Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
File:                     99M_RV7avj1Mtj-5LkygdhGcNKY.mft (raw, json)
Hash identifier:          pvIfpiH9Cp08ccj44L+2BOaoHtRRjQ/cSQqkdzNa5/Y=
Subject key identifier:   0B:F2:2D:16:D0:74:0E:BA:90:6F:E2:08:70:64:FB:AC:35:AB:27:32
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Certificate issuer:       /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial:       1601
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
Manifest number:          15CA
Signing time:             Sat 26 Sep 2026 16:47:35 +0000
Manifest this update:     Sat 26 Sep 2026 16:47:35 +0000
Manifest next update:     Sat 03 Oct 2026 16:47:35 +0000
Files and hashes:         1: 99M_RV7avj1Mtj-5LkygdhGcNKY.crl (hash: pq3anLrpxzRtjiCTPyK+zR+8awuvo2O5LgzWRz86ylw=)
                          2: A2DA1898656911E889701022C4F9AE02.roa (hash: 0ZKNIv6r+JcKqzjXGBvHUDmKD/rrsqHtKhBJCcXrcu8=)
                          3: 026DBC9A4A2711E9A05D2324C4F9AE02.roa (hash: 41jM3oI8HmqkUU7U0TXx3cqvf03cMl5oRBiU0uGu/xg=)
                          4: 2A3E123A5A5711E8B29BFE6AC4F9AE02.roa (hash: IB5M2B78izwkb2/G4273KZY/mf8AXpCS0Hp75Vkk3Fs=)
                          5: 74D88B52FF6511EB95D39078C4F9AE02.roa (hash: hY+hfH2to8w2+rBKpzglwyJBvhoTK5E5rDv6Eyzqmto=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
                          rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5633 (0x1601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150845, serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
        Validity
            Not Before: Sep 26 16:47:35 2026 GMT
            Not After : Oct  3 16:47:35 2026 GMT
        Subject: CN=6ab7f727-e200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:6c:08:d3:76:a5:90:34:ce:e8:2c:00:e8:
                    d1:94:ba:de:f8:b8:c3:d5:30:f9:2e:fb:40:a8:6e:
                    de:2a:0f:a4:e3:00:02:5a:49:9c:3e:da:15:7e:0a:
                    24:60:27:36:ca:98:9c:64:a1:50:45:2d:07:fb:74:
                    2f:fd:ad:90:f5:cf:08:1c:1b:0b:10:f9:1a:7a:69:
                    7f:68:57:78:e4:05:0e:29:25:40:b5:9a:62:5e:21:
                    21:95:ee:85:36:3c:4b:24:3d:c6:ad:86:3d:4f:fd:
                    26:dc:93:04:c5:bb:4a:5e:34:0b:2e:e8:a0:60:a0:
                    7e:09:25:55:3d:5f:d3:b5:e1:c3:fd:10:ae:47:3d:
                    67:50:6a:a8:65:9d:e3:4f:db:a9:a6:5e:ec:2f:21:
                    a5:0d:37:20:b1:2e:2c:36:d2:b1:5c:80:fc:c5:fb:
                    23:ea:22:1a:ec:2d:ca:4f:a4:27:52:62:bd:e0:d3:
                    d5:0d:e5:e0:a1:c7:94:4b:9e:b3:9d:a7:85:16:27:
                    86:95:25:0f:21:9c:cc:e8:7b:d8:a3:72:87:75:a1:
                    c5:b5:6e:24:fd:2b:23:f7:f7:f0:8f:c6:61:6a:69:
                    96:73:ba:7c:90:b2:ba:86:ba:e7:14:ca:73:a3:3b:
                    db:bd:a5:9f:0f:be:6f:bb:bc:65:f7:a7:9f:f0:ff:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F2:2D:16:D0:74:0E:BA:90:6F:E2:08:70:64:FB:AC:35:AB:27:32
            X509v3 Authority Key Identifier:
                keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:f4:3e:6c:be:dd:e5:86:2d:ee:fa:79:03:e5:ed:47:db:
         d6:75:2c:aa:f5:59:3d:f0:c5:2f:b1:bc:a0:b3:70:34:b3:a0:
         9b:a6:12:15:52:53:3f:8d:1d:e8:86:2e:cb:74:7e:b9:85:bb:
         25:1a:0a:16:87:f6:be:3b:1b:ee:a5:cc:d8:ed:cd:e9:84:71:
         bc:a6:01:4e:2b:71:09:3f:56:78:69:5a:30:e8:b5:da:9f:ee:
         e6:39:4c:16:77:07:ec:b4:9a:00:01:91:77:31:4b:01:1a:42:
         db:56:bc:2a:d8:72:d8:86:4d:9c:6a:13:21:61:ff:c9:ad:bc:
         bb:20:9f:b5:1f:bc:68:82:26:e7:60:7d:ec:7c:7e:70:e0:f8:
         33:51:a9:27:25:72:3d:a7:7d:39:12:44:bd:32:00:8d:0d:20:
         9d:1e:60:3e:72:c2:8a:2e:ae:d0:6f:ab:f8:53:d4:35:e6:02:
         1c:de:1e:9b:30:e6:e8:29:e6:57:7a:b0:83:52:55:d2:b8:6b:
         af:c5:7d:d2:6c:4c:af:9b:5c:73:aa:2a:8b:1b:d1:f7:de:6f:
         0a:b1:cb:11:f9:80:9a:30:99:6e:fb:5b:29:c0:58:97:9e:cc:
         4d:79:c1:01:04:d4:5c:64:ac:8e:1c:f8:7f:50:88:00:a4:76:
         17:66:68:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTA4NDUxMTAvBgNVBAUTKEY3RDMzRjQ1NUVEQUJFM0Q0Q0I2M0ZCOTJFNENBMDc2
MTE5QzM0QTYwHhcNMjYwOTI2MTY0NzM1WhcNMjYxMDAzMTY0NzM1WjAYMRYwFAYD
VQQDEw02YWI3ZjcyNy1lMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqnBsCNN2pZA0zugsAOjRlLre+LjD1TD5LvtAqG7eKg+k4wACWkmcPtoVfgok
YCc2ypicZKFQRS0H+3Qv/a2Q9c8IHBsLEPkaeml/aFd45AUOKSVAtZpiXiEhle6F
NjxLJD3GrYY9T/0m3JMExbtKXjQLLuigYKB+CSVVPV/TteHD/RCuRz1nUGqoZZ3j
T9uppl7sLyGlDTcgsS4sNtKxXID8xfsj6iIa7C3KT6QnUmK94NPVDeXgoceUS56z
naeFFieGlSUPIZzM6HvYo3KHdaHFtW4k/Ssj9/fwj8ZhammWc7p8kLK6hrrnFMpz
ozvbvaWfD75vu7xl96ef8P9dEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvyLRbQ
dA66kG/iCHBk+6w1qycyMB8GA1UdIwQYMBaAFPfTP0Ve2r49TLY/uS5MoHYRnDSm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDg0NS9EQzcxMDBFQTVB
NTUxMUU4QkUzRTBCNjhDNEY5QUUwMi85OU1fUlY3YXZqMU10ai01TGt5Z2RoR2NO
S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk5TV9SVjdhdmoxTXRqLTVMa3lnZGhHY05LWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDg0NS9EQzcxMDBFQTVBNTUxMUU4QkUzRTBCNjhDNEY5QUUwMi85OU1fUlY3YXZq
MU10ai01TGt5Z2RoR2NOS1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP1X0Pmy+3eWGLe76eQPl7Ufb1nUsqvVZPfDFL7G8oLNwNLOgm6YSFVJTP40d
6IYuy3R+uYW7JRoKFof2vjsb7qXM2O3N6YRxvKYBTitxCT9WeGlaMOi12p/u5jlM
FncH7LSaAAGRdzFLARpC21a8Kthy2IZNnGoTIWH/ya28uyCftR+8aIIm52B97Hx+
cOD4M1GpJyVyPad9ORJEvTIAjQ0gnR5gPnLCii6u0G+r+FPUNeYCHN4emzDm6Cnm
V3qwg1JV0rhrr8V90mxMr5tcc6oqixvR995vCrHLEfmAmjCZbvtbKcBYl57MTXnB
AQTUXGSsjhz4f1CIAKR2F2Zodw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:03:36 2026 by rpki-client