Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File:                     SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier:          JbZY5BPV+VZOqM35wYkenLoa12/46VlMPoqNHP1nG/4=
Subject key identifier:   63:D8:50:E2:B2:99:C8:A4:11:E7:BD:B0:81:2D:87:54:E4:14:43:EF
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer:       /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial:       072A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number:          072A
Signing time:             Tue 22 Sep 2026 21:42:13 +0000
Manifest this update:     Tue 22 Sep 2026 21:42:12 +0000
Manifest next update:     Tue 29 Sep 2026 21:42:12 +0000
Files and hashes:         1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: SuP89XNjewA2VrbDzOeW/ZvHpbTuL++4T0tICpJMHcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
                          rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
        Validity
            Not Before: Sep 22 21:42:12 2026 GMT
            Not After : Sep 29 21:42:12 2026 GMT
        Subject: CN=6ab2f635-9a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:78:9f:12:5f:89:55:59:a2:85:17:a6:77:59:
                    68:72:26:09:84:47:06:d2:ca:dc:62:2e:31:97:e4:
                    e0:7e:87:34:3d:36:fb:f2:ef:37:30:3e:a3:b4:1d:
                    07:14:e5:b4:5f:64:c3:c2:88:d7:a1:0f:e6:61:7d:
                    84:3b:5e:bb:a7:2a:3b:02:0d:f0:2c:e6:44:80:2f:
                    98:7b:05:e6:1b:29:30:93:60:17:87:53:8c:a7:98:
                    01:13:02:29:92:33:a7:04:68:6a:bc:74:4c:b8:d2:
                    b1:b1:ae:d3:6f:e7:0c:5c:0b:8c:71:93:77:73:30:
                    14:a1:97:0d:8b:f6:ed:81:13:c9:b4:73:83:be:14:
                    05:11:c1:88:8b:2f:50:57:25:ef:10:a1:97:0f:8c:
                    60:e5:d9:d3:6d:d3:5b:92:ca:41:f1:3d:9b:9d:99:
                    1f:e4:a2:2f:5c:52:f7:60:42:3f:ce:ae:8f:d4:ee:
                    67:17:10:09:d8:b6:b4:7e:ff:44:c3:7a:97:f2:66:
                    88:50:41:18:5e:47:4c:88:29:44:1e:8e:df:7f:5c:
                    b5:15:c9:a4:0c:56:f7:0f:92:77:cf:da:aa:cf:10:
                    6a:08:aa:3d:b3:cf:10:15:be:ba:2c:96:45:1e:ee:
                    56:d9:86:c2:9a:c9:f7:d6:40:c0:27:7e:ae:59:39:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D8:50:E2:B2:99:C8:A4:11:E7:BD:B0:81:2D:87:54:E4:14:43:EF
            X509v3 Authority Key Identifier:
                keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ad:4c:e5:51:8f:55:0b:27:f8:c1:74:0e:cd:b8:4e:eb:7c:
         77:2e:60:99:59:d0:67:a0:dd:67:8a:8a:40:a2:d3:70:e8:86:
         48:66:43:78:31:68:4a:9e:51:c3:37:38:09:60:48:9d:1d:5b:
         21:01:f1:29:67:f8:28:3d:63:56:a6:15:96:b4:d4:e8:15:e3:
         7f:34:d6:5f:aa:35:f0:9a:21:c0:c4:4b:d4:28:ba:6e:d0:e3:
         2f:47:32:b4:aa:1a:af:67:74:1a:12:cf:ed:83:04:cd:50:20:
         58:78:48:15:f2:ae:8c:24:8a:41:42:ca:bd:18:15:09:27:2c:
         cf:7c:ae:f6:70:ad:5c:de:cf:57:09:d1:e9:aa:20:a6:25:90:
         1e:d6:24:91:82:d4:8d:13:bf:c5:db:6c:f4:98:25:cf:82:22:
         77:34:8f:7a:ee:41:5f:15:0c:71:67:5f:e9:ff:ed:e8:4a:d1:
         f7:8c:42:ff:1a:9d:ca:b0:cc:9d:52:fa:93:96:43:df:1f:42:
         ad:91:26:21:f7:e4:ed:b9:57:32:32:d5:b1:9a:6e:c7:d1:b8:
         b4:0c:e7:68:34:41:40:fb:51:7b:f7:22:8f:6d:87:a7:07:93:
         7a:d9:a8:5f:ee:16:94:8a:a7:ff:70:e0:b3:cd:48:87:82:1e:
         8a:4a:1c:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICByowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG
NTlDMjdFOUUwHhcNMjYwOTIyMjE0MjEyWhcNMjYwOTI5MjE0MjEyWjAYMRYwFAYD
VQQDEw02YWIyZjYzNS05YTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmHifEl+JVVmihRemd1lociYJhEcG0srcYi4xl+Tgfoc0PTb78u83MD6jtB0H
FOW0X2TDwojXoQ/mYX2EO167pyo7Ag3wLOZEgC+YewXmGykwk2AXh1OMp5gBEwIp
kjOnBGhqvHRMuNKxsa7Tb+cMXAuMcZN3czAUoZcNi/btgRPJtHODvhQFEcGIiy9Q
VyXvEKGXD4xg5dnTbdNbkspB8T2bnZkf5KIvXFL3YEI/zq6P1O5nFxAJ2La0fv9E
w3qX8maIUEEYXkdMiClEHo7ff1y1FcmkDFb3D5J3z9qqzxBqCKo9s88QFb66LJZF
Hu5W2YbCmsn31kDAJ36uWTm+GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPYUOKy
mcikEee9sIEth1TkFEPvMB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz
NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm
cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL
YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaK1M5VGPVQsn+MF0Ds24Tut8dy5gmVnQZ6DdZ4qKQKLTcOiGSGZDeDFoSp5R
wzc4CWBInR1bIQHxKWf4KD1jVqYVlrTU6BXjfzTWX6o18JohwMRL1Ci6btDjL0cy
tKoar2d0GhLP7YMEzVAgWHhIFfKujCSKQULKvRgVCScsz3yu9nCtXN7PVwnR6aog
piWQHtYkkYLUjRO/xdts9Jglz4IidzSPeu5BXxUMcWdf6f/t6ErR94xC/xqdyrDM
nVL6k5ZD3x9CrZEmIffk7blXMjLVsZpux9G4tAznaDRBQPtRe/cij22HpweTetmo
X+4WlIqn/3Dgs81Ih4IeikocgQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 07:01:25 2026 by rpki-client