Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
File:                     UN4cYHM-ori3boQDYJGOHyXEbkM.mft (raw, json)
Hash identifier:          vejnPX1gR6kwZh7IbKF9o6tSAQTB2qiZ2mP0/ud/qlk=
Subject key identifier:   2D:2C:BC:1D:C2:4C:E8:0C:AC:14:42:26:A8:1D:47:3F:AD:B2:47:16
Authority key identifier: 50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43
Certificate issuer:       /CN=A916701E/serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
Certificate serial:       0CFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
Manifest number:          0CE0
Signing time:             Fri 18 Sep 2026 18:29:39 +0000
Manifest this update:     Fri 18 Sep 2026 18:29:38 +0000
Manifest next update:     Fri 25 Sep 2026 18:29:38 +0000
Files and hashes:         1: UN4cYHM-ori3boQDYJGOHyXEbkM.crl (hash: H0V9vhhxaPz/vuUefNwN30Bri7RBTnTzy4k9yo5rjog=)
                          2: FNdaP_tlvzdOkRkygoSbG2qvE4Q.asa (hash: HtM4cT1n0OKEJjnde1/o9+CymoCiMyNjl/BcEhdS6xk=)
                          3: 46C5452E0DD711EF85707821C4F9AE02.roa (hash: eIKcx/tRIBK3MeiC+4l3jtKDacHvx/6DmpdUtabZ10s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl
                          rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3323 (0xcfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916701E, serialNumber=50DE1C60733EA2B8B76E840360918E1F25C46E43
        Validity
            Not Before: Sep 18 18:29:38 2026 GMT
            Not After : Sep 25 18:29:38 2026 GMT
        Subject: CN=6aad8313-20ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:62:7c:e8:5d:f4:e2:29:a8:82:2d:c0:fe:
                    5f:46:ff:67:11:ef:20:30:e5:ef:40:5d:ef:c1:db:
                    4d:ea:13:15:78:09:cf:e7:a5:c6:90:72:c2:42:97:
                    66:de:47:87:24:d7:53:25:07:5f:9c:e3:57:c4:ae:
                    01:c1:0c:d5:9c:52:d7:13:9d:e5:00:7f:70:c3:c4:
                    52:ec:a4:f6:a3:6b:86:6b:0f:3e:d0:9e:84:8a:aa:
                    7d:d0:61:da:7e:20:0a:44:7d:a9:84:94:fc:90:72:
                    9f:7f:62:12:fb:76:39:e6:3c:5d:5c:1c:7f:ae:30:
                    95:ff:f1:85:b3:04:3b:73:d4:e6:ae:67:05:ca:f2:
                    4a:06:06:4d:96:9c:21:0b:0c:93:02:94:63:1b:a0:
                    35:d9:d7:fc:14:c0:4d:01:55:5d:9f:04:1b:ce:d0:
                    b3:8b:82:15:a6:90:e8:0d:20:31:56:2a:fb:1a:15:
                    54:42:ef:a9:f5:71:f8:a7:98:b1:3e:32:53:a0:63:
                    2a:aa:33:97:c7:87:c8:e1:34:11:7d:f3:dd:5a:ec:
                    97:b3:e7:7f:2b:ab:8d:91:cd:a3:d7:a4:66:0a:31:
                    9a:21:7a:b4:dd:3b:8a:f7:04:b0:25:5c:e9:75:bb:
                    a9:42:e9:89:16:d0:b7:f8:e4:a5:49:65:6c:37:b6:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2C:BC:1D:C2:4C:E8:0C:AC:14:42:26:A8:1D:47:3F:AD:B2:47:16
            X509v3 Authority Key Identifier:
                keyid:50:DE:1C:60:73:3E:A2:B8:B7:6E:84:03:60:91:8E:1F:25:C4:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UN4cYHM-ori3boQDYJGOHyXEbkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916701E/785D7ED21C0811EA8576B151C4F9AE02/UN4cYHM-ori3boQDYJGOHyXEbkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:45:aa:00:48:ac:75:7e:8f:8b:a5:e4:d3:ed:60:f4:b4:72:
         e0:b1:ed:b6:78:23:f2:22:cc:8a:b8:f2:66:60:e2:36:5e:63:
         02:9e:10:ce:dc:c9:e8:49:47:12:c3:f4:d0:c1:ef:b3:3c:d8:
         84:15:f6:fb:0c:15:00:b8:11:06:70:29:6c:7e:de:50:67:bc:
         90:e5:3f:7e:29:6b:39:56:a8:da:05:fe:3e:4d:2e:96:3e:19:
         0d:28:44:82:95:de:6a:2b:85:8f:d5:ca:eb:71:61:3a:60:59:
         61:2d:ae:b6:43:64:54:59:15:52:1d:c5:3f:a8:d5:00:14:68:
         4b:b7:8d:a7:3d:05:84:1b:b6:17:6b:a1:29:23:70:c6:2c:8a:
         c9:5f:5f:9f:78:0e:5e:06:ae:42:53:f5:5a:33:57:44:23:73:
         26:7b:4e:f6:5d:3d:32:d0:41:5e:ad:15:c5:3e:59:1e:82:c8:
         dc:92:8d:c5:ab:b7:5b:ef:be:34:bc:cd:3c:d7:29:8e:ae:50:
         46:2d:1f:69:f7:db:34:01:e5:e6:aa:25:07:91:bd:98:33:1e:
         85:40:e8:39:f4:f6:60:aa:40:8f:13:5f:27:3b:65:a0:6d:e8:
         74:2b:77:14:3f:a7:ba:62:87:16:e0:fd:2b:3c:47:24:f4:42:
         13:91:d0:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcwMUUxMTAvBgNVBAUTKDUwREUxQzYwNzMzRUEyQjhCNzZFODQwMzYwOTE4RTFG
MjVDNDZFNDMwHhcNMjYwOTE4MTgyOTM4WhcNMjYwOTI1MTgyOTM4WjAYMRYwFAYD
VQQDEw02YWFkODMxMy0yMGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxmhifOhd9OIpqIItwP5fRv9nEe8gMOXvQF3vwdtN6hMVeAnP56XGkHLCQpdm
3keHJNdTJQdfnONXxK4BwQzVnFLXE53lAH9ww8RS7KT2o2uGaw8+0J6Eiqp90GHa
fiAKRH2phJT8kHKff2IS+3Y55jxdXBx/rjCV//GFswQ7c9TmrmcFyvJKBgZNlpwh
CwyTApRjG6A12df8FMBNAVVdnwQbztCzi4IVppDoDSAxVir7GhVUQu+p9XH4p5ix
PjJToGMqqjOXx4fI4TQRffPdWuyXs+d/K6uNkc2j16RmCjGaIXq03TuK9wSwJVzp
dbupQumJFtC3+OSlSWVsN7Y0VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0svB3C
TOgMrBRCJqgdRz+tskcWMB8GA1UdIwQYMBaAFFDeHGBzPqK4t26EA2CRjh8lxG5D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzAxRS83ODVEN0VEMjFD
MDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9yaTNib1FEWUpHT0h5WEVi
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VONGNZSE0tb3JpM2JvUURZSkdPSHlYRWJrTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzAxRS83ODVEN0VEMjFDMDgxMUVBODU3NkIxNTFDNEY5QUUwMi9VTjRjWUhNLW9y
aTNib1FEWUpHT0h5WEVia00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs0WqAEisdX6Pi6Xk0+1g9LRy4LHttngj8iLMirjyZmDiNl5jAp4QztzJ6ElH
EsP00MHvszzYhBX2+wwVALgRBnApbH7eUGe8kOU/filrOVao2gX+Pk0ulj4ZDShE
gpXeaiuFj9XK63FhOmBZYS2utkNkVFkVUh3FP6jVABRoS7eNpz0FhBu2F2uhKSNw
xiyKyV9fn3gOXgauQlP1WjNXRCNzJntO9l09MtBBXq0VxT5ZHoLI3JKNxau3W+++
NLzNPNcpjq5QRi0faffbNAHl5qolB5G9mDMehUDoOfT2YKpAjxNfJztloG3odCt3
FD+numKHFuD9KzxHJPRCE5HQ/w==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:56:34 2026 by rpki-client