Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
File:                     mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft (raw, json)
Hash identifier:          pj5pPIuwywE/+Xgk8L9V8oRwCsPDa0RuXHaw7GAbZQk=
Subject key identifier:   6E:58:06:F5:A1:64:25:C2:3D:FB:41:CA:B7:2A:71:8D:DE:D8:29:99
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Certificate issuer:       /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial:       1151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
Manifest number:          110C
Signing time:             Sat 26 Sep 2026 17:23:19 +0000
Manifest this update:     Sat 26 Sep 2026 17:23:18 +0000
Manifest next update:     Sat 03 Oct 2026 17:23:18 +0000
Files and hashes:         1: mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl (hash: zOHNKQkAZXU3BopNzsuPlK4ys0epLkSK5s5ZQ7tcQAk=)
                          2: 2E680D2AC99911F0BDA2F55CC4F9AE02.roa (hash: Q/eCF0AzmK8tNl3R3SFQuYN54I5IONWrSmL4B/NCtck=)
                          3: mKPQBXH61YZ-aXWXRBvkP2QM7xw.asa (hash: i+Xzz4/pjjPTXpwn4PpHSHOD48b0E1VC1Rlyg+hKBSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
                          rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 17:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4433 (0x1151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
        Validity
            Not Before: Sep 26 17:23:18 2026 GMT
            Not After : Oct  3 17:23:18 2026 GMT
        Subject: CN=6ab7ff87-97cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:b6:98:bf:75:c4:18:7e:84:dd:03:c0:5d:
                    f5:1b:37:f2:7b:f2:88:cd:22:0a:69:2a:be:4d:b5:
                    57:cd:64:1f:c0:89:3c:c1:92:b8:e0:5b:31:45:80:
                    4b:01:cc:5d:01:cd:57:77:9c:8d:45:3c:2c:91:9d:
                    88:0c:ad:7d:74:68:60:f1:79:ea:36:5a:c6:6b:64:
                    3a:d3:55:ef:d9:bd:94:53:b4:71:83:31:0e:4d:5a:
                    e0:db:f7:f2:3f:a5:d3:42:cb:50:9d:66:dd:ca:9b:
                    5a:27:7d:85:1e:50:94:c3:b8:67:2f:81:93:b7:c6:
                    5b:1a:22:1d:69:4a:ec:fb:a4:69:52:64:87:95:6f:
                    b3:36:be:6f:61:ee:45:1c:2b:8b:15:83:d0:49:77:
                    35:fc:55:32:0e:26:11:1b:39:4a:ba:e1:b6:c1:08:
                    62:8b:68:a6:e5:be:33:ab:dd:4d:98:9a:4d:c9:b4:
                    1f:16:ec:4d:7f:3c:4c:90:b1:ac:70:23:a1:5b:14:
                    00:8d:90:c3:de:dd:60:de:61:c1:f9:c9:c4:a8:5e:
                    00:d9:92:f7:95:96:f7:f5:63:31:5a:89:59:d1:4a:
                    03:a2:e8:b0:a8:bc:41:6d:f3:73:e9:d1:1c:d6:bb:
                    66:ef:8e:72:68:68:0b:c3:08:28:6d:42:e7:f2:9a:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:58:06:F5:A1:64:25:C2:3D:FB:41:CA:B7:2A:71:8D:DE:D8:29:99
            X509v3 Authority Key Identifier:
                keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:1c:df:7c:8e:07:08:a2:48:d4:b1:24:38:85:e6:b0:3e:
         91:9c:01:aa:cf:fc:e9:a6:0c:2f:e2:44:cf:f7:c7:ad:78:07:
         d1:ee:eb:9f:06:92:09:11:34:f3:f5:c1:0e:03:1b:12:b8:e0:
         8b:37:e3:4e:d6:2f:fb:4a:fa:ba:92:a6:bd:04:07:8f:ab:d0:
         ac:c6:89:29:91:29:ed:39:e2:6c:36:4f:a9:33:f7:80:f1:5f:
         62:f7:8b:d1:1e:66:25:48:9f:06:fa:c2:c1:2a:db:d9:ea:d3:
         88:48:91:a3:d2:4f:90:63:5e:fc:a8:a4:7b:50:f6:bd:bd:a0:
         18:c7:dc:a7:35:45:f7:3b:33:5b:41:79:e0:a8:9d:81:4a:4c:
         df:2a:06:40:27:2f:a2:74:4d:37:a4:cd:0f:48:19:ae:82:cb:
         5d:59:23:4b:52:60:17:3a:65:8e:57:f8:21:37:25:60:df:5a:
         b1:14:2e:0a:89:a4:9f:a3:30:7e:93:37:c3:ce:3b:7d:32:9b:
         6f:1a:7b:a8:99:08:97:83:e2:83:ff:f8:37:3b:f8:ad:80:a6:
         ef:e5:5a:a1:53:42:16:1b:ad:93:99:58:24:e6:5a:ab:d2:d2:
         2b:8e:be:ef:33:1a:4c:ad:a0:84:3b:20:1f:35:e6:e6:e9:b0:
         5b:a1:e7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:29:31 2026 by rpki-client