Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft
File:                     _F10279-ZfDQvUClnA1EbIHFB0k.mft (raw, json)
Hash identifier:          qnFOedZXUlJ8rSCZ8QFDEORVgYp5S+dOtT6PN/H+klI=
Subject key identifier:   4F:CC:C0:5B:47:72:24:63:3C:1E:D2:92:72:74:0D:2F:16:00:54:75
Authority key identifier: FC:5D:74:DB:BF:7E:65:F0:D0:BD:40:A5:9C:0D:44:6C:81:C5:07:49
Certificate issuer:       /CN=A9129FB7/serialNumber=FC5D74DBBF7E65F0D0BD40A59C0D446C81C50749
Certificate serial:       35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_F10279-ZfDQvUClnA1EbIHFB0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft
Manifest number:          35
Signing time:             Sun 27 Sep 2026 09:13:25 +0000
Manifest this update:     Sun 27 Sep 2026 09:13:25 +0000
Manifest next update:     Sun 04 Oct 2026 09:13:25 +0000
Files and hashes:         1: _F10279-ZfDQvUClnA1EbIHFB0k.crl (hash: 5HN9OfhLiQLEvM3fPlhTYomNEQbnUREf0BNfmiRS3JQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.crl
                          rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_F10279-ZfDQvUClnA1EbIHFB0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129FB7, serialNumber=FC5D74DBBF7E65F0D0BD40A59C0D446C81C50749
        Validity
            Not Before: Sep 27 09:13:25 2026 GMT
            Not After : Oct  4 09:13:25 2026 GMT
        Subject: CN=6ab8de35-86cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:81:c8:b6:48:b6:32:8f:eb:23:1a:13:fe:
                    53:70:49:18:25:6b:06:78:1e:3a:8f:d9:0a:63:d7:
                    ca:f7:9c:85:c1:45:89:4a:f0:f7:e1:1e:d7:37:f6:
                    b9:f9:3c:f0:89:49:74:33:79:54:54:97:41:50:cf:
                    eb:f4:b4:62:cd:49:23:6e:88:35:95:81:34:78:7e:
                    af:02:6d:e6:f0:34:eb:12:e9:0b:72:09:c5:91:0b:
                    ab:2d:52:b5:50:eb:c4:a2:68:96:a1:a2:5c:12:0c:
                    24:64:39:c6:05:5b:ce:1f:b1:ad:d1:3a:34:87:2a:
                    53:e3:40:15:b5:46:d6:f4:3d:b9:5b:ee:b2:c2:b5:
                    7a:4f:3e:9a:2d:23:5a:09:44:80:10:a0:ea:3c:15:
                    e1:9f:48:85:f5:85:cb:4d:75:cf:c7:c4:80:f9:75:
                    56:f1:cc:bf:67:17:2d:49:a8:d6:06:48:a7:9e:56:
                    ec:09:fb:c7:e7:bd:66:de:45:4e:6b:9e:8b:57:92:
                    80:c0:8c:4d:1b:83:ee:d6:79:40:18:79:6f:e2:c9:
                    cb:5e:04:7d:18:c7:7d:bf:bd:f3:dd:31:12:bf:3e:
                    f4:a1:4d:89:7b:ac:c2:22:08:e4:38:80:2f:c7:24:
                    0e:10:8d:cd:51:df:6f:4a:04:c9:f3:8a:57:26:6a:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CC:C0:5B:47:72:24:63:3C:1E:D2:92:72:74:0D:2F:16:00:54:75
            X509v3 Authority Key Identifier:
                keyid:FC:5D:74:DB:BF:7E:65:F0:D0:BD:40:A5:9C:0D:44:6C:81:C5:07:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_F10279-ZfDQvUClnA1EbIHFB0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129FB7/5EAD56F469FB11F1813F12BD6747A888/_F10279-ZfDQvUClnA1EbIHFB0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:47:e1:76:73:05:d3:40:19:fd:36:b1:fb:bd:02:fd:bd:7c:
         d0:f3:f5:47:5c:f3:ff:db:6d:c9:3b:d6:01:53:77:8f:31:b1:
         97:2b:df:ed:0e:33:68:43:e2:2b:ed:8a:93:45:fe:cb:66:fe:
         ec:ba:0a:2a:dc:01:00:94:f7:12:67:d7:fb:83:5e:75:c7:cc:
         62:85:0f:c2:fc:c4:8a:75:15:d5:79:c5:fe:74:33:c0:0d:25:
         ba:93:a8:ad:af:d4:e9:f0:d9:ae:8f:a4:23:9c:29:59:2b:a9:
         5a:6e:f6:2d:e5:c2:53:0c:92:e4:31:38:7f:5b:80:c6:bc:95:
         02:43:d8:0b:16:5b:fb:ce:1e:8b:c4:f5:45:3e:4d:aa:b4:ea:
         78:82:73:f9:4b:44:80:c1:56:6a:93:80:12:bf:12:9f:9e:7b:
         72:3f:cb:1b:12:f9:30:df:9b:77:1f:a2:89:8d:cb:56:87:2d:
         31:9f:b9:d6:e1:dd:1e:0f:76:ef:2e:6d:31:b9:61:d6:3b:ca:
         e3:3f:f3:13:73:9f:92:bd:6e:92:43:93:e8:5a:07:62:fc:1f:
         a4:62:fe:58:db:20:c4:5a:8d:9e:91:90:95:77:14:a8:b4:cc:
         e7:bb:61:41:5c:56:09:59:5e:4e:a3:e8:52:6f:1e:6a:08:e1:
         d9:16:bf:34
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OUZCNzExMC8GA1UEBRMoRkM1RDc0REJCRjdFNjVGMEQwQkQ0MEE1OUMwRDQ0NkM4
MUM1MDc0OTAeFw0yNjA5MjcwOTEzMjVaFw0yNjEwMDQwOTEzMjVaMBgxFjAUBgNV
BAMTDTZhYjhkZTM1LTg2Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChzoHItki2Mo/rIxoT/lNwSRglawZ4HjqP2Qpj18r3nIXBRYlK8PfhHtc39rn5
PPCJSXQzeVRUl0FQz+v0tGLNSSNuiDWVgTR4fq8CbebwNOsS6QtyCcWRC6stUrVQ
68SiaJaholwSDCRkOcYFW84fsa3ROjSHKlPjQBW1Rtb0Pblb7rLCtXpPPpotI1oJ
RIAQoOo8FeGfSIX1hctNdc/HxID5dVbxzL9nFy1JqNYGSKeeVuwJ+8fnvWbeRU5r
notXkoDAjE0bg+7WeUAYeW/iycteBH0Yx32/vfPdMRK/PvShTYl7rMIiCOQ4gC/H
JA4Qjc1R329KBMnzilcmapVJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUT8zAW0dy
JGM8HtKScnQNLxYAVHUwHwYDVR0jBBgwFoAU/F10279+ZfDQvUClnA1EbIHFB0kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5RkI3LzVFQUQ1NkY0NjlG
QjExRjE4MTNGMTJCRDY3NDdBODg4L19GMTAyNzktWmZEUXZVQ2xuQTFFYklIRkIw
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX0YxMDI3OS1aZkRRdlVDbG5BMUViSUhGQjBrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5
RkI3LzVFQUQ1NkY0NjlGQjExRjE4MTNGMTJCRDY3NDdBODg4L19GMTAyNzktWmZE
UXZVQ2xuQTFFYklIRkIway5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCOR+F2cwXTQBn9NrH7vQL9vXzQ8/VHXPP/223JO9YBU3ePMbGXK9/tDjNoQ+Ir
7YqTRf7LZv7sugoq3AEAlPcSZ9f7g151x8xihQ/C/MSKdRXVecX+dDPADSW6k6it
r9Tp8Nmuj6QjnClZK6labvYt5cJTDJLkMTh/W4DGvJUCQ9gLFlv7zh6LxPVFPk2q
tOp4gnP5S0SAwVZqk4ASvxKfnntyP8sbEvkw35t3H6KJjctWhy0xn7nW4d0eD3bv
Lm0xuWHWO8rjP/MTc5+SvW6SQ5PoWgdi/B+kYv5Y2yDEWo2ekZCVdxSotMznu2FB
XFYJWV5Oo+hSbx5qCOHZFr80
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:36:32 2026 by rpki-client