Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
File:                     ilHqWMRcL0Rg46sT62pnRUZdr4s.mft (raw, json)
Hash identifier:          ihCI+qFmCmy0TkWKLVwRYtdJbCVxpGz9OuV3OnMaFPk=
Subject key identifier:   13:50:3C:D2:71:E3:10:90:D9:DF:29:FE:44:C1:9C:92:67:82:00:F6
Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
Certificate issuer:       /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
Manifest number:          BD
Signing time:             Wed 23 Sep 2026 06:41:21 +0000
Manifest this update:     Wed 23 Sep 2026 06:41:20 +0000
Manifest next update:     Wed 30 Sep 2026 06:41:20 +0000
Files and hashes:         1: ilHqWMRcL0Rg46sT62pnRUZdr4s.crl (hash: Wv4I+I3XqF450D1y12/NtVmCihZKUF4POMTJ3F0MqBg=)
                          2: A537B070BA4B11F0BD639513C4F9AE02.roa (hash: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
                          rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
        Validity
            Not Before: Sep 23 06:41:20 2026 GMT
            Not After : Sep 30 06:41:20 2026 GMT
        Subject: CN=6ab37491-9c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ab:55:8c:67:b1:b8:40:71:56:e4:05:2e:a5:
                    73:59:9d:fa:29:79:e4:d9:1c:4a:d1:d4:b7:f3:c2:
                    4d:70:a0:8a:c3:d0:8a:bc:98:bf:97:9f:4c:2d:03:
                    a8:bf:12:89:39:a3:98:2c:24:11:a7:99:a1:9f:8f:
                    da:d9:81:7c:ad:74:00:d3:13:3f:c8:41:32:f9:4c:
                    3a:5a:06:a9:77:c6:c9:00:5a:47:7a:07:ef:aa:08:
                    20:f1:81:77:c4:88:7d:b0:81:06:75:fc:ea:42:5f:
                    ae:5a:1b:0b:9f:7d:5a:ab:80:9c:c2:2a:73:14:47:
                    bc:68:9e:2f:95:a4:99:6b:93:6a:f8:bb:b3:3e:64:
                    1c:4d:03:cb:6b:98:67:f9:e3:3d:77:d1:bf:60:bf:
                    c9:e8:24:a7:43:42:3e:a2:d6:bb:66:6b:73:45:21:
                    3a:af:b0:6b:5d:e0:b8:6e:4e:d0:d0:15:78:96:f5:
                    e2:bc:2a:89:cc:48:8c:30:10:a1:9f:c1:2d:c2:d2:
                    7a:66:cf:e3:11:37:dd:35:bd:e7:fb:72:a3:2e:50:
                    30:4b:62:af:96:bb:19:48:33:e9:36:83:ef:8a:82:
                    05:d0:b9:ad:9b:2d:11:b6:85:45:da:d3:cb:05:c5:
                    9a:f4:c2:fc:6b:d4:83:45:de:95:71:88:30:a3:e1:
                    d2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:50:3C:D2:71:E3:10:90:D9:DF:29:FE:44:C1:9C:92:67:82:00:F6
            X509v3 Authority Key Identifier:
                keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:39:47:e9:b7:9a:a5:13:d0:0b:3d:6d:bb:15:b1:14:4e:6f:
         e5:a6:48:83:69:ca:a1:49:be:49:b4:25:28:e0:0a:6b:dc:93:
         0a:77:5c:52:55:1f:49:c0:8f:7b:e6:2f:45:3b:0d:f3:84:d7:
         18:ef:de:70:57:06:c1:c1:9c:1c:5f:f6:08:ed:ff:0a:f9:dd:
         4c:85:ce:3d:78:28:2f:f4:0b:70:85:83:f7:10:e3:7c:a3:8f:
         b3:be:fa:b0:b5:18:eb:57:93:26:05:64:9c:db:cc:78:2e:4e:
         2b:84:90:9c:6c:c5:7a:43:28:47:f4:36:97:bd:aa:83:e7:81:
         28:a1:4d:e1:2a:81:b7:e3:e5:3b:d4:af:8d:ac:8e:9a:94:d3:
         a2:04:bf:b4:0e:77:c5:f2:2c:08:fa:db:6e:db:32:23:22:c1:
         0f:a6:3f:91:a1:11:66:1b:9d:19:d6:2b:19:ad:02:c1:8a:9d:
         17:75:e0:ea:85:84:5e:ae:29:bd:6c:30:1b:b0:ba:12:37:db:
         61:f6:8d:91:29:fe:63:e4:79:f8:2d:5c:49:27:db:e2:db:a3:
         cf:5f:8f:a5:27:8c:e9:70:f2:ee:2b:ed:fc:76:5e:e7:81:eb:
         83:a6:ed:1a:4b:96:1c:5a:fe:74:db:d4:68:a6:71:2d:21:2c:
         0b:12:3a:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFGNzIxMTAvBgNVBAUTKDhBNTFFQTU4QzQ1QzJGNDQ2MEUzQUIxM0VCNkE2NzQ1
NDY1REFGOEIwHhcNMjYwOTIzMDY0MTIwWhcNMjYwOTMwMDY0MTIwWjAYMRYwFAYD
VQQDEw02YWIzNzQ5MS05YzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0qtVjGexuEBxVuQFLqVzWZ36KXnk2RxK0dS388JNcKCKw9CKvJi/l59MLQOo
vxKJOaOYLCQRp5mhn4/a2YF8rXQA0xM/yEEy+Uw6Wgapd8bJAFpHegfvqggg8YF3
xIh9sIEGdfzqQl+uWhsLn31aq4CcwipzFEe8aJ4vlaSZa5Nq+LuzPmQcTQPLa5hn
+eM9d9G/YL/J6CSnQ0I+ota7ZmtzRSE6r7BrXeC4bk7Q0BV4lvXivCqJzEiMMBCh
n8EtwtJ6Zs/jETfdNb3n+3KjLlAwS2KvlrsZSDPpNoPvioIF0Lmtmy0RtoVF2tPL
BcWa9ML8a9SDRd6VcYgwo+HSswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBNQPNJx
4xCQ2d8p/kTBnJJnggD2MB8GA1UdIwQYMBaAFIpR6ljEXC9EYOOrE+tqZ0VGXa+L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUY3Mi84MDlDQzRCQTk3
QUMxMUYwOTE1RTRFMjhDNEY5QUUwMi9pbEhxV01SY0wwUmc0NnNUNjJwblJVWmRy
NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lsSHFXTVJjTDBSZzQ2c1Q2MnBuUlVaZHI0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUY3Mi84MDlDQzRCQTk3QUMxMUYwOTE1RTRFMjhDNEY5QUUwMi9pbEhxV01SY0ww
Umc0NnNUNjJwblJVWmRyNHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQTlH6beapRPQCz1tuxWxFE5v5aZIg2nKoUm+SbQlKOAKa9yTCndcUlUfScCP
e+YvRTsN84TXGO/ecFcGwcGcHF/2CO3/CvndTIXOPXgoL/QLcIWD9xDjfKOPs776
sLUY61eTJgVknNvMeC5OK4SQnGzFekMoR/Q2l72qg+eBKKFN4SqBt+PlO9SvjayO
mpTTogS/tA53xfIsCPrbbtsyIyLBD6Y/kaERZhudGdYrGa0CwYqdF3Xg6oWEXq4p
vWwwG7C6EjfbYfaNkSn+Y+R5+C1cSSfb4tujz1+PpSeM6XDy7ivt/HZe54Hrg6bt
GkuWHFr+dNvUaKZxLSEsCxI6CA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:05:12 2026 by rpki-client