Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
File:                     RzKsKGdyTfzuirIikX9q8r0Ojz8.mft (raw, json)
Hash identifier:          OFc1HgZvekWJRdLeMQmoQ8zyCewvzUQHNaj7vWlGzQw=
Subject key identifier:   A8:B1:4B:F4:5F:F0:91:A0:B5:A0:27:C5:F1:AB:70:78:03:53:C6:49
Authority key identifier: 47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F
Certificate issuer:       /CN=A9130915/serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
Manifest number:          C4
Signing time:             Fri 09 Oct 2026 07:29:27 +0000
Manifest this update:     Fri 09 Oct 2026 07:29:26 +0000
Manifest next update:     Fri 16 Oct 2026 07:29:26 +0000
Files and hashes:         1: RzKsKGdyTfzuirIikX9q8r0Ojz8.crl (hash: DCW11ndTW3DHCBf8wHZcg9YIYHYof8TG6lXgcDuRrzo=)
                          2: QKlY2qk3wyq97mdii7HAvqN6ae4.asa (hash: wPAhVkEsZHfP0Gam9zd2C5xJRpIz9eYqo9PqvM2pW2o=)
                          3: 80981C2A985211F0B8F76E80C4F9AE02.roa (hash: KZeGyK+XEJU2VjuaLIn3E2fbp7OCAvLZENE4Plyufvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl
                          rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130915, serialNumber=4732AC2867724DFCEE8AB222917F6AF2BD0E8F3F
        Validity
            Not Before: Oct  9 07:29:26 2026 GMT
            Not After : Oct 16 07:29:26 2026 GMT
        Subject: CN=6ac897d7-3474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7d:ec:5c:09:38:55:47:df:1b:07:12:f9:6b:
                    3a:f3:b7:2d:79:e0:f4:c8:da:04:c7:a0:9c:e9:fb:
                    51:1b:24:c3:3d:04:f8:46:ed:71:2d:a9:3d:57:76:
                    82:ce:7f:dc:1a:45:d6:0d:03:8e:65:74:25:5c:73:
                    f7:75:98:3d:48:07:5e:2e:09:89:fe:f6:c2:00:a5:
                    8a:f2:1e:ff:4a:20:95:17:fa:8f:a3:fa:a6:fd:25:
                    ed:e1:b9:84:70:d4:8f:6e:29:69:dc:60:54:21:73:
                    00:ec:09:45:6d:12:32:65:ef:0e:5f:42:3d:2e:2f:
                    88:b0:be:2e:69:73:cb:03:d0:02:a7:ef:71:56:33:
                    1d:aa:9c:b5:c3:1c:95:d9:bd:fb:ee:45:c0:75:4e:
                    16:e8:c8:b2:9d:8d:03:ba:df:2c:e2:cf:fd:ba:63:
                    e2:c1:60:97:0e:11:5b:3e:f5:72:42:1b:8f:ad:85:
                    54:a4:c1:71:51:e0:27:95:b4:57:ed:c8:cb:94:e4:
                    ff:e3:d4:05:03:54:af:73:a4:fc:5d:da:3c:38:1e:
                    d4:16:4a:ed:b4:cf:dc:af:66:19:4c:de:d7:c7:c0:
                    ee:25:4f:f7:12:a3:c4:e5:24:8d:ae:82:09:20:7b:
                    72:4f:14:7e:1d:ca:73:40:64:79:65:fe:d4:34:01:
                    23:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B1:4B:F4:5F:F0:91:A0:B5:A0:27:C5:F1:AB:70:78:03:53:C6:49
            X509v3 Authority Key Identifier:
                keyid:47:32:AC:28:67:72:4D:FC:EE:8A:B2:22:91:7F:6A:F2:BD:0E:8F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzKsKGdyTfzuirIikX9q8r0Ojz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130915/25E10E2C985211F085C9657FC4F9AE02/RzKsKGdyTfzuirIikX9q8r0Ojz8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:20:55:0f:a1:f3:8a:50:7e:a0:ce:f8:aa:39:47:ec:12:30:
         7e:74:e6:14:22:ee:20:ae:4a:3d:2b:aa:b3:e9:fb:85:c8:b3:
         23:19:a8:67:82:e3:4d:b8:a3:d5:2b:09:13:fa:46:2e:0b:7f:
         c9:08:d7:0d:66:63:7d:7b:56:7e:11:48:87:5d:49:95:c3:ae:
         91:4f:dd:b9:db:d0:cc:89:0b:30:de:73:fa:ae:25:d5:bd:30:
         10:6e:93:5e:d1:d2:c7:f8:74:df:50:1a:3c:27:bf:04:a2:5a:
         40:4d:41:26:25:29:50:ab:86:bd:6c:97:72:36:43:2d:e9:dd:
         1c:49:e7:97:fe:a8:4f:97:09:75:07:fe:79:eb:2c:93:61:cc:
         5f:49:11:24:7e:05:e3:f4:12:1e:d4:a0:3c:8d:c0:0e:95:ba:
         e3:18:4e:f7:ac:da:1a:b6:82:85:46:7d:89:8a:ff:95:ad:3d:
         bb:49:29:4f:98:35:54:00:87:cf:b8:19:36:dc:fb:8f:7c:ad:
         82:e5:fa:4f:06:76:33:a3:03:61:ad:67:56:45:d8:48:61:5e:
         63:b5:dc:b2:6f:e9:f5:2b:98:8c:4b:a3:45:79:52:4b:81:ef:
         43:4f:48:1f:14:73:80:d7:06:33:ef:8e:48:7b:9a:8b:f2:d8:
         fe:49:1f:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA5MTUxMTAvBgNVBAUTKDQ3MzJBQzI4Njc3MjRERkNFRThBQjIyMjkxN0Y2QUYy
QkQwRThGM0YwHhcNMjYxMDA5MDcyOTI2WhcNMjYxMDE2MDcyOTI2WjAYMRYwFAYD
VQQDEw02YWM4OTdkNy0zNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA133sXAk4VUffGwcS+Ws687cteeD0yNoEx6Cc6ftRGyTDPQT4Ru1xLak9V3aC
zn/cGkXWDQOOZXQlXHP3dZg9SAdeLgmJ/vbCAKWK8h7/SiCVF/qPo/qm/SXt4bmE
cNSPbilp3GBUIXMA7AlFbRIyZe8OX0I9Li+IsL4uaXPLA9ACp+9xVjMdqpy1wxyV
2b377kXAdU4W6MiynY0Dut8s4s/9umPiwWCXDhFbPvVyQhuPrYVUpMFxUeAnlbRX
7cjLlOT/49QFA1Svc6T8Xdo8OB7UFkrttM/cr2YZTN7Xx8DuJU/3EqPE5SSNroIJ
IHtyTxR+HcpzQGR5Zf7UNAEjmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKixS/Rf
8JGgtaAnxfGrcHgDU8ZJMB8GA1UdIwQYMBaAFEcyrChnck387oqyIpF/avK9Do8/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDkxNS8yNUUxMEUyQzk4
NTIxMUYwODVDOTY1N0ZDNEY5QUUwMi9SektzS0dkeVRmenVpcklpa1g5cThyME9q
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J6S3NLR2R5VGZ6dWlySWlrWDlxOHIwT2p6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDkxNS8yNUUxMEUyQzk4NTIxMUYwODVDOTY1N0ZDNEY5QUUwMi9SektzS0dkeVRm
enVpcklpa1g5cThyME9qejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkCBVD6HzilB+oM74qjlH7BIwfnTmFCLuIK5KPSuqs+n7hcizIxmoZ4LjTbij
1SsJE/pGLgt/yQjXDWZjfXtWfhFIh11JlcOukU/dudvQzIkLMN5z+q4l1b0wEG6T
XtHSx/h031AaPCe/BKJaQE1BJiUpUKuGvWyXcjZDLendHEnnl/6oT5cJdQf+eess
k2HMX0kRJH4F4/QSHtSgPI3ADpW64xhO96zaGraChUZ9iYr/la09u0kpT5g1VACH
z7gZNtz7j3ytguX6TwZ2M6MDYa1nVkXYSGFeY7Xcsm/p9SuYjEujRXlSS4HvQ09I
HxRzgNcGM++OSHuai/LY/kkf2A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:17:35 2026 by rpki-client