Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
File:                     k-Wm1UXgDFaegN4yLrINV1d1BXU.mft (raw, json)
Hash identifier:          MpOze0UgG/IkYPiAqBHUO69XmP2b/1jTNENqs7+I0L4=
Subject key identifier:   7B:BF:D0:63:5B:B2:FB:E8:10:ED:6E:37:B1:0B:FE:6D:BF:90:4A:4B
Authority key identifier: 93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75
Certificate issuer:       /CN=A9171A47/serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575
Certificate serial:       C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
Manifest number:          C0
Signing time:             Fri 25 Sep 2026 07:02:09 +0000
Manifest this update:     Fri 25 Sep 2026 07:02:08 +0000
Manifest next update:     Fri 02 Oct 2026 07:02:08 +0000
Files and hashes:         1: k-Wm1UXgDFaegN4yLrINV1d1BXU.crl (hash: RUecqxMZkfbs3fO4aMhPtkKBmmCEZx+DKKdLeVaeAJg=)
                          2: 1805E4389DE011F0B44FDA76C4F9AE02.roa (hash: xUw+Uv9TI74Dhb2CGJETI5/wwvPlX2t3PbWQpNbjfhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl
                          rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171A47, serialNumber=93E5A6D545E00C569E80DE322EB20D5757750575
        Validity
            Not Before: Sep 25 07:02:08 2026 GMT
            Not After : Oct  2 07:02:08 2026 GMT
        Subject: CN=6ab61c71-e499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:08:76:d0:8b:09:15:17:28:c2:4d:52:b3:
                    67:53:72:f4:0f:cd:ed:2e:c8:0e:d7:11:d4:6b:a7:
                    ac:8a:0c:17:c0:95:97:0a:a9:3f:15:0f:95:8a:48:
                    44:50:05:c5:f6:c4:c1:b8:56:f0:98:7f:e4:4a:d2:
                    2f:fc:a9:93:58:b7:1a:76:e9:d7:9f:88:9f:7e:95:
                    b0:12:21:45:77:8d:38:1d:9a:e8:02:3e:1b:d1:32:
                    6c:b6:4a:89:36:cc:77:ca:91:f3:8d:eb:e5:84:03:
                    1d:52:88:c6:7d:18:88:22:4d:a2:f7:46:10:30:ce:
                    d0:5e:c9:d9:b4:7f:72:4f:3f:e4:ea:11:be:f6:85:
                    4c:ea:2b:4b:fd:24:9b:b3:40:26:df:2f:94:77:67:
                    47:43:83:d0:38:f6:8b:1d:a8:8b:c4:98:ef:c0:83:
                    e6:ca:de:b1:3d:cb:79:6f:b2:da:07:73:73:3c:09:
                    9f:54:91:63:ce:42:b4:a3:20:9f:4f:b9:de:5a:fc:
                    b9:9e:c9:4a:6c:79:66:d8:76:f4:77:0e:b0:81:97:
                    2b:7b:f2:c9:86:4e:a2:be:21:ca:ac:af:27:7a:f9:
                    7e:c3:13:6a:d4:74:00:94:2b:d2:69:3e:63:3c:ad:
                    e6:d3:c2:b4:5f:92:0e:12:15:f0:c3:b1:90:3d:8b:
                    6d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BF:D0:63:5B:B2:FB:E8:10:ED:6E:37:B1:0B:FE:6D:BF:90:4A:4B
            X509v3 Authority Key Identifier:
