Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File:                     tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier:          5T9D2EiGLLcHNckPdMpa7GKk+ZZomwM+N8z5M1WO1ZI=
Subject key identifier:   B0:7B:53:76:3B:DB:25:84:1F:B2:38:01:A5:4A:90:07:FE:C0:53:4C
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number:          0124
Signing time:             Wed 23 Sep 2026 06:49:15 +0000
Manifest this update:     Wed 23 Sep 2026 06:49:14 +0000
Manifest next update:     Wed 30 Sep 2026 06:49:14 +0000
Files and hashes:         1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: sQc/42+e0Ehh7WY3PcG1KWkf0z6kCDONP/AgKpKv7es=)
                          2: CFF23F5457FA11F1947AF89298833773.roa (hash: 70J08+H/ExNxc8jpD+BsqCt2q0k+wbGOjpsoiz2ROjA=)
                          3: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=)
                          4: 620D8D92B24311F1B988EDDC6311F970.roa (hash: qxlzMzNMGw6ZR6vXmyZ4a2jsUlkB5KPOP3YwetQdzwA=)
                          5: 0A4D26588F9811F187E520485C11F970.roa (hash: 3DRYyDNZn0xnswRBJSAxhjSfQjHsJA8mc7gZgee0QnE=)
                          6: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=)
                          7: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: Rqu5d6Iyt5RvWg05t+Bs6MR1vP48lOt2FAst15Iu7bg=)
                          8: 5B9CF7B8541011F193006E3293833773.roa (hash: UEPdDUTRui+ayW3AbcnrWggT880Cdd6becbTRiUrqEI=)
                          9: A4BC6B5699C811F19653C7033B11F970.roa (hash: DqYOnXpwLmKKYMjJJokS/b8klmENEW8C0tDont5K9Pw=)
                          10: DF86A79EAA4711F18D6FC91D5811F970.roa (hash: di6G4Ok2YL2ICDAjJ+SX840gtU1xkz52o/rsk7i69L0=)
                          11: ABCCE66C445C11F1AD9768EE92833773.roa (hash: 9iBZLQ9uktWZ65mu8nlRlZWV5ecR8Ndx/Ji4IWLuSGw=)
                          12: D2D5E3A2429111F1A9B50A47B2833773.roa (hash: JNJnwJdlLDhaD1G/+iNzHqjRU67B9dzGcdSz2okho74=)
                          13: 1A44C40648FF11F1AE16E45D93833773.roa (hash: q7YWA5SPxz9lm686m7SUsJ/DXFlxCYiGkRbWYzw7qBs=)
                          14: 9FA8D4DCA50411F18265DE6C3311F970.roa (hash: ncxhXez+ge66tRuP9GlI5BQTNpxBURFVOTzkOlVAARM=)
                          15: 3A70BFEC8C6F11F185F85D156111F970.roa (hash: XCQ95gaGyvxA7SNwZiogDe3J8T2Hjl5LHuJIkuOVpsw=)
                          16: 04910FD2A1A311F1B09ED42E6611F970.roa (hash: YhlkiTpSvf0X1OyOQCbOLY2s/yzWRi7pqB/JUq+tVwg=)
                          17: 80CB68A68EC811F1946CF5105A11F970.roa (hash: Ow3UmxXOic3HNzm9LDvmvAwHX174ghnh0IzFZYxiFW0=)
                          18: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: 4HZ72AqLXMi7Oo7fFl4c7MxtfYI6Hr7/6V24G0+ZxdI=)
                          19: 88221330A26D11F19D29C37F6511F970.roa (hash: z551IATQrx2AVRTObISYemc3UykqMiktmWx2mC6/YLM=)
                          20: A2517D166EAD11F18743D71861A30FBC.roa (hash: EXYW07HU+PDuF2Sjxw7qGLvDdb4Ds1WxfwmESxYCYx4=)
                          21: 23967BF24A7711F1A7BED77BA6833773.roa (hash: Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=)
                          22: D1D5C8C0A59011F193111DFE6011F970.roa (hash: qCJvwBrlqKx5E3VgjdWqgEUqcE6G1sCbDQGpoZR3Wb0=)
                          23: DF3E21307BFE11F198B5A8F78EA30FBC.roa (hash: NT30pur8xhY9PcKqmg6IwjPQmddy3T3G46Qh5vdQmt8=)
                          24: B9DCE45A347111F19700968FA5833773.roa (hash: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=)
                          25: 8FFB3BA07E4A11F1907D372082A30FBC.roa (hash: 2pEoKCofwg8TjGaQHu2CywBBegMX4ui6vfX3Ybywow4=)
