Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
File:                     iavBOYslsdbOj_e_sysS6fCWc_k.mft (raw, json)
Hash identifier:          vEyH4wxomUn1yi9VJukWjSD9lDEpaKb+soeJzGjoXeY=
Subject key identifier:   4E:7B:CF:68:E5:2B:BF:D0:F4:6E:B7:CB:4D:62:51:0A:0B:2E:D8:F1
Authority key identifier: 89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9
Certificate issuer:       /CN=A9143035/serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
Certificate serial:       0558
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
Manifest number:          0550
Signing time:             Sun 20 Sep 2026 23:15:42 +0000
Manifest this update:     Sun 20 Sep 2026 23:15:42 +0000
Manifest next update:     Sun 27 Sep 2026 23:15:42 +0000
Files and hashes:         1: iavBOYslsdbOj_e_sysS6fCWc_k.crl (hash: APF9OqA6Hn3fLZbHXwXPyV0YtAVL1rYm4JkFnYfEM5I=)
                          2: 6B47EC68529E11EC9C7C2081C4F9AE02.roa (hash: r8OdCls35VkGR5BYn+Xw2ps0AhkdTQVuJUU7goTrFY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl
                          rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143035, serialNumber=89ABC1398B25B1D6CE8FF7BFB32B12E9F09673F9
        Validity
            Not Before: Sep 20 23:15:42 2026 GMT
            Not After : Sep 27 23:15:42 2026 GMT
        Subject: CN=6ab0691e-12f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:34:37:43:ed:e1:ad:c2:e9:55:52:cb:03:
                    ca:45:24:8a:5d:de:fd:85:c2:86:07:6a:d5:a2:13:
                    2a:b3:71:85:7e:f7:c1:eb:a7:1a:a0:90:7e:15:e7:
                    fd:bc:39:ff:01:56:0f:05:02:93:f6:a1:1a:89:48:
                    e2:7b:0b:17:ac:da:e1:89:9b:f5:59:38:f1:9f:8e:
                    61:7a:20:f6:5b:75:2b:06:11:11:74:81:83:30:15:
                    0a:01:d9:ea:1b:ff:7a:95:ee:2c:aa:c7:2a:01:05:
                    b9:b4:1e:01:03:84:e5:f6:0d:54:e9:5a:b6:4d:c6:
                    6b:dc:01:5d:49:aa:a3:d8:7c:35:95:2f:cd:9e:77:
                    7d:12:c2:61:27:58:de:1a:ce:e4:91:b9:a5:03:41:
                    a6:90:47:37:da:44:ba:5d:44:64:1d:62:88:f0:fc:
                    d0:b6:37:02:24:23:b0:f8:a8:bb:f3:1c:42:bd:6c:
                    ef:bf:fc:cc:b8:87:e1:2d:ec:be:ec:20:9c:e9:63:
                    d4:62:9b:46:3b:60:64:b5:0c:a5:71:eb:f7:0f:e6:
                    2a:35:c2:81:81:87:e6:b8:46:87:56:51:66:03:5c:
                    51:37:41:c7:34:85:d7:55:61:94:41:bb:61:2e:a4:
                    b6:56:18:f0:45:49:7f:66:a0:9e:2d:2a:8e:e6:33:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7B:CF:68:E5:2B:BF:D0:F4:6E:B7:CB:4D:62:51:0A:0B:2E:D8:F1
            X509v3 Authority Key Identifier:
                keyid:89:AB:C1:39:8B:25:B1:D6:CE:8F:F7:BF:B3:2B:12:E9:F0:96:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iavBOYslsdbOj_e_sysS6fCWc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143035/18C62912529B11EC9A0B0A7DC4F9AE02/iavBOYslsdbOj_e_sysS6fCWc_k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:38:85:f2:00:9e:5e:e1:ee:cc:14:92:10:4a:b2:9d:2b:0c:
         d4:1a:34:34:ae:07:e7:51:71:d1:0d:79:c8:30:3d:67:54:f3:
         24:fc:3e:67:7c:32:b5:e2:40:da:81:fa:66:0d:18:f5:63:a6:
         73:4b:17:3d:78:be:fb:6b:f9:b1:d3:c6:67:11:6a:db:ea:b8:
         3d:59:11:44:93:58:31:15:58:bc:88:5a:3e:3e:a8:b5:e8:f4:
         db:7e:62:5c:04:4b:9a:35:68:f3:69:7b:32:e8:c9:0c:51:fe:
         74:e0:3e:fa:54:30:84:91:3a:14:62:00:1c:50:47:bd:aa:42:
         6e:1b:0f:b9:c4:e0:34:85:a8:2d:40:1d:6f:d7:53:40:0b:97:
         ae:f1:33:9e:e0:c6:7d:21:a6:79:67:e9:bd:1e:3e:c3:96:aa:
         d3:15:7f:13:83:f0:be:78:cf:99:a5:5b:10:2b:3e:98:cd:a5:
         d4:1d:1e:1c:fd:90:40:5d:c5:88:9e:f3:39:8c:ad:1a:b2:f2:
         27:cd:89:c1:52:dc:0e:b6:81:11:87:0e:b3:e8:33:73:4e:ec:
         75:21:c9:4e:3d:a1:c8:6e:1b:2b:6a:2f:64:98:26:0d:36:ed:
         ce:d7:16:ea:f1:d7:1e:64:85:0a:f0:a8:da:82:c5:49:9f:ec:
         dc:c8:65:c7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMwMzUxMTAvBgNVBAUTKDg5QUJDMTM5OEIyNUIxRDZDRThGRjdCRkIzMkIxMkU5
RjA5NjczRjkwHhcNMjYwOTIwMjMxNTQyWhcNMjYwOTI3MjMxNTQyWjAYMRYwFAYD
VQQDEw02YWIwNjkxZS0xMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqYQ0N0Pt4a3C6VVSywPKRSSKXd79hcKGB2rVohMqs3GFfvfB66caoJB+Fef9
vDn/AVYPBQKT9qEaiUjiewsXrNrhiZv1WTjxn45heiD2W3UrBhERdIGDMBUKAdnq
G/96le4sqscqAQW5tB4BA4Tl9g1U6Vq2TcZr3AFdSaqj2Hw1lS/Nnnd9EsJhJ1je
Gs7kkbmlA0GmkEc32kS6XURkHWKI8PzQtjcCJCOw+Ki78xxCvWzvv/zMuIfhLey+
7CCc6WPUYptGO2BktQylcev3D+YqNcKBgYfmuEaHVlFmA1xRN0HHNIXXVWGUQbth
LqS2VhjwRUl/ZqCeLSqO5jPfOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE57z2jl
K7/Q9G63y01iUQoLLtjxMB8GA1UdIwQYMBaAFImrwTmLJbHWzo/3v7MrEunwlnP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzAzNS8xOEM2MjkxMjUy
OUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNkYk9qX2Vfc3lzUzZmQ1dj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lhdkJPWXNsc2RiT2pfZV9zeXNTNmZDV2Nfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzAzNS8xOEM2MjkxMjUyOUIxMUVDOUEwQjBBN0RDNEY5QUUwMi9pYXZCT1lzbHNk
Yk9qX2Vfc3lzUzZmQ1djX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVjiF8gCeXuHuzBSSEEqynSsM1Bo0NK4H51Fx0Q15yDA9Z1TzJPw+Z3wyteJA
2oH6Zg0Y9WOmc0sXPXi++2v5sdPGZxFq2+q4PVkRRJNYMRVYvIhaPj6otej0235i
XARLmjVo82l7MujJDFH+dOA++lQwhJE6FGIAHFBHvapCbhsPucTgNIWoLUAdb9dT
QAuXrvEznuDGfSGmeWfpvR4+w5aq0xV/E4PwvnjPmaVbECs+mM2l1B0eHP2QQF3F
iJ7zOYytGrLyJ82JwVLcDraBEYcOs+gzc07sdSHJTj2hyG4bK2ovZJgmDTbtztcW
6vHXHmSFCvCo2oLFSZ/s3Mhlxw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:23:08 2026 by rpki-client