Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
File:                     cIW1tFSazbW2wnBMhbp4h2D4iic.mft (raw, json)
Hash identifier:          yf8cYZB5xKOqs+ABmgnfwyeoVyvvAGAk2uRyTqxvPUQ=
Subject key identifier:   AD:77:4B:FE:72:78:BD:3C:BC:97:0A:C7:44:2A:5C:71:87:2A:7F:23
Authority key identifier: 70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27
Certificate issuer:       /CN=A91722A3/serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27
Certificate serial:       0C84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
Manifest number:          0C7A
Signing time:             Sat 26 Sep 2026 18:44:39 +0000
Manifest this update:     Sat 26 Sep 2026 18:44:38 +0000
Manifest next update:     Sat 03 Oct 2026 18:44:38 +0000
Files and hashes:         1: cIW1tFSazbW2wnBMhbp4h2D4iic.crl (hash: dDGDtpkJG8gdrEb0Pxt1V63y88zgUKrXM7LjTJU5ch8=)
                          2: 002DDDC22B9D11EA92F3094CC4F9AE02.roa (hash: bcFMpQtRC/rqeGP9esVeD25xYCU2sXQbGEoW2r6Fpqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.crl
                          rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3204 (0xc84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91722A3, serialNumber=7085B5B4549ACDB5B6C2704C85BA788760F88A27
        Validity
            Not Before: Sep 26 18:44:38 2026 GMT
            Not After : Oct  3 18:44:38 2026 GMT
        Subject: CN=6ab81297-0359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:ff:88:85:48:8c:b3:3b:08:e4:61:8a:02:
                    ea:54:5e:50:e4:20:a1:1e:fc:b2:a9:e9:ab:c5:f9:
                    a6:0a:eb:e6:20:e4:9c:46:09:b6:b8:57:e6:7d:57:
                    0d:82:aa:4a:27:69:89:82:9a:af:c8:18:bd:ae:29:
                    9a:93:c9:2d:2e:2c:84:c8:ce:59:6e:56:18:31:ad:
                    30:8d:5a:88:1d:bb:c2:df:39:8b:08:59:f8:a9:84:
                    df:89:34:40:11:cc:1f:cd:ea:87:d7:cc:f7:3f:c6:
                    ab:51:51:67:41:49:b3:05:bb:c9:f4:cf:0e:2d:34:
                    2f:b1:82:70:70:d2:e9:b0:a1:7c:37:fe:f7:46:ae:
                    f1:c4:16:c5:7f:3d:c5:b5:33:0b:b3:51:d9:17:60:
                    44:79:12:b0:aa:46:51:5a:e4:3c:76:1a:29:0d:6d:
                    8b:87:3a:4b:87:f3:4a:67:fb:ec:9b:89:68:6d:3e:
                    f0:92:44:b3:75:4c:d5:42:9a:d8:eb:f5:d9:5c:1e:
                    1f:b9:7d:e7:cb:9c:9e:89:18:31:76:9a:df:04:56:
                    e5:3d:9f:68:63:de:69:a7:d0:95:23:f8:17:e6:d4:
                    cf:57:9a:98:21:07:b1:c5:62:81:03:96:a2:9d:93:
                    47:93:8b:cc:43:a5:23:84:7d:ec:10:86:1e:61:bd:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:77:4B:FE:72:78:BD:3C:BC:97:0A:C7:44:2A:5C:71:87:2A:7F:23
            X509v3 Authority Key Identifier:
                keyid:70:85:B5:B4:54:9A:CD:B5:B6:C2:70:4C:85:BA:78:87:60:F8:8A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cIW1tFSazbW2wnBMhbp4h2D4iic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722A3/C02D85DE2B9B11EA972CDF46C4F9AE02/cIW1tFSazbW2wnBMhbp4h2D4iic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9e:a0:93:57:67:94:34:6d:3e:17:4e:80:c0:2b:a9:f3:55:
         87:54:ee:75:e4:ea:57:3a:6d:8f:b4:18:48:f0:fe:80:65:a7:
         9a:49:62:07:02:18:15:03:bc:0a:48:9e:cd:51:ec:8f:d1:02:
         af:f0:fa:0d:bb:d0:9e:46:2d:27:ad:2c:a0:bf:d7:73:b1:a5:
         70:2d:01:28:77:eb:a8:db:ba:e0:3b:54:d0:a1:ad:75:1c:6e:
         ea:c7:29:72:bf:7c:2c:c1:15:21:45:9e:52:61:60:b1:aa:b9:
         71:56:0d:61:67:5f:47:4f:19:a1:59:60:37:ea:0b:fe:46:9f:
         e8:fc:ca:e5:ed:26:50:bc:38:f7:17:51:2c:d1:26:c9:9f:db:
         88:19:48:e6:48:e8:24:5b:84:6a:81:54:96:ea:d9:3d:90:94:
         44:03:b0:f5:9b:18:6c:14:76:d2:f1:65:b8:fa:f3:7d:7d:35:
         69:b3:cc:7c:8d:1f:ce:1c:cc:f0:1b:35:4c:41:06:99:45:07:
         e5:8a:95:90:f5:b0:b8:91:29:0b:34:9a:f2:fa:a5:33:63:c3:
         be:26:5d:ef:e4:b8:35:4a:46:d8:b5:fe:d9:5f:f4:47:eb:dd:
         95:ef:e7:67:66:cd:5d:5d:a1:47:ed:06:2c:5b:fe:db:92:c7:
         e4:79:b3:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzIyQTMxMTAvBgNVBAUTKDcwODVCNUI0NTQ5QUNEQjVCNkMyNzA0Qzg1QkE3ODg3
NjBGODhBMjcwHhcNMjYwOTI2MTg0NDM4WhcNMjYxMDAzMTg0NDM4WjAYMRYwFAYD
VQQDEw02YWI4MTI5Ny0wMzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsr/iIVIjLM7CORhigLqVF5Q5CChHvyyqemrxfmmCuvmIOScRgm2uFfmfVcN
gqpKJ2mJgpqvyBi9rimak8ktLiyEyM5ZblYYMa0wjVqIHbvC3zmLCFn4qYTfiTRA
EcwfzeqH18z3P8arUVFnQUmzBbvJ9M8OLTQvsYJwcNLpsKF8N/73Rq7xxBbFfz3F
tTMLs1HZF2BEeRKwqkZRWuQ8dhopDW2LhzpLh/NKZ/vsm4lobT7wkkSzdUzVQprY
6/XZXB4fuX3ny5yeiRgxdprfBFblPZ9oY95pp9CVI/gX5tTPV5qYIQexxWKBA5ai
nZNHk4vMQ6UjhH3sEIYeYb0xZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK13S/5y
eL08vJcKx0QqXHGHKn8jMB8GA1UdIwQYMBaAFHCFtbRUms21tsJwTIW6eIdg+Ion
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJBMy9DMDJEODVERTJC
OUIxMUVBOTcyQ0RGNDZDNEY5QUUwMi9jSVcxdEZTYXpiVzJ3bkJNaGJwNGgyRDRp
aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NJVzF0RlNhemJXMnduQk1oYnA0aDJENGlpYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjJBMy9DMDJEODVERTJCOUIxMUVBOTcyQ0RGNDZDNEY5QUUwMi9jSVcxdEZTYXpi
VzJ3bkJNaGJwNGgyRDRpaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj56gk1dnlDRtPhdOgMArqfNVh1TudeTqVzptj7QYSPD+gGWnmkliBwIYFQO8
CkiezVHsj9ECr/D6DbvQnkYtJ60soL/Xc7GlcC0BKHfrqNu64DtU0KGtdRxu6scp
cr98LMEVIUWeUmFgsaq5cVYNYWdfR08ZoVlgN+oL/kaf6PzK5e0mULw49xdRLNEm
yZ/biBlI5kjoJFuEaoFUlurZPZCURAOw9ZsYbBR20vFluPrzfX01abPMfI0fzhzM
8Bs1TEEGmUUH5YqVkPWwuJEpCzSa8vqlM2PDviZd7+S4NUpG2LX+2V/0R+vdle/n
Z2bNXV2hR+0GLFv+25LH5Hmz3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:09:00 2026 by rpki-client