Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
File:                     lyuQ2cUZIlatlkdbOSurGnp5zC0.mft (raw, json)
Hash identifier:          Gi1hhm67wSQPQnFOGoX9srOoD5Pu7hYBkwd0GgUTmeM=
Subject key identifier:   48:70:DA:7C:B1:43:E0:29:A7:71:37:C0:EC:61:71:D7:76:E5:9C:69
Authority key identifier: 97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D
Certificate issuer:       /CN=A9132FD9/serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
Certificate serial:       010C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
Manifest number:          0106
Signing time:             Mon 21 Sep 2026 06:08:36 +0000
Manifest this update:     Mon 21 Sep 2026 06:08:35 +0000
Manifest next update:     Mon 28 Sep 2026 06:08:35 +0000
Files and hashes:         1: lyuQ2cUZIlatlkdbOSurGnp5zC0.crl (hash: 9OXG7M2kXYICGWWEhDqNaZ834uTLPm+9zJ5YxOIjZJg=)
                          2: DCC2224A313011F0BE214A64C4F9AE02.roa (hash: Yx+85CHClvGSKZhhotbyNhG5+qEsDCcgpA+sR6zn7rc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl
                          rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132FD9, serialNumber=972B90D9C5192256AD96475B392BAB1A7A79CC2D
        Validity
            Not Before: Sep 21 06:08:35 2026 GMT
            Not After : Sep 28 06:08:35 2026 GMT
        Subject: CN=6ab0c9e4-a24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:e3:50:ef:73:0e:f4:9e:eb:52:26:22:d0:
                    3b:8d:4e:91:74:d9:e8:d0:a1:ac:65:f4:71:84:85:
                    82:9d:8a:ed:56:79:c9:4a:50:9d:3c:0a:e6:ac:a7:
                    bb:36:5b:fe:41:ec:71:07:9e:94:09:c4:ec:ff:ae:
                    94:a4:d1:0e:e9:fe:4d:1c:70:e5:8b:3b:ef:08:f4:
                    ab:53:d7:f6:af:9b:4a:bb:d6:be:f6:99:43:10:9b:
                    a5:b2:5f:aa:5c:37:df:d6:f2:86:ca:c4:32:06:a6:
                    0f:14:be:d8:55:69:53:49:9d:4d:4c:e2:a7:7e:b2:
                    21:6f:f7:54:d8:e5:eb:f8:d6:56:6f:6b:ba:80:fa:
                    ca:6a:e2:4c:07:d7:7f:1b:dc:8e:50:93:a6:e1:90:
                    41:79:7b:60:05:4d:85:88:d9:e9:7f:2f:97:36:c6:
                    45:ef:a2:80:9a:ba:18:c2:56:9c:42:d3:71:79:fe:
                    ca:4e:f1:04:74:09:e5:5f:e0:97:66:dd:75:3b:14:
                    23:ce:ae:86:13:27:93:b3:54:be:35:c8:8d:55:7a:
                    e5:cc:59:89:1c:99:18:3e:32:3c:c0:c2:8a:3d:ee:
                    7d:f6:2a:8a:79:cc:be:e4:10:86:6c:ed:03:cb:9e:
                    4f:01:43:18:50:5e:12:37:c7:eb:a1:76:f6:02:74:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:70:DA:7C:B1:43:E0:29:A7:71:37:C0:EC:61:71:D7:76:E5:9C:69
            X509v3 Authority Key Identifier:
                keyid:97:2B:90:D9:C5:19:22:56:AD:96:47:5B:39:2B:AB:1A:7A:79:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lyuQ2cUZIlatlkdbOSurGnp5zC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FD9/7F9A70342BB511F09DE5BA4EC4F9AE02/lyuQ2cUZIlatlkdbOSurGnp5zC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:b8:21:41:99:8b:3b:60:2c:7d:0d:8f:73:a8:80:87:ee:
         b5:b2:05:dd:9b:25:fc:fa:26:91:6c:55:c6:93:a4:06:0d:2e:
         6d:7d:74:a4:b2:65:7b:d7:91:ad:c8:18:ee:4c:05:54:6f:75:
         0c:73:88:c0:98:4d:df:c8:16:45:c7:8a:a2:b3:e5:5e:e3:a7:
         cf:dd:e9:25:36:f1:0f:67:0a:9f:41:09:4e:6b:38:36:10:10:
         a9:54:fa:1b:da:32:37:62:13:29:75:d6:37:cb:07:a6:81:25:
         b2:14:b7:df:ef:34:4f:06:38:fa:59:d7:6f:f6:63:ff:b1:82:
         b0:65:c4:a5:e4:a2:b5:84:fc:64:14:ec:cf:f4:32:e7:9e:a6:
         ff:d4:16:6b:3f:5e:65:14:b8:c3:12:f7:b7:ae:ea:45:52:f7:
         7d:7e:e0:65:fe:6c:f7:c0:bb:03:bb:1c:be:23:a8:57:79:f6:
         c7:ea:dc:72:ed:a3:37:7b:23:b3:54:fd:db:ce:3c:1b:b4:f6:
         4a:a9:ba:64:cf:e8:80:98:4c:65:b4:8c:dc:9c:a1:32:58:91:
         c5:d7:24:2c:56:71:ca:65:6c:98:5d:28:c4:e8:36:26:b8:33:
         f1:23:6b:f6:15:a0:d6:58:10:b9:d0:62:14:f2:a8:6b:33:83:
         55:5f:76:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJGRDkxMTAvBgNVBAUTKDk3MkI5MEQ5QzUxOTIyNTZBRDk2NDc1QjM5MkJBQjFB
N0E3OUNDMkQwHhcNMjYwOTIxMDYwODM1WhcNMjYwOTI4MDYwODM1WjAYMRYwFAYD
VQQDEw02YWIwYzllNC1hMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy2njUO9zDvSe61ImItA7jU6RdNno0KGsZfRxhIWCnYrtVnnJSlCdPArmrKe7
Nlv+QexxB56UCcTs/66UpNEO6f5NHHDlizvvCPSrU9f2r5tKu9a+9plDEJulsl+q
XDff1vKGysQyBqYPFL7YVWlTSZ1NTOKnfrIhb/dU2OXr+NZWb2u6gPrKauJMB9d/
G9yOUJOm4ZBBeXtgBU2FiNnpfy+XNsZF76KAmroYwlacQtNxef7KTvEEdAnlX+CX
Zt11OxQjzq6GEyeTs1S+NciNVXrlzFmJHJkYPjI8wMKKPe599iqKecy+5BCGbO0D
y55PAUMYUF4SN8froXb2AnQMSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhw2nyx
Q+App3E3wOxhcdd25ZxpMB8GA1UdIwQYMBaAFJcrkNnFGSJWrZZHWzkrqxp6ecwt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZEOS83RjlBNzAzNDJC
QjUxMUYwOURFNUJBNEVDNEY5QUUwMi9seXVRMmNVWklsYXRsa2RiT1N1ckducDV6
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x5dVEyY1VaSWxhdGxrZGJPU3VyR25wNXpDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkZEOS83RjlBNzAzNDJCQjUxMUYwOURFNUJBNEVDNEY5QUUwMi9seXVRMmNVWkls
YXRsa2RiT1N1ckducDV6QzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALVS4IUGZiztgLH0Nj3OogIfutbIF3Zsl/PomkWxVxpOkBg0ubX10pLJle9eR
rcgY7kwFVG91DHOIwJhN38gWRceKorPlXuOnz93pJTbxD2cKn0EJTms4NhAQqVT6
G9oyN2ITKXXWN8sHpoElshS33+80TwY4+lnXb/Zj/7GCsGXEpeSitYT8ZBTsz/Qy
556m/9QWaz9eZRS4wxL3t67qRVL3fX7gZf5s98C7A7scviOoV3n2x+rccu2jN3sj
s1T92848G7T2Sqm6ZM/ogJhMZbSM3JyhMliRxdckLFZxymVsmF0oxOg2Jrgz8SNr
9hWg1lgQudBiFPKoazODVV92+w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:43:30 2026 by rpki-client