Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.mft
File:                     0jiibFh9qtyxeoIbBRJMIzggPdY.mft (raw, json)
Hash identifier:          nWTtHJYnL8cnXH4hpBWPW7UKkv5tjf0rkTSMVwmsBjk=
Subject key identifier:   21:FF:FF:C8:80:DB:45:5D:14:A7:FD:52:85:29:13:63:94:E4:C2:7D
Authority key identifier: D2:38:A2:6C:58:7D:AA:DC:B1:7A:82:1B:05:12:4C:23:38:20:3D:D6
Certificate issuer:       /CN=A919B7F7/serialNumber=D238A26C587DAADCB17A821B05124C2338203DD6
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jiibFh9qtyxeoIbBRJMIzggPdY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.mft
Manifest number:          0F
Signing time:             Sun 27 Sep 2026 09:43:37 +0000
Manifest this update:     Sun 27 Sep 2026 09:43:36 +0000
Manifest next update:     Sun 04 Oct 2026 09:43:36 +0000
Files and hashes:         1: 0jiibFh9qtyxeoIbBRJMIzggPdY.crl (hash: FkhxqEbBCREPhl41fYHL+HX8xy06+xNmJhEdIzZVkmg=)
                          2: FDA07E56A6A711F1BB23BA9A3811F970.roa (hash: jZsj6REmCguThaGYpbr8i0ORTeXH0I3L+SklubXql44=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.crl
                          rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jiibFh9qtyxeoIbBRJMIzggPdY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B7F7, serialNumber=D238A26C587DAADCB17A821B05124C2338203DD6
        Validity
            Not Before: Sep 27 09:43:36 2026 GMT
            Not After : Oct  4 09:43:36 2026 GMT
        Subject: CN=6ab8e548-4639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:08:7f:ef:9f:3e:50:ce:d1:3b:da:ff:b3:
                    e2:4e:63:02:03:c0:58:11:6b:de:5b:c2:3a:3e:5a:
                    74:a4:de:a7:ff:e1:8d:af:82:de:01:5a:df:6a:1a:
                    4a:69:65:c1:57:8c:b0:1f:cd:3c:b4:18:cf:4a:92:
                    c6:fb:6b:75:ec:e8:9e:ef:b0:f5:42:f5:ac:5c:19:
                    42:77:cb:03:e5:f6:b3:9d:d7:59:57:3d:0a:be:4c:
                    7a:7e:00:9c:ff:80:21:15:71:ab:1b:28:dd:11:4c:
                    d7:84:ac:04:5c:47:d9:98:e7:4e:45:f8:77:81:d8:
                    54:8f:e7:9d:db:0c:9e:f9:78:11:57:a5:23:70:c7:
                    e3:ec:21:3a:f5:5e:6e:b1:c9:9b:0b:c6:54:e7:3d:
                    dd:4f:66:9c:69:06:c3:39:ff:cd:7c:9a:5a:b3:80:
                    b2:f3:f3:52:99:e0:15:a6:88:19:47:2b:45:5f:4d:
                    8b:84:9e:33:d7:9a:4f:39:47:14:d8:bf:ae:6e:d2:
                    a7:b8:ef:70:85:e4:97:93:6d:4d:84:16:fd:df:78:
                    4e:81:1b:01:2f:c9:56:ec:61:e7:f6:94:96:d4:9a:
                    a7:3a:38:ea:97:c0:c7:61:6f:31:a0:52:fa:e3:99:
                    cb:45:4a:43:3e:7c:da:b7:a1:ee:b7:88:eb:cb:ed:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FF:FF:C8:80:DB:45:5D:14:A7:FD:52:85:29:13:63:94:E4:C2:7D
            X509v3 Authority Key Identifier:
