Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
File:                     1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json)
Hash identifier:          XYfZgEO/F+6BTv2NUk+gC/PKZUrHgILKvZBKfmr7Ncc=
Subject key identifier:   92:A2:C2:C5:18:FD:2C:CE:26:FA:A5:27:72:F4:71:B6:D6:2C:01:14
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Certificate issuer:       /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial:       04EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
Manifest number:          04E5
Signing time:             Sat 03 Oct 2026 00:01:49 +0000
Manifest this update:     Sat 03 Oct 2026 00:01:48 +0000
Manifest next update:     Sat 10 Oct 2026 00:01:48 +0000
Files and hashes:         1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: 4XzKFSYWIw9r/j9TgLFRwbqTP27V4aoCRsdkMKZqyPI=)
                          2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: 53xSQQ9Bxh94fQZ470RfHLjvIXQRf/E6MeWzNjwS2HI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
                          rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1262 (0x4ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
        Validity
            Not Before: Oct  3 00:01:48 2026 GMT
            Not After : Oct 10 00:01:48 2026 GMT
        Subject: CN=6ac045ed-ef9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:57:b1:60:36:19:91:41:c8:24:bf:92:85:
                    f8:14:1b:20:40:68:f7:cc:26:25:2b:b3:c3:eb:49:
                    65:39:70:0e:c5:3a:ab:7e:f5:14:a6:5c:b2:8f:b5:
                    ec:67:61:06:f2:73:db:44:a6:c3:b1:df:de:20:ba:
                    28:52:ad:90:79:d9:4d:4b:aa:95:7f:2b:ce:28:6f:
                    b5:e2:e6:ff:f7:da:c2:82:7e:c8:d6:14:ab:f1:26:
                    be:ac:51:89:56:5d:8b:22:1c:31:f5:57:3f:20:e3:
                    17:d5:73:ac:62:73:30:73:08:40:36:b4:c1:3e:fe:
                    93:56:9a:82:bf:e3:dd:75:38:59:a5:4f:02:9a:21:
                    2b:66:85:2b:64:d7:49:b1:b5:92:c1:38:55:76:da:
                    4c:0e:74:15:b9:a4:94:bc:3c:22:8f:61:06:36:9f:
                    ae:c1:ff:b0:11:a9:c1:4b:55:ed:b7:f4:cd:06:d7:
                    84:09:11:d9:5d:34:d1:71:c3:23:b8:06:d2:c7:01:
                    27:b0:65:e5:3d:ae:44:34:ed:39:43:68:8a:a6:55:
                    58:d0:75:a7:8f:84:f5:dc:86:92:a9:37:24:18:67:
                    d0:75:f9:dd:91:0c:b9:50:99:d6:46:63:5d:53:cf:
                    82:df:aa:e9:30:e5:cf:f6:1f:70:45:71:c3:32:31:
                    cc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A2:C2:C5:18:FD:2C:CE:26:FA:A5:27:72:F4:71:B6:D6:2C:01:14
            X509v3 Authority Key Identifier:
                keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:d6:04:d0:f4:fd:f0:35:3d:9c:f6:ca:d5:24:db:b6:12:
         4b:f6:a3:5b:a7:fe:95:d9:42:eb:3f:2a:9c:7c:b7:b2:3d:68:
         b6:aa:68:ad:5f:12:6a:6a:38:9e:89:bb:bb:e3:be:f3:f6:46:
         04:52:fa:d0:e5:e1:30:e3:26:1b:72:91:38:28:c1:88:67:09:
         72:d3:07:e0:4d:4d:35:06:a1:31:f3:25:af:87:bf:10:46:98:
         8f:76:71:a5:12:17:bd:0c:c0:80:5a:b8:03:6e:a6:74:73:78:
         38:a9:04:87:cd:3f:a0:59:2c:f7:70:3d:0d:8e:21:6d:1c:15:
         1d:87:e4:39:39:f4:28:06:af:79:91:df:c7:7c:d4:0b:b8:c4:
         80:ab:32:6a:0e:38:d5:4d:e4:83:6c:97:e5:fb:d2:af:82:c9:
         5d:55:c6:f3:23:47:6a:a8:3d:2a:a7:fb:8c:80:bf:c6:72:df:
         00:20:8b:63:0b:39:5f:b2:fc:68:09:46:5e:4e:9f:45:82:70:
         49:bb:84:1f:a0:6e:19:e8:50:68:b8:e5:3f:95:be:01:fb:e6:
         39:b4:12:12:7f:e5:8b:c7:a0:42:39:16:ea:d2:06:a5:48:a9:
         00:64:6e:1f:18:8c:6e:85:41:51:52:12:82:5f:c2:b1:14:47:
         26:dd:54:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCMUIxMTAvBgNVBAUTKEQ2MzY1MjQ1MEVBNzU1OTEzQ0YzMUFGQ0ZBOUEyOTIx
QTQ4QUUxQTQwHhcNMjYxMDAzMDAwMTQ4WhcNMjYxMDEwMDAwMTQ4WjAYMRYwFAYD
VQQDEw02YWMwNDVlZC1lZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApmNXsWA2GZFByCS/koX4FBsgQGj3zCYlK7PD60llOXAOxTqrfvUUplyyj7Xs
Z2EG8nPbRKbDsd/eILooUq2QedlNS6qVfyvOKG+14ub/99rCgn7I1hSr8Sa+rFGJ
Vl2LIhwx9Vc/IOMX1XOsYnMwcwhANrTBPv6TVpqCv+PddThZpU8CmiErZoUrZNdJ
sbWSwThVdtpMDnQVuaSUvDwij2EGNp+uwf+wEanBS1Xtt/TNBteECRHZXTTRccMj
uAbSxwEnsGXlPa5ENO05Q2iKplVY0HWnj4T13IaSqTckGGfQdfndkQy5UJnWRmNd
U8+C36rpMOXP9h9wRXHDMjHMGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKiwsUY
/SzOJvqlJ3L0cbbWLAEUMB8GA1UdIwQYMBaAFNY2UkUOp1WRPPMa/PqaKSGkiuGk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkIxQi9EOUI5Qzg4QzdG
MzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZaRTg4eHI4LXBvcElhU0s0
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFqWlNSUTZuVlpFODh4cjgtcG9wSWFTSzRhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkIxQi9EOUI5Qzg4QzdGMzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZa
RTg4eHI4LXBvcElhU0s0YVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmgHWBND0/fA1PZz2ytUk27YSS/ajW6f+ldlC6z8qnHy3sj1otqporV8Samo4
nom7u+O+8/ZGBFL60OXhMOMmG3KROCjBiGcJctMH4E1NNQahMfMlr4e/EEaYj3Zx
pRIXvQzAgFq4A26mdHN4OKkEh80/oFks93A9DY4hbRwVHYfkOTn0KAaveZHfx3zU
C7jEgKsyag441U3kg2yX5fvSr4LJXVXG8yNHaqg9Kqf7jIC/xnLfACCLYws5X7L8
aAlGXk6fRYJwSbuEH6BuGehQaLjlP5W+AfvmObQSEn/li8egQjkW6tIGpUipAGRu
HxiMboVBUVISgl/CsRRHJt1UsQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 09:26:47 2026 by rpki-client