Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File:                     t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier:          V292p3J6FlxaQxRE8svAQNB97WVZR6Amj+H0w7nC7HM=
Subject key identifier:   6C:9D:AA:D6:2C:5A:CD:68:95:1F:23:FF:5A:03:32:93:DF:A5:A0:52
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer:       /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial:       08B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number:          0896
Signing time:             Thu 24 Sep 2026 20:40:13 +0000
Manifest this update:     Thu 24 Sep 2026 20:40:12 +0000
Manifest next update:     Thu 01 Oct 2026 20:40:12 +0000
Files and hashes:         1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: cHrrTsFORsHJFVjfzCoGvW1uDcsx76bVAkbhkQvL0YQ=)
                          2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: sI6tR4a2HYfJurDOPfrB4Umd60Gjw1lCZTz+9gBI5MI=)
                          3: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: 816YLoIvH9Oaj07rOnlACoUv6ymscAs9lYY/BFhZ/Lc=)
                          4: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: WzKy9u9B88D10HY+ConM6LT0I2T55QHznbzlIn3dfH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
                          rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2228 (0x8b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
        Validity
            Not Before: Sep 24 20:40:12 2026 GMT
            Not After : Oct  1 20:40:12 2026 GMT
        Subject: CN=6ab58aad-963d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:2d:8b:7e:8c:47:ff:e9:3b:27:7c:d9:2d:
                    c5:5d:6e:5e:28:ca:3e:dd:c1:ee:b6:e9:5f:b7:8a:
                    7a:9a:5e:29:ff:fe:52:8f:52:2d:52:76:a4:75:69:
                    0f:e4:92:9b:59:05:29:5c:17:76:17:dd:c8:05:5e:
                    05:71:af:7b:a5:33:cb:fa:c8:99:87:dd:1b:92:24:
                    8a:f8:87:8b:58:72:a0:80:2a:0d:26:90:d5:e4:2e:
                    d3:8b:46:72:d6:b8:ef:11:d5:80:d9:cc:03:03:75:
                    bf:f4:99:aa:1e:e2:b7:28:f3:ec:85:3e:75:ad:69:
                    7e:6c:d8:e7:31:6e:8c:03:c5:8f:70:87:b2:af:c3:
                    55:dd:2f:33:85:3c:7b:c5:11:b4:b5:e3:90:2c:78:
                    59:d7:5d:8b:83:42:e2:a8:5b:be:11:a1:e2:4f:8f:
                    ec:4e:d4:44:55:31:e3:40:e2:50:29:a0:82:7f:42:
                    e2:f7:ae:84:7f:40:10:f3:a0:13:f8:64:9e:f1:8b:
                    60:db:0b:99:de:8d:6d:a1:78:6c:1c:3d:42:a3:02:
                    f2:0e:0b:bd:d1:7c:3c:dc:e0:30:86:37:4d:1b:39:
                    4b:b3:83:f3:5a:c0:fc:5d:57:f3:ac:73:05:75:e0:
                    fe:31:b9:37:ef:b0:f4:e1:cf:bf:08:ac:ee:10:83:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9D:AA:D6:2C:5A:CD:68:95:1F:23:FF:5A:03:32:93:DF:A5:A0:52
            X509v3 Authority Key Identifier:
                keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ef:82:ad:45:1c:95:55:c4:ef:a1:77:01:1d:5d:f3:67:85:
         90:0d:ce:56:40:b3:40:82:19:bb:6e:33:0b:44:6d:d2:93:4a:
         b6:01:2b:72:22:ed:6e:9e:9a:8d:25:a6:b8:1e:35:e2:10:fb:
         1a:1f:b0:e0:10:69:5c:98:41:11:f8:92:da:e0:10:fb:0d:44:
         58:75:b6:fb:29:86:47:cf:50:a6:6d:b8:8b:d5:85:a4:0f:79:
         60:a1:d7:4f:24:eb:8a:c9:8e:48:f4:f8:be:13:67:62:3a:96:
         1d:5d:c6:ca:14:51:af:2d:0e:91:59:e5:b9:f0:fa:1e:d1:9b:
         94:48:ea:04:90:88:fc:ab:8f:48:e9:5c:d2:41:0c:a9:13:fa:
         0f:e4:66:86:65:17:34:29:da:8b:f8:ae:f0:0b:3e:19:20:f0:
         d7:ab:51:d8:dd:31:07:62:a6:92:94:b5:de:27:35:bc:a8:b9:
         d5:2b:9a:a9:ea:10:33:c3:f6:05:c4:e1:bb:b6:8f:60:af:62:
         a3:39:fe:ff:90:59:e4:36:8f:df:e6:e1:93:ec:59:3b:5e:95:
         28:f3:2f:6f:55:7e:32:2d:b4:e8:6b:61:8b:08:f6:95:a0:31:
         b0:13:cc:08:5f:10:af:9e:35:a2:14:82:78:00:8e:b3:15:db:
         ce:e0:cc:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVFNzcxMTAvBgNVBAUTKEI3ODFBMkU3RDkxRURDQThCMDMwREUzRUE4OUZBNEZB
RjE3OTFGMjEwHhcNMjYwOTI0MjA0MDEyWhcNMjYxMDAxMjA0MDEyWjAYMRYwFAYD
VQQDEw02YWI1OGFhZC05NjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwMti36MR//pOyd82S3FXW5eKMo+3cHutulft4p6ml4p//5Sj1ItUnakdWkP
5JKbWQUpXBd2F93IBV4Fca97pTPL+siZh90bkiSK+IeLWHKggCoNJpDV5C7Ti0Zy
1rjvEdWA2cwDA3W/9JmqHuK3KPPshT51rWl+bNjnMW6MA8WPcIeyr8NV3S8zhTx7
xRG0teOQLHhZ112Lg0LiqFu+EaHiT4/sTtREVTHjQOJQKaCCf0Li966Ef0AQ86AT
+GSe8Ytg2wuZ3o1toXhsHD1CowLyDgu90Xw83OAwhjdNGzlLs4PzWsD8XVfzrHMF
deD+Mbk377D04c+/CKzuEINa3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGydqtYs
Ws1olR8j/1oDMpPfpaBSMB8GA1UdIwQYMBaAFLeBoufZHtyosDDePqifpPrxeR8h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUU3Ny9EOUJFMDdCQTBD
RUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNLaXdNTjQtcUotay12RjVI
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q0R2k1OWtlM0tpd01ONC1xSi1rLXZGNUh5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUU3Ny9EOUJFMDdCQTBDRUQxMUVCQTdGMTExNUJDNEY5QUUwMi90NEdpNTlrZTNL
aXdNTjQtcUotay12RjVIeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoe+CrUUclVXE76F3AR1d82eFkA3OVkCzQIIZu24zC0Rt0pNKtgErciLtbp6a
jSWmuB414hD7Gh+w4BBpXJhBEfiS2uAQ+w1EWHW2+ymGR89Qpm24i9WFpA95YKHX
TyTrismOSPT4vhNnYjqWHV3GyhRRry0OkVnlufD6HtGblEjqBJCI/KuPSOlc0kEM
qRP6D+RmhmUXNCnai/iu8As+GSDw16tR2N0xB2KmkpS13ic1vKi51SuaqeoQM8P2
BcThu7aPYK9iozn+/5BZ5DaP3+bhk+xZO16VKPMvb1V+Mi206Gthiwj2laAxsBPM
CF8Qr541ohSCeACOsxXbzuDMLA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:30:47 2026 by rpki-client