Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File:                     Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier:          C/KzMsnGW4fr42TtDW1ns1QsG+z6bE614ezs3eKAxxo=
Subject key identifier:   F3:FD:27:14:9C:7B:A3:67:B6:03:79:AD:6B:7A:11:30:3D:70:A5:5F
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer:       /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial:       0B44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number:          0B34
Signing time:             Sun 04 Oct 2026 19:20:05 +0000
Manifest this update:     Sun 04 Oct 2026 19:20:05 +0000
Manifest next update:     Sun 11 Oct 2026 19:20:05 +0000
Files and hashes:         1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: uy3uGZzU3zuJAnCTe6tzjYDJN2GytxG9wUY3QwaomI4=)
                          2: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: th+/tvMvg+ad5+YQ/zoIufkXoQMlFYiSs+rYqVFCmXs=)
                          3: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: dcrlUq/LfqIpPMteaZR03KFsAdJIOdisOuX79mITHI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
                          rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2884 (0xb44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
        Validity
            Not Before: Oct  4 19:20:05 2026 GMT
            Not After : Oct 11 19:20:05 2026 GMT
        Subject: CN=6ac2a6e5-3aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:dd:31:65:78:31:47:4b:9b:d8:55:fd:6f:
                    36:94:3c:1b:c0:0b:e3:89:c4:74:64:40:66:6b:5b:
                    36:68:f2:2e:04:57:9c:52:90:8b:f9:54:aa:fa:f0:
                    77:3b:a9:5e:ee:cd:31:70:70:e9:ee:aa:b1:cb:b1:
                    f6:81:05:c2:4b:db:15:2e:ab:92:af:b2:03:cb:bf:
                    14:49:36:6d:ac:b3:f0:e0:b0:e3:d4:a3:bd:4e:c3:
                    89:bb:d6:1f:24:62:d0:38:aa:24:df:99:9e:ee:7f:
                    6d:4a:ab:05:be:ac:6b:e6:a3:76:0c:f3:d7:3c:69:
                    22:3e:e2:17:9b:ed:52:61:24:ab:49:b7:61:77:e2:
                    3b:a9:24:75:61:40:65:fa:bc:31:04:4a:43:83:b9:
                    e6:d7:e4:92:6e:a6:3d:33:a0:1f:69:21:b3:b9:07:
                    6e:fb:03:de:6a:5c:3a:3f:49:3e:4b:e2:31:a1:4e:
                    55:34:aa:ba:09:43:ef:4d:f0:0d:19:15:0e:b9:14:
                    ed:4a:f1:02:46:ac:c0:33:96:a2:ce:1f:3c:a3:22:
                    ec:85:4a:a8:c1:a6:94:7d:d8:8b:6c:2f:fe:aa:19:
                    8c:7c:fb:c2:a3:d1:c0:fd:aa:f2:b4:9f:24:d3:a6:
                    3e:a2:3d:7a:9b:63:bc:2b:01:3e:55:29:b1:b3:63:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FD:27:14:9C:7B:A3:67:B6:03:79:AD:6B:7A:11:30:3D:70:A5:5F
            X509v3 Authority Key Identifier:
                keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:3b:aa:00:b9:33:0a:af:0c:d8:8d:c2:e6:99:22:f9:bd:
         09:d3:21:3a:cb:7e:bc:d9:d2:17:a2:37:dc:10:de:6b:76:c0:
         a6:a8:dc:1d:1f:a2:99:73:4d:f0:de:2a:28:dc:5a:91:cf:bb:
         71:f2:2c:d2:f6:c8:cc:f5:ab:f4:7a:63:6c:fc:e0:10:fb:44:
         11:1e:38:56:88:ea:f2:63:04:80:78:e5:a3:42:b1:68:d1:36:
         ed:44:b0:77:f5:12:0c:6e:41:4d:d6:cc:c0:bd:fd:60:e8:38:
         60:57:38:85:c4:3e:09:6d:50:9c:24:1e:14:34:c4:b9:42:1f:
         96:ad:30:b6:71:7d:5c:bc:74:bd:87:15:3a:b3:3e:c8:11:36:
         b9:01:99:d6:76:0f:fb:cb:01:fe:4f:a8:c6:5d:3b:d4:3e:a6:
         80:2e:4f:10:94:f8:54:2b:4f:66:40:f8:10:23:22:4b:08:5c:
         49:e3:4e:e1:0b:92:93:35:2b:ad:22:31:a9:21:92:ec:10:91:
         fc:64:3f:cf:7e:6b:67:73:72:bc:2c:89:a6:11:b9:89:5b:2e:
         77:78:0a:41:17:36:3f:d6:ea:be:28:dc:c8:c5:07:3f:89:7b:
         b0:ce:97:91:70:c3:4e:f1:12:d9:25:1b:b4:08:b9:a3:1b:91:
         5a:3e:0d:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY1MzcxMTAvBgNVBAUTKDNFQ0VFQUZFOEFDN0I0QjEzOEUyODQ1Rjc4NjEyRDkz
RDVDNTMwQzYwHhcNMjYxMDA0MTkyMDA1WhcNMjYxMDExMTkyMDA1WjAYMRYwFAYD
VQQDEw02YWMyYTZlNS0zYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAttXdMWV4MUdLm9hV/W82lDwbwAvjicR0ZEBma1s2aPIuBFecUpCL+VSq+vB3
O6le7s0xcHDp7qqxy7H2gQXCS9sVLquSr7IDy78USTZtrLPw4LDj1KO9TsOJu9Yf
JGLQOKok35me7n9tSqsFvqxr5qN2DPPXPGkiPuIXm+1SYSSrSbdhd+I7qSR1YUBl
+rwxBEpDg7nm1+SSbqY9M6AfaSGzuQdu+wPealw6P0k+S+IxoU5VNKq6CUPvTfAN
GRUOuRTtSvECRqzAM5aizh88oyLshUqowaaUfdiLbC/+qhmMfPvCo9HA/arytJ8k
06Y+oj16m2O8KwE+VSmxs2NOWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPP9JxSc
e6NntgN5rWt6ETA9cKVfMB8GA1UdIwQYMBaAFD7O6v6Kx7SxOOKEX3hhLZPVxTDG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjUzNy9CRUIwRDkxQTZE
OUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRMRTQ0b1JmZUdFdGs5WEZN
TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BzN3Ffb3JIdExFNDRvUmZlR0V0azlYRk1NWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjUzNy9CRUIwRDkxQTZEOUQxMUVBOUE1RjI4MDlDNEY5QUUwMi9QczdxX29ySHRM
RTQ0b1JmZUdFdGs5WEZNTVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALr47qgC5MwqvDNiNwuaZIvm9CdMhOst+vNnSF6I33BDea3bApqjcHR+imXNN
8N4qKNxakc+7cfIs0vbIzPWr9HpjbPzgEPtEER44Vojq8mMEgHjlo0KxaNE27USw
d/USDG5BTdbMwL39YOg4YFc4hcQ+CW1QnCQeFDTEuUIflq0wtnF9XLx0vYcVOrM+
yBE2uQGZ1nYP+8sB/k+oxl071D6mgC5PEJT4VCtPZkD4ECMiSwhcSeNO4QuSkzUr
rSIxqSGS7BCR/GQ/z35rZ3NyvCyJphG5iVsud3gKQRc2P9bqvijcyMUHP4l7sM6X
kXDDTvES2SUbtAi5oxuRWj4NBQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 02:21:32 2026 by rpki-client