Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
File:                     j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft (raw, json)
Hash identifier:          RuP1r2DSH9/J6XlrT52ibO9rK06nkf5XnuT30fsnN5Q=
Subject key identifier:   BD:FC:31:52:4A:DA:8E:1C:86:4B:22:39:5F:7E:3F:F4:81:01:50:6C
Authority key identifier: 8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27
Certificate issuer:       /CN=A9147493/serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
Certificate serial:       08C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
Manifest number:          089A
Signing time:             Sun 20 Sep 2026 20:35:08 +0000
Manifest this update:     Sun 20 Sep 2026 20:35:08 +0000
Manifest next update:     Sun 27 Sep 2026 20:35:08 +0000
Files and hashes:         1: j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl (hash: OH+WI07+KUED9HGWwFNWL/qI3s4GHj427iVfeWkxyiY=)
                          2: AFDBAB82BAE911F09182A92BC4F9AE02.roa (hash: PVjkDP7T0tezEoMksg6Sf8gOirpdO87qwsau6puOlUc=)
                          3: 97786014BAE711F08A930863C4F9AE02.roa (hash: n9Kxrr3pps9EWJc6FJJvW5XN8lfbolwtiiuJt22fhTQ=)
                          4: 66D426F0E55D11F0B49EA6E0396F56BC.roa (hash: MLnSJZ7wlMAlzMFJZwoCnvZfMjGPgiWNcDMGC+8J2FI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl
                          rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147493, serialNumber=8F9F8A45F7891E2F159F3CCBC8278887D75FBD27
        Validity
            Not Before: Sep 20 20:35:08 2026 GMT
            Not After : Sep 27 20:35:08 2026 GMT
        Subject: CN=6ab0437c-6cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:0f:5e:68:f3:91:39:2b:01:87:f2:c2:66:
                    9e:1b:88:6e:6d:01:e0:2e:41:c7:e1:a6:bc:e4:d9:
                    c6:b6:be:cc:e9:46:1f:de:22:b9:38:7a:e3:8b:7f:
                    2c:94:fe:bf:c1:5e:15:89:5f:71:80:db:31:fb:3d:
                    4d:29:00:fb:6a:41:6f:78:23:27:34:72:ac:57:d4:
                    47:b1:63:9c:0e:1e:8f:df:02:d9:68:92:75:42:eb:
                    71:bb:38:d3:13:1a:14:7e:1e:10:0d:12:a0:66:7a:
                    4c:68:96:02:ce:cd:5f:f5:b6:ac:c7:cb:87:66:ea:
                    b6:75:d0:1d:0a:08:8b:4c:ee:11:a2:2b:02:18:61:
                    98:35:9a:b9:0d:82:0a:44:15:11:4a:11:fb:6d:44:
                    b0:bf:b0:46:01:d5:f1:6d:1e:c0:a7:1f:79:83:70:
                    6e:45:7e:6a:79:3d:67:1e:eb:f1:47:5d:a9:d9:35:
                    b7:51:26:a4:99:ec:5d:95:ed:c1:a9:a7:be:6d:e4:
                    04:02:a1:c0:d5:a8:4c:54:61:ef:5d:d1:26:a8:1f:
                    8a:b4:20:27:b2:71:73:d0:f7:f0:eb:8d:70:2e:c8:
                    e7:b9:bc:48:b1:7b:e2:f4:53:1a:0c:95:5a:f7:ac:
                    5d:fa:3c:38:c4:b7:a2:e4:94:95:78:de:8a:38:62:
                    2b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FC:31:52:4A:DA:8E:1C:86:4B:22:39:5F:7E:3F:F4:81:01:50:6C
