95:90:54:03:
                    5e:ba:05:8e:e2:1c:79:b3:8b:d4:92:22:3d:0b:bc:
                    6f:c6:8f:4b:19:60:69:c8:10:15:83:1f:2e:8d:ff:
                    89:6b:34:1d:9e:3a:08:4a:9c:a0:27:c5:55:10:a3:
                    9f:ba:39:89:99:0f:fe:d6:f1:64:9a:d3:8e:89:78:
                    4e:be:7d:42:78:8c:82:9a:d0:66:a3:7c:1b:1e:8e:
                    d5:ec:45:81:36:ba:66:94:06:ef:f9:e9:61:de:ba:
                    3a:dc:6c:f9:79:43:ed:f0:85:be:7d:9e:1f:f3:ea:
                    7f:d9:79:6a:87:da:c5:56:23:2e:cb:0b:9c:25:3d:
                    78:7f:5c:ac:61:75:8e:b4:0e:a1:5d:8b:ed:6a:86:
                    a2:27:f5:76:02:a4:44:a5:09:f8:93:95:6a:84:9e:
                    47:df:27:eb:2f:69:28:df:ef:4a:e0:c3:6f:3c:e8:
                    81:25:1a:e5:b4:81:21:04:16:2f:62:a7:79:db:cb:
                    2a:ac:68:04:4b:ca:3f:91:59:7a:16:85:27:60:b0:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3A:09:AD:80:A1:7F:2B:EA:CD:83:C5:31:84:49:50:0B:3C:D5:2D
            X509v3 Authority Key Identifier:
                keyid:D4:25:6E:DC:2B:C1:1C:84:5D:B5:07:B7:C0:A8:93:54:46:2E:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1CVu3CvBHIRdtQe3wKiTVEYutj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DA5/C559424A571A11F0B8507341C4F9AE02/1CVu3CvBHIRdtQe3wKiTVEYutj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cd:77:1a:70:ff:60:4f:f7:9f:cb:e4:3d:41:b8:be:1d:1f:
         91:34:d5:4c:e1:f1:3b:66:fa:21:ba:49:21:0d:c5:d7:58:99:
         0d:ed:34:5f:31:46:7c:21:7c:13:9b:46:7e:34:90:68:ce:96:
         dd:09:3f:b6:78:fb:61:40:8d:d5:1a:be:d4:b5:a1:4e:a0:b7:
         89:9e:01:66:92:39:7d:70:5b:36:55:1b:71:ef:f8:ce:de:48:
         4b:47:f7:1e:01:e4:b2:2d:f3:4c:7b:32:d1:53:49:f5:8e:6f:
         8f:b5:e8:c6:21:62:f3:78:b0:d0:f1:95:11:fc:f6:4b:26:da:
         5a:bb:9f:60:73:7d:57:57:56:38:77:de:2e:56:91:26:59:fd:
         2d:3f:6a:f7:8a:13:bb:7e:f6:58:58:01:c0:b2:5e:67:02:50:
         af:ca:0f:e3:8a:72:cb:86:d2:ed:1d:44:2d:88:e9:72:59:36:
         06:d4:d7:26:c2:16:cc:e5:ac:c8:32:1b:51:72:bf:1f:50:6c:
         96:af:bb:45:c1:5c:24:d3:86:75:d3:aa:90:aa:d0:b7:f4:4f:
         17:1c:43:d1:21:30:2a:5f:21:9b:7a:9f:d3:bf:e0:f8:9e:b6:
         64:60:8d:a8:86:1f:d0:9b:61:1e:e3:95:37:66:80:e4:ff:d6:
         a9:86:bd:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBEQTUxMTAvBgNVBAUTKEQ0MjU2RURDMkJDMTFDODQ1REI1MDdCN0MwQTg5MzU0
NDYyRUI2M0QwHhcNMjYwOTIxMDYyNzAzWhcNMjYwOTI4MDYyNzAzWjAYMRYwFAYD
VQQDEw02YWIwY2UzOC1lMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAskrphV982FtNCVan2NJ6kKHRIT0SqgNL+nAnHM/REqjCThxTDAGlEWPVaI1C
cHuaxIAuta2hi5WQVANeugWO4hx5s4vUkiI9C7xvxo9LGWBpyBAVgx8ujf+JazQd
njoISpygJ8VVEKOfujmJmQ/+1vFkmtOOiXhOvn1CeIyCmtBmo3wbHo7V7EWBNrpm
lAbv+elh3ro63Gz5eUPt8IW+fZ4f8+p/2Xlqh9rFViMuywucJT14f1ysYXWOtA6h
XYvtaoaiJ/V2AqREpQn4k5VqhJ5H3yfrL2ko3+9K4MNvPOiBJRrltIEhBBYvYqd5
28sqrGgES8o/kVl6FoUnYLDB3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKU6Ca2A
oX8r6s2DxTGESVALPNUtMB8GA1UdIwQYMBaAFNQlbtwrwRyEXbUHt8Cok1RGLrY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MERBNS9DNTU5NDI0QTU3
MUExMUYwQjg1MDczNDFDNEY5QUUwMi8xQ1Z1M0N2QkhJUmR0UWUzd0tpVFZFWXV0
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFDVnUzQ3ZCSElSZHRRZTN3S2lUVkVZdXRqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MERBNS9DNTU5NDI0QTU3MUExMUYwQjg1MDczNDFDNEY5QUUwMi8xQ1Z1M0N2QkhJ
UmR0UWUzd0tpVFZFWXV0ajAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQs13GnD/YE/3n8vkPUG4vh0fkTTVTOHxO2b6IbpJIQ3F11iZDe00XzFGfCF8
E5tGfjSQaM6W3Qk/tnj7YUCN1Rq+1LWhTqC3iZ4BZpI5fXBbNlUbce/4zt5IS0f3
HgHksi3zTHsy0VNJ9Y5vj7XoxiFi83iw0PGVEfz2SybaWrufYHN9V1dWOHfeLlaR
Jln9LT9q94oTu372WFgBwLJeZwJQr8oP44pyy4bS7R1ELYjpclk2BtTXJsIWzOWs
yDIbUXK/H1Bslq+7RcFcJNOGddOqkKrQt/RPFxxD0SEwKl8hm3qf07/g+J62ZGCN
qIYf0JthHuOVN2aA5P/WqYa9cA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:32:17 2026 by rpki-client