Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
File:                     af9o05rBdz4oqFeFx5G0qNmzhIY.mft (raw, json)
Hash identifier:          z2af1LN3QbAmLo1B994IVEDGXtVNmi/qMsM85qI0ng4=
Subject key identifier:   88:35:74:E5:23:56:BD:D4:46:32:F3:20:B3:58:58:5B:DE:34:E0:98
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Certificate issuer:       /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial:       02F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
Manifest number:          02E2
Signing time:             Wed 07 Oct 2026 01:26:46 +0000
Manifest this update:     Wed 07 Oct 2026 01:26:46 +0000
Manifest next update:     Wed 14 Oct 2026 01:26:46 +0000
Files and hashes:         1: af9o05rBdz4oqFeFx5G0qNmzhIY.crl (hash: 21DeYIDjP4EnOQMX1HqetzQzXkBiM+gOza2zDPnB67Q=)
                          2: 35ADE898B90A11EF97D24653C4F9AE02.roa (hash: j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=)
                          3: 34386BAAB90A11EF97D24653C4F9AE02.roa (hash: 8a9pl0B9WRoV/I8zbYuLrKWiJVi0iu0Y5myQD63MtCk=)
                          4: 349D4A7AB90A11EF97D24653C4F9AE02.roa (hash: gj01DmJfEaGsSpp5tjGsusN7Thz10FKLT4wU37QzljM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
                          rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
        Validity
            Not Before: Oct  7 01:26:46 2026 GMT
            Not After : Oct 14 01:26:46 2026 GMT
        Subject: CN=6ac59fd6-1f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:d8:ef:ce:dd:d7:b8:4e:0c:f7:0e:17:c4:
                    1c:b0:a7:aa:97:cb:ec:9c:d3:f7:7d:3e:36:5d:5b:
                    b7:81:df:33:0a:a5:95:f7:eb:22:8a:a6:41:8c:5c:
                    3b:c8:30:41:c6:50:84:c4:f7:92:60:4f:76:e4:4b:
                    b2:a1:83:1a:75:70:4b:5d:33:85:a9:15:18:f2:8d:
                    b9:2e:01:ac:5b:ef:ab:2a:e4:8e:b3:4c:b4:05:40:
                    ab:ec:ee:98:e2:83:f8:60:06:1f:31:23:bf:9e:0e:
                    c9:9b:62:ca:77:a5:de:40:fe:b9:8b:33:3b:0f:19:
                    40:31:42:75:fe:45:fe:15:11:7d:e0:cf:79:13:48:
                    38:24:59:0e:c2:d4:11:11:03:77:f5:77:2f:30:aa:
                    df:97:4b:8f:40:5d:b1:6d:45:b0:07:a3:27:89:e5:
                    ea:4f:17:1e:70:09:73:6d:d2:0d:01:9f:ec:85:2a:
                    3f:b9:1b:30:63:d0:bf:3e:dd:ef:95:09:55:df:01:
                    6f:e4:ed:3b:00:cb:23:06:70:23:ea:cb:6d:d0:12:
                    7a:d2:67:83:e4:c6:11:b4:00:0b:24:3e:0e:16:6a:
                    c8:a8:8b:20:ca:70:fb:8f:5d:b3:b2:4c:e2:16:a7:
                    2b:30:ea:a2:09:09:32:5e:58:37:5e:6b:37:33:77:
                    b3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:35:74:E5:23:56:BD:D4:46:32:F3:20:B3:58:58:5B:DE:34:E0:98
