Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
File:                     S18cktxo2UEqrDB3GD-jbdA9zRU.mft (raw, json)
Hash identifier:          Vz7pI/KMxxFCx8+eOSW7U4c6p66mOfZ6w0Dj6kJgIf4=
Subject key identifier:   B8:79:FC:50:76:F5:57:9C:4E:FF:60:36:CD:59:47:4C:A5:B9:D3:AE
Authority key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Certificate issuer:       /CN=A914D29B/serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
Manifest number:          4C
Signing time:             Sat 19 Sep 2026 08:33:14 +0000
Manifest this update:     Sat 19 Sep 2026 08:33:13 +0000
Manifest next update:     Sat 26 Sep 2026 08:33:13 +0000
Files and hashes:         1: S18cktxo2UEqrDB3GD-jbdA9zRU.crl (hash: zpsjIm+DbJzqPY/3IDKQY9r+P9wAOYuWNlf5/q1365s=)
                          2: 56A844E8AC1611F1AA5AD2963211F970.roa (hash: v980uvWuLQy9lKYhi9+4L/P7xT5fQQvKPW40O/eoMus=)
                          3: D10BC2D6AC0D11F1A921711A7011F970.roa (hash: 9LbT55FCc16CNUy2s7bNTZP1oBsFf0RchQv0XwtmSYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
                          rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 08:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
        Validity
            Not Before: Sep 19 08:33:13 2026 GMT
            Not After : Sep 26 08:33:13 2026 GMT
        Subject: CN=6aae48ca-c781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:e6:c9:d9:5d:8c:13:05:80:81:05:2c:6b:
                    54:6c:29:8f:de:58:c6:b7:21:d0:aa:cf:c9:3b:fa:
                    d7:4f:9c:e2:83:dc:53:4d:a6:91:0a:af:8b:e7:c7:
                    7f:9b:a1:ab:28:1e:33:24:d2:d3:e2:e7:b7:46:70:
                    42:74:b0:fe:58:41:f3:a4:c9:1f:89:84:e8:3e:3d:
                    db:24:08:3f:88:81:68:a6:de:2d:8d:3a:5c:4e:6e:
                    5b:71:02:bd:3a:3e:8b:0a:bd:44:2e:91:27:f7:43:
                    6d:ee:8a:49:69:2e:a4:ec:9e:0d:dd:a5:95:7e:21:
                    46:f3:32:2c:39:d9:d8:9f:01:08:e8:2e:94:32:60:
                    97:b4:62:4e:ad:76:4f:39:a6:05:4f:5b:ee:05:c0:
                    23:ae:f0:14:f3:05:ee:e3:9f:71:15:ce:ea:e7:a7:
                    72:f4:ba:f0:07:06:a8:58:d9:8f:0e:1d:d1:fb:08:
                    e9:88:e5:2b:ca:75:cb:32:ec:2e:19:b2:09:9e:63:
                    fb:f5:7d:7d:09:79:3c:74:6a:ad:d3:98:68:95:40:
                    12:73:cd:5c:23:73:2f:b1:49:d7:60:f0:5f:2f:c1:
                    47:58:a3:51:06:75:a9:c5:d0:3e:15:f3:3b:82:55:
                    05:e4:69:4a:29:4c:d5:6f:bd:ef:fa:ba:cb:9c:17:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:79:FC:50:76:F5:57:9C:4E:FF:60:36:CD:59:47:4C:A5:B9:D3:AE