                keyid:D2:38:A2:6C:58:7D:AA:DC:B1:7A:82:1B:05:12:4C:23:38:20:3D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jiibFh9qtyxeoIbBRJMIzggPdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B7F7/A88E8C0AA6A711F1A0B6D5203811F970/0jiibFh9qtyxeoIbBRJMIzggPdY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e0:4b:fa:23:93:91:5f:a4:b5:00:ad:f1:8b:c3:e7:f1:de:
         21:c1:c3:f7:1d:ee:1f:ae:de:4f:49:70:6b:2e:e1:12:7f:a4:
         76:11:fb:2c:16:12:20:fa:d9:91:a7:07:8c:16:0a:95:99:7f:
         45:95:b7:9b:a9:a6:cf:04:70:e1:f0:e6:37:3d:59:1d:11:45:
         31:4f:e3:f9:d7:e3:4e:8d:e8:b3:10:7f:43:34:ff:8a:33:7d:
         f6:a0:3f:50:bf:b9:cc:36:27:2e:87:02:e2:1c:18:65:8d:5c:
         fa:19:04:b7:90:a2:ea:81:cd:4e:97:df:b3:8f:7c:7e:ec:c5:
         e4:07:76:83:8c:c7:23:21:ee:87:c3:88:18:51:31:52:b5:65:
         d7:8f:32:a1:23:4c:f7:c4:0b:9d:c6:d5:2b:b0:ba:af:68:c2:
         d4:cf:86:91:64:ac:12:67:5d:e6:29:f2:9f:db:f8:f6:71:bf:
         e1:17:d6:8f:e2:ee:d3:cd:b7:d8:b0:85:07:ff:4e:3a:63:da:
         2b:88:5a:e0:d0:35:45:94:f9:0d:b4:e5:af:ab:ea:bf:54:9e:
         cf:dc:14:cc:d4:e2:23:ef:5b:15:c4:e1:44:e3:4a:a5:ff:b3:
         4b:7b:b5:00:43:b6:7a:6d:b3:2d:53:44:23:d4:ab:43:3c:bf:
         67:f2:14:ca
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QjdGNzExMC8GA1UEBRMoRDIzOEEyNkM1ODdEQUFEQ0IxN0E4MjFCMDUxMjRDMjMz
ODIwM0RENjAeFw0yNjA5MjcwOTQzMzZaFw0yNjEwMDQwOTQzMzZaMBgxFjAUBgNV
BAMTDTZhYjhlNTQ4LTQ2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+AQh/758+UM7RO9r/s+JOYwIDwFgRa95bwjo+WnSk3qf/4Y2vgt4BWt9qGkpp
ZcFXjLAfzTy0GM9Kksb7a3Xs6J7vsPVC9axcGUJ3ywPl9rOd11lXPQq+THp+AJz/
gCEVcasbKN0RTNeErARcR9mY505F+HeB2FSP553bDJ75eBFXpSNwx+PsITr1Xm6x
yZsLxlTnPd1PZpxpBsM5/818mlqzgLLz81KZ4BWmiBlHK0VfTYuEnjPXmk85RxTY
v65u0qe473CF5JeTbU2EFv3feE6BGwEvyVbsYef2lJbUmqc6OOqXwMdhbzGgUvrj
mctFSkM+fNq3oe63iOvL7ZFnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUIf//yIDb
RV0Up/1ShSkTY5Tkwn0wHwYDVR0jBBgwFoAU0jiibFh9qtyxeoIbBRJMIzggPdYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlCN0Y3L0E4OEU4QzBBQTZB
NzExRjFBMEI2RDUyMDM4MTFGOTcwLzBqaWliRmg5cXR5eGVvSWJCUkpNSXpnZ1Bk
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMGppaWJGaDlxdHl4ZW9JYkJSSk1JemdnUGRZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlC
N0Y3L0E4OEU4QzBBQTZBNzExRjFBMEI2RDUyMDM4MTFGOTcwLzBqaWliRmg5cXR5
eGVvSWJCUkpNSXpnZ1BkWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBS4Ev6I5ORX6S1AK3xi8Pn8d4hwcP3He4frt5PSXBrLuESf6R2EfssFhIg+tmR
pweMFgqVmX9FlbebqabPBHDh8OY3PVkdEUUxT+P51+NOjeizEH9DNP+KM332oD9Q
v7nMNicuhwLiHBhljVz6GQS3kKLqgc1Ol9+zj3x+7MXkB3aDjMcjIe6Hw4gYUTFS
tWXXjzKhI0z3xAudxtUrsLqvaMLUz4aRZKwSZ13mKfKf2/j2cb/hF9aP4u7TzbfY
sIUH/046Y9oriFrg0DVFlPkNtOWvq+q/VJ7P3BTM1OIj71sVxOFE40ql/7NLe7UA
Q7Z6bbMtU0Qj1KtDPL9n8hTK
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:30:04 2026 by rpki-client