Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
File:                     G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json)
Hash identifier:          1kwQuSKj31bIL5Os33bNe5uFzPBALT/ydB/iXfUxcUg=
Subject key identifier:   9C:DB:FD:78:D4:7D:CC:A3:93:36:E4:3C:E9:1C:60:70:11:3C:89:4F
Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87
Certificate issuer:       /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
Manifest number:          E5
Signing time:             Mon 21 Sep 2026 06:29:20 +0000
Manifest this update:     Mon 21 Sep 2026 06:29:19 +0000
Manifest next update:     Mon 28 Sep 2026 06:29:19 +0000
Files and hashes:         1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: lo4XiKBqz11q30ZYZWT8WllNgBMoN9GQSgxf7F9PID4=)
                          2: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: 0fTr8Ky2ks1lTkMxL9IKSz1oQnIZMQcWNBUaHcz+NfY=)
                          3: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: lELwYfCJ8QLJoPWBTmeafMYkQU/nJlsMXebmLAieoRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl
                          rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487
        Validity
            Not Before: Sep 21 06:29:19 2026 GMT
            Not After : Sep 28 06:29:19 2026 GMT
        Subject: CN=6ab0cebf-b54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:97:13:46:7c:34:cd:1b:60:49:0b:6b:48:
                    06:b6:31:2f:bb:e3:fa:84:2f:3f:b0:c8:f0:45:b0:
                    c1:f6:82:15:08:34:83:e7:5b:62:42:9c:a7:16:aa:
                    cf:d5:f6:4d:1a:ba:37:d5:9c:34:48:60:21:c2:73:
                    12:61:be:b2:90:dc:8d:e9:a5:7b:3f:b3:78:23:a9:
                    92:0e:d6:29:cb:2b:1c:12:e6:e7:ad:c4:2b:97:8b:
                    b2:a5:39:f0:96:a1:c0:45:7b:39:85:96:c5:1c:a1:
                    6f:ad:c4:c1:3d:9e:eb:67:b4:1f:3c:03:57:48:d0:
                    1d:53:15:98:12:ac:a9:1f:06:b8:b2:60:84:96:8e:
                    c6:70:5f:cc:ae:e4:bf:25:b0:b5:59:ce:56:16:0b:
                    ac:48:55:d7:e9:64:3d:67:48:d4:68:4b:92:a9:e1:
                    c9:da:d6:b7:90:41:d0:72:a8:0c:70:f6:eb:4b:be:
                    45:ec:df:43:b2:86:a8:1a:b9:f0:14:ad:9b:56:65:
                    c1:6d:64:5d:42:d4:8f:c1:c2:0e:6d:b0:d8:ef:d7:
                    03:ec:f6:59:71:cc:af:bc:2e:21:93:7a:09:f8:0c:
                    9f:d9:a8:21:1a:0b:3b:44:96:6d:b0:b2:96:dc:4b:
                    cc:3d:15:77:a4:c9:f3:54:bb:ed:df:63:79:2c:8d:
                    2d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DB:FD:78:D4:7D:CC:A3:93:36:E4:3C:E9:1C:60:70:11:3C:89:4F
            X509v3 Authority Key Identifier:
                keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:16:9a:46:af:c2:58:64:07:b6:1d:88:f2:8b:39:10:1d:
         99:22:38:b7:95:be:cc:cd:e9:be:52:aa:95:a5:d6:5a:1d:49:
         c6:1a:95:1e:0a:b9:ce:3b:2e:13:b5:cf:1a:35:b3:d2:12:b6:
         51:ce:db:7f:76:69:25:fb:64:43:20:84:f3:14:95:81:5b:b4:
         3a:82:b6:59:96:16:07:bc:2a:ce:c9:4b:97:bf:6b:07:fc:d9:
         8c:94:df:08:26:c8:a8:8b:0c:05:b9:6e:fa:99:b8:03:01:5b:
         11:09:e1:27:78:08:69:45:5e:91:02:13:d8:5f:04:c8:3f:00:
         e3:c8:87:7b:b3:73:49:aa:05:99:d1:cc:0c:ae:1f:12:75:e5:
         ac:d8:f8:65:a2:31:ac:69:0d:bb:3a:e8:9f:6c:ef:71:86:ad:
         56:d0:33:dd:78:38:05:e4:76:d1:e0:47:27:0c:60:4e:d2:92:
         de:e8:70:af:35:17:63:4e:56:e4:85:22:fc:06:c9:77:ab:96:
         29:30:bc:71:be:e5:f4:4b:c3:d8:5d:0c:af:91:4c:59:1b:29:
         d7:5a:3b:80:61:c7:de:71:ec:bb:9e:7b:7b:df:c9:d6:6f:d1:
         3f:a6:ed:26:b7:ef:71:f2:dd:de:e8:56:f3:36:e2:fc:de:a1:
         02:0c:11:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURGNTYxMTAvBgNVBAUTKDFCRDYzMzZCOTc4NjhDMkY1NEVCM0Q5NDc4RDM5RTQx
NzMxRDQ0ODcwHhcNMjYwOTIxMDYyOTE5WhcNMjYwOTI4MDYyOTE5WjAYMRYwFAYD
VQQDEw02YWIwY2ViZi1iNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArH6XE0Z8NM0bYEkLa0gGtjEvu+P6hC8/sMjwRbDB9oIVCDSD51tiQpynFqrP
1fZNGro31Zw0SGAhwnMSYb6ykNyN6aV7P7N4I6mSDtYpyyscEubnrcQrl4uypTnw
lqHARXs5hZbFHKFvrcTBPZ7rZ7QfPANXSNAdUxWYEqypHwa4smCElo7GcF/MruS/
JbC1Wc5WFgusSFXX6WQ9Z0jUaEuSqeHJ2ta3kEHQcqgMcPbrS75F7N9DsoaoGrnw
FK2bVmXBbWRdQtSPwcIObbDY79cD7PZZccyvvC4hk3oJ+Ayf2aghGgs7RJZtsLKW
3EvMPRV3pMnzVLvt32N5LI0tAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzb/XjU
fcyjkzbkPOkcYHARPIlPMB8GA1UdIwQYMBaAFBvWM2uXhowvVOs9lHjTnkFzHUSH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY1Ni82RDVFNkE1NDVC
RDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9HOVl6YTVlR2pDOVU2ejJVZU5PZVFYTWRS
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0c5WXphNWVHakM5VTZ6MlVlTk9lUVhNZFJJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REY1Ni82RDVFNkE1NDVCRDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9HOVl6YTVlR2pD
OVU2ejJVZU5PZVFYTWRSSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMDwWmkavwlhkB7YdiPKLORAdmSI4t5W+zM3pvlKqlaXWWh1JxhqVHgq5zjsu
E7XPGjWz0hK2Uc7bf3ZpJftkQyCE8xSVgVu0OoK2WZYWB7wqzslLl79rB/zZjJTf
CCbIqIsMBblu+pm4AwFbEQnhJ3gIaUVekQIT2F8EyD8A48iHe7NzSaoFmdHMDK4f
EnXlrNj4ZaIxrGkNuzron2zvcYatVtAz3Xg4BeR20eBHJwxgTtKS3uhwrzUXY05W
5IUi/AbJd6uWKTC8cb7l9EvD2F0Mr5FMWRsp11o7gGHH3nHsu557e9/J1m/RP6bt
JrfvcfLd3uhW8zbi/N6hAgwRkw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:22:59 2026 by rpki-client