Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
File:                     s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json)
Hash identifier:          s01KJuBwiIjMOEo1ijfJy5Pibmd0N+Yf0VjARmkY6ro=
Subject key identifier:   DC:2D:2D:A0:7A:04:E9:CE:1B:C6:59:CF:15:31:FB:9F:C2:0A:CD:B4
Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C
Certificate issuer:       /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
Manifest number:          FE
Signing time:             Sat 19 Sep 2026 06:18:51 +0000
Manifest this update:     Sat 19 Sep 2026 06:18:51 +0000
Manifest next update:     Sat 26 Sep 2026 06:18:51 +0000
Files and hashes:         1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: BU1OMBgtrhPU0Ee/mvSPvCSiaN7HgzUgbwgqk9g4/SE=)
                          2: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: bpsElpWAfttAlw1MU5HfRRt7txL5XI5CkjdzcBwhBVg=)
                          3: 0IKIb2mx42LyrM7CVy9TVbI7mQ8.asa (hash: MhPB3SU2pkSQoUZ/DtmHH4nqFvDTkvSrSDEv/zO7m0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl
                          rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C
        Validity
            Not Before: Sep 19 06:18:51 2026 GMT
            Not After : Sep 26 06:18:51 2026 GMT
        Subject: CN=6aae294b-6353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:5d:0e:56:f2:ab:12:eb:a3:19:f5:78:f2:
                    9f:1f:a1:2e:1e:86:0a:21:18:e1:2b:35:6f:70:8b:
                    0c:cb:65:95:c8:b6:c7:52:4b:ef:c4:b0:1c:c9:7e:
                    f4:78:93:5c:d1:7f:a8:28:3e:a0:89:a3:e0:8c:e6:
                    98:22:47:3a:d0:f6:c0:69:59:22:8b:7c:37:c8:6c:
                    e1:b3:b8:d1:bf:fb:95:f0:df:98:c3:08:d4:e0:bb:
                    73:34:63:44:35:99:f9:36:e1:e9:b1:16:16:a6:8b:
                    f9:4c:b3:c5:25:98:9b:d5:ef:48:3e:74:e3:4f:3e:
                    54:ad:c0:61:12:ad:f5:a0:4f:3a:be:07:61:13:c1:
                    a1:92:ee:d9:ad:1f:8e:20:db:07:d9:fc:12:f1:84:
                    a3:44:66:75:31:e1:3c:c3:d7:02:78:be:f1:4b:62:
                    02:ad:9b:5d:3d:5c:ab:14:f2:f3:fe:86:ad:fe:5b:
                    f4:f5:8e:36:0b:08:1b:19:31:2f:04:45:63:08:c1:
                    ff:ce:8c:0b:db:80:ac:f9:91:c3:01:de:a8:2b:13:
                    b6:1b:9e:81:87:2e:66:ad:00:c7:ff:2a:50:43:c4:
                    f2:a5:3b:e2:5f:ca:39:e5:b4:cd:d1:c0:13:25:86:
                    39:5c:d3:83:91:e2:d7:13:95:c3:1a:44:73:86:94:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:2D:A0:7A:04:E9:CE:1B:C6:59:CF:15:31:FB:9F:C2:0A:CD:B4
            X509v3 Authority Key Identifier:
                keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:42:b4:ad:ea:6c:a7:a0:a5:3a:7d:70:27:87:02:8a:44:
         95:00:09:cc:6a:f6:61:78:16:61:ec:5e:ab:e9:61:63:59:6a:
         86:e7:30:d4:a0:6e:13:37:c8:bf:f7:fd:a6:ce:a1:ca:b5:55:
         9a:c8:c1:03:72:8e:dc:62:81:17:39:68:78:78:4d:17:ce:4c:
         24:0c:fc:4a:8b:92:e0:18:3e:16:4e:28:0c:d5:ed:a3:99:41:
         a3:70:c2:cd:d2:42:49:f1:2c:64:39:8d:34:b6:ac:98:6b:e0:
         45:62:0d:64:86:75:b6:e2:80:f3:fd:31:c2:9e:6a:12:0d:3f:
         7e:65:9c:63:eb:10:c8:83:29:5e:87:5e:9c:57:eb:46:c1:e6:
         23:79:92:3f:24:4f:26:71:3a:80:3d:fb:02:ff:08:f0:c5:8d:
         a8:35:31:26:bf:e5:57:dc:b2:d8:49:6f:ec:f9:bc:c7:67:46:
         61:a0:60:31:ed:7f:5c:83:71:e6:9a:c2:b4:58:be:47:c3:d6:
         00:cd:92:a5:4b:50:2e:b2:cb:78:5f:78:47:05:37:c3:4c:1a:
         19:13:6d:b0:c1:2e:4c:f6:7c:c0:f8:d6:27:ba:d5:ba:a3:64:
         b3:16:37:e2:ea:af:f2:f0:08:8c:c1:33:2d:23:98:a0:39:1d:
         71:e2:44:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjVGNjQxMTAvBgNVBAUTKEIzRUVDRjE2NzI1NjE0NEE0NkExREFCNDhCODA4MEQ3
OTBEMjA0M0MwHhcNMjYwOTE5MDYxODUxWhcNMjYwOTI2MDYxODUxWjAYMRYwFAYD
VQQDEw02YWFlMjk0Yi02MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt7tdDlbyqxLroxn1ePKfH6EuHoYKIRjhKzVvcIsMy2WVyLbHUkvvxLAcyX70
eJNc0X+oKD6giaPgjOaYIkc60PbAaVkii3w3yGzhs7jRv/uV8N+YwwjU4LtzNGNE
NZn5NuHpsRYWpov5TLPFJZib1e9IPnTjTz5UrcBhEq31oE86vgdhE8Ghku7ZrR+O
INsH2fwS8YSjRGZ1MeE8w9cCeL7xS2ICrZtdPVyrFPLz/oat/lv09Y42CwgbGTEv
BEVjCMH/zowL24Cs+ZHDAd6oKxO2G56Bhy5mrQDH/ypQQ8TypTviX8o55bTN0cAT
JYY5XNODkeLXE5XDGkRzhpRvIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwtLaB6
BOnOG8ZZzxUx+5/CCs20MB8GA1UdIwQYMBaAFLPuzxZyVhRKRqHatIuAgNeQ0gQ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY2NC9BMUUwRDgzQTM0
NjcxMUYwQTJGQUQ1NDlDNEY5QUUwMi9zLTdQRm5KV0ZFcEdvZHEwaTRDQTE1RFNC
RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MtN1BGbkpXRkVwR29kcTBpNENBMTVEU0JEdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUY2NC9BMUUwRDgzQTM0NjcxMUYwQTJGQUQ1NDlDNEY5QUUwMi9zLTdQRm5KV0ZF
cEdvZHEwaTRDQTE1RFNCRHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH7NCtK3qbKegpTp9cCeHAopElQAJzGr2YXgWYexeq+lhY1lqhucw1KBuEzfI
v/f9ps6hyrVVmsjBA3KO3GKBFzloeHhNF85MJAz8SouS4Bg+Fk4oDNXto5lBo3DC
zdJCSfEsZDmNNLasmGvgRWINZIZ1tuKA8/0xwp5qEg0/fmWcY+sQyIMpXodenFfr
RsHmI3mSPyRPJnE6gD37Av8I8MWNqDUxJr/lV9yy2Elv7Pm8x2dGYaBgMe1/XINx
5prCtFi+R8PWAM2SpUtQLrLLeF94RwU3w0waGRNtsMEuTPZ8wPjWJ7rVuqNksxY3
4uqv8vAIjMEzLSOYoDkdceJEXw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:59:18 2026 by rpki-client