Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft
File:                     7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft (raw, json)
Hash identifier:          Cts6wmGq7ZEGlN6UMLljJDWlaA0NNDANdjzZkABJGY8=
Subject key identifier:   F6:29:E0:5C:0B:B7:7C:B2:27:8D:C1:95:78:6B:FA:19:32:99:CD:EF
Authority key identifier: EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78
Certificate issuer:       /CN=A917A689/serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft
Manifest number:          2F
Signing time:             Tue 29 Sep 2026 09:22:35 +0000
Manifest this update:     Tue 29 Sep 2026 09:22:34 +0000
Manifest next update:     Tue 06 Oct 2026 09:22:34 +0000
Files and hashes:         1: 7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl (hash: OJ2IWL99EFUQnowgMnCgSQZGsY5yLV1Cc6jnBRhu2cQ=)
                          2: 6BB66614922E11F1A0FBFE5C6C11F970.roa (hash: mCT+YqSEAXN3Qz20/1loqK5VGh0Yd2JbQFmwVbOtvZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl
                          rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 09:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A689, serialNumber=EE3D28B43E52463F5361084D3B4CD15FB121DC78
        Validity
            Not Before: Sep 29 09:22:34 2026 GMT
            Not After : Oct  6 09:22:34 2026 GMT
        Subject: CN=6abb835b-d1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:11:6a:8c:a5:04:2c:5f:a9:71:5a:7a:57:
                    a0:43:ad:e8:29:0e:06:16:1b:f4:28:53:b0:f3:cf:
                    d4:aa:94:16:d1:61:ca:a8:12:93:3b:e7:0c:68:35:
                    03:25:07:ca:78:c3:d9:a2:92:f8:aa:ea:69:1a:2c:
                    16:f7:e2:bc:f8:1b:d5:62:93:50:52:a8:54:11:ba:
                    c6:9c:0f:9c:09:b6:f1:51:ed:23:c1:f1:50:5a:2e:
                    b0:73:2d:75:e9:48:f2:a5:9a:31:83:9a:6a:51:bf:
                    3c:82:94:d1:eb:a6:97:13:ce:f1:5c:b7:9b:0e:e9:
                    ff:13:2b:df:a6:f4:b8:1d:96:74:16:c3:38:05:20:
                    05:41:ce:7d:bc:99:7e:89:00:f9:69:50:7a:bf:a6:
                    0b:12:9a:f1:ea:a7:49:02:11:ab:f9:17:13:30:c3:
                    e8:2a:1f:53:af:51:bc:03:12:15:8a:8f:9e:60:ae:
                    9a:22:5c:9a:e1:4a:f2:6c:b7:e1:39:42:7f:03:cd:
                    d8:91:6f:cb:a8:0e:bc:38:5c:5f:59:6b:06:bf:b0:
                    87:a2:0c:50:f4:58:cb:31:77:1c:6f:d5:0a:df:e2:
                    d3:ed:65:ce:29:30:38:e1:e7:71:57:fd:42:d1:05:
                    8d:5e:c1:ac:08:88:2b:b7:3c:76:cf:9b:3b:07:90:
                    5b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:29:E0:5C:0B:B7:7C:B2:27:8D:C1:95:78:6B:FA:19:32:99:CD:EF
            X509v3 Authority Key Identifier:
