Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
File:                     ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json)
Hash identifier:          ZHIKeUp6PkwV26JZrk10fMCRu1lJeLXybP2J28LeSFU=
Subject key identifier:   8A:D3:F5:BD:1E:83:FA:90:23:D0:AE:F2:79:10:A3:2D:43:AE:34:52
Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A
Certificate issuer:       /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
Certificate serial:       1082
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
Manifest number:          1062
Signing time:             Tue 06 Oct 2026 17:29:55 +0000
Manifest this update:     Tue 06 Oct 2026 17:29:54 +0000
Manifest next update:     Tue 13 Oct 2026 17:29:54 +0000
Files and hashes:         1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: 9eBv2MopbghxIcqLeGLYvyJrgisbXdsFXTlbEbRoAIw=)
                          2: B0604836C95A11F0930CD216C4F9AE02.roa (hash: oCQ1G/cB7TCeHKMDNbFEVWrOPNKnyydcJqHYFPTV4ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl
                          rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4226 (0x1082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A
        Validity
            Not Before: Oct  6 17:29:54 2026 GMT
            Not After : Oct 13 17:29:54 2026 GMT
        Subject: CN=6ac53013-b641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:da:99:cc:a1:14:a4:ba:68:1f:7a:bb:6c:
                    52:83:9f:07:d7:51:ec:dc:1f:ce:04:3a:df:ab:71:
                    3c:ff:d7:0a:97:e4:e2:c3:88:87:62:9f:00:2e:20:
                    6f:e8:b3:8e:01:66:41:03:41:56:8b:ca:12:c6:c5:
                    cd:a5:89:24:25:c4:2a:2a:3a:b2:ad:7c:fe:60:76:
                    c3:63:05:d6:b7:5c:a9:f9:7e:8d:72:f0:a9:46:dd:
                    82:4b:d2:ba:71:ff:c2:52:be:78:df:fd:6f:c5:8b:
                    80:a5:ae:8a:2b:1d:9b:12:41:89:4d:79:04:11:70:
                    d7:df:29:91:d2:c9:b5:32:be:93:25:f7:b1:b4:37:
                    68:c2:ec:5c:02:f5:dd:21:1f:47:47:64:49:7c:3e:
                    76:f0:e6:b1:63:8d:6c:67:23:96:7b:87:e1:cb:06:
                    ec:c6:fe:9b:48:9b:3f:e0:ab:56:9c:1c:a3:f4:43:
                    dd:f3:d0:19:87:ec:6c:40:f4:c9:5c:33:65:82:cd:
                    97:a6:d2:87:b1:1f:fd:3f:79:6d:5f:86:d8:61:06:
                    14:8d:b6:cd:d0:1e:f7:13:ca:31:df:c4:18:e1:57:
                    e0:68:17:3a:c5:7d:0d:c3:03:40:60:8b:bc:0f:34:
                    31:8d:23:e0:9c:ba:39:30:73:43:6e:45:2a:3f:9f:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D3:F5:BD:1E:83:FA:90:23:D0:AE:F2:79:10:A3:2D:43:AE:34:52
            X509v3 Authority Key Identifier:
                keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bb:4c:00:6c:76:cb:60:08:c4:f1:c1:76:df:cd:e8:4f:75:
         cd:d2:e6:88:34:3c:5b:77:fc:f5:61:b0:64:1d:8b:f7:17:04:
         0f:9d:43:86:72:20:93:0a:b2:25:bc:64:33:2b:08:a0:4c:a6:
         9f:c9:34:ea:c9:6f:b2:2c:2d:7d:a1:1a:60:81:46:15:c5:16:
         87:74:76:c5:7c:a4:0b:cd:d2:40:f5:b1:20:19:f9:b1:57:23:
         10:a7:ea:b0:05:56:fd:fe:f0:94:c4:6e:07:08:5a:c5:f7:d7:
         ca:a7:30:b5:77:9e:56:bc:f1:20:67:96:b1:da:67:77:33:6d:
         a6:fe:c4:71:99:58:99:bb:80:08:15:c5:7a:6d:18:b9:3f:8d:
         77:f5:dc:85:77:6f:9e:fb:10:f4:8f:2e:78:a7:c4:00:aa:0e:
         ec:c5:c9:f4:76:38:95:e9:a2:ed:05:06:67:0e:53:c5:3e:77:
         cc:97:e2:8e:1e:fb:c9:40:d8:a6:7c:20:95:6d:f2:59:3d:e1:
         b0:fe:80:af:8c:df:a3:b3:5f:21:52:bf:27:66:7b:d7:44:99:
         38:9a:73:f5:7c:89:24:59:49:ee:26:9a:00:08:6f:b2:78:9c:
         33:ea:8e:82:7f:89:44:99:87:5c:4a:ac:cc:8d:62:90:25:dd:
         72:cc:d2:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1
MkJCODg5OUEwHhcNMjYxMDA2MTcyOTU0WhcNMjYxMDEzMTcyOTU0WjAYMRYwFAYD
VQQDEw02YWM1MzAxMy1iNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCDamcyhFKS6aB96u2xSg58H11Hs3B/OBDrfq3E8/9cKl+Tiw4iHYp8ALiBv
6LOOAWZBA0FWi8oSxsXNpYkkJcQqKjqyrXz+YHbDYwXWt1yp+X6NcvCpRt2CS9K6
cf/CUr543/1vxYuApa6KKx2bEkGJTXkEEXDX3ymR0sm1Mr6TJfextDdowuxcAvXd
IR9HR2RJfD528OaxY41sZyOWe4fhywbsxv6bSJs/4KtWnByj9EPd89AZh+xsQPTJ
XDNlgs2XptKHsR/9P3ltX4bYYQYUjbbN0B73E8ox38QY4VfgaBc6xX0NwwNAYIu8
DzQxjSPgnLo5MHNDbkUqP5/YDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIrT9b0e
g/qQI9Cu8nkQoy1DrjRSMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw
OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH
Z1paTmhZLVJST0JTdTRpWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApLtMAGx2y2AIxPHBdt/N6E91zdLmiDQ8W3f89WGwZB2L9xcED51DhnIgkwqy
JbxkMysIoEymn8k06slvsiwtfaEaYIFGFcUWh3R2xXykC83SQPWxIBn5sVcjEKfq
sAVW/f7wlMRuBwhaxffXyqcwtXeeVrzxIGeWsdpndzNtpv7EcZlYmbuACBXFem0Y
uT+Nd/XchXdvnvsQ9I8ueKfEAKoO7MXJ9HY4lemi7QUGZw5TxT53zJfijh77yUDY
pnwglW3yWT3hsP6Ar4zfo7NfIVK/J2Z710SZOJpz9XyJJFlJ7iaaAAhvsnicM+qO
gn+JRJmHXEqszI1ikCXdcszS9A==
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:25:59 2026 by rpki-client