Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
File:                     2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json)
Hash identifier:          gI+su2j3YCcwWqWZtvxpDyPfL+QFiuiHvh27X7bGbQY=
Subject key identifier:   7C:DD:98:4A:42:FC:6C:22:C2:A0:AF:B3:6C:73:B1:41:85:89:B5:B3
Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93
Certificate issuer:       /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
Manifest number:          01D9
Signing time:             Sat 03 Oct 2026 04:27:22 +0000
Manifest this update:     Sat 03 Oct 2026 04:27:22 +0000
Manifest next update:     Sat 10 Oct 2026 04:27:22 +0000
Files and hashes:         1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: oAM+7PoqjW3ZT3CHs6jQyK+GQrHtRk1ouhNd3CA5PDI=)
                          2: A90FC92A4D9A11F1BFB1418A8AEE528E.roa (hash: sfEKhljyiurdTvs6lU81cu1hjcxg7WjshhxCIa196fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl
                          rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:27:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493
        Validity
            Not Before: Oct  3 04:27:22 2026 GMT
            Not After : Oct 10 04:27:22 2026 GMT
        Subject: CN=6ac0842a-5c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:e6:9e:52:02:2c:c8:d1:0f:bb:17:d5:ea:
                    e6:e9:6e:af:cc:1c:01:2e:22:88:97:be:fb:84:dc:
                    04:4c:f5:a8:4e:17:e8:8f:35:ff:27:a8:68:fa:e5:
                    c0:db:2c:1e:b0:fa:32:46:29:47:30:bc:2b:cd:2b:
                    c7:ed:82:77:86:d8:bf:87:09:57:ac:3d:4e:26:9f:
                    20:37:ba:3c:68:71:7a:d8:a0:62:3e:57:7d:0d:50:
                    91:d4:3d:17:4a:73:43:39:eb:39:c1:4a:6c:94:f4:
                    e2:54:50:b5:05:9d:58:0b:a8:d4:c2:e2:cd:ee:aa:
                    82:2a:7a:62:16:7b:b3:b5:40:65:20:d9:a4:c5:ad:
                    a5:ab:e7:d9:eb:64:5e:3c:01:a8:47:b1:f6:a1:31:
                    d0:31:a0:bb:91:48:8d:d0:f4:63:79:4a:3a:86:47:
                    d6:cf:ee:cc:6b:6b:98:d6:c6:97:77:53:83:f1:9e:
                    c9:12:de:f8:9f:1d:29:57:7b:1b:3e:74:4a:0f:79:
                    f9:d3:06:fc:5d:0d:49:fd:a1:e8:82:17:e5:7b:32:
                    1e:37:48:47:5d:85:58:af:ce:ba:c9:60:64:fb:97:
                    1a:ec:1c:1f:50:c9:21:74:a8:ed:83:53:e8:a4:cf:
                    46:f4:d6:3f:69:e5:9a:4a:94:9d:3c:d2:07:25:26:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DD:98:4A:42:FC:6C:22:C2:A0:AF:B3:6C:73:B1:41:85:89:B5:B3
            X509v3 Authority Key Identifier:
                keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:67:65:ad:70:33:03:25:f9:61:36:78:c9:55:a6:98:03:59:
         2c:7e:28:c2:b0:30:53:8e:95:09:ef:e6:28:85:c4:54:d5:0d:
         ee:22:3b:97:9d:f9:f1:d5:e4:4a:bb:f7:c5:9c:e8:8b:7c:51:
         87:64:3b:1f:32:4d:75:99:be:3f:35:06:e5:a0:86:2e:9a:af:
         87:1f:fa:2b:8b:f4:c1:95:9b:bc:8d:df:29:f7:88:7c:10:de:
         66:1a:c0:57:df:3b:63:68:f4:8c:f5:dd:d9:e9:1d:0e:12:7e:
         38:48:bf:bd:fa:3c:74:d1:6b:0b:5a:42:05:0f:ff:46:f7:9e:
         ff:12:5c:4d:d7:c0:68:9e:ac:68:e4:55:f7:6f:a7:a8:da:db:
         28:86:a8:b5:69:ac:a0:f8:35:ac:b1:c7:eb:ab:1f:60:ce:8a:
         5a:56:82:d6:2c:7b:db:a0:04:2c:b8:67:98:d0:c5:24:6a:fb:
         8c:3e:50:95:30:5b:6f:75:d6:45:85:ae:e6:95:60:7b:fb:c1:
         0d:20:1b:50:31:98:1f:ff:7b:be:40:ae:96:64:99:4a:33:9c:
         a6:3d:75:52:cd:03:ea:b1:c4:fa:ac:9b:00:e1:a6:71:a2:93:
         18:ea:43:b9:8b:5e:64:e5:25:19:a6:39:57:6d:36:db:01:b5:
         47:ea:8a:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy
REU4Q0I0OTMwHhcNMjYxMDAzMDQyNzIyWhcNMjYxMDEwMDQyNzIyWjAYMRYwFAYD
VQQDEw02YWMwODQyYS01YzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2yHmnlICLMjRD7sX1erm6W6vzBwBLiKIl777hNwETPWoThfojzX/J6ho+uXA
2ywesPoyRilHMLwrzSvH7YJ3hti/hwlXrD1OJp8gN7o8aHF62KBiPld9DVCR1D0X
SnNDOes5wUpslPTiVFC1BZ1YC6jUwuLN7qqCKnpiFnuztUBlINmkxa2lq+fZ62Re
PAGoR7H2oTHQMaC7kUiN0PRjeUo6hkfWz+7Ma2uY1saXd1OD8Z7JEt74nx0pV3sb
PnRKD3n50wb8XQ1J/aHoghflezIeN0hHXYVYr866yWBk+5ca7BwfUMkhdKjtg1Po
pM9G9NY/aeWaSpSdPNIHJSbUfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzdmEpC
/GwiwqCvs2xzsUGFibWzMB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD
MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10
Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVow
bTFJQVVjRHpoZll0Nk10Sk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARmdlrXAzAyX5YTZ4yVWmmANZLH4owrAwU46VCe/mKIXEVNUN7iI7l5358dXk
Srv3xZzoi3xRh2Q7HzJNdZm+PzUG5aCGLpqvhx/6K4v0wZWbvI3fKfeIfBDeZhrA
V987Y2j0jPXd2ekdDhJ+OEi/vfo8dNFrC1pCBQ//Rvee/xJcTdfAaJ6saORV92+n
qNrbKIaotWmsoPg1rLHH66sfYM6KWlaC1ix726AELLhnmNDFJGr7jD5QlTBbb3XW
RYWu5pVge/vBDSAbUDGYH/97vkCulmSZSjOcpj11Us0D6rHE+qybAOGmcaKTGOpD
uYteZOUlGaY5V2022wG1R+qKww==
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:49:57 2026 by rpki-client