Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
File:                     yRauWpUgtfZ2fnnJFa-hv25JGJk.mft (raw, json)
Hash identifier:          OgHSlI7KUxY6aNCZ58P9CHNuaUNFKCQw8Qpbil/eePQ=
Subject key identifier:   B4:9F:74:41:E9:E1:75:E0:79:24:98:83:EB:48:0A:40:1B:6A:DE:37
Authority key identifier: C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99
Certificate issuer:       /CN=A9188CC3/serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
Manifest number:          0140
Signing time:             Thu 01 Oct 2026 06:38:34 +0000
Manifest this update:     Thu 01 Oct 2026 06:38:34 +0000
Manifest next update:     Thu 08 Oct 2026 06:38:34 +0000
Files and hashes:         1: yRauWpUgtfZ2fnnJFa-hv25JGJk.crl (hash: Udna1p0UJ2zJLWX6MzylXcuUCOGjUGj6OrOZbEjWzBY=)
                          2: DAB3F33EDE0B11EF8FDDD043C4F9AE02.roa (hash: eQbhMcfVCqnnMEQW3y+AX59pcmxXQSecxBfWvb0xxOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl
                          rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 06:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188CC3, serialNumber=C916AE5A9520B5F6767E79C915AFA1BF6E491899
        Validity
            Not Before: Oct  1 06:38:34 2026 GMT
            Not After : Oct  8 06:38:34 2026 GMT
        Subject: CN=6abdffea-82b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:6e:52:30:6d:3d:57:b0:95:5c:30:73:03:
                    6e:1d:d6:b2:29:6e:bf:bb:06:eb:2b:b6:ba:81:28:
                    71:e1:0b:ef:ea:0e:83:27:1b:ea:b1:81:39:34:36:
                    2a:ab:24:c7:46:54:fc:62:bc:c1:1a:f2:62:d0:60:
                    c9:9b:a5:29:13:e5:67:b8:eb:1d:01:30:62:25:9f:
                    e8:9d:2a:47:40:8f:e3:32:6f:c0:9a:94:43:64:e7:
                    dc:79:83:70:55:bd:35:16:d2:e9:cd:7f:37:ea:66:
                    9c:9d:5f:e5:22:0e:6e:6b:b3:36:d9:75:9a:18:c9:
                    07:8c:2b:97:e2:65:c1:04:f9:28:01:0b:39:32:56:
                    b2:39:a5:96:63:bd:dd:aa:26:31:77:50:b3:75:37:
                    a7:f6:52:d4:9d:eb:65:94:f2:b9:83:89:91:6e:bd:
                    28:17:57:74:09:8a:ed:8d:04:f2:5a:88:51:09:5e:
                    f4:ba:e5:4d:74:9a:77:e6:36:db:9f:55:b1:01:53:
                    52:dd:aa:eb:ab:02:b2:6a:27:9e:60:d9:23:b0:b6:
                    d5:3d:12:88:44:06:e5:12:91:45:e0:1b:d0:ba:9b:
                    26:5a:36:d2:8a:ca:34:f0:79:62:bd:4c:f7:d3:e0:
                    b8:00:90:53:cc:92:59:4a:af:26:32:bc:6e:ab:c7:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9F:74:41:E9:E1:75:E0:79:24:98:83:EB:48:0A:40:1B:6A:DE:37
            X509v3 Authority Key Identifier:
                keyid:C9:16:AE:5A:95:20:B5:F6:76:7E:79:C9:15:AF:A1:BF:6E:49:18:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRauWpUgtfZ2fnnJFa-hv25JGJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CC3/EDDA36E2D72311EFA2269419C4F9AE02/yRauWpUgtfZ2fnnJFa-hv25JGJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:88:49:e7:dc:d0:51:c8:1a:b3:9e:d0:ae:ff:1f:de:eb:01:
         ab:bc:36:8f:46:f0:88:b9:8e:59:8d:77:0a:7a:38:4b:2c:a8:
         75:1f:e9:40:fd:a8:07:15:70:54:da:17:a0:9a:c7:30:5f:2a:
         04:d5:36:51:b4:0f:f7:42:b1:3a:1b:b6:f2:32:31:3e:97:f1:
         0d:97:ef:ac:96:15:ed:07:8a:9d:8b:5a:d7:50:9c:a1:1d:65:
         07:8e:d8:73:ab:bb:3d:bd:18:f4:91:26:32:b8:ae:99:88:e8:
         2e:3e:76:4e:d7:28:88:bd:b7:ac:35:6c:53:c0:41:ca:d3:5e:
         4b:8b:d1:83:18:4e:21:91:87:53:df:b3:e2:92:8b:e0:30:1e:
         1f:6a:34:59:c2:97:49:69:85:0c:4c:c1:b5:40:fc:bd:d0:b7:
         f5:6c:f3:22:cc:d6:73:67:dc:c7:d8:32:c8:5f:b7:1b:31:9f:
         ed:84:eb:88:5e:fc:3d:30:d0:7e:15:04:8d:82:b9:c1:1f:1e:
         3a:21:a2:fa:f1:78:5f:4a:ee:11:80:c0:1b:75:95:f4:cb:21:
         f4:89:33:a3:bc:ad:e4:0c:68:f6:99:f6:49:f7:3d:4b:d5:10:
         2c:71:14:58:38:75:32:b8:5e:93:57:5c:82:92:2f:6c:d9:d1:
         5c:2f:da:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhDQzMxMTAvBgNVBAUTKEM5MTZBRTVBOTUyMEI1RjY3NjdFNzlDOTE1QUZBMUJG
NkU0OTE4OTkwHhcNMjYxMDAxMDYzODM0WhcNMjYxMDA4MDYzODM0WjAYMRYwFAYD
VQQDEw02YWJkZmZlYS04MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlPpuUjBtPVewlVwwcwNuHdayKW6/uwbrK7a6gShx4Qvv6g6DJxvqsYE5NDYq
qyTHRlT8YrzBGvJi0GDJm6UpE+VnuOsdATBiJZ/onSpHQI/jMm/AmpRDZOfceYNw
Vb01FtLpzX836macnV/lIg5ua7M22XWaGMkHjCuX4mXBBPkoAQs5MlayOaWWY73d
qiYxd1CzdTen9lLUnetllPK5g4mRbr0oF1d0CYrtjQTyWohRCV70uuVNdJp35jbb
n1WxAVNS3arrqwKyaieeYNkjsLbVPRKIRAblEpFF4BvQupsmWjbSiso08HlivUz3
0+C4AJBTzJJZSq8mMrxuq8eirwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLSfdEHp
4XXgeSSYg+tICkAbat43MB8GA1UdIwQYMBaAFMkWrlqVILX2dn55yRWvob9uSRiZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OENDMy9FRERBMzZFMkQ3
MjMxMUVGQTIyNjk0MTlDNEY5QUUwMi95UmF1V3BVZ3RmWjJmbm5KRmEtaHYyNUpH
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lSYXVXcFVndGZaMmZubkpGYS1odjI1SkdKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OENDMy9FRERBMzZFMkQ3MjMxMUVGQTIyNjk0MTlDNEY5QUUwMi95UmF1V3BVZ3Rm
WjJmbm5KRmEtaHYyNUpHSmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl4hJ59zQUcgas57Qrv8f3usBq7w2j0bwiLmOWY13Cno4SyyodR/pQP2oBxVw
VNoXoJrHMF8qBNU2UbQP90KxOhu28jIxPpfxDZfvrJYV7QeKnYta11CcoR1lB47Y
c6u7Pb0Y9JEmMriumYjoLj52TtcoiL23rDVsU8BBytNeS4vRgxhOIZGHU9+z4pKL
4DAeH2o0WcKXSWmFDEzBtUD8vdC39WzzIszWc2fcx9gyyF+3GzGf7YTriF78PTDQ
fhUEjYK5wR8eOiGi+vF4X0ruEYDAG3WV9Msh9Ikzo7yt5Axo9pn2Sfc9S9UQLHEU
WDh1Mrhek1dcgpIvbNnRXC/a9w==
-----END CERTIFICATE-----
Generated at Thu Oct 1 20:59:06 2026 by rpki-client