Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
File:                     ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json)
Hash identifier:          mx7cpn4+tOfYDVRBIOi6G35KBg9JC0lErHCxOW6qB6U=
Subject key identifier:   C7:68:06:5C:AD:6B:13:8E:C4:1A:C2:7D:2D:05:41:94:6F:98:31:30
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Certificate issuer:       /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
Manifest number:          021B
Signing time:             Wed 23 Sep 2026 02:44:59 +0000
Manifest this update:     Wed 23 Sep 2026 02:44:59 +0000
Manifest next update:     Wed 30 Sep 2026 02:44:59 +0000
Files and hashes:         1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: 627usikBoqS0bKl/q28xtWjPC3F2a505mBsJRQ21vfI=)
                          2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: HD0K5jglBpup2Ya1bJZyAOnbAr95k75UE1CHe344A3s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
                          rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
        Validity
            Not Before: Sep 23 02:44:59 2026 GMT
            Not After : Sep 30 02:44:59 2026 GMT
        Subject: CN=6ab33d2b-b7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:17:bb:e8:7c:0a:ac:4d:67:40:4c:8b:c6:
                    6f:9a:20:be:62:2a:1e:0a:a6:d2:da:fb:da:86:1a:
                    8f:cc:94:9e:5f:e0:a3:fb:69:f3:dc:12:c3:87:e5:
                    30:65:5f:e4:c3:f2:f7:c1:7a:5b:f4:3d:fa:d7:ee:
                    02:82:5e:72:8d:c1:9b:a0:48:20:2c:75:c7:16:17:
                    fd:7a:9d:7f:92:df:69:b6:c6:53:ab:c3:3f:b4:3b:
                    2a:a5:d8:b6:cb:7b:9a:22:9c:eb:34:10:be:df:41:
                    5e:42:29:2e:f8:37:63:41:9f:ef:b4:4f:57:46:f4:
                    4e:b7:9e:a1:fc:3d:fc:4b:b4:09:8c:6c:82:ed:ec:
                    e8:71:19:2b:8a:8d:a0:88:a1:f2:a9:e3:fb:d8:15:
                    ee:f4:cb:bd:1a:1d:bb:20:cf:eb:5f:d8:e6:e9:db:
                    2a:0e:87:6c:34:d9:8d:c0:8b:dd:ab:c4:4b:1d:06:
                    12:9b:8b:1c:56:6b:30:7a:73:32:75:45:76:0b:a5:
                    e9:a3:3f:7c:68:6f:d9:7b:34:59:e8:4b:ec:36:38:
                    5c:df:07:f6:33:e6:4f:0b:70:52:c6:2f:7e:ab:6e:
                    7f:45:f6:42:c1:00:b2:f2:e9:91:d8:9c:2f:a6:d9:
                    1b:3d:1d:d8:59:d4:f3:1a:26:23:14:e3:9b:4d:75:
                    8d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:68:06:5C:AD:6B:13:8E:C4:1A:C2:7D:2D:05:41:94:6F:98:31:30
            X509v3 Authority Key Identifier:
                keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:bc:08:21:62:5e:65:b5:65:52:82:e7:9d:49:fb:a2:ea:19:
         34:6e:c8:2a:72:3e:98:e7:60:84:b4:fd:c1:bd:1a:24:87:2c:
         9a:66:cf:0c:69:80:f1:71:89:a7:b7:63:b4:42:24:4c:e1:3e:
         a2:88:0f:1d:88:a5:30:db:4a:9a:96:5a:fc:23:04:b3:6b:c1:
         18:bf:d3:ab:63:43:62:51:73:28:c4:d3:93:0b:df:db:4a:2d:
         c9:7c:70:22:71:ee:c4:d3:d4:81:f6:ac:f9:19:74:d5:0b:44:
         be:b1:d3:ba:89:6b:88:71:22:58:08:1d:63:b6:33:6d:81:c0:
         4f:8e:01:ff:ba:fd:e1:65:4b:78:80:74:18:e5:87:7b:10:b1:
         f8:eb:f9:31:08:41:da:c9:6c:be:4b:64:ef:16:b8:13:0d:12:
         bc:66:4a:07:53:9c:c2:31:04:5a:cc:0a:44:55:4e:5f:07:fd:
         4d:c6:92:f2:94:32:fd:2d:ba:bc:12:e0:40:20:8b:af:80:af:
         3b:4d:b3:8c:33:76:a5:27:01:39:56:b8:24:73:48:e6:b4:dd:
         0a:66:21:9c:50:b4:b7:ad:0e:8a:6f:53:99:d3:f0:84:25:1a:
         86:9a:76:74:9e:88:cb:19:de:d0:d7:64:61:8f:7e:e4:a1:69:
         09:58:14:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0RjcxMTAvBgNVBAUTKDIyRDNFOTc0NERBRDQ5NzUwMzZDQzQyMkFDMTFDNDA0
NzIwRTY2RUEwHhcNMjYwOTIzMDI0NDU5WhcNMjYwOTMwMDI0NDU5WjAYMRYwFAYD
VQQDEw02YWIzM2QyYi1iN2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqmIXu+h8CqxNZ0BMi8ZvmiC+YioeCqbS2vvahhqPzJSeX+Cj+2nz3BLDh+Uw
ZV/kw/L3wXpb9D361+4Cgl5yjcGboEggLHXHFhf9ep1/kt9ptsZTq8M/tDsqpdi2
y3uaIpzrNBC+30FeQiku+DdjQZ/vtE9XRvROt56h/D38S7QJjGyC7ezocRkrio2g
iKHyqeP72BXu9Mu9Gh27IM/rX9jm6dsqDodsNNmNwIvdq8RLHQYSm4scVmswenMy
dUV2C6Xpoz98aG/ZezRZ6EvsNjhc3wf2M+ZPC3BSxi9+q25/RfZCwQCy8umR2Jwv
ptkbPR3YWdTzGiYjFOObTXWNsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdoBlyt
axOOxBrCfS0FQZRvmDEwMB8GA1UdIwQYMBaAFCLT6XRNrUl1A2zEIqwRxARyDmbq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTRGNy8yQTQ4OTM4NjdF
ODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNYVURiTVFpckJIRUJISU9a
dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0UHBkRTJ0U1hVRGJNUWlyQkhFQkhJT1p1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTRGNy8yQTQ4OTM4NjdFODIxMUVFOTlEQTlCN0FDNEY5QUUwMi9JdFBwZEUydFNY
VURiTVFpckJIRUJISU9adW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu7wIIWJeZbVlUoLnnUn7ouoZNG7IKnI+mOdghLT9wb0aJIcsmmbPDGmA8XGJ
p7djtEIkTOE+oogPHYilMNtKmpZa/CMEs2vBGL/Tq2NDYlFzKMTTkwvf20otyXxw
InHuxNPUgfas+Rl01QtEvrHTuolriHEiWAgdY7YzbYHAT44B/7r94WVLeIB0GOWH
exCx+Ov5MQhB2slsvktk7xa4Ew0SvGZKB1OcwjEEWswKRFVOXwf9TcaS8pQy/S26
vBLgQCCLr4CvO02zjDN2pScBOVa4JHNI5rTdCmYhnFC0t60Oim9TmdPwhCUahpp2
dJ6Iyxne0NdkYY9+5KFpCVgUhA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:11:28 2026 by rpki-client