Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
File:                     vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft (raw, json)
Hash identifier:          gCuB7rfEOpuqoOUPscSYZEKdPmWFc4qDTMgCTl3/LhA=
Subject key identifier:   CD:17:C5:09:FB:D4:0D:1D:1B:C1:39:AF:61:47:27:44:B2:CF:3E:4D
Authority key identifier: BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A
Certificate issuer:       /CN=A9157861/serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
Certificate serial:       1F63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
Manifest number:          1F34
Signing time:             Thu 24 Sep 2026 15:59:37 +0000
Manifest this update:     Thu 24 Sep 2026 15:59:36 +0000
Manifest next update:     Thu 01 Oct 2026 15:59:36 +0000
Files and hashes:         1: vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl (hash: TMFO5dIVJ3uojPlc8ccK1gDJ1pD0ekkPHKSN52iHLHk=)
                          2: C22F80E4D1F011EEB68A503EC4F9AE02.roa (hash: VHVG6Z6jq5Ma6SUBXPMmjOzqZ8GQCFukojoR+uJjv98=)
                          3: BE047E02DBA411EAAF00CC6CC4F9AE02.roa (hash: 6ilxOAjU1ojn9ZZ4QDDx7lG2XCvQ81+IZXlUfVxHebw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl
                          rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8035 (0x1f63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157861, serialNumber=BD5F088894D9DA7565D4436143EE026C320E4A2A
        Validity
            Not Before: Sep 24 15:59:36 2026 GMT
            Not After : Oct  1 15:59:36 2026 GMT
        Subject: CN=6ab548e9-00c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:37:a8:a8:4e:dd:63:11:7d:42:40:7b:f8:
                    2a:93:d1:b4:52:05:23:f1:4b:da:f4:36:45:d7:69:
                    22:77:c1:d4:e6:e2:6f:dd:a0:cb:72:07:6f:79:b2:
                    b8:84:cf:dc:98:3a:e3:b8:15:f4:b7:14:ee:36:49:
                    98:65:de:d9:b9:42:62:ca:d8:c0:72:3e:d0:ca:34:
                    e4:2e:9b:78:08:d5:05:77:34:8e:7d:65:8f:e4:19:
                    5c:c9:89:f4:de:26:c0:6d:70:30:1b:d1:e3:f5:67:
                    0e:0e:66:81:f1:48:20:76:4e:6d:5d:41:24:08:b9:
                    5c:4d:1a:c6:a0:b8:9a:31:80:e5:78:13:6d:de:f4:
                    1c:ad:f1:aa:f9:1c:48:ce:31:57:85:56:73:fd:9a:
                    f8:01:a0:ab:f6:42:3a:67:9a:89:73:16:ee:37:ee:
                    ce:0b:30:13:61:73:18:f1:b8:c4:90:3c:ee:85:4f:
                    3c:e1:56:08:c3:e4:26:f9:01:88:83:1a:8a:9f:90:
                    c4:ab:3a:c2:b8:b3:a8:8f:54:d6:83:ca:40:df:70:
                    50:61:a5:6c:b1:42:fd:a3:90:b6:1a:72:48:33:69:
                    84:bc:b0:e4:20:ac:27:9a:4e:9c:31:4b:d5:1f:7c:
                    f8:2e:6f:f1:f9:23:03:f4:22:50:39:6d:0d:a5:bb:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:C5:09:FB:D4:0D:1D:1B:C1:39:AF:61:47:27:44:B2:CF:3E:4D
