Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File:                     CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier:          6sdEMUZNt0YhqD0RUDVc9lea6DT7mx4FYx8SF/s8RZE=
Subject key identifier:   EC:05:62:CE:D1:46:0D:4F:55:00:35:74:56:F5:FC:5C:4E:6B:C2:69
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number:          0211
Signing time:             Mon 21 Sep 2026 03:03:10 +0000
Manifest this update:     Mon 21 Sep 2026 03:03:09 +0000
Manifest next update:     Mon 28 Sep 2026 03:03:09 +0000
Files and hashes:         1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: 6wGKte6bVwI1yiWWgHxDqDXn2q/dq7nZsOWDKbqhhOw=)
                          2: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: YMhcpDTPJA2DPU9fu/BIg3xJ4TvxjpEOcB1pf1tlj+k=)
                          3: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: YMH/2sGF2Gp98kUhlKPwS2v2VuTCl17HNRsaxRsG690=)
                          4: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: e5s4Spxd3J8HwN8uF5Z006jLhe1iCuKDPedtYRd/C2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Sep 21 03:03:09 2026 GMT
            Not After : Sep 28 03:03:09 2026 GMT
        Subject: CN=6ab09e6e-261a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:89:b9:d2:ce:bd:a4:15:76:52:e1:22:95:
                    71:05:6c:e7:8c:f0:66:f3:6f:c1:45:31:17:90:16:
                    37:1a:ec:19:49:a2:83:b9:7f:d7:11:10:3a:ec:b7:
                    03:90:be:80:f6:04:86:5f:c3:fa:9e:db:da:07:1d:
                    88:9d:8c:2b:c9:f0:49:d4:a6:43:ac:9f:3e:10:97:
                    03:39:b3:c0:1e:d4:d0:aa:b0:60:7a:20:51:ad:c5:
                    e2:49:8f:dd:c4:d8:b8:43:cd:5d:1e:53:8a:b9:62:
                    d2:c4:ea:24:e2:6a:57:9a:48:d0:dd:3e:8e:89:3c:
                    1e:ec:d9:3a:1b:dd:92:d9:99:93:03:c8:50:4c:79:
                    a9:d3:57:c3:e3:40:8d:ac:a4:6a:55:52:1c:9f:db:
                    c3:65:ac:2c:69:5a:98:12:7c:ea:b2:7b:7f:ef:58:
                    33:64:ac:7f:80:f7:d2:0a:96:0a:75:05:70:6f:f3:
                    e1:88:e1:5b:9c:a9:58:a9:ba:20:c1:48:53:34:40:
                    f5:bb:bf:bb:62:aa:9a:ad:50:bd:9a:18:4b:9e:07:
                    06:a0:59:e3:a1:08:b1:ca:33:c7:ff:53:c8:0d:da:
                    2e:2a:38:08:12:1d:4d:96:c4:3f:c7:cf:13:b5:38:
                    46:ed:25:68:1b:dd:b8:ff:66:ea:bb:63:7f:01:cd:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:05:62:CE:D1:46:0D:4F:55:00:35:74:56:F5:FC:5C:4E:6B:C2:69
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:b3:42:55:78:7b:59:5c:ad:61:6a:e9:d5:3a:99:78:78:
         45:86:23:25:da:dc:a9:81:63:ab:59:53:e7:2f:93:36:7e:c0:
         44:ec:31:28:82:b2:a6:3b:33:fb:43:fc:b4:5b:2c:7f:ff:fa:
         a1:8b:16:22:78:df:f2:bb:5f:2b:f2:37:d4:e1:88:13:15:86:
         b8:5e:ca:da:b2:6c:67:ba:b6:17:04:de:6e:d3:f5:99:28:20:
         ad:73:fa:2a:77:2e:46:31:d4:c9:f2:1b:5e:0f:3a:90:16:67:
         ae:9f:8e:15:58:b6:37:fc:00:0a:ef:97:a1:d2:95:b5:a0:8a:
         52:bf:f1:be:e9:25:a0:72:b7:d3:e3:e2:cc:43:5e:7d:6e:23:
         6c:2f:7a:a9:8d:15:59:1f:e2:d7:e3:43:51:ce:e2:ae:b4:5a:
         18:04:15:a6:3d:a4:f8:44:cb:55:92:8a:1f:09:e4:df:6e:00:
         98:40:1e:b9:e3:c6:9d:e0:68:85:60:a4:f3:61:f0:a8:be:13:
         bc:11:d5:a0:f4:df:89:e6:4d:f6:b7:8b:f4:4e:26:70:2e:9a:
         33:96:fb:41:33:ec:bd:fd:f5:a1:4d:5a:7f:36:4d:79:3c:03:
         9a:c4:85:7b:c5:cc:38:f5:bc:7c:14:51:a4:0e:da:22:3c:ba:
         2d:60:4d:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxMDkxMTAvBgNVBAUTKDA5QzQ5QUI5OUEwNTYwM0Q2Q0I2MDg5QzczRDM3Njkw
OTg0MjFFMDAwHhcNMjYwOTIxMDMwMzA5WhcNMjYwOTI4MDMwMzA5WjAYMRYwFAYD
VQQDEw02YWIwOWU2ZS0yNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4N6JudLOvaQVdlLhIpVxBWznjPBm82/BRTEXkBY3GuwZSaKDuX/XERA67LcD
kL6A9gSGX8P6ntvaBx2InYwryfBJ1KZDrJ8+EJcDObPAHtTQqrBgeiBRrcXiSY/d
xNi4Q81dHlOKuWLSxOok4mpXmkjQ3T6OiTwe7Nk6G92S2ZmTA8hQTHmp01fD40CN
rKRqVVIcn9vDZawsaVqYEnzqsnt/71gzZKx/gPfSCpYKdQVwb/PhiOFbnKlYqbog
wUhTNED1u7+7YqqarVC9mhhLngcGoFnjoQixyjPH/1PIDdouKjgIEh1NlsQ/x88T
tThG7SVoG924/2bqu2N/Ac30HQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwFYs7R
Rg1PVQA1dFb1/FxOa8JpMB8GA1UdIwQYMBaAFAnEmrmaBWA9bLYInHPTdpCYQh4A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDEwOS8xNThEOEZDMDky
ODUxMUVFQThDNUQyNERDNEY5QUUwMi9DY1NhdVpvRllEMXN0Z2ljYzlOMmtKaENI
Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NjU2F1Wm9GWUQxc3RnaWNjOU4ya0poQ0hnQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDEwOS8xNThEOEZDMDkyODUxMUVFQThDNUQyNERDNEY5QUUwMi9DY1NhdVpvRllE
MXN0Z2ljYzlOMmtKaENIZ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr++zQlV4e1lcrWFq6dU6mXh4RYYjJdrcqYFjq1lT5y+TNn7AROwxKIKypjsz
+0P8tFssf//6oYsWInjf8rtfK/I31OGIExWGuF7K2rJsZ7q2FwTebtP1mSggrXP6
KncuRjHUyfIbXg86kBZnrp+OFVi2N/wACu+XodKVtaCKUr/xvukloHK30+PizENe
fW4jbC96qY0VWR/i1+NDUc7irrRaGAQVpj2k+ETLVZKKHwnk324AmEAeuePGneBo
hWCk82HwqL4TvBHVoPTfieZN9reL9E4mcC6aM5b7QTPsvf31oU1afzZNeTwDmsSF
e8XMOPW8fBRRpA7aIjy6LWBNAg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:27:10 2026 by rpki-client