Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
File:                     cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json)
Hash identifier:          M6cpLZJhLnyjpNSRlZKB/Se0wjjleZzB3EmhxjuwvcI=
Subject key identifier:   63:72:D5:14:0E:61:CC:4E:16:56:1B:8F:62:F7:47:C8:0B:CA:47:27
Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06
Certificate issuer:       /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
Manifest number:          0113
Signing time:             Wed 23 Sep 2026 05:47:15 +0000
Manifest this update:     Wed 23 Sep 2026 05:47:15 +0000
Manifest next update:     Wed 30 Sep 2026 05:47:15 +0000
Files and hashes:         1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: 0UGuLE3WHj8/nC6sPl9lidEJP6jcyGwNv8BqKEdPnFc=)
                          2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: qJYle22nAvJ+p2ibV/d5kSSNiEDnFiKaArPFKlzPrbo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl
                          rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06
        Validity
            Not Before: Sep 23 05:47:15 2026 GMT
            Not After : Sep 30 05:47:15 2026 GMT
        Subject: CN=6ab367e3-1ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:76:55:81:b1:6f:a9:81:e5:ca:c1:50:e9:
                    eb:42:ad:5c:c9:60:a4:7b:a5:1e:c3:dd:6e:20:5f:
                    9a:9f:ac:ea:55:8b:d9:f2:a4:d4:69:95:0e:44:77:
                    fa:93:51:cd:68:9d:12:d4:5e:29:69:ab:5a:02:88:
                    56:3b:d7:cc:6e:6b:25:1e:ea:19:d2:5a:14:88:0a:
                    3a:05:cf:7b:09:09:62:f3:72:6d:88:fe:f4:1f:58:
                    d4:f7:49:ae:aa:47:d6:03:ca:2e:07:37:d9:7c:54:
                    29:2d:4a:78:e3:04:79:5b:4b:fa:81:a0:cd:fa:9e:
                    d2:fc:b4:11:d5:54:86:cc:fb:1e:1c:cc:c5:53:15:
                    11:ab:c4:f1:5d:1f:2a:0b:ad:90:25:8e:c3:ac:37:
                    a4:c8:4a:50:e0:30:aa:62:c0:12:60:79:f4:91:5a:
                    c0:0c:08:70:a2:1a:59:33:6a:f5:25:e7:b8:3f:47:
                    ba:50:2d:37:f6:ec:19:0b:48:35:6a:b0:76:5a:23:
                    ba:c8:72:00:44:a9:2f:92:8e:a8:0e:4f:d3:79:48:
                    41:c6:83:47:52:f8:b5:fd:5a:62:ac:61:9a:d9:b7:
                    b1:43:ba:43:77:cd:2e:eb:70:55:63:29:ba:49:46:
                    15:db:5a:a9:3d:cf:f9:d5:a6:47:39:e7:01:55:9b:
                    f3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:72:D5:14:0E:61:CC:4E:16:56:1B:8F:62:F7:47:C8:0B:CA:47:27
            X509v3 Authority Key Identifier:
                keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:14:46:3b:63:1e:77:3b:80:ca:a5:54:fb:4c:89:95:88:
         fb:59:8e:c4:6d:df:7a:0c:e2:d3:cb:52:9d:e3:36:a8:ca:5e:
         02:73:18:fb:0b:13:41:46:54:a2:b4:66:d7:3b:45:2e:99:e6:
         9a:6f:b0:2e:c9:c0:f3:e5:9d:f8:16:37:4b:61:96:2a:a0:8b:
         bb:f5:a9:cb:b4:42:53:b8:97:a3:1d:8f:98:46:92:b2:f4:c0:
         06:62:e6:4d:17:b8:17:db:63:06:65:89:29:3f:09:d6:34:53:
         58:d1:78:0f:e7:de:6d:de:b4:ec:3b:84:23:e8:af:65:2f:f9:
         4a:0e:58:b9:d0:42:91:38:0e:d1:aa:89:06:31:75:54:5d:52:
         5b:e3:e7:b0:53:87:5d:46:a2:b0:90:4a:28:9d:86:4a:3e:4b:
         fb:a2:e9:76:71:74:1c:fd:9f:14:3c:3d:5c:a8:52:bd:9d:c4:
         9c:82:11:e1:5f:ba:64:69:2f:11:8c:7e:be:e3:5c:e1:35:a3:
         c2:52:73:f7:91:ca:5f:0a:f9:0a:c2:d3:fe:fd:c6:d7:1d:73:
         f7:86:4a:cb:c4:33:48:05:75:61:ac:0e:7b:d5:e3:5f:cb:64:
         88:99:36:67:13:17:c9:61:c1:ba:a8:14:60:ca:38:ed:45:51:
         71:2e:2b:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBGMjExMTAvBgNVBAUTKDcwRDI2MDFDQjBEMEZBNEY5QzVGMEUwMjg2RDhCNkFG
RDkyMzVBMDYwHhcNMjYwOTIzMDU0NzE1WhcNMjYwOTMwMDU0NzE1WjAYMRYwFAYD
VQQDEw02YWIzNjdlMy0xYWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApyB2VYGxb6mB5crBUOnrQq1cyWCke6Uew91uIF+an6zqVYvZ8qTUaZUORHf6
k1HNaJ0S1F4paataAohWO9fMbmslHuoZ0loUiAo6Bc97CQli83JtiP70H1jU90mu
qkfWA8ouBzfZfFQpLUp44wR5W0v6gaDN+p7S/LQR1VSGzPseHMzFUxURq8TxXR8q
C62QJY7DrDekyEpQ4DCqYsASYHn0kVrADAhwohpZM2r1Jee4P0e6UC039uwZC0g1
arB2WiO6yHIARKkvko6oDk/TeUhBxoNHUvi1/VpirGGa2bexQ7pDd80u63BVYym6
SUYV21qpPc/51aZHOecBVZvz9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNy1RQO
YcxOFlYbj2L3R8gLykcnMB8GA1UdIwQYMBaAFHDSYByw0PpPnF8OAobYtq/ZI1oG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEYyMS84NTE3RkIwODE0
MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1rLWNYdzRDaHRpMnI5a2pX
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NOSmdITERRLWstY1h3NENodGkycjlraldnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEYyMS84NTE3RkIwODE0MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1r
LWNYdzRDaHRpMnI5a2pXZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFuUURjtjHnc7gMqlVPtMiZWI+1mOxG3fegzi08tSneM2qMpeAnMY+wsTQUZU
orRm1ztFLpnmmm+wLsnA8+Wd+BY3S2GWKqCLu/Wpy7RCU7iXox2PmEaSsvTABmLm
TRe4F9tjBmWJKT8J1jRTWNF4D+febd607DuEI+ivZS/5Sg5YudBCkTgO0aqJBjF1
VF1SW+PnsFOHXUaisJBKKJ2GSj5L+6LpdnF0HP2fFDw9XKhSvZ3EnIIR4V+6ZGkv
EYx+vuNc4TWjwlJz95HKXwr5CsLT/v3G1x1z94ZKy8QzSAV1YawOe9XjX8tkiJk2
ZxMXyWHBuqgUYMo47UVRcS4rTw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:14:21 2026 by rpki-client