                          26: D33618D2A59011F193111DFE6011F970.roa (hash: HrkKSxhRpAmy9I0iwuLSShrDvnrHJsSmxa97enwplS8=)
                          27: 0F05CF767A6011F1976E05638BA30FBC.roa (hash: 7B1bqD+6h9jyiiQRYsB8Q16/B9nLv79GenM8klf3G4g=)
                          28: A7349B8A499E11F19CE2905A97833773.roa (hash: tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=)
                          29: A5C7652899C811F19653C7033B11F970.roa (hash: VH6+CPwDbSz/ISDti0F/lzMzff0Xd0BlKucLWf6GuRY=)
                          30: AFBA3B6099CC11F1A36A837B3B11F970.roa (hash: H/OHVH3gHMbF1VZocaHnojjYPp+zCG+XnnmhJV9htu8=)
                          31: 0E6E84F47A6011F1976E05638BA30FBC.roa (hash: HtUuAkol0mHQrD42lO6MoPJ+Ejb03iZZDhqfCwpcfTY=)
                          32: 2AFD25C0A10311F1ABE0DDFE3411F970.roa (hash: hiQnkW/a3aw4sFHOLrSxIlaGj0c/SkbWMstmNg55aU4=)
                          33: 300E55D2645B11F19DFE990E7247A888.roa (hash: B8rZI43b2LUCXU8rE+xRAPdthQYs+K3MurmJh+dDXVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Sep 23 06:49:14 2026 GMT
            Not After : Sep 30 06:49:14 2026 GMT
        Subject: CN=6ab3766b-ecc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:b0:e9:99:67:2d:3d:74:1e:3f:3e:a9:8a:
                    c2:96:84:90:12:9f:09:3f:99:d2:76:2c:0f:b7:1a:
                    96:b3:1f:7c:21:b0:3b:7e:50:2c:c7:7e:a6:cf:5e:
                    89:c1:ec:82:2a:a4:a5:da:35:0c:d2:1f:89:57:ff:
                    48:cb:91:18:8c:aa:da:aa:bd:d3:87:5f:be:83:99:
                    d6:b2:6a:29:ff:7a:b8:4f:d3:1b:f6:bf:2e:22:8e:
                    01:0d:55:d9:9c:72:ef:48:3a:57:f9:03:d8:de:7c:
                    38:3b:93:43:9a:04:ea:24:bf:fb:ad:6d:5a:60:c2:
                    47:7f:67:c0:41:cb:9e:81:7e:b8:70:d8:df:63:0e:
                    bb:fb:33:c7:b9:4f:5d:86:6c:32:2f:2c:24:e2:2a:
                    bd:dc:c7:6f:5d:6a:d9:25:a1:0b:b6:78:16:d4:0b:
                    ff:c6:64:e4:95:48:2d:3f:5c:ce:1f:53:1a:0c:77:
                    91:9d:17:ff:66:a8:d9:f8:36:4c:e7:5e:80:6d:37:
                    d7:1e:f7:cd:53:a8:81:85:13:34:63:10:a1:dc:fb:
                    76:c1:be:d3:42:b4:b0:8f:44:b8:8a:8a:cf:51:97:
                    56:f8:7c:69:db:44:6c:59:49:94:13:8f:58:61:38:
                    4d:23:02:57:20:83:2b:e3:ee:12:5d:c1:28:3c:9c:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7B:53:76:3B:DB:25:84:1F:B2:38:01:A5:4A:90:07:FE:C0:53:4C
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e5:49:24:60:e3:49:5a:03:21:e4:4f:81:11:31:8f:e8:12:
         09:82:5f:01:5b:08:aa:e0:c0:3f:c5:51:05:46:a2:3c:07:4d:
         fc:f5:31:b7:6f:2f:57:ab:35:e3:05:8b:d5:2a:4c:da:e7:4f:
         19:78:ba:70:f4:fa:5f:01:ad:3e:e3:2f:3f:06:82:db:3c:0a:
         06:a4:2d:6b:0f:f0:a8:7a:b9:ac:95:fa:e6:8f:d7:d0:d5:a6:
         d6:b0:18:1e:00:47:ed:77:2e:63:51:84:ec:04:96:9c:6e:b5:
         e9:4a:36:9c:82:4a:78:1b:f0:ae:65:29:cc:b9:4d:a6:c9:24:
         d6:5a:4c:18:2f:7d:e9:3e:f7:49:43:0b:f1:69:93:b4:54:c0:
         63:0a:a8:3f:15:36:0a:e1:1a:ff:1a:1b:f1:da:2d:d4:7d:37:
         2e:c3:1a:13:c9:fa:7f:85:63:97:13:99:66:11:4f:1d:31:32:
         55:0e:0f:51:59:31:e8:ad:c2:3f:11:3d:fd:f0:b8:9f:4e:f0:
         f8:bf:d5:0a:a6:bd:e4:fc:e6:42:d7:2d:51:fd:8a:90:2b:86:
         c4:a6:5a:ae:06:45:3c:6f:08:47:fc:1e:96:57:c6:ab:79:f4:
         1f:e3:04:b4:70:4e:2b:43:21:70:c4:a7:ec:52:0e:f6:15:d0:
         b8:ae:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:47:10 2026 by rpki-client