Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File:                     vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier:          waVa9iPlS4a0r1JKtXFomgvFyAsSRVeIGTc5NObACh0=
Subject key identifier:   0E:3C:B8:CF:7D:B4:DF:1E:24:81:FB:10:4F:9E:36:DD:3D:B1:36:B6
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer:       /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial:       A6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number:          A0
Signing time:             Fri 25 Sep 2026 07:28:15 +0000
Manifest this update:     Fri 25 Sep 2026 07:28:15 +0000
Manifest next update:     Fri 02 Oct 2026 07:28:15 +0000
Files and hashes:         1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: LaOBfXJ2Z8LJm+T4jdlEx4HfNmgKHFwkzPOTHV8jQEU=)
                          2: F30027F69C9011F1893698345711F970.roa (hash: D+j1sM6eCYVgN9wCNM0rcIbl0hAUaUHWwy+gzdAQe8o=)
                          3: A32543BA9BEB11F190BD09186411F970.roa (hash: 9WaHx+LUDXVMm3BI2K4FD2A1kDHdB0yt3Gwu4DhlqgU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
                          rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
        Validity
            Not Before: Sep 25 07:28:15 2026 GMT
            Not After : Oct  2 07:28:15 2026 GMT
        Subject: CN=6ab6228f-16b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a6:e0:82:d8:ba:1e:61:b2:8b:83:2d:b3:b2:
                    78:20:01:84:1f:c2:07:9b:56:c7:b9:f2:bc:4c:b0:
                    c1:44:17:4c:66:f1:00:4e:f0:02:04:53:7a:fd:fe:
                    b3:e1:13:95:56:3e:fe:79:18:17:6d:65:7e:6e:37:
                    c6:8b:55:ba:c5:49:f7:b2:7f:1c:a7:88:b0:96:77:
                    a4:cf:3a:09:bb:a1:c2:30:8d:68:17:96:4c:09:49:
                    53:20:54:44:da:4b:d8:9a:10:f0:86:ba:ba:89:cb:
                    a5:2b:6c:15:1f:16:c3:57:aa:22:a4:8a:f9:5c:90:
                    59:79:62:17:f8:66:d8:51:1c:61:17:9c:a7:c2:c8:
                    1c:cc:ea:1c:c0:6e:fb:0e:9e:3a:02:0c:d0:65:b1:
                    b8:d9:93:6a:72:4d:57:e2:55:43:52:0f:c5:83:b6:
                    bf:82:e1:a4:da:93:9e:fb:df:7a:1b:98:05:f4:21:
                    d6:46:e5:88:be:f7:c3:7f:5f:fb:3f:68:9d:b7:9a:
                    c3:61:2f:38:27:c5:77:ef:39:bd:45:10:10:bf:12:
                    7e:1d:17:a3:4e:81:38:94:0e:2e:6f:f4:80:80:23:
                    b2:22:38:15:2f:1d:e8:bb:00:14:17:c3:bc:3f:58:
                    da:ea:fc:8e:42:df:89:51:16:29:7e:8b:00:83:97:
                    a5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3C:B8:CF:7D:B4:DF:1E:24:81:FB:10:4F:9E:36:DD:3D:B1:36:B6
            X509v3 Authority Key Identifier:
                keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:43:04:c7:40:3e:aa:b8:73:95:2c:58:3a:71:9d:fd:ee:83:
         58:94:fd:68:7e:dc:5f:da:08:66:4c:18:7b:16:cf:21:4a:d8:
         e3:1d:ff:37:a7:68:cf:4d:3a:75:b8:e8:b0:16:2b:76:47:14:
         52:82:8b:01:6b:99:ef:97:e2:c4:41:3e:29:dc:d8:d5:4d:33:
         bd:1c:d6:4b:f0:18:54:98:e7:3f:60:a8:64:8d:ac:f5:74:a1:
         6f:33:94:5a:25:a7:eb:ae:04:2c:90:fb:c1:1d:d7:6c:39:2b:
         39:90:d4:7a:17:fa:28:f3:59:f3:b7:a8:9c:f7:78:35:6e:9d:
         56:f4:38:ba:80:76:45:9d:c0:56:c8:83:a3:e3:b3:54:92:d3:
         ea:a8:92:92:8b:80:18:6d:17:10:07:61:9e:2f:27:6b:e6:3b:
         9f:ab:73:cc:f7:40:f5:f3:cc:52:ad:f5:f3:4c:9a:fe:06:42:
         68:ae:5f:33:53:be:01:7c:76:b8:48:c0:16:70:9d:d3:a7:84:
         f0:9b:21:b3:cf:01:18:c2:6d:84:21:d4:7a:30:b1:e8:ca:47:
         80:d4:37:d0:71:a4:ac:f7:82:0f:f2:1e:ef:7a:63:f1:6a:4b:
         c5:95:66:2a:ee:40:a3:28:a1:a6:ba:bb:74:25:b8:5c:03:df:
         14:67:2f:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUxQzQxMTAvBgNVBAUTKEJEODk3ODE2NTZEOUQxNTgzNDdCN0IxNEMwNEFEOUVB
NDQxQ0M5OTcwHhcNMjYwOTI1MDcyODE1WhcNMjYxMDAyMDcyODE1WjAYMRYwFAYD
VQQDEw02YWI2MjI4Zi0xNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Kbggti6HmGyi4Mts7J4IAGEH8IHm1bHufK8TLDBRBdMZvEATvACBFN6/f6z
4ROVVj7+eRgXbWV+bjfGi1W6xUn3sn8cp4iwlnekzzoJu6HCMI1oF5ZMCUlTIFRE
2kvYmhDwhrq6iculK2wVHxbDV6oipIr5XJBZeWIX+GbYURxhF5ynwsgczOocwG77
Dp46AgzQZbG42ZNqck1X4lVDUg/Fg7a/guGk2pOe+996G5gF9CHWRuWIvvfDf1/7
P2idt5rDYS84J8V37zm9RRAQvxJ+HRejToE4lA4ub/SAgCOyIjgVLx3ouwAUF8O8
P1ja6vyOQt+JURYpfosAg5elDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA48uM99
tN8eJIH7EE+eNt09sTa2MB8GA1UdIwQYMBaAFL2JeBZW2dFYNHt7FMBK2epEHMmX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTFDNC8wQzcxRTdGQUNF
OTMxMUYwODhBQjE1MjRDNEY5QUUwMi92WWw0RmxiWjBWZzBlM3NVd0VyWjZrUWN5
WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZZbDRGbGJaMFZnMGUzc1V3RXJaNmtRY3laYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTFDNC8wQzcxRTdGQUNFOTMxMUYwODhBQjE1MjRDNEY5QUUwMi92WWw0RmxiWjBW
ZzBlM3NVd0VyWjZrUWN5WmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEkMEx0A+qrhzlSxYOnGd/e6DWJT9aH7cX9oIZkwYexbPIUrY4x3/N6doz006
dbjosBYrdkcUUoKLAWuZ75fixEE+KdzY1U0zvRzWS/AYVJjnP2CoZI2s9XShbzOU
WiWn664ELJD7wR3XbDkrOZDUehf6KPNZ87eonPd4NW6dVvQ4uoB2RZ3AVsiDo+Oz
VJLT6qiSkouAGG0XEAdhni8na+Y7n6tzzPdA9fPMUq3180ya/gZCaK5fM1O+AXx2
uEjAFnCd06eE8Jshs88BGMJthCHUejCx6MpHgNQ30HGkrPeCD/Ie73pj8WpLxZVm
Ku5Aoyihprq7dCW4XAPfFGcvDQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:58:20 2026 by rpki-client