Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
File:                     cKRczAWTxHEjY1BaCmTdO3NXboo.mft (raw, json)
Hash identifier:          ruffG3/Qic0YO9ObZterwFsRAVmxxAFDohL1abCWHYU=
Subject key identifier:   C0:B9:D0:2E:7D:2E:2F:AE:F3:54:34:F9:BC:EB:9B:4C:D8:5D:56:67
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       08AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
Manifest number:          0887
Signing time:             Sat 26 Sep 2026 20:57:50 +0000
Manifest this update:     Sat 26 Sep 2026 20:57:49 +0000
Manifest next update:     Sat 03 Oct 2026 20:57:49 +0000
Files and hashes:         1: cKRczAWTxHEjY1BaCmTdO3NXboo.crl (hash: 0yMgyUwSDORMQyaks4hiUkllVzPsWLnDoeSVU6Ta/HY=)
                          2: 98657342132E11F0B588DB49C4F9AE02.roa (hash: 0iM/49fCWX66zeiMZs91UhGTC/SM04s/wq22TiEesQc=)
                          3: 99551366132E11F0B588DB49C4F9AE02.roa (hash: 730CsvKwep6Bjskp3sW1RKOSjDMQjfByDvmaL6lb+pQ=)
                          4: AoJXKTW6a976-lGfSTZSSLqRfVU.asa (hash: NinME7QbecrEtC4yA+6TI6aYRUOFyI2rxCV52kQzJ9U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 20:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Sep 26 20:57:49 2026 GMT
            Not After : Oct  3 20:57:49 2026 GMT
        Subject: CN=6ab831ce-25b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:eb:5f:c8:67:21:4e:99:09:fa:f2:d3:aa:
                    92:b9:01:3f:c5:98:3e:54:b1:e2:77:1e:21:7a:41:
                    77:a6:f0:bb:d6:b0:08:25:63:03:c4:a9:50:3e:5a:
                    ad:72:bf:de:69:3e:5f:54:13:8c:1b:c6:45:49:39:
                    c9:ee:32:e3:60:9a:9a:c5:13:73:a2:34:a0:22:48:
                    de:96:30:e3:1c:93:ca:20:b2:35:71:38:71:cb:c5:
                    fc:d5:45:40:f5:62:3a:ec:54:14:f3:66:f7:9c:59:
                    e6:87:ca:61:d0:8b:0e:92:4f:5c:f0:10:e6:3d:ac:
                    99:65:b8:39:45:e9:bf:77:f5:18:50:22:2c:fb:64:
                    01:54:b5:87:bc:df:3e:21:8d:b8:8d:26:06:be:30:
                    b5:31:56:9a:f8:46:a3:0d:00:c7:ca:94:fa:0e:b8:
                    cc:89:1b:6f:c4:5e:78:cf:e0:ff:f9:5c:68:8d:ee:
                    6f:c9:1c:29:32:40:51:65:28:d0:73:13:fd:41:32:
                    81:2f:92:e5:a6:4c:fe:8c:c6:63:e3:dd:03:f1:7a:
                    cf:ed:b2:8b:f7:b4:fd:dc:40:96:a9:43:3b:b7:61:
                    10:f1:10:8f:14:11:11:5b:4e:95:94:b9:90:81:b5:
                    14:59:51:59:68:41:8c:2f:29:4c:9a:7c:2e:70:ef:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:D0:2E:7D:2E:2F:AE:F3:54:34:F9:BC:EB:9B:4C:D8:5D:56:67
