Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
File:                     1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json)
Hash identifier:          mJ4VamgjL4JfhiprUhp7r6hXekCWDZ+T3JwjWKSbmEQ=
Subject key identifier:   00:E0:46:22:DA:FB:47:4A:D4:E1:E9:BB:96:B1:D8:20:0D:74:1A:B6
Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
Certificate issuer:       /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
Manifest number:          BD
Signing time:             Fri 25 Sep 2026 07:00:26 +0000
Manifest this update:     Fri 25 Sep 2026 07:00:25 +0000
Manifest next update:     Fri 02 Oct 2026 07:00:25 +0000
Files and hashes:         1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: SyF5KiPSw/IhiOWuHSmtXbl+hkbPX2Savc0bRfBsJH8=)
                          2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Pc2Gm0El6C7yNRFdvtcnQRtp9swqk0Qn5OUm8Fjkbqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
                          rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
        Validity
            Not Before: Sep 25 07:00:25 2026 GMT
            Not After : Oct  2 07:00:25 2026 GMT
        Subject: CN=6ab61c09-faf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:94:49:70:74:59:dd:33:ac:50:b7:26:07:ff:
                    7e:e8:54:6f:7a:f3:8f:b8:4a:6a:3f:62:de:fc:9b:
                    2c:ad:b0:61:cb:68:5c:f4:d2:2b:7e:e0:c5:db:ce:
                    72:ba:97:e9:14:e0:e0:3e:6f:0b:ad:e7:dd:61:b0:
                    d1:c7:69:89:a7:5c:ee:4a:7c:f6:14:9d:5b:10:35:
                    68:48:95:67:95:03:ae:ae:66:e3:ed:4e:ee:2d:e1:
                    2d:d4:13:9c:3c:6b:60:3e:c9:68:88:ed:49:35:fd:
                    5b:ba:70:94:5b:f8:7a:d6:1b:fe:e1:33:da:14:83:
                    fd:52:3e:12:6f:2c:35:26:a2:09:14:ef:59:14:e4:
                    1b:9b:32:1e:dc:03:cd:e4:76:aa:a4:cb:a8:3d:c5:
                    0d:58:49:56:1d:ca:ac:bf:4c:a9:c1:4d:a6:ca:af:
                    65:b5:b1:03:8c:2a:62:e7:da:d1:cb:52:76:3c:45:
                    ec:12:19:79:09:a2:3c:ab:fd:cc:bd:77:50:74:53:
                    01:27:4b:b2:f3:3f:e4:e6:62:eb:3d:89:8d:91:66:
                    77:36:ee:4e:9a:14:96:bf:9d:bc:9f:f5:b8:33:7b:
                    c3:22:74:77:51:ca:1f:0c:84:d9:8e:cf:74:6b:0d:
                    2b:b7:ef:02:6e:84:73:32:d2:ea:26:ae:0c:1d:7c:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E0:46:22:DA:FB:47:4A:D4:E1:E9:BB:96:B1:D8:20:0D:74:1A:B6
            X509v3 Authority Key Identifier:
                keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:16:1f:68:d6:d5:05:32:b7:41:47:af:65:b2:59:58:b9:34:
         f5:d8:98:8c:5b:0f:b8:01:c7:fd:96:b0:13:3b:e8:5e:5e:1b:
         60:d9:42:1a:90:90:4f:40:4e:14:29:54:6b:7f:f3:a7:b7:e0:
         bd:91:08:9e:34:7c:f2:9a:d9:c5:41:98:5c:12:c6:f8:47:2d:
         10:d6:ad:cf:75:59:f3:64:81:4d:6d:bd:95:fe:8d:2a:52:6c:
         b0:c4:78:8e:8f:1c:2d:04:5e:47:97:dd:c6:14:3f:a9:1b:66:
         49:dc:2b:08:58:5c:74:02:79:dd:73:cf:79:c1:e8:0a:69:9e:
         74:e3:88:a7:c8:a7:05:11:b4:46:7b:07:ea:8e:b8:e3:01:e9:
         81:e1:e8:ec:58:93:19:61:ad:4f:cd:9f:ad:8a:b2:3c:16:fb:
         30:59:00:33:64:27:05:7a:ae:46:60:94:6b:8c:83:2d:8d:39:
         dd:c6:d3:78:ed:cb:02:63:7f:36:ee:ee:df:a0:9a:7d:20:db:
         f0:55:a7:25:c8:d4:76:63:18:6e:66:67:89:44:c6:c6:95:7f:
         38:c6:ae:90:a1:02:5f:9c:cc:f5:1b:dc:4f:5a:a6:3f:fd:a5:
         52:cd:03:e2:d2:a0:8e:91:8f:95:72:50:d3:28:2e:f4:98:3b:
         45:7c:94:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZDMUYxMTAvBgNVBAUTKEQ0QTRGMEI2MDAwREUwMjI0OEM0NjU3QUY5REQyNkIw
MjNDNUY2NzkwHhcNMjYwOTI1MDcwMDI1WhcNMjYxMDAyMDcwMDI1WjAYMRYwFAYD
VQQDEw02YWI2MWMwOS1mYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhZRJcHRZ3TOsULcmB/9+6FRvevOPuEpqP2Le/JssrbBhy2hc9NIrfuDF285y
upfpFODgPm8LrefdYbDRx2mJp1zuSnz2FJ1bEDVoSJVnlQOurmbj7U7uLeEt1BOc
PGtgPsloiO1JNf1bunCUW/h61hv+4TPaFIP9Uj4Sbyw1JqIJFO9ZFOQbmzIe3APN
5HaqpMuoPcUNWElWHcqsv0ypwU2myq9ltbEDjCpi59rRy1J2PEXsEhl5CaI8q/3M
vXdQdFMBJ0uy8z/k5mLrPYmNkWZ3Nu5OmhSWv528n/W4M3vDInR3UcofDITZjs90
aw0rt+8CboRzMtLqJq4MHXznXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFADgRiLa
+0dK1OHpu5ax2CANdBq2MB8GA1UdIwQYMBaAFNSk8LYADeAiSMRlevndJrAjxfZ5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkMxRi9FNkE3RjZCODlB
ODUxMUYwOTdDMjQ2ODZDNEY5QUUwMi8xS1R3dGdBTjRDSkl4R1Y2LWQwbXNDUEY5
bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFLVHd0Z0FONENKSXhHVjYtZDBtc0NQRjluay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkMxRi9FNkE3RjZCODlBODUxMUYwOTdDMjQ2ODZDNEY5QUUwMi8xS1R3dGdBTjRD
Skl4R1Y2LWQwbXNDUEY5bmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABBYfaNbVBTK3QUevZbJZWLk09diYjFsPuAHH/ZawEzvoXl4bYNlCGpCQT0BO
FClUa3/zp7fgvZEInjR88prZxUGYXBLG+EctENatz3VZ82SBTW29lf6NKlJssMR4
jo8cLQReR5fdxhQ/qRtmSdwrCFhcdAJ53XPPecHoCmmedOOIp8inBRG0RnsH6o64
4wHpgeHo7FiTGWGtT82frYqyPBb7MFkAM2QnBXquRmCUa4yDLY053cbTeO3LAmN/
Nu7u36CafSDb8FWnJcjUdmMYbmZniUTGxpV/OMaukKECX5zM9RvcT1qmP/2lUs0D
4tKgjpGPlXJQ0ygu9Jg7RXyUTw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:16:49 2026 by rpki-client