                keyid:EE:3D:28:B4:3E:52:46:3F:53:61:08:4D:3B:4C:D1:5F:B1:21:DC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A689/98A43D127A9711F1BA4F8F545DA30FBC/7j0otD5SRj9TYQhNO0zRX7Eh3Hg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:fb:04:d6:10:ef:57:b4:e3:ce:d5:06:f8:da:64:02:bd:c5:
         1f:de:f2:83:6c:f4:12:d8:bb:c9:1f:3f:39:ad:cd:75:83:23:
         4c:a8:71:1b:65:8e:05:8f:8a:cb:ba:e4:6f:16:07:a1:bb:82:
         f4:4b:6a:40:03:78:50:37:09:24:a8:06:63:e1:d3:11:4e:06:
         1d:76:4d:c8:e9:f0:a4:53:4e:f8:fc:47:a0:fc:28:cd:fc:19:
         a7:92:c0:48:22:be:60:d0:27:ef:d0:b4:61:7f:d6:af:f2:6d:
         35:9d:1f:0c:3c:6f:6a:2a:62:81:91:83:d8:f4:b7:be:45:27:
         db:33:b2:87:9e:3d:54:23:91:19:81:b9:1e:14:d0:fa:57:ca:
         fe:d5:91:02:48:ed:e8:c1:01:32:e0:17:e4:a2:a0:74:69:dd:
         22:fb:70:33:b9:ad:9d:1e:c7:b7:b0:fb:13:d2:06:b6:08:56:
         79:06:df:53:8e:02:da:a4:02:3f:28:14:f1:52:bb:5a:d4:79:
         f8:d0:25:74:71:5a:f4:19:a1:1f:f7:cb:a8:e6:29:33:cb:26:
         1c:07:b2:1b:9a:9f:0f:47:a5:f5:aa:c4:86:ba:be:13:f8:84:
         45:48:61:d8:c7:ba:a3:a9:78:66:7d:05:9d:56:5d:79:84:0f:
         c2:75:d6:6d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QTY4OTExMC8GA1UEBRMoRUUzRDI4QjQzRTUyNDYzRjUzNjEwODREM0I0Q0QxNUZC
MTIxREM3ODAeFw0yNjA5MjkwOTIyMzRaFw0yNjEwMDYwOTIyMzRaMBgxFjAUBgNV
BAMTDTZhYmI4MzViLWQxY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfyBFqjKUELF+pcVp6V6BDregpDgYWG/QoU7Dzz9SqlBbRYcqoEpM75wxoNQMl
B8p4w9mikviq6mkaLBb34rz4G9Vik1BSqFQRusacD5wJtvFR7SPB8VBaLrBzLXXp
SPKlmjGDmmpRvzyClNHrppcTzvFct5sO6f8TK9+m9LgdlnQWwzgFIAVBzn28mX6J
APlpUHq/pgsSmvHqp0kCEav5FxMww+gqH1OvUbwDEhWKj55grpoiXJrhSvJst+E5
Qn8DzdiRb8uoDrw4XF9Zawa/sIeiDFD0WMsxdxxv1Qrf4tPtZc4pMDjh53FX/ULR
BY1ewawIiCu3PHbPmzsHkFtXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9ingXAu3
fLInjcGVeGv6GTKZze8wHwYDVR0jBBgwFoAU7j0otD5SRj9TYQhNO0zRX7Eh3Hgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBNjg5Lzk4QTQzRDEyN0E5
NzExRjFCQTRGOEY1NDVEQTMwRkJDLzdqMG90RDVTUmo5VFlRaE5PMHpSWDdFaDNI
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN2owb3RENVNSajlUWVFoTk8welJYN0VoM0hnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB
Njg5Lzk4QTQzRDEyN0E5NzExRjFCQTRGOEY1NDVEQTMwRkJDLzdqMG90RDVTUmo5
VFlRaE5PMHpSWDdFaDNIZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAx+wTWEO9XtOPO1Qb42mQCvcUf3vKDbPQS2LvJHz85rc11gyNMqHEbZY4Fj4rL
uuRvFgehu4L0S2pAA3hQNwkkqAZj4dMRTgYddk3I6fCkU074/Eeg/CjN/BmnksBI
Ir5g0Cfv0LRhf9av8m01nR8MPG9qKmKBkYPY9Le+RSfbM7KHnj1UI5EZgbkeFND6
V8r+1ZECSO3owQEy4BfkoqB0ad0i+3Azua2dHse3sPsT0ga2CFZ5Bt9TjgLapAI/
KBTxUrta1Hn40CV0cVr0GaEf98uo5ikzyyYcB7Ibmp8PR6X1qsSGur4T+IRFSGHY
x7qjqXhmfQWdVl15hA/CddZt
-----END CERTIFICATE-----
Generated at Tue Sep 29 20:05:02 2026 by rpki-client