Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File:                     4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier:          PqyMV9pNmywjSIR54Je+4qAYoV+Ri0siOi4rHGA/abw=
Subject key identifier:   AF:14:FC:50:F6:01:3D:7F:84:A1:04:6B:D3:1F:D6:EC:C1:0D:A9:CE
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer:       /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial:       0855
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number:          0848
Signing time:             Fri 02 Oct 2026 21:18:38 +0000
Manifest this update:     Fri 02 Oct 2026 21:18:37 +0000
Manifest next update:     Fri 09 Oct 2026 21:18:37 +0000
Files and hashes:         1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: f0SyxzoG7Pr7RmZurFiaG/yIKk8VtvOnSZjX1W1EH9U=)
                          2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: DoySYssI9dH/TsF5hpEDQa5+Fqg/aQb80V8U7maPDL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
                          rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 21:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
        Validity
            Not Before: Oct  2 21:18:37 2026 GMT
            Not After : Oct  9 21:18:37 2026 GMT
        Subject: CN=6ac01fae-a4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:13:9e:04:ae:20:29:5f:83:31:19:66:fe:bc:
                    de:49:47:2b:f2:03:0a:37:ac:da:88:9f:37:fe:f0:
                    d0:28:51:cf:09:c6:0e:2a:f7:55:a0:c8:7b:f8:7f:
                    90:e0:86:97:a6:87:95:e5:cc:5f:6c:47:cb:9a:dd:
                    d1:92:61:ea:c2:8f:5e:39:34:8e:ee:4a:d1:a4:7a:
                    80:9d:98:f9:78:7c:9e:df:ac:3a:c6:1b:df:d0:f8:
                    03:e8:87:b6:92:64:6c:be:73:c3:30:7c:07:6e:ab:
                    76:72:90:97:59:36:9e:69:db:70:9c:83:fd:c7:f5:
                    a9:90:23:98:60:2a:aa:67:7c:48:55:3b:98:15:23:
                    11:de:84:6c:c7:72:30:ca:72:f7:64:0b:98:12:10:
                    e9:f4:9d:75:f6:12:e2:f2:c7:2d:b6:d5:fa:58:7f:
                    73:c8:f8:dc:ac:c6:84:cb:b2:38:81:48:00:f5:92:
                    59:40:e8:d6:c1:eb:97:8e:ef:a8:39:ad:4c:9d:e3:
                    05:5f:66:bc:71:65:d8:0d:0c:5a:81:b8:e7:12:fd:
                    98:c1:a8:82:31:03:d2:50:e4:d6:65:0d:30:f8:2c:
                    57:44:8c:cb:70:93:22:ad:48:74:dc:60:c0:7b:ee:
                    3b:da:7c:ab:86:29:b9:a4:6b:81:1d:31:76:db:08:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:14:FC:50:F6:01:3D:7F:84:A1:04:6B:D3:1F:D6:EC:C1:0D:A9:CE
            X509v3 Authority Key Identifier:
                keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:7f:e0:8a:e4:c2:77:4b:15:66:28:7f:ed:de:82:57:f1:
         da:bd:77:ea:6f:22:ec:1e:5a:15:8b:cc:e7:70:8b:86:aa:12:
         58:0f:f4:3f:67:e9:0c:f0:ba:a3:cd:d7:01:91:d8:7e:a8:2c:
         a1:84:3b:54:d4:26:52:80:33:4f:eb:fa:cf:43:d5:1c:e2:c4:
         9e:62:dc:75:93:5d:af:1a:05:51:87:a2:4f:8f:ae:b8:dd:3a:
         6f:37:98:13:a7:97:b9:4f:ed:6c:cf:e0:5a:a0:92:59:e3:9b:
         cf:9c:a8:0f:b7:10:45:3c:0a:46:95:fa:74:bf:c2:14:51:10:
         40:17:51:91:7a:04:0a:85:66:bb:20:50:f1:13:b3:e1:13:3c:
         5a:9e:94:64:b1:9a:85:c0:42:9d:36:90:de:cb:97:29:7e:b1:
         05:4a:8b:27:d8:16:36:45:5c:80:cb:42:4d:e0:9a:4b:20:88:
         57:ec:4a:0d:0f:c3:d7:a9:c3:35:59:ee:65:fa:7f:9f:5a:ee:
         0e:e5:67:03:72:25:5b:d8:51:73:eb:73:5a:e4:e6:9a:ae:61:
         11:a1:3f:aa:c0:0f:a0:1a:90:75:af:a6:69:2f:fc:31:72:e9:
         dd:f0:3b:ea:46:2f:f1:3c:db:b3:e9:d4:5a:b1:9d:46:a6:34:
         77:bf:74:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkyMjAxMTAvBgNVBAUTKEUyQ0ZDNDJCNkEwODE1MEFFRkVGRTcxODlCRTVBRjJC
RTU2OEY4QzEwHhcNMjYxMDAyMjExODM3WhcNMjYxMDA5MjExODM3WjAYMRYwFAYD
VQQDEw02YWMwMWZhZS1hNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0BOeBK4gKV+DMRlm/rzeSUcr8gMKN6zaiJ83/vDQKFHPCcYOKvdVoMh7+H+Q
4IaXpoeV5cxfbEfLmt3RkmHqwo9eOTSO7krRpHqAnZj5eHye36w6xhvf0PgD6Ie2
kmRsvnPDMHwHbqt2cpCXWTaeadtwnIP9x/WpkCOYYCqqZ3xIVTuYFSMR3oRsx3Iw
ynL3ZAuYEhDp9J119hLi8sctttX6WH9zyPjcrMaEy7I4gUgA9ZJZQOjWweuXju+o
Oa1MneMFX2a8cWXYDQxagbjnEv2YwaiCMQPSUOTWZQ0w+CxXRIzLcJMirUh03GDA
e+472nyrhim5pGuBHTF22whDTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8U/FD2
AT1/hKEEa9Mf1uzBDanOMB8GA1UdIwQYMBaAFOLPxCtqCBUK7+/nGJvlryvlaPjB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTIyMC8xNUNEMUMyMjI4
QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZRcnY3LWNZbS1XdkstVm8t
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRzX0VLMm9JRlFydjctY1ltLVd2Sy1Wby1NRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTIyMC8xNUNEMUMyMjI4QjAxMUVCQjQ0NjlFMUVDNEY5QUUwMi80c19FSzJvSUZR
cnY3LWNZbS1XdkstVm8tTUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALD5/4IrkwndLFWYof+3eglfx2r136m8i7B5aFYvM53CLhqoSWA/0P2fpDPC6
o83XAZHYfqgsoYQ7VNQmUoAzT+v6z0PVHOLEnmLcdZNdrxoFUYeiT4+uuN06bzeY
E6eXuU/tbM/gWqCSWeObz5yoD7cQRTwKRpX6dL/CFFEQQBdRkXoECoVmuyBQ8ROz
4RM8Wp6UZLGahcBCnTaQ3suXKX6xBUqLJ9gWNkVcgMtCTeCaSyCIV+xKDQ/D16nD
NVnuZfp/n1ruDuVnA3IlW9hRc+tzWuTmmq5hEaE/qsAPoBqQda+maS/8MXLp3fA7
6kYv8Tzbs+nUWrGdRqY0d790gQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:50:19 2026 by rpki-client