Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
File:                     TDZeNqZHnY6wtQ2Q820dexnvhNM.mft (raw, json)
Hash identifier:          tYBUBwTlmdo9m0Bwx45oPyPC+twnFUlIoUnHBUUUHxA=
Subject key identifier:   01:57:D8:63:26:9C:05:63:4B:71:53:46:6C:6F:D0:00:58:77:6B:8B
Authority key identifier: 4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3
Certificate issuer:       /CN=A9135B49/serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
Manifest number:          01F5
Signing time:             Sat 03 Oct 2026 04:29:46 +0000
Manifest this update:     Sat 03 Oct 2026 04:29:45 +0000
Manifest next update:     Sat 10 Oct 2026 04:29:45 +0000
Files and hashes:         1: TDZeNqZHnY6wtQ2Q820dexnvhNM.crl (hash: 3tuWuX3CuxAG+42vWddnIzueeqklkIvpifRu+F/RWS4=)
                          2: ECDF4CE2DB0911F0B89EBE0382D3641D.roa (hash: +cfq+DBj705kE9pcPQ8fHhTnhcZwL0furcECRqclk3Y=)
                          3: 26B79D64E9FE11EF8751AE17C4F9AE02.roa (hash: CSwNiNiHBOdBkX8QVfEy5RdNRxWDtIIzMJX3lDPz73I=)
                          4: CAF0BBBCDB0811F0A3EA0CD881D3641D.roa (hash: K6rhOjUE5MsA7iPT9OzT+5zbheWWIvW6req+7O+50Rk=)
                          5: 4699D9EADB0B11F0B7B5790A82D3641D.roa (hash: T2Foy9ASPzGFF0amgq/n/ifzed5ff9yCRwIVozmPQbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl
                          rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135B49, serialNumber=4C365E36A6479D8EB0B50D90F36D1D7B19EF84D3
        Validity
            Not Before: Oct  3 04:29:45 2026 GMT
            Not After : Oct 10 04:29:45 2026 GMT
        Subject: CN=6ac084ba-6786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:75:ac:79:57:62:50:bb:de:b0:1f:40:74:
                    3c:a8:03:7f:68:45:74:5c:bb:0d:5c:ee:9f:59:df:
                    1a:e0:71:3f:63:62:7f:b9:2c:83:86:d8:28:30:e5:
                    41:46:2d:8d:87:49:d3:02:13:90:3f:ed:7d:64:a7:
                    a5:9c:84:3b:4b:9b:da:1c:8c:16:ea:f3:86:10:c2:
                    a3:88:4f:22:53:66:11:fc:48:96:34:0c:77:38:19:
                    35:6a:ad:92:e4:02:30:71:16:75:01:ec:2d:a2:30:
                    d0:ed:2b:6f:14:29:54:78:28:92:38:7c:57:ed:fd:
                    54:c9:50:aa:4e:00:b6:8f:4c:b3:86:7d:7b:7c:80:
                    d2:55:0d:e5:a7:77:7b:89:68:dc:fe:5d:28:8d:bf:
                    01:c7:7c:fa:34:f7:ff:d7:04:6f:48:9d:f7:fa:da:
                    d7:d0:e1:64:26:9a:cb:c5:29:e8:09:55:d6:04:c8:
                    9a:a2:69:15:cc:ff:3b:de:c1:64:47:41:da:ec:43:
                    c2:0b:c5:5b:e9:1d:99:2e:08:d8:a1:28:3e:24:1b:
                    85:62:38:94:59:56:e8:9b:f7:16:27:cc:04:85:4b:
                    91:90:b4:c4:97:a6:55:9e:47:7f:ab:c4:85:f3:06:
                    d8:11:ee:82:2c:f5:6e:b6:b9:6b:a1:85:05:00:aa:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:57:D8:63:26:9C:05:63:4B:71:53:46:6C:6F:D0:00:58:77:6B:8B
