Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
File:                     PUXFozv53U06Htp-0mQGWOH4Mf8.mft (raw, json)
Hash identifier:          dfhEh/hEK538eENtaaGhl8vaiqTHMT7/8zJ1MwjGwtg=
Subject key identifier:   0A:C1:BC:C3:B2:DA:95:48:F4:E4:B3:6F:93:6D:B3:0F:AB:F0:90:E3
Authority key identifier: 3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF
Certificate issuer:       /CN=A9166F0E/serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
Certificate serial:       0CA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
Manifest number:          0C9D
Signing time:             Fri 02 Oct 2026 18:51:44 +0000
Manifest this update:     Fri 02 Oct 2026 18:51:44 +0000
Manifest next update:     Fri 09 Oct 2026 18:51:44 +0000
Files and hashes:         1: PUXFozv53U06Htp-0mQGWOH4Mf8.crl (hash: vG0vpxenjGamUXl1vNWsbBMw+0ZUktrTF3Z2gUg/UtQ=)
                          2: vTbiCTLpAWAIvf2-x4zaewl9mxY.asa (hash: SWe9fywf8Sw1mqP1dVYKI5xQxVHjFyE4kLikK4GUkBw=)
                          3: A11D7694261F11EAA88CE128C4F9AE02.roa (hash: 8MsHT5cME+aXOO22Fl9mgN6gd3hK0r/r9Fuzk0/CIyA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl
                          rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3241 (0xca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166F0E, serialNumber=3D45C5A33BF9DD4D3A1EDA7ED2640658E1F831FF
        Validity
            Not Before: Oct  2 18:51:44 2026 GMT
            Not After : Oct  9 18:51:44 2026 GMT
        Subject: CN=6abffd40-b74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:79:bb:50:06:b3:c6:d7:ce:a7:92:e2:aa:
                    ba:77:d5:71:5b:26:c5:68:e9:ab:69:12:9e:9f:29:
                    98:84:fa:74:ab:10:b7:b0:5e:d7:d2:24:cb:9d:29:
                    aa:8a:bf:ea:7b:62:2e:a6:db:5a:1d:6d:ff:f4:d5:
                    e5:7a:64:c7:0d:44:10:31:7a:8d:7f:80:c0:a4:ed:
                    c2:c5:58:26:4a:43:19:5e:5f:57:38:b4:42:49:76:
                    b4:ca:8c:87:b2:1c:e5:8e:b3:e5:72:ee:51:54:e7:
                    f4:35:ad:44:8a:be:aa:21:de:a7:a1:4b:62:9c:33:
                    c6:19:57:c7:77:69:ec:c5:94:5c:b2:12:80:7a:58:
                    85:07:0e:64:ba:50:ad:94:fb:f4:90:4e:54:b7:db:
                    b4:71:0f:53:1c:f7:74:4b:74:17:00:31:a0:30:48:
                    7e:53:3b:6f:d7:0d:a6:e5:6e:f8:be:f1:9a:9f:a2:
                    38:56:18:cb:37:18:73:1e:3c:f7:53:53:13:12:a8:
                    6c:a3:57:30:1c:a6:99:0f:33:9c:b1:f0:4c:c1:63:
                    1b:f7:40:31:79:3c:7d:49:05:07:41:1f:4f:48:7f:
                    87:ae:bc:27:25:de:6f:c9:ac:7c:c0:ea:03:f1:70:
                    8b:c7:6d:d9:53:f1:a5:06:74:37:92:72:e3:a9:d6:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C1:BC:C3:B2:DA:95:48:F4:E4:B3:6F:93:6D:B3:0F:AB:F0:90:E3
            X509v3 Authority Key Identifier:
                keyid:3D:45:C5:A3:3B:F9:DD:4D:3A:1E:DA:7E:D2:64:06:58:E1:F8:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUXFozv53U06Htp-0mQGWOH4Mf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166F0E/1A758B0E261F11EAAE2E8F28C4F9AE02/PUXFozv53U06Htp-0mQGWOH4Mf8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:2f:4d:f1:40:72:2f:59:5b:6f:18:db:ef:f8:69:21:f3:
         1e:fe:35:1e:fd:f6:4b:6c:2b:c8:46:a1:21:b8:c1:c2:c3:b2:
         60:b6:10:1d:73:49:25:95:40:b6:75:8d:09:bc:8e:da:69:43:
         7b:9c:51:46:2f:68:e9:fd:d0:ff:96:df:7e:bc:a5:16:52:8d:
         f6:6c:d8:a2:80:33:27:72:23:0c:72:76:88:2e:d9:55:54:a2:
         43:dc:60:03:2f:e8:cc:0d:37:6d:0e:64:5e:bb:27:21:2a:ed:
         fe:7e:7c:e7:5d:36:9d:d6:63:bb:74:7b:a1:85:89:f9:f8:91:
         49:0d:0f:d5:f7:da:96:c7:4c:07:93:8a:bd:19:f1:51:78:88:
         7b:3b:da:91:ae:ae:b2:07:97:c4:d0:1a:41:de:20:b1:95:71:
         ac:bb:17:b3:fe:ac:91:da:2c:6d:e9:8c:34:81:7b:62:00:dc:
         83:75:cd:51:62:89:7a:d3:e2:49:71:16:2d:51:71:52:95:43:
         17:a3:c8:de:39:22:df:32:56:ff:8b:7e:2a:56:a4:67:98:e0:
         d2:64:83:6c:ed:24:cc:a4:38:ae:55:b4:d5:8b:ec:03:dc:83:
         70:8a:e8:71:5b:70:d9:a2:81:e8:c3:6b:7d:98:72:f7:ce:ee:
         55:2b:25:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZGMEUxMTAvBgNVBAUTKDNENDVDNUEzM0JGOURENEQzQTFFREE3RUQyNjQwNjU4
RTFGODMxRkYwHhcNMjYxMDAyMTg1MTQ0WhcNMjYxMDA5MTg1MTQ0WjAYMRYwFAYD
VQQDEw02YWJmZmQ0MC1iNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuaR5u1AGs8bXzqeS4qq6d9VxWybFaOmraRKenymYhPp0qxC3sF7X0iTLnSmq
ir/qe2IupttaHW3/9NXlemTHDUQQMXqNf4DApO3CxVgmSkMZXl9XOLRCSXa0yoyH
shzljrPlcu5RVOf0Na1Eir6qId6noUtinDPGGVfHd2nsxZRcshKAeliFBw5kulCt
lPv0kE5Ut9u0cQ9THPd0S3QXADGgMEh+Uztv1w2m5W74vvGan6I4VhjLNxhzHjz3
U1MTEqhso1cwHKaZDzOcsfBMwWMb90AxeTx9SQUHQR9PSH+HrrwnJd5vyax8wOoD
8XCLx23ZU/GlBnQ3knLjqdYqjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArBvMOy
2pVI9OSzb5Ntsw+r8JDjMB8GA1UdIwQYMBaAFD1FxaM7+d1NOh7aftJkBljh+DH/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkYwRS8xQTc1OEIwRTI2
MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNVMDZIdHAtMG1RR1dPSDRN
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BVWEZvenY1M1UwNkh0cC0wbVFHV09INE1mOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NkYwRS8xQTc1OEIwRTI2MUYxMUVBQUUyRThGMjhDNEY5QUUwMi9QVVhGb3p2NTNV
MDZIdHAtMG1RR1dPSDRNZjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqIQvTfFAci9ZW28Y2+/4aSHzHv41Hv32S2wryEahIbjBwsOyYLYQHXNJJZVA
tnWNCbyO2mlDe5xRRi9o6f3Q/5bffrylFlKN9mzYooAzJ3IjDHJ2iC7ZVVSiQ9xg
Ay/ozA03bQ5kXrsnISrt/n585102ndZju3R7oYWJ+fiRSQ0P1ffalsdMB5OKvRnx
UXiIezvaka6usgeXxNAaQd4gsZVxrLsXs/6skdosbemMNIF7YgDcg3XNUWKJetPi
SXEWLVFxUpVDF6PI3jki3zJW/4t+KlakZ5jg0mSDbO0kzKQ4rlW01YvsA9yDcIro
cVtw2aKB6MNrfZhy987uVSslTA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 14:12:16 2026 by rpki-client