Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
File:                     aFCqv5vavya_oJKDAh_pE9aVbjI.mft (raw, json)
Hash identifier:          vyGzwP/4OOk7Q7Dy0uXzNrOFS5VuwkzAXFGJn3n/5n8=
Subject key identifier:   A2:A9:92:82:38:FD:73:EC:2D:9E:17:77:76:6A:35:1D:97:9E:07:3A
Authority key identifier: 68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32
Certificate issuer:       /CN=A918F978/serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
Certificate serial:       140D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
Manifest number:          13F6
Signing time:             Tue 22 Sep 2026 16:51:44 +0000
Manifest this update:     Tue 22 Sep 2026 16:51:44 +0000
Manifest next update:     Tue 29 Sep 2026 16:51:44 +0000
Files and hashes:         1: aFCqv5vavya_oJKDAh_pE9aVbjI.crl (hash: ezoxs1vYylyNpZwVWDHe06KYdYRLHIoQUWr9Qv3EmtA=)
                          2: F5B633B2283411F1B1D7DF7FCA833773.roa (hash: Kt9rQh1UmXU3aG3p58XCWtin2O3CyyL613kv0PisisY=)
                          3: AE7603724F8711F1ACC1478F91833773.roa (hash: m3sG9C0voTAzwCTrnGEExTYMamH/vClHoEE2jHx5FJc=)
                          4: B80482FC748911F19DCB36BA84A30FBC.roa (hash: jW6OnogRVDWjla3xscS9xPToyDbj+RJjVrfHDwtYH9Y=)
                          5: 583F2920A6E611EF9BD0C728C4F9AE02.roa (hash: jPVq1FqdO/7Sa1Zo63l4DDlY46514aXTAgnERyot6WE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl
                          rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5133 (0x140d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F978, serialNumber=6850AABF9BDABF26BFA09283021FE913D6956E32
        Validity
            Not Before: Sep 22 16:51:44 2026 GMT
            Not After : Sep 29 16:51:44 2026 GMT
        Subject: CN=6ab2b220-4b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5c:36:ce:01:6e:b5:c1:66:7e:e9:f1:2e:c7:
                    4d:f6:f8:a2:ad:00:23:09:a3:d6:5c:1f:44:8d:70:
                    50:9b:08:cc:60:29:a0:d0:b7:73:ed:5a:b8:52:55:
                    6b:6b:9e:7f:2d:a4:86:a5:a3:f9:03:bf:65:94:aa:
                    e9:39:37:b6:4c:89:d8:3a:93:34:f7:1b:10:66:dc:
                    e7:0d:79:a1:97:12:78:6e:02:f3:34:3a:20:b5:d7:
                    f8:6f:83:a2:9c:7b:d0:d5:28:f8:c5:7d:ab:f8:0a:
                    64:00:ce:dd:e9:1a:35:c5:10:9f:95:db:7d:25:50:
                    17:0e:34:a2:8a:53:2c:ba:13:c0:ae:10:85:10:68:
                    f7:7f:6c:49:fa:ba:c1:c2:10:da:f2:63:9e:56:6c:
                    da:75:39:5b:f7:7f:04:e5:19:44:e2:4f:f3:04:f8:
                    ab:32:a3:bc:49:54:7c:e7:1b:c0:24:39:e9:7e:71:
                    f8:02:ae:66:1a:38:a8:38:45:e8:94:1c:38:0c:be:
                    58:86:9d:b0:81:7d:cf:47:54:a3:26:11:1d:a3:9f:
                    0b:31:35:3c:7e:97:da:28:f5:41:33:8d:b2:15:70:
                    3a:33:78:7b:1e:22:ad:19:6b:9c:4c:de:b9:82:0f:
                    1e:9f:af:75:26:6b:51:6c:91:04:e9:dc:44:06:7e:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:92:82:38:FD:73:EC:2D:9E:17:77:76:6A:35:1D:97:9E:07:3A
