Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
File:                     9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft (raw, json)
Hash identifier:          CU7cfVVzMh2/x68n4S+It9gNJk0Knrq9QBxjRvoELUc=
Subject key identifier:   02:D3:B8:AF:17:71:C5:7E:61:0F:F9:26:01:09:23:3D:F5:4F:AB:4C
Authority key identifier: F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B
Certificate issuer:       /CN=A914C4ED/serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
Certificate serial:       0402
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
Manifest number:          03FA
Signing time:             Sun 11 Oct 2026 00:10:15 +0000
Manifest this update:     Sun 11 Oct 2026 00:10:14 +0000
Manifest next update:     Sun 18 Oct 2026 00:10:14 +0000
Files and hashes:         1: 9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl (hash: uNmI5q35sbDfRO1rd5reNT7hT+FuetRnQeFvW38nzcs=)
                          2: 9E60AA30DCB511ECAC801F6EC4F9AE02.roa (hash: Jx4WgxJh5tEjQvx4+rzFSWsTEKISQMaksJ2aamf5u2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl
                          rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 00:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1026 (0x402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4ED, serialNumber=F6553256B297F283319CB989E6B8C7836F87190B
        Validity
            Not Before: Oct 11 00:10:14 2026 GMT
            Not After : Oct 18 00:10:14 2026 GMT
        Subject: CN=6acad3e7-6003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:52:12:d4:e0:28:c6:75:84:27:77:13:fc:4e:
                    ac:43:3e:69:76:ea:db:f1:02:b8:6c:cd:5f:56:1e:
                    ac:6b:fc:da:cd:5b:14:17:97:90:0d:f2:02:63:a3:
                    d6:54:70:2a:d3:fc:ef:0c:bc:56:5b:f6:68:61:5d:
                    b5:8b:17:06:d8:48:a5:ce:04:83:49:43:d8:f0:f7:
                    bb:b5:40:a9:65:18:22:1c:e6:32:e8:9f:f1:47:8b:
                    43:d0:e9:37:37:76:ab:88:44:2d:3f:d1:54:7b:6e:
                    3e:8d:d2:26:e9:f2:51:84:b2:be:70:f1:ac:13:59:
                    0f:11:36:04:25:6f:13:36:37:28:c1:a4:8f:12:21:
                    9f:20:26:09:bf:ec:5a:c2:32:75:73:c8:21:1f:c0:
                    7e:a6:8f:2c:bf:bd:bc:93:32:9b:3d:0d:31:61:07:
                    02:5f:06:ba:f0:89:d4:9f:f5:f3:7a:ad:95:15:d4:
                    36:01:34:ad:56:4c:99:34:95:02:63:c1:56:1e:e3:
                    c9:f3:84:67:85:75:3a:64:18:d6:b6:13:b9:c1:57:
                    89:fb:7f:46:d2:85:90:42:cf:c3:4a:06:37:11:79:
                    a3:38:d0:27:b6:7f:14:62:41:90:55:c1:1f:7b:e2:
                    0b:2f:43:35:54:81:c4:0a:d0:1b:86:ab:7e:4f:f6:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D3:B8:AF:17:71:C5:7E:61:0F:F9:26:01:09:23:3D:F5:4F:AB:4C