            X509v3 Authority Key Identifier:
                keyid:BD:5F:08:88:94:D9:DA:75:65:D4:43:61:43:EE:02:6C:32:0E:4A:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157861/34D26C88846F11E6A313C022C4F9AE02/vV8IiJTZ2nVl1ENhQ-4CbDIOSio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:93:a7:8e:9b:25:3e:2a:27:b1:0b:de:0b:62:d3:1d:c0:
         dd:bd:3d:5e:c9:4a:32:dd:d5:af:a8:95:00:28:20:0c:a8:b4:
         61:76:76:32:5f:6a:f6:7c:0a:69:59:ec:23:99:71:f1:d7:6e:
         92:15:19:59:ee:c6:fb:44:2a:1e:a1:18:87:0d:5c:c7:eb:17:
         e5:4d:ab:ce:ef:1b:9a:85:b9:51:4e:ca:23:27:aa:27:b7:5e:
         cc:31:11:5e:86:35:2d:96:cb:43:85:2e:52:ef:b4:cd:b1:e3:
         13:55:29:dc:92:5e:d3:18:9b:87:5a:8c:a2:4a:08:70:30:3b:
         e7:69:93:26:71:20:2a:d6:f0:86:a0:ac:af:43:58:08:d1:30:
         10:e5:92:2f:42:a7:53:12:0f:35:90:05:78:13:e8:c8:b5:b3:
         52:40:d9:c4:48:58:9f:34:55:89:a2:eb:c5:97:dd:34:42:6a:
         fa:5f:e3:f7:35:89:69:3a:16:e8:e7:78:c9:ba:34:10:59:8a:
         c6:73:b3:e9:d3:b1:c0:50:aa:43:28:14:ce:dc:61:e0:51:9d:
         b4:94:fa:83:66:ba:a6:ef:ef:f1:c0:ae:f8:f1:de:54:51:26:
         19:38:c6:b5:d8:f6:e9:26:09:ae:5d:41:fb:fa:08:47:94:c2:
         e8:fb:a5:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICH2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc4NjExMTAvBgNVBAUTKEJENUYwODg4OTREOURBNzU2NUQ0NDM2MTQzRUUwMjZD
MzIwRTRBMkEwHhcNMjYwOTI0MTU1OTM2WhcNMjYxMDAxMTU1OTM2WjAYMRYwFAYD
VQQDEw02YWI1NDhlOS0wMGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlxE3qKhO3WMRfUJAe/gqk9G0UgUj8Uva9DZF12kid8HU5uJv3aDLcgdvebK4
hM/cmDrjuBX0txTuNkmYZd7ZuUJiytjAcj7QyjTkLpt4CNUFdzSOfWWP5BlcyYn0
3ibAbXAwG9Hj9WcODmaB8Uggdk5tXUEkCLlcTRrGoLiaMYDleBNt3vQcrfGq+RxI
zjFXhVZz/Zr4AaCr9kI6Z5qJcxbuN+7OCzATYXMY8bjEkDzuhU884VYIw+Qm+QGI
gxqKn5DEqzrCuLOoj1TWg8pA33BQYaVssUL9o5C2GnJIM2mEvLDkIKwnmk6cMUvV
H3z4Lm/x+SMD9CJQOW0Npbv3fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0XxQn7
1A0dG8E5r2FHJ0Syzz5NMB8GA1UdIwQYMBaAFL1fCIiU2dp1ZdRDYUPuAmwyDkoq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Nzg2MS8zNEQyNkM4ODg0
NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJuVmwxRU5oUS00Q2JESU9T
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZWOElpSlRaMm5WbDFFTmhRLTRDYkRJT1Npby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Nzg2MS8zNEQyNkM4ODg0NkYxMUU2QTMxM0MwMjJDNEY5QUUwMi92VjhJaUpUWjJu
VmwxRU5oUS00Q2JESU9TaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANuWTp46bJT4qJ7EL3gti0x3A3b09XslKMt3Vr6iVACggDKi0YXZ2Ml9q9nwK
aVnsI5lx8ddukhUZWe7G+0QqHqEYhw1cx+sX5U2rzu8bmoW5UU7KIyeqJ7dezDER
XoY1LZbLQ4UuUu+0zbHjE1Up3JJe0xibh1qMokoIcDA752mTJnEgKtbwhqCsr0NY
CNEwEOWSL0KnUxIPNZAFeBPoyLWzUkDZxEhYnzRViaLrxZfdNEJq+l/j9zWJaToW
6Od4ybo0EFmKxnOz6dOxwFCqQygUztxh4FGdtJT6g2a6pu/v8cCu+PHeVFEmGTjG
tdj26SYJrl1B+/oIR5TC6PuluA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:01:18 2026 by rpki-client