Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
File:                     9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft (raw, json)
Hash identifier:          AJ0KZxymCYV7TKFZmhwNYCdPrbIwjmrdl2/bwoXVFSY=
Subject key identifier:   B8:F6:74:5D:B7:C0:4E:E1:C3:FE:F8:F4:83:E8:BB:76:7D:69:4E:A2
Authority key identifier: F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7
Certificate issuer:       /CN=A919EAAD/serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
Certificate serial:       0D48
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
Manifest number:          0D36
Signing time:             Thu 24 Sep 2026 18:13:06 +0000
Manifest this update:     Thu 24 Sep 2026 18:13:05 +0000
Manifest next update:     Thu 01 Oct 2026 18:13:05 +0000
Files and hashes:         1: 9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl (hash: tuY2PHfmJvGC9J89MSFjvk5T+Vk0ZTFt/nd45v3bVyU=)
                          2: 97DC58040B5B11EAB69DC64FC4F9AE02.roa (hash: B+4ghGog0RYB7I4E9J/Za4OLQ8QEJpi5G6sC5f+vbXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3400 (0xd48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=F53983B7AB8386C69958784FFAF0E697262457A7
        Validity
            Not Before: Sep 24 18:13:05 2026 GMT
            Not After : Oct  1 18:13:05 2026 GMT
        Subject: CN=6ab56831-57b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:8a:54:60:b0:03:22:9f:58:7b:a8:81:9d:
                    0a:69:d2:f8:80:1c:c9:7a:30:07:db:08:fb:aa:61:
                    77:c4:14:b0:1c:4e:ce:18:ea:97:c8:6f:80:13:01:
                    02:b5:43:31:04:44:dc:b0:41:d4:df:0f:1d:b3:da:
                    58:f2:8b:ba:2c:58:75:c1:db:9c:fc:ec:91:f3:b8:
                    c8:db:17:e5:70:de:87:f6:00:3f:7b:ea:07:ca:c6:
                    ff:77:97:c0:e4:19:11:74:86:6b:7f:ea:fe:ed:b2:
                    a3:d0:38:6e:04:95:32:5c:27:2d:ba:ae:09:65:e9:
                    14:c1:c9:67:63:ab:76:f3:39:f3:c4:79:8f:40:81:
                    7f:af:50:63:9f:c5:d8:00:7f:92:79:e1:98:f7:da:
                    45:64:66:82:09:42:0d:f1:23:4d:f7:ea:37:26:12:
                    37:db:41:eb:c2:fc:04:19:25:2c:af:47:e2:c9:2d:
                    9d:82:dc:05:24:1b:82:a9:7b:3c:6d:09:6f:c4:f7:
                    e8:56:f2:ef:62:9c:a6:e2:16:34:b7:53:26:05:5e:
                    54:80:cc:81:5a:a7:b5:04:28:9d:15:80:3d:c7:c8:
                    b9:99:2c:b4:3f:75:72:ac:11:9f:4f:4e:79:a9:fd:
                    8e:0a:aa:9f:0d:e7:ab:1d:d7:36:4b:55:2f:d9:dc:
                    8a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F6:74:5D:B7:C0:4E:E1:C3:FE:F8:F4:83:E8:BB:76:7D:69:4E:A2
            X509v3 Authority Key Identifier:
                keyid:F5:39:83:B7:AB:83:86:C6:99:58:78:4F:FA:F0:E6:97:26:24:57:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9TmDt6uDhsaZWHhP-vDmlyYkV6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/87C3168809D511EAB76C7317C4F9AE02/9TmDt6uDhsaZWHhP-vDmlyYkV6c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3d:8a:e5:a1:3a:21:1d:01:0a:38:78:f8:84:df:7e:6d:df:
         9f:ab:54:40:44:62:30:5c:eb:14:a2:8b:56:b9:60:96:d4:e2:
         22:5b:f9:98:aa:c5:c9:7b:79:3e:f2:73:09:42:eb:b7:ab:82:
         2e:09:81:6d:fc:cc:16:54:71:40:13:10:18:dc:ee:dd:33:49:
         f9:fc:ff:2a:25:38:e6:35:16:65:97:40:50:3b:02:7f:59:57:
         0d:2a:e1:cb:3c:da:18:ea:6b:63:8e:68:64:32:77:96:84:8b:
         3d:dd:f5:23:7e:e9:64:85:94:18:d1:d2:a4:6f:e7:f1:e1:42:
         b1:a4:6c:bc:fd:8a:ff:e8:24:e2:44:d4:01:2b:9e:ff:26:00:
         bd:1d:a0:0c:a0:ef:db:ac:98:3f:d0:eb:6d:b5:d7:2c:c6:25:
         b4:45:89:c3:d2:aa:b5:b0:06:93:d6:6d:aa:f1:ac:08:72:d1:
         ba:1d:00:c1:31:64:0e:a8:aa:3a:32:c4:ff:c9:2e:2f:34:c1:
         e5:4e:25:43:44:08:11:d1:99:9f:73:c5:9e:bc:73:80:85:b7:
         ee:5c:46:6e:4e:cd:8e:a6:1b:35:19:84:27:82:03:14:3f:16:
         fe:14:b1:ef:b1:6d:6e:1b:a1:14:a5:c8:3a:04:e4:2a:05:cb:
         b0:d4:70:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBQUQxMTAvBgNVBAUTKEY1Mzk4M0I3QUI4Mzg2QzY5OTU4Nzg0RkZBRjBFNjk3
MjYyNDU3QTcwHhcNMjYwOTI0MTgxMzA1WhcNMjYxMDAxMTgxMzA1WjAYMRYwFAYD
VQQDEw02YWI1NjgzMS01N2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3WKVGCwAyKfWHuogZ0KadL4gBzJejAH2wj7qmF3xBSwHE7OGOqXyG+AEwEC
tUMxBETcsEHU3w8ds9pY8ou6LFh1wduc/OyR87jI2xflcN6H9gA/e+oHysb/d5fA
5BkRdIZrf+r+7bKj0DhuBJUyXCctuq4JZekUwclnY6t28znzxHmPQIF/r1Bjn8XY
AH+SeeGY99pFZGaCCUIN8SNN9+o3JhI320HrwvwEGSUsr0fiyS2dgtwFJBuCqXs8
bQlvxPfoVvLvYpym4hY0t1MmBV5UgMyBWqe1BCidFYA9x8i5mSy0P3VyrBGfT055
qf2OCqqfDeerHdc2S1Uv2dyKvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLj2dF23
wE7hw/749IPou3Z9aU6iMB8GA1UdIwQYMBaAFPU5g7erg4bGmVh4T/rw5pcmJFen
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC84N0MzMTY4ODA5
RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhzYVpXSGhQLXZEbWx5WWtW
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzlUbUR0NnVEaHNhWldIaFAtdkRtbHlZa1Y2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUFBRC84N0MzMTY4ODA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi85VG1EdDZ1RGhz
YVpXSGhQLXZEbWx5WWtWNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcz2K5aE6IR0BCjh4+ITffm3fn6tUQERiMFzrFKKLVrlgltTiIlv5mKrFyXt5
PvJzCULrt6uCLgmBbfzMFlRxQBMQGNzu3TNJ+fz/KiU45jUWZZdAUDsCf1lXDSrh
yzzaGOprY45oZDJ3loSLPd31I37pZIWUGNHSpG/n8eFCsaRsvP2K/+gk4kTUASue
/yYAvR2gDKDv26yYP9DrbbXXLMYltEWJw9KqtbAGk9ZtqvGsCHLRuh0AwTFkDqiq
OjLE/8kuLzTB5U4lQ0QIEdGZn3PFnrxzgIW37lxGbk7NjqYbNRmEJ4IDFD8W/hSx
77FtbhuhFKXIOgTkKgXLsNRwkA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:48:30 2026 by rpki-client