Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
File:                     v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json)
Hash identifier:          xEWdMrluMhw7CMvjqBUmhZukKDwTpgxaP5llzmUJOOg=
Subject key identifier:   68:D0:70:4B:CD:12:E6:19:41:CA:43:8A:4D:69:77:5C:22:48:CD:E9
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Certificate issuer:       /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial:       35C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
Manifest number:          359D
Signing time:             Tue 22 Sep 2026 14:28:13 +0000
Manifest this update:     Tue 22 Sep 2026 14:28:12 +0000
Manifest next update:     Tue 29 Sep 2026 14:28:12 +0000
Files and hashes:         1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: 2MCg9+WE30khDFimlaHEjjiJ5y0nLWQMjgv5jEdk1ds=)
                          2: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: YNjOx7sih2Eb/cH1koe193ZixOM8oYvI39UjbZ01Tcs=)
                          3: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: zxJQ1OpZ5g5r/yn07VLiBtBNshFckdgx3+m7hlHQMFM=)
                          4: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: rNOjKaD4h4RDfgGi+CRN6zCHYGB3J4cKdZ+m1SpT/iU=)
                          5: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: CIQUlP0s1/c5hK/UkYixPeI48x9JMJ20e+FljgPyVWs=)
                          6: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: FsOkesalb71qQacR5ZCCeVe+DZQiEcJm2h46AQDfCyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13765 (0x35c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
        Validity
            Not Before: Sep 22 14:28:12 2026 GMT
            Not After : Sep 29 14:28:12 2026 GMT
        Subject: CN=6ab2907d-8714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:f5:3c:86:e3:97:f8:97:fe:27:d1:e8:75:
                    55:e7:7c:79:32:a3:5a:55:f9:df:d1:22:2a:28:72:
                    97:96:18:bf:6b:3b:a3:a9:58:d5:79:fc:c4:1c:a1:
                    5c:81:5a:10:33:b3:74:98:e8:d8:7f:03:30:2f:63:
                    b8:36:a2:5b:d8:e9:29:f9:db:69:ed:95:1c:59:1e:
                    dd:b4:5d:67:67:96:3f:da:40:1c:7c:10:bc:56:d0:
                    6e:24:31:7c:22:21:c0:b6:b9:58:5c:c8:ed:fb:a2:
                    76:c7:a3:9c:b2:ff:e5:c4:f0:2f:84:c4:44:64:53:
                    0d:5f:5f:24:19:15:01:3b:56:2b:69:84:5d:17:5b:
                    6b:63:34:e4:e1:e5:bc:56:85:f4:b5:ec:1a:2c:7b:
                    c0:73:cd:fc:d5:f8:48:5c:55:01:88:d5:b0:6d:c2:
                    6f:5c:37:86:88:ec:b1:60:a2:9d:72:91:78:12:c9:
                    55:15:7f:e8:57:84:04:f9:a7:66:92:3f:0f:17:95:
                    8e:69:26:5f:f2:af:3d:f9:d0:06:bd:68:df:8a:24:
                    2c:d8:68:99:25:00:08:d3:ae:2b:96:db:ce:b6:cc:
                    68:92:2f:7c:ea:aa:70:f9:4c:ff:13:f5:ba:ad:5d:
                    bb:28:e6:94:fa:cf:10:00:e8:2f:75:7b:5e:43:c9:
                    5d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D0:70:4B:CD:12:E6:19:41:CA:43:8A:4D:69:77:5C:22:48:CD:E9
            X509v3 Authority Key Identifier:
                keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e6:ff:a3:17:42:64:0c:c8:2a:e3:62:38:d5:65:60:f9:f5:
         d3:34:84:bd:19:66:1f:43:1d:d8:92:cb:aa:42:11:eb:c7:53:
         e1:64:f8:25:43:e4:12:50:c3:25:81:7a:e6:b4:1d:e1:4e:8d:
         2a:8d:28:6d:1b:14:6f:15:6f:a4:28:1d:94:3b:ff:2e:fd:01:
         da:b8:b7:62:cc:2c:b8:8b:dc:23:2d:80:81:2f:4c:f5:f9:ab:
         cb:54:4f:2c:cd:73:b1:55:0e:44:4e:6d:6e:f1:10:41:07:77:
         11:b0:7a:3d:23:92:cc:1e:cc:15:8a:3c:08:7a:c8:72:09:ce:
         48:fa:30:6a:d0:10:0b:36:56:ff:9d:8e:82:36:89:f8:d2:3d:
         3c:72:95:8a:72:88:fb:5b:dd:7c:ae:21:73:2b:fc:a7:46:2b:
         c6:e0:e6:9d:db:78:43:58:ef:28:6e:8a:83:03:77:34:09:bb:
         dc:c1:b7:38:69:50:a3:40:2e:e6:75:d7:6e:7b:0e:3f:fd:6d:
         69:8e:a6:83:fa:c9:c5:20:2f:92:7b:51:9e:c6:0a:38:8a:e0:
         77:59:2a:13:42:08:9b:98:b0:d8:43:db:a8:ac:53:e8:65:39:
         96:e5:cf:44:cf:fe:47:7a:4f:84:d6:5d:1c:03:91:fc:6e:5f:
         4c:fc:3c:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0
NzUxMzExOUEwHhcNMjYwOTIyMTQyODEyWhcNMjYwOTI5MTQyODEyWjAYMRYwFAYD
VQQDEw02YWIyOTA3ZC04NzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqdD1PIbjl/iX/ifR6HVV53x5MqNaVfnf0SIqKHKXlhi/azujqVjVefzEHKFc
gVoQM7N0mOjYfwMwL2O4NqJb2Okp+dtp7ZUcWR7dtF1nZ5Y/2kAcfBC8VtBuJDF8
IiHAtrlYXMjt+6J2x6Ocsv/lxPAvhMREZFMNX18kGRUBO1YraYRdF1trYzTk4eW8
VoX0tewaLHvAc8381fhIXFUBiNWwbcJvXDeGiOyxYKKdcpF4EslVFX/oV4QE+adm
kj8PF5WOaSZf8q89+dAGvWjfiiQs2GiZJQAI064rltvOtsxoki986qpw+Uz/E/W6
rV27KOaU+s8QAOgvdXteQ8ldjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjQcEvN
EuYZQcpDik1pd1wiSM3pMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE
ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTQyQy8yMEIzN0NGRTFEODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2
M2lnb0dmUjd6dUpIVVRFWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm+b/oxdCZAzIKuNiONVlYPn10zSEvRlmH0Md2JLLqkIR68dT4WT4JUPkElDD
JYF65rQd4U6NKo0obRsUbxVvpCgdlDv/Lv0B2ri3YswsuIvcIy2AgS9M9fmry1RP
LM1zsVUORE5tbvEQQQd3EbB6PSOSzB7MFYo8CHrIcgnOSPowatAQCzZW/52OgjaJ
+NI9PHKVinKI+1vdfK4hcyv8p0YrxuDmndt4Q1jvKG6KgwN3NAm73MG3OGlQo0Au
5nXXbnsOP/1taY6mg/rJxSAvkntRnsYKOIrgd1kqE0IIm5iw2EPbqKxT6GU5luXP
RM/+R3pPhNZdHAOR/G5fTPw8EQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:36:25 2026 by rpki-client