            X509v3 Authority Key Identifier:
                keyid:4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:8a:5a:59:c7:7b:e1:33:02:c7:c5:d6:9d:bf:c5:e2:55:84:
         16:42:f3:e3:63:5f:2d:d0:e1:d7:7a:1a:31:5f:b2:78:2e:a7:
         95:2a:6f:68:b5:53:a1:1d:38:d6:a0:b8:60:d2:30:2e:ce:bd:
         ef:ed:ad:a7:dd:42:ca:04:2b:82:eb:e1:4c:bb:c8:06:ac:68:
         77:15:b1:62:20:dc:21:65:0f:c8:35:ac:1f:ac:46:46:19:16:
         e3:2d:68:9b:89:c2:2f:15:54:53:81:59:f7:ab:09:2e:73:5b:
         7a:62:8f:ec:a7:28:03:2d:3b:51:17:22:63:f1:92:a8:7e:76:
         28:32:6a:e6:2a:dc:8b:2b:e8:2e:20:e4:05:e3:53:0c:fe:57:
         59:6b:bf:d7:76:4e:d4:eb:1d:e4:b2:dc:3d:e9:53:56:0a:06:
         a3:3b:b3:77:cf:87:28:6d:8c:16:f9:26:0b:69:dc:f5:36:cc:
         04:7c:5b:b3:e9:ca:4f:7f:e8:39:a3:1c:c8:d9:3e:7a:91:fb:
         4d:ba:b8:06:a6:f5:71:e2:c1:71:83:4a:ad:f3:5f:34:c2:f3:
         d2:c6:06:d4:f4:d3:72:42:41:ea:58:44:c4:9d:21:19:b3:b6:
         a8:7c:8d:d9:00:63:cc:a8:f2:7c:be:10:df:09:dc:a9:ee:6f:
         88:a4:41:eb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RDI5QjExMC8GA1UEBRMoNEI1RjFDOTJEQzY4RDk0MTJBQUMzMDc3MTgzRkEzNkRE
MDNEQ0QxNTAeFw0yNjA5MTkwODMzMTNaFw0yNjA5MjYwODMzMTNaMBgxFjAUBgNV
BAMTDTZhYWU0OGNhLWM3ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsjebJ2V2MEwWAgQUsa1RsKY/eWMa3IdCqz8k7+tdPnOKD3FNNppEKr4vnx3+b
oasoHjMk0tPi57dGcEJ0sP5YQfOkyR+JhOg+PdskCD+IgWim3i2NOlxObltxAr06
PosKvUQukSf3Q23uiklpLqTsng3dpZV+IUbzMiw52difAQjoLpQyYJe0Yk6tdk85
pgVPW+4FwCOu8BTzBe7jn3EVzurnp3L0uvAHBqhY2Y8OHdH7COmI5SvKdcsy7C4Z
sgmeY/v1fX0JeTx0aq3TmGiVQBJzzVwjcy+xSddg8F8vwUdYo1EGdanF0D4V8zuC
VQXkaUopTNVvve/6usucFzB1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuHn8UHb1
V5xO/2A2zVlHTKW5064wHwYDVR0jBBgwFoAUS18cktxo2UEqrDB3GD+jbdA9zRUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMjlCLzBCNzc4RTgwNTVD
MTExRjFBQjA0ODg5NEE0ODMzNzczL1MxOGNrdHhvMlVFcXJEQjNHRC1qYmRBOXpS
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUzE4Y2t0eG8yVUVxckRCM0dELWpiZEE5elJVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE
MjlCLzBCNzc4RTgwNTVDMTExRjFBQjA0ODg5NEE0ODMzNzczL1MxOGNrdHhvMlVF
cXJEQjNHRC1qYmRBOXpSVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAlilpZx3vhMwLHxdadv8XiVYQWQvPjY18t0OHXehoxX7J4LqeVKm9otVOhHTjW
oLhg0jAuzr3v7a2n3ULKBCuC6+FMu8gGrGh3FbFiINwhZQ/INawfrEZGGRbjLWib
icIvFVRTgVn3qwkuc1t6Yo/spygDLTtRFyJj8ZKofnYoMmrmKtyLK+guIOQF41MM
/ldZa7/Xdk7U6x3kstw96VNWCgajO7N3z4cobYwW+SYLadz1NswEfFuz6cpPf+g5
oxzI2T56kftNurgGpvVx4sFxg0qt8180wvPSxgbU9NNyQkHqWETEnSEZs7aofI3Z
AGPMqPJ8vhDfCdyp7m+IpEHr
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:24:26 2026 by rpki-client