Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
File:                     a0-8524QyfbwCQHlAC-OEPPpr38.mft (raw, json)
Hash identifier:          U6UcFADxAz/ReGQdS/8Rm48B390w3aFCumTq9EN6g0g=
Subject key identifier:   26:CB:99:0D:19:3E:43:78:9E:EE:14:A0:6E:C3:4D:DF:8B:68:9D:A2
Authority key identifier: 6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F
Certificate issuer:       /CN=A912AEAB/serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
Manifest number:          68
Signing time:             Mon 21 Sep 2026 08:01:34 +0000
Manifest this update:     Mon 21 Sep 2026 08:01:33 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:33 +0000
Files and hashes:         1: a0-8524QyfbwCQHlAC-OEPPpr38.crl (hash: 5CGArP/BPomTrQ6z0xxhm/ihjSz9Rp/J3d+qzwu4RXQ=)
                          2: 05CB75D01B4E11F190BF0D05243D8C67.roa (hash: lrrFG4FOYK4jJ7hdWejojL07VsNHzzAXyxtZaYMmJy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl
                          rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEAB, serialNumber=6B4FBCE76E10C9F6F00901E5002F8E10F3E9AF7F
        Validity
            Not Before: Sep 21 08:01:33 2026 GMT
            Not After : Sep 28 08:01:33 2026 GMT
        Subject: CN=6ab0e45e-3df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:27:88:e3:54:b3:09:b8:65:66:4e:0d:a7:0f:
                    74:9f:8b:81:0b:5d:71:02:1e:93:92:be:1d:9f:2c:
                    fb:ec:a2:54:7e:50:a5:6c:f4:d8:a3:47:3f:60:10:
                    64:76:88:31:d2:ea:14:23:6d:89:61:4c:0c:e3:2c:
                    39:35:2f:f9:08:72:02:e2:96:ef:50:a8:6a:34:36:
                    02:c2:b8:5c:93:9f:03:4e:5b:4b:1d:f1:d2:e4:ee:
                    0a:c8:d9:4b:a0:0a:20:96:15:e1:b7:68:3e:df:c5:
                    8a:47:92:21:db:20:03:9c:9b:35:27:16:f2:b1:ee:
                    d0:0d:41:c4:40:c8:ec:91:5e:7f:06:cd:68:ce:95:
                    1a:d5:fc:5b:b7:80:ee:2a:8e:10:ef:48:50:e3:6a:
                    9b:fd:94:cb:a9:a9:e5:aa:c3:56:a6:76:41:30:05:
                    68:af:3f:d3:da:a1:6b:b0:ed:71:87:82:00:72:ca:
                    7b:ce:b7:80:32:d6:5e:59:e4:2b:d6:cf:9b:c4:11:
                    7e:3c:34:34:6a:0e:d4:1d:72:83:43:36:b6:b6:7b:
                    1f:5a:59:54:84:fd:0c:59:33:d4:09:d5:dc:2f:37:
                    ba:ab:43:cd:23:b2:8d:85:fc:16:17:2b:69:02:88:
                    4e:41:2e:73:de:8f:a3:a2:6f:dd:74:41:fb:dc:81:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CB:99:0D:19:3E:43:78:9E:EE:14:A0:6E:C3:4D:DF:8B:68:9D:A2
            X509v3 Authority Key Identifier:
                keyid:6B:4F:BC:E7:6E:10:C9:F6:F0:09:01:E5:00:2F:8E:10:F3:E9:AF:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a0-8524QyfbwCQHlAC-OEPPpr38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEAB/9D8736041B4C11F1B6DEF7ED213D8C67/a0-8524QyfbwCQHlAC-OEPPpr38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:33:b4:64:7a:f9:1c:67:c1:c1:cc:6b:48:cf:72:8d:b0:
         4e:c1:f4:f1:9d:7a:46:dd:a3:8b:fd:b8:0a:dd:78:0b:df:65:
         a7:de:80:48:ea:38:8f:7e:de:13:f8:f1:86:b7:1a:e9:f6:2e:
         38:7c:26:6e:a9:8e:c0:98:ac:c5:9a:34:eb:24:76:c0:70:2c:
         e3:07:6b:02:e0:c3:08:3f:b0:29:7d:38:b7:87:74:2a:bb:af:
         fb:cf:af:f8:50:9b:f9:ec:84:28:8e:94:92:99:39:d1:d5:ef:
         3e:40:27:69:ec:63:5a:a6:40:1f:d1:44:54:a3:cb:47:8a:da:
         f4:f0:a4:d4:6d:ab:2e:6c:c6:b1:b2:8d:5a:e4:21:c5:98:59:
         6f:20:e4:5c:39:84:ce:c7:9d:23:8c:97:02:5e:f3:77:07:d9:
         d0:5f:5f:8f:b8:63:05:42:07:c9:31:68:f6:c9:ee:02:9d:01:
         67:64:95:fc:df:8a:b5:94:93:02:4e:b6:c9:b4:24:1c:67:57:
         9d:9a:1d:92:cd:ff:3e:2e:da:7a:30:09:4d:93:97:76:4b:88:
         e2:7c:29:1f:f9:64:19:82:15:2f:82:94:03:60:df:d2:74:80:
         b7:8b:7d:79:39:87:45:ec:88:18:e6:e6:a2:b4:4b:c5:99:71:
         61:bd:55:44
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QUVBQjExMC8GA1UEBRMoNkI0RkJDRTc2RTEwQzlGNkYwMDkwMUU1MDAyRjhFMTBG
M0U5QUY3RjAeFw0yNjA5MjEwODAxMzNaFw0yNjA5MjgwODAxMzNaMBgxFjAUBgNV
BAMTDTZhYjBlNDVlLTNkZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVJ4jjVLMJuGVmTg2nD3Sfi4ELXXECHpOSvh2fLPvsolR+UKVs9NijRz9gEGR2
iDHS6hQjbYlhTAzjLDk1L/kIcgLilu9QqGo0NgLCuFyTnwNOW0sd8dLk7grI2Uug
CiCWFeG3aD7fxYpHkiHbIAOcmzUnFvKx7tANQcRAyOyRXn8GzWjOlRrV/Fu3gO4q
jhDvSFDjapv9lMupqeWqw1amdkEwBWivP9PaoWuw7XGHggByynvOt4Ay1l5Z5CvW
z5vEEX48NDRqDtQdcoNDNra2ex9aWVSE/QxZM9QJ1dwvN7qrQ80jso2F/BYXK2kC
iE5BLnPej6Oib910QfvcgWq3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJsuZDRk+
Q3ie7hSgbsNN34tonaIwHwYDVR0jBBgwFoAUa0+8524QyfbwCQHlAC+OEPPpr38w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBRUFCLzlEODczNjA0MUI0
QzExRjFCNkRFRjdFRDIxM0Q4QzY3L2EwLTg1MjRReWZid0NRSGxBQy1PRVBQcHIz
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYTAtODUyNFF5ZmJ3Q1FIbEFDLU9FUFBwcjM4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB
RUFCLzlEODczNjA0MUI0QzExRjFCNkRFRjdFRDIxM0Q4QzY3L2EwLTg1MjRReWZi
d0NRSGxBQy1PRVBQcHIzOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCT/DO0ZHr5HGfBwcxrSM9yjbBOwfTxnXpG3aOL/bgK3XgL32Wn3oBI6jiPft4T
+PGGtxrp9i44fCZuqY7AmKzFmjTrJHbAcCzjB2sC4MMIP7ApfTi3h3Qqu6/7z6/4
UJv57IQojpSSmTnR1e8+QCdp7GNapkAf0URUo8tHitr08KTUbasubMaxso1a5CHF
mFlvIORcOYTOx50jjJcCXvN3B9nQX1+PuGMFQgfJMWj2ye4CnQFnZJX834q1lJMC
TrbJtCQcZ1edmh2Szf8+Ltp6MAlNk5d2S4jifCkf+WQZghUvgpQDYN/SdIC3i315
OYdF7IgY5uaitEvFmXFhvVVE
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:14:11 2026 by rpki-client