Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
File:                     ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json)
Hash identifier:          2pUx4vtjVRQB7vPzmvF///RoB5ctYiOcR8BVR+yClro=
Subject key identifier:   42:9D:8C:31:38:69:F8:7A:B2:CD:0E:ED:99:74:E7:63:76:92:4B:5E
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Certificate issuer:       /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial:       0B18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
Manifest number:          0B0E
Signing time:             Tue 06 Oct 2026 19:26:07 +0000
Manifest this update:     Tue 06 Oct 2026 19:26:06 +0000
Manifest next update:     Tue 13 Oct 2026 19:26:06 +0000
Files and hashes:         1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: blcGq9Wzjsef3oGOIfLLhms7B3YCuFTCgAWgTeDscKk=)
                          2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: v2saofmL0m7GfqQUIwDfIhLfQiWIxApSuK3jNuC63SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
                          rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2840 (0xb18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
        Validity
            Not Before: Oct  6 19:26:06 2026 GMT
            Not After : Oct 13 19:26:06 2026 GMT
        Subject: CN=6ac54b4e-d6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:2a:36:78:f9:29:00:15:02:e0:72:a7:42:
                    4e:1c:4a:00:10:4c:a1:d9:fc:57:97:9d:85:97:20:
                    65:c9:c4:20:ec:d7:28:c2:3e:49:e9:c6:30:d8:eb:
                    a9:1a:12:65:03:65:21:3c:87:18:2e:43:aa:1a:9d:
                    9e:51:68:1f:c0:d3:f1:95:01:49:0a:3c:71:b0:80:
                    19:80:1c:16:97:38:5a:20:0c:aa:9c:9a:e2:1e:91:
                    b3:c1:74:58:3f:22:f3:18:e2:94:a6:36:dc:1b:10:
                    7e:7d:a6:2f:30:4d:dc:92:55:bf:dc:a5:9f:0d:4c:
                    24:be:de:8a:2b:d0:ba:fb:4c:04:90:d3:17:e8:e9:
                    19:93:78:a1:88:78:35:4f:21:f5:2d:c8:53:67:b6:
                    2f:10:39:77:fd:30:98:07:a0:60:12:81:25:37:17:
                    38:ad:ef:04:93:03:88:89:8b:36:0b:f2:01:98:93:
                    b7:b9:ac:99:22:82:3e:f7:ab:b2:6d:b8:a4:ba:11:
                    86:76:94:da:16:62:33:16:e5:07:d1:43:81:fc:ad:
                    80:a4:bf:38:6a:96:a8:03:5c:df:a4:30:32:ec:ce:
                    df:3f:01:f6:02:14:a9:f6:f6:25:06:14:8b:37:40:
                    92:9b:92:f6:af:8f:2e:a3:44:7a:de:6b:b4:3a:35:
                    c5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9D:8C:31:38:69:F8:7A:B2:CD:0E:ED:99:74:E7:63:76:92:4B:5E
            X509v3 Authority Key Identifier:
                keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:8c:ff:0c:3d:17:97:03:24:83:84:f9:b7:3d:82:85:22:ad:
         7d:81:06:01:09:01:00:74:b3:64:dc:48:a9:4b:66:fb:d1:e6:
         cc:70:6b:1e:28:c6:18:b9:63:ff:17:c2:5d:f1:c3:40:81:75:
         0c:14:e4:25:a6:ad:75:12:1a:94:69:d1:eb:58:3c:94:d3:66:
         13:a0:27:c4:55:61:5b:bf:21:78:44:36:d9:9a:9d:e8:86:95:
         c8:17:94:c7:4f:1d:42:52:0b:e8:af:af:c2:2a:61:ee:68:0f:
         8a:21:e9:53:e2:ba:d4:59:9d:8d:8f:0e:9f:09:76:59:7f:9b:
         38:76:bd:90:a0:80:ee:85:3f:09:59:5e:17:70:05:46:51:3c:
         32:e4:0d:cb:5b:73:65:ed:90:a0:4e:e9:ff:12:3e:4c:cd:5b:
         34:fa:c7:f1:b1:db:95:05:68:f4:53:1f:1e:7e:eb:85:26:65:
         56:d3:39:b0:22:36:9c:8e:a7:cc:6b:87:85:f0:7e:77:74:c4:
         b8:a5:2a:6c:b5:ca:43:24:45:8f:45:18:ba:f0:0a:60:bc:97:
         4a:21:0e:31:35:41:96:d9:4a:c8:89:b6:5d:a4:4c:97:82:33:
         1f:69:d8:c9:17:3f:42:a0:47:38:9b:38:cf:a3:56:8e:40:f7:
         e3:ba:81:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDlGMkU1Nzg4RUY3OTU4NUJBQjc2MTk4NzdEMzk2MjdB
QjJFNUQ1MTkwHhcNMjYxMDA2MTkyNjA2WhcNMjYxMDEzMTkyNjA2WjAYMRYwFAYD
VQQDEw02YWM1NGI0ZS1kNmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx4cqNnj5KQAVAuByp0JOHEoAEEyh2fxXl52FlyBlycQg7Ncowj5J6cYw2Oup
GhJlA2UhPIcYLkOqGp2eUWgfwNPxlQFJCjxxsIAZgBwWlzhaIAyqnJriHpGzwXRY
PyLzGOKUpjbcGxB+faYvME3cklW/3KWfDUwkvt6KK9C6+0wEkNMX6OkZk3ihiHg1
TyH1LchTZ7YvEDl3/TCYB6BgEoElNxc4re8EkwOIiYs2C/IBmJO3uayZIoI+96uy
bbikuhGGdpTaFmIzFuUH0UOB/K2ApL84apaoA1zfpDAy7M7fPwH2AhSp9vYlBhSL
N0CSm5L2r48uo0R63mu0OjXFgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKdjDE4
afh6ss0O7Zl052N2kkteMB8GA1UdIwQYMBaAFJ8uV4jveVhbq3YZh305Ynqy5dUZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80NTdBOEU4Mjcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdGdXJkaG1IZlRsaWVyTGwx
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL255NVhpTzk1V0Z1cmRobUhmVGxpZXJMbDFSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTdBNi80NTdBOEU4MjczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9ueTVYaU85NVdG
dXJkaG1IZlRsaWVyTGwxUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxIz/DD0XlwMkg4T5tz2ChSKtfYEGAQkBAHSzZNxIqUtm+9HmzHBrHijGGLlj
/xfCXfHDQIF1DBTkJaatdRIalGnR61g8lNNmE6AnxFVhW78heEQ22Zqd6IaVyBeU
x08dQlIL6K+vwiph7mgPiiHpU+K61FmdjY8Onwl2WX+bOHa9kKCA7oU/CVleF3AF
RlE8MuQNy1tzZe2QoE7p/xI+TM1bNPrH8bHblQVo9FMfHn7rhSZlVtM5sCI2nI6n
zGuHhfB+d3TEuKUqbLXKQyRFj0UYuvAKYLyXSiEOMTVBltlKyIm2XaRMl4IzH2nY
yRc/QqBHOJs4z6NWjkD347qBXQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 02:18:21 2026 by rpki-client