Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
File:                     P20pux90eTz4jHg3KFY7vUPoCj4.mft (raw, json)
Hash identifier:          EPlNMOUQYK087RziR2gUmjFDywIv/EJI8Cp4QhPgvX8=
Subject key identifier:   B8:33:0D:4C:98:1A:BF:01:C6:AE:5E:9A:72:70:C4:93:C6:52:BE:7F
Authority key identifier: 3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E
Certificate issuer:       /CN=A9186428/serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
Manifest number:          61
Signing time:             Wed 23 Sep 2026 07:50:25 +0000
Manifest this update:     Wed 23 Sep 2026 07:50:25 +0000
Manifest next update:     Wed 30 Sep 2026 07:50:25 +0000
Files and hashes:         1: P20pux90eTz4jHg3KFY7vUPoCj4.crl (hash: +Ck0QdUROBkDMAirDTRZXIFdUOCvXZON3waEn0CCTCk=)
                          2: 66767246246211F193F9A3F1C5833773.roa (hash: I6tnaRrL2ImhRfp92h3chg5E+cCvl6J/obElhMxuuOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl
                          rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186428, serialNumber=3F6D29BB1F74793CF88C783728563BBD43E80A3E
        Validity
            Not Before: Sep 23 07:50:25 2026 GMT
            Not After : Sep 30 07:50:25 2026 GMT
        Subject: CN=6ab384c1-2b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:3a:73:3d:96:0d:7d:57:de:9c:aa:5f:93:
                    86:85:e8:02:8e:88:98:a0:df:3f:ad:69:09:5a:1f:
                    00:b5:41:9f:7d:f3:d8:4f:b4:a5:1f:a5:a2:76:34:
                    56:5e:36:d5:31:3a:41:16:66:9b:b4:a7:4e:01:c6:
                    8d:7d:a6:fc:86:38:67:b3:b3:79:93:fa:b2:18:24:
                    fc:49:27:87:bb:a5:40:71:66:8a:b1:76:86:d1:c2:
                    12:e2:2e:cf:ac:c3:4a:0d:ce:0d:3e:3f:e0:40:40:
                    e2:68:45:3f:a0:9b:dc:b5:43:91:6a:57:85:71:33:
                    b2:30:72:40:60:e7:07:84:46:bb:c8:4a:21:51:b1:
                    24:47:67:44:a3:22:8b:0b:71:80:bc:1d:4f:4f:33:
                    61:cd:32:e6:d5:c2:ad:06:aa:79:a9:b0:5b:14:ee:
                    92:0b:a5:d0:1d:1a:8b:aa:f8:4c:79:b8:e3:38:1b:
                    19:8d:f5:28:2c:00:4d:57:75:b9:49:f8:ce:e6:1d:
                    b3:b4:b1:e3:06:44:a0:02:a4:bc:7a:7b:8d:2e:83:
                    86:dc:55:ac:d8:10:a4:b9:6b:70:1c:64:14:60:6f:
                    a3:f3:0a:7d:60:a0:31:e3:0d:ce:0c:bc:29:f9:41:
                    aa:2f:58:e7:dd:91:8b:7d:cc:99:c5:4c:97:80:72:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:33:0D:4C:98:1A:BF:01:C6:AE:5E:9A:72:70:C4:93:C6:52:BE:7F
            X509v3 Authority Key Identifier:
                keyid:3F:6D:29:BB:1F:74:79:3C:F8:8C:78:37:28:56:3B:BD:43:E8:0A:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P20pux90eTz4jHg3KFY7vUPoCj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186428/EF5C27B4246111F1B9E335D9C5833773/P20pux90eTz4jHg3KFY7vUPoCj4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:8e:aa:3b:7e:4e:52:d6:3a:50:ce:9d:32:40:92:d9:d7:
         a4:ee:75:55:bf:f5:a2:79:ba:b1:26:d8:4c:f6:6c:59:ef:0f:
         bd:9e:5c:3b:6a:a1:dc:05:82:ff:01:1d:8b:cb:0f:5d:0e:7a:
         eb:80:47:e8:90:27:87:49:13:cc:0e:80:c0:90:0b:dc:8f:03:
         ca:f0:2a:f3:95:ec:6b:c0:28:4c:f5:9b:b5:53:f7:98:e3:be:
         18:b5:1b:c6:d0:37:09:35:60:7a:21:7c:0e:20:02:68:00:ce:
         71:de:af:cf:f1:d2:0f:0a:8f:ba:5f:32:49:47:fe:d8:40:17:
         c8:b4:50:fc:81:90:37:f2:9f:86:ff:59:d5:fb:d1:4e:67:ef:
         c0:4c:f1:ff:3c:b9:6d:2c:0e:d9:05:86:75:23:97:94:97:bb:
         47:f3:93:ae:a4:f7:38:2d:ce:66:29:fb:6d:a8:d4:bc:26:d6:
         59:4f:5b:f3:e4:55:7d:24:ba:18:20:73:60:d4:b3:4a:56:63:
         46:e1:35:5a:a0:98:f0:c2:1f:b0:fd:43:d3:71:e8:48:60:cb:
         50:ab:5e:c5:6f:8a:bf:2a:77:58:85:2c:b4:84:ae:b8:c9:5f:
         e8:5c:5e:d6:e4:df:bf:d0:51:d9:a8:51:d8:37:04:09:e2:52:
         5a:34:db:3b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NjQyODExMC8GA1UEBRMoM0Y2RDI5QkIxRjc0NzkzQ0Y4OEM3ODM3Mjg1NjNCQkQ0
M0U4MEEzRTAeFw0yNjA5MjMwNzUwMjVaFw0yNjA5MzAwNzUwMjVaMBgxFjAUBgNV
BAMTDTZhYjM4NGMxLTJiMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/UTpzPZYNfVfenKpfk4aF6AKOiJig3z+taQlaHwC1QZ9989hPtKUfpaJ2NFZe
NtUxOkEWZpu0p04Bxo19pvyGOGezs3mT+rIYJPxJJ4e7pUBxZoqxdobRwhLiLs+s
w0oNzg0+P+BAQOJoRT+gm9y1Q5FqV4VxM7IwckBg5weERrvISiFRsSRHZ0SjIosL
cYC8HU9PM2HNMubVwq0GqnmpsFsU7pILpdAdGouq+Ex5uOM4GxmN9SgsAE1XdblJ
+M7mHbO0seMGRKACpLx6e40ug4bcVazYEKS5a3AcZBRgb6PzCn1goDHjDc4MvCn5
QaovWOfdkYt9zJnFTJeAcgsrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuDMNTJga
vwHGrl6acnDEk8ZSvn8wHwYDVR0jBBgwFoAUP20pux90eTz4jHg3KFY7vUPoCj4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2NDI4L0VGNUMyN0I0MjQ2
MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6NGpIZzNLRlk3dlVQb0Nq
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUDIwcHV4OTBlVHo0akhnM0tGWTd2VVBvQ2o0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2
NDI4L0VGNUMyN0I0MjQ2MTExRjFCOUUzMzVEOUM1ODMzNzczL1AyMHB1eDkwZVR6
NGpIZzNLRlk3dlVQb0NqNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBfFo6qO35OUtY6UM6dMkCS2dek7nVVv/WiebqxJthM9mxZ7w+9nlw7aqHcBYL/
AR2Lyw9dDnrrgEfokCeHSRPMDoDAkAvcjwPK8CrzlexrwChM9Zu1U/eY474YtRvG
0DcJNWB6IXwOIAJoAM5x3q/P8dIPCo+6XzJJR/7YQBfItFD8gZA38p+G/1nV+9FO
Z+/ATPH/PLltLA7ZBYZ1I5eUl7tH85OupPc4Lc5mKfttqNS8JtZZT1vz5FV9JLoY
IHNg1LNKVmNG4TVaoJjwwh+w/UPTcehIYMtQq17Fb4q/KndYhSy0hK64yV/oXF7W
5N+/0FHZqFHYNwQJ4lJaNNs7
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:23:37 2026 by rpki-client