Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
File:                     8D39OxYGRUyhuoaQPnmtpwULoWo.mft (raw, json)
Hash identifier:          e/Qw2IKem3WrTRzTvILUXsqbSkSlY9BQaA3141ZaGSk=
Subject key identifier:   04:44:2F:80:39:37:4B:4B:C3:34:76:2D:D3:10:8F:12:13:E7:6D:B3
Authority key identifier: F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A
Certificate issuer:       /CN=A9172C46/serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
Manifest number:          E4
Signing time:             Sun 27 Sep 2026 07:10:26 +0000
Manifest this update:     Sun 27 Sep 2026 07:10:25 +0000
Manifest next update:     Sun 04 Oct 2026 07:10:25 +0000
Files and hashes:         1: 8D39OxYGRUyhuoaQPnmtpwULoWo.crl (hash: HUscle3WJH/zKQmLPaRgjLTBkycYUzI+ijlWzrx+q8Q=)
                          2: 2E834C9C719311F08B21BD17C4F9AE02.roa (hash: hwLwpZ+vQeoj4DNhd3FXkI8NzzeWy3sKRVcJ7YZLrN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl
                          rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172C46, serialNumber=F03DFD3B1606454CA1BA86903E79ADA7050BA16A
        Validity
            Not Before: Sep 27 07:10:25 2026 GMT
            Not After : Oct  4 07:10:25 2026 GMT
        Subject: CN=6ab8c162-0f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:e0:b8:d7:9e:fd:6d:a9:96:67:33:a7:4f:
                    00:e1:e3:6c:49:92:7c:ee:fb:e4:49:49:ee:00:c9:
                    8c:c4:1a:8b:ab:6b:13:44:14:44:4d:c4:d0:bf:61:
                    a2:11:26:b5:c8:75:49:c3:21:5a:4d:63:9d:03:3f:
                    03:9b:c2:20:25:aa:49:12:d5:e6:a9:3b:e6:2b:c8:
                    ce:76:b8:0c:c4:d3:e7:bb:43:0b:b0:de:56:f9:bf:
                    c3:0e:13:63:7b:75:d7:90:b8:3f:69:09:36:97:88:
                    e5:29:02:d0:cb:3d:fc:e9:e4:25:44:b5:41:04:07:
                    17:c0:c9:18:55:9b:fb:7d:0a:6c:07:c8:39:30:0c:
                    a0:53:c3:0e:64:0c:5e:14:ea:05:aa:24:5f:60:0f:
                    1c:4c:90:ac:4d:a2:ad:8a:d2:95:7a:63:fc:f0:68:
                    fe:ac:c2:22:3c:8e:1e:7b:36:d1:d1:e9:ff:69:35:
                    db:f7:34:c3:1d:a1:82:92:a8:f7:6b:ef:3d:e3:bd:
                    db:38:e7:35:84:ba:18:a1:27:ba:17:a5:f2:b4:27:
                    c4:92:3c:7c:05:cf:86:74:3e:c5:c2:c3:b3:d6:d5:
                    b4:94:be:ca:ee:e7:05:55:ab:cc:9e:37:5b:7a:d7:
                    3d:35:a8:b2:7d:16:38:63:2a:51:0f:7b:cf:01:4c:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:2F:80:39:37:4B:4B:C3:34:76:2D:D3:10:8F:12:13:E7:6D:B3
            X509v3 Authority Key Identifier:
                keyid:F0:3D:FD:3B:16:06:45:4C:A1:BA:86:90:3E:79:AD:A7:05:0B:A1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D39OxYGRUyhuoaQPnmtpwULoWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C46/900389FE710D11F08083452FC4F9AE02/8D39OxYGRUyhuoaQPnmtpwULoWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ed:c3:55:76:96:57:5b:5d:c6:67:89:bd:6a:40:89:e2:c8:
         3b:2e:d4:77:ff:f6:2b:20:c4:ad:c1:33:c2:97:a2:70:3c:0b:
         68:9d:55:a1:3d:71:80:c5:54:97:17:13:6a:d8:4b:ab:7d:24:
         b0:bf:4b:b0:22:ec:8e:54:7d:b0:ec:93:0a:0e:7c:d5:54:81:
         bd:f7:ed:7c:bb:aa:34:13:bf:3a:4a:bf:ad:8f:59:9c:fc:9f:
         9c:44:ef:69:cb:49:56:ce:ba:f1:b3:00:eb:f1:38:83:26:89:
         04:42:c2:f8:ff:88:30:8e:9a:11:c4:f1:a5:27:e0:fc:26:f0:
         58:f4:6e:2d:50:c6:63:b0:8f:59:e5:fb:36:22:f5:ff:65:57:
         24:a1:c7:0d:ca:31:7a:e7:4c:0d:42:ab:d2:5c:45:99:a7:7f:
         fc:14:d3:2a:77:53:79:32:ae:dd:ff:11:97:9b:58:92:86:7b:
         de:1c:9e:5f:ab:29:fc:d6:51:df:ab:cd:ad:8d:28:a8:d3:7a:
         72:ba:ca:cb:e7:53:99:7f:dd:a9:aa:e0:2b:66:6c:c5:b9:22:
         98:56:40:d2:7d:4d:f1:35:b9:c9:62:79:a7:61:49:2e:90:4f:
         33:1d:5b:f1:b9:25:a6:1a:cb:ec:c1:e0:a7:53:c5:2f:63:0f:
         fb:92:02:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJDNDYxMTAvBgNVBAUTKEYwM0RGRDNCMTYwNjQ1NENBMUJBODY5MDNFNzlBREE3
MDUwQkExNkEwHhcNMjYwOTI3MDcxMDI1WhcNMjYxMDA0MDcxMDI1WjAYMRYwFAYD
VQQDEw02YWI4YzE2Mi0wZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv2PguNee/W2plmczp08A4eNsSZJ87vvkSUnuAMmMxBqLq2sTRBRETcTQv2Gi
ESa1yHVJwyFaTWOdAz8Dm8IgJapJEtXmqTvmK8jOdrgMxNPnu0MLsN5W+b/DDhNj
e3XXkLg/aQk2l4jlKQLQyz386eQlRLVBBAcXwMkYVZv7fQpsB8g5MAygU8MOZAxe
FOoFqiRfYA8cTJCsTaKtitKVemP88Gj+rMIiPI4eezbR0en/aTXb9zTDHaGCkqj3
a+89473bOOc1hLoYoSe6F6XytCfEkjx8Bc+GdD7FwsOz1tW0lL7K7ucFVavMnjdb
etc9NaiyfRY4YypRD3vPAUwq6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAREL4A5
N0tLwzR2LdMQjxIT522zMB8GA1UdIwQYMBaAFPA9/TsWBkVMobqGkD55racFC6Fq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM0Ni85MDAzODlGRTcx
MEQxMUYwODA4MzQ1MkZDNEY5QUUwMi84RDM5T3hZR1JVeWh1b2FRUG5tdHB3VUxv
V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhEMzlPeFlHUlV5aHVvYVFQbm10cHdVTG9Xby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkM0Ni85MDAzODlGRTcxMEQxMUYwODA4MzQ1MkZDNEY5QUUwMi84RDM5T3hZR1JV
eWh1b2FRUG5tdHB3VUxvV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE+3DVXaWV1tdxmeJvWpAieLIOy7Ud//2KyDErcEzwpeicDwLaJ1VoT1xgMVU
lxcTathLq30ksL9LsCLsjlR9sOyTCg581VSBvfftfLuqNBO/Okq/rY9ZnPyfnETv
actJVs668bMA6/E4gyaJBELC+P+IMI6aEcTxpSfg/CbwWPRuLVDGY7CPWeX7NiL1
/2VXJKHHDcoxeudMDUKr0lxFmad//BTTKndTeTKu3f8Rl5tYkoZ73hyeX6sp/NZR
36vNrY0oqNN6crrKy+dTmX/dqargK2ZsxbkimFZA0n1N8TW5yWJ5p2FJLpBPMx1b
8bklphrL7MHgp1PFL2MP+5IC1w==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:27:05 2026 by rpki-client