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:bb:24:c9:e6:ed:7b:6e:7a:2a:b5:9a:75:8a:26:08:c0:74:
         5a:b6:ad:e4:0d:0a:21:d5:c7:fd:b7:22:42:df:2f:52:2c:79:
         50:c6:91:80:fc:68:c7:3a:da:db:b3:e9:b7:8b:04:01:67:53:
         db:f9:2b:66:cd:30:b4:b9:80:67:f1:59:26:8f:73:d7:9f:e1:
         0b:4d:85:78:52:bb:00:55:7a:0a:1b:89:52:98:a5:2f:f9:74:
         49:29:ca:4a:43:81:54:35:ff:18:74:a6:73:f3:fa:3f:de:4a:
         e7:ea:a8:91:9f:09:f4:de:6d:f5:f8:f4:b7:91:4e:ed:e8:5f:
         0c:20:4e:c7:79:ae:f9:99:42:3b:e5:80:9b:d5:12:17:d4:ef:
         4c:40:b5:7a:c4:e2:9b:0c:c0:e7:fb:41:29:5e:ca:6e:7e:bc:
         07:87:cb:b7:f0:b7:91:0b:51:b6:a4:3b:08:33:e4:34:10:17:
         5d:87:0f:57:ee:a1:37:d4:9f:de:df:c5:d8:65:cd:72:fc:94:
         75:dd:b5:d3:16:96:2a:16:bc:df:a6:f4:ec:33:7b:bb:b4:46:
         13:f9:56:28:4e:82:2c:bd:43:5b:ba:f4:ad:2c:e1:ab:16:e5:
         51:c5:ff:f9:ad:0e:f3:b5:36:56:1b:d5:3f:5d:f7:71:b9:52:
         48:ae:24:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgwN0UxMTAvBgNVBAUTKDcwQTQ1Q0NDMDU5M0M0NzEyMzYzNTA1QTBBNjRERDNC
NzM1NzZFOEEwHhcNMjYwOTI2MjA1NzQ5WhcNMjYxMDAzMjA1NzQ5WjAYMRYwFAYD
VQQDEw02YWI4MzFjZS0yNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuofrX8hnIU6ZCfry06qSuQE/xZg+VLHidx4hekF3pvC71rAIJWMDxKlQPlqt
cr/eaT5fVBOMG8ZFSTnJ7jLjYJqaxRNzojSgIkjeljDjHJPKILI1cThxy8X81UVA
9WI67FQU82b3nFnmh8ph0IsOkk9c8BDmPayZZbg5Rem/d/UYUCIs+2QBVLWHvN8+
IY24jSYGvjC1MVaa+EajDQDHypT6DrjMiRtvxF54z+D/+Vxoje5vyRwpMkBRZSjQ
cxP9QTKBL5Llpkz+jMZj490D8XrP7bKL97T93ECWqUM7t2EQ8RCPFBERW06VlLmQ
gbUUWVFZaEGMLylMmnwucO87PwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMC50C59
Li+u81Q0+bzrm0zYXVZnMB8GA1UdIwQYMBaAFHCkXMwFk8RxI2NQWgpk3TtzV26K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODA3RS9DNEI0RTJDNjE3
OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhIRWpZMUJhQ21UZE8zTlhi
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NLUmN6QVdUeEhFalkxQmFDbVRkTzNOWGJvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODA3RS9DNEI0RTJDNjE3OTIxMUVCOTBCRkEwODRDNEY5QUUwMi9jS1JjekFXVHhI
RWpZMUJhQ21UZE8zTlhib28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVbskyebte256KrWadYomCMB0Wrat5A0KIdXH/bciQt8vUix5UMaRgPxoxzra
27Ppt4sEAWdT2/krZs0wtLmAZ/FZJo9z15/hC02FeFK7AFV6ChuJUpilL/l0SSnK
SkOBVDX/GHSmc/P6P95K5+qokZ8J9N5t9fj0t5FO7ehfDCBOx3mu+ZlCO+WAm9US
F9TvTEC1esTimwzA5/tBKV7Kbn68B4fLt/C3kQtRtqQ7CDPkNBAXXYcPV+6hN9Sf
3t/F2GXNcvyUdd210xaWKha836b07DN7u7RGE/lWKE6CLL1DW7r0rSzhqxblUcX/
+a0O87U2VhvVP133cblSSK4kcA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:36:46 2026 by rpki-client