            X509v3 Authority Key Identifier:
                keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:ba:5e:2f:69:02:5b:7a:b0:af:3a:85:0b:3f:4b:9f:15:
         f0:f9:47:3c:0a:9e:d7:e1:ec:5d:d6:eb:27:69:04:5c:9d:fa:
         46:ab:e1:c5:0d:e0:ee:81:f9:fa:73:4a:65:a2:13:60:8a:8d:
         b4:e8:6a:62:8a:5c:a9:8d:73:d0:0f:e1:50:d7:97:fb:53:53:
         37:fb:46:b6:79:b6:19:83:3f:ec:5e:27:76:ad:7a:d6:bb:a2:
         2c:47:1f:8d:46:91:06:62:85:01:32:07:3c:66:b1:19:23:41:
         8f:d4:e3:65:d2:39:18:72:d2:3b:17:42:fc:c5:aa:62:20:3e:
         d1:ee:7f:52:5b:55:83:50:e2:3f:60:65:ab:fb:db:e4:09:50:
         36:1b:3c:fd:ad:14:45:96:39:54:0d:9e:46:d9:4b:76:df:6d:
         41:9c:b9:a2:8c:07:3a:05:ff:21:23:09:71:cb:c2:50:7b:56:
         45:40:51:0b:07:21:44:98:94:2f:19:2b:af:d5:9f:52:96:65:
         10:54:05:3b:05:0f:79:ad:c2:91:30:c7:f1:8e:32:18:9c:06:
         02:e6:fc:43:2d:11:72:c9:2d:3f:f4:3c:64:2b:49:3b:4d:6a:
         4c:e7:5b:9a:05:d2:79:7d:a1:01:04:84:3a:5a:a2:31:7a:af:
         a3:34:79:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhENjExMTAvBgNVBAUTKDY5RkY2OEQzOUFDMTc3M0UyOEE4NTc4NUM3OTFCNEE4
RDlCMzg0ODYwHhcNMjYxMDA3MDEyNjQ2WhcNMjYxMDE0MDEyNjQ2WjAYMRYwFAYD
VQQDEw02YWM1OWZkNi0xZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuPrY787d17hODPcOF8QcsKeql8vsnNP3fT42XVu3gd8zCqWV9+siiqZBjFw7
yDBBxlCExPeSYE925EuyoYMadXBLXTOFqRUY8o25LgGsW++rKuSOs0y0BUCr7O6Y
4oP4YAYfMSO/ng7Jm2LKd6XeQP65izM7DxlAMUJ1/kX+FRF94M95E0g4JFkOwtQR
EQN39XcvMKrfl0uPQF2xbUWwB6MnieXqTxcecAlzbdINAZ/shSo/uRswY9C/Pt3v
lQlV3wFv5O07AMsjBnAj6stt0BJ60meD5MYRtAALJD4OFmrIqIsgynD7j12zskzi
FqcrMOqiCQkyXlg3Xms3M3ezIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIg1dOUj
Vr3URjLzILNYWFveNOCYMB8GA1UdIwQYMBaAFGn/aNOawXc+KKhXhceRtKjZs4SG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ2MS8yOTVFNEM3NjYw
MUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6NG9xRmVGeDVHMHFObXpo
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FmOW8wNXJCZHo0b3FGZUZ4NUcwcU5temhJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEQ2MS8yOTVFNEM3NjYwMUIxMUVEQTVDNzI3NkVDNEY5QUUwMi9hZjlvMDVyQmR6
NG9xRmVGeDVHMHFObXpoSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkz26Xi9pAlt6sK86hQs/S58V8PlHPAqe1+HsXdbrJ2kEXJ36RqvhxQ3g7oH5
+nNKZaITYIqNtOhqYopcqY1z0A/hUNeX+1NTN/tGtnm2GYM/7F4ndq161ruiLEcf
jUaRBmKFATIHPGaxGSNBj9TjZdI5GHLSOxdC/MWqYiA+0e5/UltVg1DiP2Blq/vb
5AlQNhs8/a0URZY5VA2eRtlLdt9tQZy5oowHOgX/ISMJccvCUHtWRUBRCwchRJiU
Lxkrr9WfUpZlEFQFOwUPea3CkTDH8Y4yGJwGAub8Qy0RcsktP/Q8ZCtJO01qTOdb
mgXSeX2hAQSEOlqiMXqvozR5lg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:23:59 2026 by rpki-client