Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
File:                     MPDbgtWPWD6EiDeboA01rLNSYRA.mft (raw, json)
Hash identifier:          b4DFgNcmIJupgi7HUVDwxikrWcQmZSuuAyrdN4+TriI=
Subject key identifier:   E2:C4:4B:C0:3C:B2:79:15:53:8E:5F:7D:A3:2D:23:E1:7A:12:81:7D
Authority key identifier: 30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10
Certificate issuer:       /CN=A913C07A/serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110
Certificate serial:       0203
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
Manifest number:          01FA
Signing time:             Mon 21 Sep 2026 03:21:24 +0000
Manifest this update:     Mon 21 Sep 2026 03:21:23 +0000
Manifest next update:     Mon 28 Sep 2026 03:21:23 +0000
Files and hashes:         1: MPDbgtWPWD6EiDeboA01rLNSYRA.crl (hash: DUf4dFUBXfW2KnCErweejsYqi8t/WI1RoqCxK6cndNs=)
                          2: A20C3500BE6811EEBFF35870C4F9AE02.roa (hash: ZoAZdnIjhPNhfvvjzIwikys50Arhr1asUkA5epIVYGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=30F0DB82D58F583E8488379BA00D35ACB3526110
        Validity
            Not Before: Sep 21 03:21:23 2026 GMT
            Not After : Sep 28 03:21:23 2026 GMT
        Subject: CN=6ab0a2b4-003e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:f9:f7:14:32:30:cc:b8:69:91:4e:cf:55:
                    c1:16:86:0d:0e:57:df:f5:30:bf:f3:1a:a7:dd:cb:
                    f7:9d:c6:38:2c:43:71:f6:4f:c5:08:0f:67:c8:b1:
                    83:91:bb:78:09:5c:98:2f:ce:84:bc:4f:56:0e:d6:
                    37:c5:5d:5a:68:88:6d:26:d2:1a:62:04:c7:47:b0:
                    41:97:4b:b0:5a:cc:f9:49:b6:2f:a6:b2:c9:20:1c:
                    cf:35:36:ff:45:4c:d3:65:da:d9:b0:43:1c:e6:3f:
                    28:64:93:03:5e:83:61:fd:c4:42:09:a4:35:12:1d:
                    8d:f6:64:f3:87:98:52:65:d9:f1:0e:f2:73:38:76:
                    76:19:63:34:fb:f9:87:5b:19:01:05:39:82:82:b8:
                    72:57:80:0d:35:6b:ba:e6:89:e2:34:17:56:8a:77:
                    e6:7f:40:dc:66:48:3c:e3:d9:fd:a2:15:be:88:db:
                    b6:3f:15:6a:27:2f:1e:47:dd:7e:e1:67:70:29:77:
                    51:e0:67:cf:6d:8d:6b:65:a3:8b:b5:eb:4b:4e:eb:
                    91:8d:7a:e6:05:6a:8b:8d:ca:5d:eb:50:ce:b8:d1:
                    86:ef:30:fc:36:f8:5c:4e:54:4b:e8:0e:77:99:0c:
                    a9:45:01:91:cf:d5:28:6e:69:44:ad:c6:1b:38:fc:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C4:4B:C0:3C:B2:79:15:53:8E:5F:7D:A3:2D:23:E1:7A:12:81:7D
            X509v3 Authority Key Identifier:
                keyid:30:F0:DB:82:D5:8F:58:3E:84:88:37:9B:A0:0D:35:AC:B3:52:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MPDbgtWPWD6EiDeboA01rLNSYRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/FB182998BE6711EEB33C6D6EC4F9AE02/MPDbgtWPWD6EiDeboA01rLNSYRA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:27:09:53:31:4e:4f:26:fc:ea:18:48:2a:3f:d4:bb:54:97:
         31:98:05:ba:71:46:cd:38:eb:54:04:50:bb:85:45:6b:1a:a6:
         58:15:50:06:a1:23:7f:13:3b:ca:4e:15:1b:60:85:28:0b:10:
         18:49:14:b2:2d:24:06:3e:29:65:4f:fc:30:68:f6:88:26:db:
         93:68:c9:27:a7:89:b7:d5:f9:2f:98:be:b9:92:96:b8:8f:72:
         85:e4:a0:d1:32:9a:ba:fe:b3:a7:4e:ce:2c:af:c2:f1:2d:1b:
         3b:0c:3c:7f:98:83:b4:fb:70:c4:2e:c3:1d:2e:fb:e2:00:85:
         02:e5:c3:3a:59:b8:cc:8f:88:88:3d:61:48:9b:36:43:4e:2e:
         74:f1:29:a7:97:1d:90:fd:90:ee:de:66:40:ad:e3:89:bf:f7:
         5c:10:06:4d:c6:69:62:8d:66:dd:c3:26:0c:36:99:32:0f:be:
         b6:ca:35:0a:66:64:66:31:b7:8b:f6:88:6e:f6:f5:a7:95:e9:
         0f:c6:9c:86:e1:01:76:42:d7:7a:44:d5:15:ac:18:c5:eb:bf:
         55:d3:80:79:ad:8e:75:81:88:55:a8:89:57:2c:c8:f6:c6:7f:
         64:d5:70:22:33:42:fc:6d:99:2d:74:44:6d:31:12:2b:1c:2b:
         ca:20:fb:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0MwN0ExMTAvBgNVBAUTKDMwRjBEQjgyRDU4RjU4M0U4NDg4Mzc5QkEwMEQzNUFD
QjM1MjYxMTAwHhcNMjYwOTIxMDMyMTIzWhcNMjYwOTI4MDMyMTIzWjAYMRYwFAYD
VQQDEw02YWIwYTJiNC0wMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApdX59xQyMMy4aZFOz1XBFoYNDlff9TC/8xqn3cv3ncY4LENx9k/FCA9nyLGD
kbt4CVyYL86EvE9WDtY3xV1aaIhtJtIaYgTHR7BBl0uwWsz5SbYvprLJIBzPNTb/
RUzTZdrZsEMc5j8oZJMDXoNh/cRCCaQ1Eh2N9mTzh5hSZdnxDvJzOHZ2GWM0+/mH
WxkBBTmCgrhyV4ANNWu65oniNBdWinfmf0DcZkg849n9ohW+iNu2PxVqJy8eR91+
4WdwKXdR4GfPbY1rZaOLtetLTuuRjXrmBWqLjcpd61DOuNGG7zD8NvhcTlRL6A53
mQypRQGRz9UobmlErcYbOPxzYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOLES8A8
snkVU45ffaMtI+F6EoF9MB8GA1UdIwQYMBaAFDDw24LVj1g+hIg3m6ANNayzUmEQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GQjE4Mjk5OEJF
NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdENkVpRGVib0EwMXJMTlNZ
UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01QRGJndFdQV0Q2RWlEZWJvQTAxckxOU1lSQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzA3QS9GQjE4Mjk5OEJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9NUERiZ3RXUFdE
NkVpRGVib0EwMXJMTlNZUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcycJUzFOTyb86hhIKj/Uu1SXMZgFunFGzTjrVARQu4VFaxqmWBVQBqEjfxM7
yk4VG2CFKAsQGEkUsi0kBj4pZU/8MGj2iCbbk2jJJ6eJt9X5L5i+uZKWuI9yheSg
0TKauv6zp07OLK/C8S0bOww8f5iDtPtwxC7DHS774gCFAuXDOlm4zI+IiD1hSJs2
Q04udPEpp5cdkP2Q7t5mQK3jib/3XBAGTcZpYo1m3cMmDDaZMg++tso1CmZkZjG3
i/aIbvb1p5XpD8achuEBdkLXekTVFawYxeu/VdOAea2OdYGIVaiJVyzI9sZ/ZNVw
IjNC/G2ZLXREbTESKxwryiD7ZQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:29:29 2026 by rpki-client