            X509v3 Authority Key Identifier:
                keyid:4C:36:5E:36:A6:47:9D:8E:B0:B5:0D:90:F3:6D:1D:7B:19:EF:84:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDZeNqZHnY6wtQ2Q820dexnvhNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135B49/5318A108120111EFADC85345C4F9AE02/TDZeNqZHnY6wtQ2Q820dexnvhNM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:00:8c:29:2c:e1:5e:83:e9:ba:ea:a2:f7:fb:f1:6f:29:70:
         d5:a0:87:c0:7d:2b:f8:ec:08:50:4e:5b:17:38:06:d2:0d:ed:
         87:6a:00:0d:e6:8a:6a:a2:d8:21:6a:4f:17:c0:46:9e:77:bc:
         32:00:c7:e0:be:ac:30:c5:cb:92:7a:1a:f2:9c:4c:7a:e3:bc:
         cd:c8:12:b6:69:1c:f7:24:25:79:7b:15:83:4e:96:a9:be:0d:
         3e:6b:12:bb:b1:de:26:93:f1:1e:b1:43:12:f2:81:04:72:29:
         ab:77:f3:82:bd:e1:80:15:31:29:7a:6a:74:31:20:93:ee:1f:
         e5:6c:dd:5d:1f:25:3e:cc:78:fa:33:a2:59:1e:85:fc:f0:70:
         a2:8b:42:34:28:21:fe:8e:ce:f1:a5:8f:46:1e:6c:74:c9:0e:
         e8:e7:24:09:f1:61:04:d9:05:2e:c9:b8:6e:74:b2:07:57:9d:
         34:05:b4:c6:0e:24:38:ae:07:2d:6e:76:79:44:0d:db:37:43:
         df:f4:da:24:1c:d4:3b:2f:61:0b:58:80:cf:b2:07:52:2c:28:
         56:7e:c6:11:42:24:1e:1e:79:8d:eb:0f:98:f1:e0:82:e4:db:
         0d:aa:ae:05:33:79:71:bd:e0:17:bb:14:b4:0d:92:fe:b1:78:
         93:bb:30:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVCNDkxMTAvBgNVBAUTKDRDMzY1RTM2QTY0NzlEOEVCMEI1MEQ5MEYzNkQxRDdC
MTlFRjg0RDMwHhcNMjYxMDAzMDQyOTQ1WhcNMjYxMDEwMDQyOTQ1WjAYMRYwFAYD
VQQDEw02YWMwODRiYS02Nzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo1F1rHlXYlC73rAfQHQ8qAN/aEV0XLsNXO6fWd8a4HE/Y2J/uSyDhtgoMOVB
Ri2Nh0nTAhOQP+19ZKelnIQ7S5vaHIwW6vOGEMKjiE8iU2YR/EiWNAx3OBk1aq2S
5AIwcRZ1AewtojDQ7StvFClUeCiSOHxX7f1UyVCqTgC2j0yzhn17fIDSVQ3lp3d7
iWjc/l0ojb8Bx3z6NPf/1wRvSJ33+trX0OFkJprLxSnoCVXWBMiaomkVzP873sFk
R0Ha7EPCC8Vb6R2ZLgjYoSg+JBuFYjiUWVbom/cWJ8wEhUuRkLTEl6ZVnkd/q8SF
8wbYEe6CLPVutrlroYUFAKpsMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFX2GMm
nAVjS3FTRmxv0ABYd2uLMB8GA1UdIwQYMBaAFEw2XjamR52OsLUNkPNtHXsZ74TT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUI0OS81MzE4QTEwODEy
MDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5ZNnd0UTJRODIwZGV4bnZo
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1REWmVOcVpIblk2d3RRMlE4MjBkZXhudmhOTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUI0OS81MzE4QTEwODEyMDExMUVGQURDODUzNDVDNEY5QUUwMi9URFplTnFaSG5Z
Nnd0UTJRODIwZGV4bnZoTk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmACMKSzhXoPpuuqi9/vxbylw1aCHwH0r+OwIUE5bFzgG0g3th2oADeaKaqLY
IWpPF8BGnne8MgDH4L6sMMXLknoa8pxMeuO8zcgStmkc9yQleXsVg06Wqb4NPmsS
u7HeJpPxHrFDEvKBBHIpq3fzgr3hgBUxKXpqdDEgk+4f5WzdXR8lPsx4+jOiWR6F
/PBwootCNCgh/o7O8aWPRh5sdMkO6OckCfFhBNkFLsm4bnSyB1edNAW0xg4kOK4H
LW52eUQN2zdD3/TaJBzUOy9hC1iAz7IHUiwoVn7GEUIkHh55jesPmPHgguTbDaqu
BTN5cb3gF7sUtA2S/rF4k7swdQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:58:09 2026 by rpki-client