            X509v3 Authority Key Identifier:
                keyid:F6:55:32:56:B2:97:F2:83:31:9C:B9:89:E6:B8:C7:83:6F:87:19:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/3EE947AADCAC11ECA223BF5CC4F9AE02/9lUyVrKX8oMxnLmJ5rjHg2-HGQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:09:3f:1a:53:88:99:2d:87:9b:21:b4:e5:37:93:0a:f8:
         9b:34:a2:46:06:5b:f9:22:04:87:99:a7:ac:23:7e:5e:ce:db:
         1d:8c:9b:c6:7e:2b:09:b5:19:8e:35:fb:63:14:ab:22:4a:02:
         2f:90:5a:20:7e:42:f4:26:0f:ac:61:0c:47:46:f9:72:75:5e:
         9a:f2:59:4c:c1:07:95:de:92:54:08:7c:b0:92:6c:83:f5:30:
         af:e0:ae:63:2b:a9:b9:e2:e3:f2:37:09:ff:dc:5b:70:d7:e5:
         9b:3a:92:ed:f5:48:cf:b6:22:8b:e4:bb:98:6e:2d:a8:ec:ef:
         b6:2b:a2:97:f3:e9:d6:0b:83:ae:10:81:ea:26:a2:81:aa:e1:
         7f:04:36:46:8c:9e:3c:fd:94:76:a8:2e:73:20:47:a8:7b:11:
         bf:74:a1:f4:4f:42:48:5d:5e:ac:44:3b:65:d5:99:21:54:b2:
         ca:a8:c0:95:2c:83:be:64:0f:1d:1a:fb:a6:bd:fe:b4:21:a6:
         7a:f6:93:60:b9:a5:fc:94:f2:a0:23:21:36:a1:62:66:a8:95:
         75:54:14:f8:3f:9c:7a:72:56:cc:a3:0e:f4:3a:6d:13:b7:97:
         29:7f:93:45:04:ea:2a:67:5c:46:e2:f5:44:70:3f:09:58:ab:
         de:c8:71:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0RUQxMTAvBgNVBAUTKEY2NTUzMjU2QjI5N0YyODMzMTlDQjk4OUU2QjhDNzgz
NkY4NzE5MEIwHhcNMjYxMDExMDAxMDE0WhcNMjYxMDE4MDAxMDE0WjAYMRYwFAYD
VQQDEw02YWNhZDNlNy02MDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoVIS1OAoxnWEJ3cT/E6sQz5pdurb8QK4bM1fVh6sa/zazVsUF5eQDfICY6PW
VHAq0/zvDLxWW/ZoYV21ixcG2EilzgSDSUPY8Pe7tUCpZRgiHOYy6J/xR4tD0Ok3
N3ariEQtP9FUe24+jdIm6fJRhLK+cPGsE1kPETYEJW8TNjcowaSPEiGfICYJv+xa
wjJ1c8ghH8B+po8sv728kzKbPQ0xYQcCXwa68InUn/Xzeq2VFdQ2ATStVkyZNJUC
Y8FWHuPJ84RnhXU6ZBjWthO5wVeJ+39G0oWQQs/DSgY3EXmjONAntn8UYkGQVcEf
e+ILL0M1VIHECtAbhqt+T/aUDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALTuK8X
ccV+YQ/5JgEJIz31T6tMMB8GA1UdIwQYMBaAFPZVMlayl/KDMZy5iea4x4NvhxkL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC8zRUU5NDdBQURD
QUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhvTXhuTG1KNXJqSGcyLUhH
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzlsVXlWcktYOG9NeG5MbUo1cmpIZzItSEdRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzRFRC8zRUU5NDdBQURDQUMxMUVDQTIyM0JGNUNDNEY5QUUwMi85bFV5VnJLWDhv
TXhuTG1KNXJqSGcyLUhHUXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbhgJPxpTiJkth5shtOU3kwr4mzSiRgZb+SIEh5mnrCN+Xs7bHYybxn4rCbUZ
jjX7YxSrIkoCL5BaIH5C9CYPrGEMR0b5cnVemvJZTMEHld6SVAh8sJJsg/Uwr+Cu
YyupueLj8jcJ/9xbcNflmzqS7fVIz7Yii+S7mG4tqOzvtiuil/Pp1guDrhCB6iai
garhfwQ2RoyePP2UdqgucyBHqHsRv3Sh9E9CSF1erEQ7ZdWZIVSyyqjAlSyDvmQP
HRr7pr3+tCGmevaTYLml/JTyoCMhNqFiZqiVdVQU+D+cenJWzKMO9DptE7eXKX+T
RQTqKmdcRuL1RHA/CVir3shxHg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 11:01:53 2026 by rpki-client