            X509v3 Authority Key Identifier:
                keyid:8F:9F:8A:45:F7:89:1E:2F:15:9F:3C:CB:C8:27:88:87:D7:5F:BD:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5-KRfeJHi8VnzzLyCeIh9dfvSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147493/DA43434605FC11EB9B34A583C4F9AE02/j5-KRfeJHi8VnzzLyCeIh9dfvSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:d9:7e:a3:05:ef:3c:20:59:85:6f:39:84:11:72:f5:64:
         5f:56:06:9b:ae:52:02:83:47:38:20:73:68:72:f0:12:cf:f5:
         9a:67:99:35:e2:98:b1:87:0c:21:7f:61:81:3a:67:50:0d:b6:
         09:81:40:77:3d:8d:d3:6f:05:f0:bd:77:29:12:42:92:a4:ab:
         df:5e:7f:54:a5:f4:90:35:c2:be:3b:ac:d9:ea:3f:f2:08:62:
         89:1d:ce:c4:55:45:8e:03:5b:39:29:2e:cf:b0:9e:2c:53:8e:
         34:29:42:20:8c:2a:13:1b:97:5e:f8:68:98:ee:15:b3:49:99:
         3f:64:75:30:1e:e2:6c:97:88:c4:af:f4:b2:39:3c:cc:10:25:
         09:1d:9f:ff:4f:3c:b9:36:31:8e:35:fd:1f:92:82:ae:e4:44:
         e4:9f:17:d1:39:16:fb:8b:cd:44:ae:3b:5d:fe:61:f1:fb:5b:
         28:85:29:57:f3:5e:02:94:21:68:c1:fd:1a:48:f0:9c:0a:3f:
         6f:1a:bb:23:41:0d:dc:09:13:0e:4b:32:fe:93:fb:c8:13:5f:
         d0:e6:cc:45:29:04:52:a4:81:d1:fa:ee:39:9e:6c:12:46:26:
         b0:c1:e6:f1:43:02:2d:89:11:6d:7b:dc:61:cf:0b:ea:20:a6:
         e6:db:77:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0OTMxMTAvBgNVBAUTKDhGOUY4QTQ1Rjc4OTFFMkYxNTlGM0NDQkM4Mjc4ODg3
RDc1RkJEMjcwHhcNMjYwOTIwMjAzNTA4WhcNMjYwOTI3MjAzNTA4WjAYMRYwFAYD
VQQDEw02YWIwNDM3Yy02Y2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAscUPXmjzkTkrAYfywmaeG4hubQHgLkHH4aa85NnGtr7M6UYf3iK5OHrji38s
lP6/wV4ViV9xgNsx+z1NKQD7akFveCMnNHKsV9RHsWOcDh6P3wLZaJJ1QutxuzjT
ExoUfh4QDRKgZnpMaJYCzs1f9basx8uHZuq2ddAdCgiLTO4RoisCGGGYNZq5DYIK
RBURShH7bUSwv7BGAdXxbR7Apx95g3BuRX5qeT1nHuvxR12p2TW3USakmexdle3B
qae+beQEAqHA1ahMVGHvXdEmqB+KtCAnsnFz0Pfw641wLsjnubxIsXvi9FMaDJVa
96xd+jw4xLei5JSVeN6KOGIrywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL38MVJK
2o4chksiOV9+P/SBAVBsMB8GA1UdIwQYMBaAFI+fikX3iR4vFZ88y8gniIfXX70n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ5My9EQTQzNDM0NjA1
RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhpOFZuenpMeUNlSWg5ZGZ2
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o1LUtSZmVKSGk4Vm56ekx5Q2VJaDlkZnZTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzQ5My9EQTQzNDM0NjA1RkMxMUVCOUIzNEE1ODNDNEY5QUUwMi9qNS1LUmZlSkhp
OFZuenpMeUNlSWg5ZGZ2U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAELrZfqMF7zwgWYVvOYQRcvVkX1YGm65SAoNHOCBzaHLwEs/1mmeZNeKYsYcM
IX9hgTpnUA22CYFAdz2N028F8L13KRJCkqSr315/VKX0kDXCvjus2eo/8ghiiR3O
xFVFjgNbOSkuz7CeLFOONClCIIwqExuXXvhomO4Vs0mZP2R1MB7ibJeIxK/0sjk8
zBAlCR2f/088uTYxjjX9H5KCruRE5J8X0TkW+4vNRK47Xf5h8ftbKIUpV/NeApQh
aMH9GkjwnAo/bxq7I0EN3AkTDksy/pP7yBNf0ObMRSkEUqSB0fruOZ5sEkYmsMHm
8UMCLYkRbXvcYc8L6iCm5tt3Cg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:00:57 2026 by rpki-client