                keyid:93:E5:A6:D5:45:E0:0C:56:9E:80:DE:32:2E:B2:0D:57:57:75:05:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-Wm1UXgDFaegN4yLrINV1d1BXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A47/97C5A0149DD611F0A4315E0AC4F9AE02/k-Wm1UXgDFaegN4yLrINV1d1BXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b4:dc:51:04:59:a3:81:3c:93:43:f2:29:e7:34:38:c3:b6:
         45:bf:45:0c:55:5e:ab:b9:b0:0a:55:86:59:cd:f9:4e:e8:d5:
         12:c5:83:f3:84:5c:cb:9b:86:60:d4:63:60:fa:f5:bc:34:cf:
         fe:91:9b:12:50:5c:8e:49:44:10:15:47:cd:72:15:f8:16:5b:
         31:7c:ef:28:b2:83:b0:5c:b1:d8:43:09:91:9a:f3:76:f5:53:
         f9:f5:10:c4:31:a0:7e:48:02:c5:e7:3e:b4:47:ff:19:ed:8a:
         f5:9b:c1:d4:6a:db:a7:6d:38:dd:dc:01:98:1f:f7:62:88:51:
         bc:34:24:6c:55:c1:08:cc:e9:ea:ad:58:e1:25:83:fc:04:b3:
         a9:5a:53:48:c3:19:df:4b:34:82:ae:32:04:31:79:33:df:2e:
         a3:1e:81:e2:6f:af:d9:a8:06:c8:bd:3b:48:7b:dd:3a:47:2e:
         d4:d5:90:17:c9:40:88:65:81:c8:e3:24:94:b6:91:89:e4:55:
         d1:f5:b3:0c:55:b5:4c:fd:b4:93:7c:74:67:8d:73:9a:1a:19:
         09:85:1b:58:67:2c:42:85:4f:c5:89:b2:6c:f9:29:cf:8f:ff:
         37:9b:0b:18:1b:e8:7c:5d:1d:6e:05:29:d2:3a:7e:c9:0a:4b:
         4d:b8:98:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzFBNDcxMTAvBgNVBAUTKDkzRTVBNkQ1NDVFMDBDNTY5RTgwREUzMjJFQjIwRDU3
NTc3NTA1NzUwHhcNMjYwOTI1MDcwMjA4WhcNMjYxMDAyMDcwMjA4WjAYMRYwFAYD
VQQDEw02YWI2MWM3MS1lNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjEoIdtCLCRUXKMJNUrNnU3L0D83tLsgO1xHUa6esigwXwJWXCqk/FQ+VikhE
UAXF9sTBuFbwmH/kStIv/KmTWLcadunXn4iffpWwEiFFd404HZroAj4b0TJstkqJ
Nsx3ypHzjevlhAMdUojGfRiIIk2i90YQMM7QXsnZtH9yTz/k6hG+9oVM6itL/SSb
s0Am3y+Ud2dHQ4PQOPaLHaiLxJjvwIPmyt6xPct5b7LaB3NzPAmfVJFjzkK0oyCf
T7neWvy5nslKbHlm2Hb0dw6wgZcre/LJhk6iviHKrK8nevl+wxNq1HQAlCvSaT5j
PK3m08K0X5IOEhXww7GQPYtt5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHu/0GNb
svvoEO1uN7EL/m2/kEpLMB8GA1UdIwQYMBaAFJPlptVF4AxWnoDeMi6yDVdXdQV1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE0Ny85N0M1QTAxNDlE
RDYxMUYwQTQzMTVFMEFDNEY5QUUwMi9rLVdtMVVYZ0RGYWVnTjR5THJJTlYxZDFC
WFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2stV20xVVhnREZhZWdONHlMcklOVjFkMUJYVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MUE0Ny85N0M1QTAxNDlERDYxMUYwQTQzMTVFMEFDNEY5QUUwMi9rLVdtMVVYZ0RG
YWVnTjR5THJJTlYxZDFCWFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh7TcUQRZo4E8k0PyKec0OMO2Rb9FDFVeq7mwClWGWc35TujVEsWD84Rcy5uG
YNRjYPr1vDTP/pGbElBcjklEEBVHzXIV+BZbMXzvKLKDsFyx2EMJkZrzdvVT+fUQ
xDGgfkgCxec+tEf/Ge2K9ZvB1Grbp2043dwBmB/3YohRvDQkbFXBCMzp6q1Y4SWD
/ASzqVpTSMMZ30s0gq4yBDF5M98uox6B4m+v2agGyL07SHvdOkcu1NWQF8lAiGWB
yOMklLaRieRV0fWzDFW1TP20k3x0Z41zmhoZCYUbWGcsQoVPxYmybPkpz4//N5sL
GBvofF0dbgUp0jp+yQpLTbiYEQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:53:43 2026 by rpki-client