            X509v3 Authority Key Identifier:
                keyid:68:50:AA:BF:9B:DA:BF:26:BF:A0:92:83:02:1F:E9:13:D6:95:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aFCqv5vavya_oJKDAh_pE9aVbjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F978/7E22B374B69B11E8AE06C616C4F9AE02/aFCqv5vavya_oJKDAh_pE9aVbjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:12:e9:80:44:37:51:e6:c3:1d:da:a4:8a:c6:94:1d:41:b3:
         21:c8:77:41:03:92:95:82:90:f5:28:f1:98:30:2c:55:59:e7:
         bf:51:df:1a:7a:6e:b7:d9:c6:4b:8e:91:fe:39:78:fe:2f:cb:
         98:d4:59:46:b7:ae:16:04:0d:95:11:d5:44:8e:de:69:df:f1:
         c9:f8:ac:ad:02:78:86:db:1c:f9:84:2d:45:27:f3:11:19:af:
         c2:f0:4d:51:8d:76:09:26:f7:ac:49:f4:a4:54:ca:ea:f7:50:
         46:87:c0:1c:8b:05:91:cf:74:ee:1b:7c:21:8a:18:e9:27:11:
         2a:9c:26:e0:d1:a0:2e:51:44:84:f9:a7:61:b9:56:01:f8:f4:
         ac:75:d1:c0:42:2f:52:67:b2:d2:4d:aa:a2:89:de:f8:59:c3:
         4a:8a:45:dc:b1:25:78:60:bc:c7:76:33:32:48:49:56:86:9d:
         4e:11:98:5f:80:b4:a0:9e:73:c9:45:53:16:bb:a9:9e:68:d4:
         94:a8:25:88:df:c1:ab:64:cd:d1:33:ec:a5:a0:d2:84:11:25:
         9a:6c:8a:5b:e3:c1:9b:68:d7:e6:29:1e:28:5f:35:06:33:5e:
         d0:99:94:5e:d6:57:94:f7:0d:b3:fd:8f:d9:65:71:11:c0:e2:
         3f:1f:fe:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY5NzgxMTAvBgNVBAUTKDY4NTBBQUJGOUJEQUJGMjZCRkEwOTI4MzAyMUZFOTEz
RDY5NTZFMzIwHhcNMjYwOTIyMTY1MTQ0WhcNMjYwOTI5MTY1MTQ0WjAYMRYwFAYD
VQQDEw02YWIyYjIyMC00YjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8Vw2zgFutcFmfunxLsdN9viirQAjCaPWXB9EjXBQmwjMYCmg0Ldz7Vq4UlVr
a55/LaSGpaP5A79llKrpOTe2TInYOpM09xsQZtznDXmhlxJ4bgLzNDogtdf4b4Oi
nHvQ1Sj4xX2r+ApkAM7d6Ro1xRCfldt9JVAXDjSiilMsuhPArhCFEGj3f2xJ+rrB
whDa8mOeVmzadTlb938E5RlE4k/zBPirMqO8SVR85xvAJDnpfnH4Aq5mGjioOEXo
lBw4DL5Yhp2wgX3PR1SjJhEdo58LMTU8fpfaKPVBM42yFXA6M3h7HiKtGWucTN65
gg8en691JmtRbJEE6dxEBn72nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKpkoI4
/XPsLZ4Xd3ZqNR2Xngc6MB8GA1UdIwQYMBaAFGhQqr+b2r8mv6CSgwIf6RPWlW4y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk3OC83RTIyQjM3NEI2
OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5YV9vSktEQWhfcEU5YVZi
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FGQ3F2NXZhdnlhX29KS0RBaF9wRTlhVmJqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Rjk3OC83RTIyQjM3NEI2OUIxMUU4QUUwNkM2MTZDNEY5QUUwMi9hRkNxdjV2YXZ5
YV9vSktEQWhfcEU5YVZiakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAChLpgEQ3UebDHdqkisaUHUGzIch3QQOSlYKQ9SjxmDAsVVnnv1HfGnput9nG
S46R/jl4/i/LmNRZRreuFgQNlRHVRI7ead/xyfisrQJ4htsc+YQtRSfzERmvwvBN
UY12CSb3rEn0pFTK6vdQRofAHIsFkc907ht8IYoY6ScRKpwm4NGgLlFEhPmnYblW
Afj0rHXRwEIvUmey0k2qoone+FnDSopF3LEleGC8x3YzMkhJVoadThGYX4C0oJ5z
yUVTFrupnmjUlKgliN/Bq2TN0TPspaDShBElmmyKW+PBm2jX5ikeKF81BjNe0JmU
XtZXlPcNs/2P2WVxEcDiPx/+NQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:53:27 2026 by rpki-client