Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
File:                     m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json)
Hash identifier:          UEXnj6Zx7x2e4wn6ifqoMI4DJNiZTYxru+PJRc2q0Qc=
Subject key identifier:   C7:45:99:83:4D:47:02:C3:96:B0:B5:33:18:F8:24:EA:40:66:06:D0
Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7
Certificate issuer:       /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7
Certificate serial:       0B16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
Manifest number:          0B02
Signing time:             Sun 20 Sep 2026 19:18:31 +0000
Manifest this update:     Sun 20 Sep 2026 19:18:31 +0000
Manifest next update:     Sun 27 Sep 2026 19:18:31 +0000
Files and hashes:         1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: c+lM9uzWZFCaqr9L1q3cyrItLSPN+RFRRMaP4pi37U4=)
                          2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: xYfOlV7ly8PaoVxzHciXWWKH9nbZzy74G8B+L2wVsHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl
                          rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2838 (0xb16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7
        Validity
            Not Before: Sep 20 19:18:31 2026 GMT
            Not After : Sep 27 19:18:31 2026 GMT
        Subject: CN=6ab03187-cc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:93:8d:57:c2:b1:2e:99:b2:ae:67:c0:5c:
                    e6:ff:77:61:9d:32:22:47:27:92:b5:8a:fa:8c:8b:
                    46:f1:d8:9c:c4:a0:0d:e2:a6:11:49:37:50:a0:93:
                    e8:9a:a3:ab:f1:92:be:bb:36:1f:47:4c:93:a9:c1:
                    34:83:dc:38:a8:1f:1d:78:d4:e4:ca:fc:52:5e:22:
                    5e:cb:ed:02:d1:bc:30:c1:44:7e:61:b9:f3:fc:f7:
                    2d:1a:41:14:29:f9:f8:54:98:c8:e4:ac:c9:c9:a6:
                    44:7b:8e:a7:c1:18:ed:c7:66:f3:7a:85:a9:0e:5d:
                    3b:83:1d:10:f1:00:f2:67:40:29:57:25:4b:e9:72:
                    4c:e4:a9:13:b2:d4:f2:ab:1e:38:be:c8:75:bc:58:
                    76:2c:e2:5f:ab:74:42:fe:3c:21:8f:28:b2:c2:87:
                    de:01:06:8d:90:8b:4b:03:82:02:f4:31:fe:13:a1:
                    ff:a0:de:1b:31:b6:80:c9:ba:96:de:13:ff:d7:4f:
                    56:86:5b:75:5c:fc:86:46:1f:77:4d:29:bf:4e:92:
                    29:25:65:3c:04:49:6d:d9:7d:78:94:c9:33:89:b8:
                    6a:06:b9:09:96:47:d7:2b:b1:13:1f:cc:26:49:05:
                    fa:d1:6e:33:84:de:4b:97:c5:98:33:8d:4b:00:d8:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:45:99:83:4D:47:02:C3:96:B0:B5:33:18:F8:24:EA:40:66:06:D0
            X509v3 Authority Key Identifier:
                keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:ba:3f:00:62:22:e8:63:a2:94:86:7d:d7:8e:61:f2:2f:6f:
         f8:76:fa:f7:e3:1e:b2:5d:be:6b:a3:ca:ae:61:9b:9c:db:1a:
         48:1b:d5:2e:eb:58:60:13:47:f5:16:95:a8:02:23:0d:d4:32:
         f6:bc:fe:81:84:55:8d:bb:fa:10:38:bc:64:c3:b0:aa:92:bf:
         3c:3f:5f:fd:ff:94:12:32:16:31:18:e1:de:81:42:39:e0:6e:
         e5:24:e8:c4:d4:e3:14:9e:4d:ba:a2:46:ef:92:8f:61:2b:31:
         56:08:9d:99:29:5f:11:92:56:4c:ca:ec:09:df:ef:19:ae:92:
         73:64:77:40:a2:40:73:2e:54:2b:34:e3:4a:0e:98:4b:1d:34:
         67:ec:dc:81:c0:a0:80:84:07:34:4b:3f:7a:b7:c7:cd:cd:18:
         42:3f:ec:db:6a:1c:0b:c8:1c:02:24:d7:fc:ea:08:e2:24:15:
         84:7d:74:53:a4:cf:4b:71:74:cc:3a:5f:40:f4:d1:c0:39:1e:
         b4:06:fc:03:1a:a4:ab:7a:f6:dc:61:89:9b:a0:47:8d:0a:59:
         9b:10:1a:54:67:7d:39:b2:36:bf:b3:54:ee:2e:30:94:73:ea:
         39:0d:86:15:9f:15:14:51:47:56:8d:b9:a1:87:80:98:fa:29:
         85:cd:85:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB
QjQxOEM4QTcwHhcNMjYwOTIwMTkxODMxWhcNMjYwOTI3MTkxODMxWjAYMRYwFAYD
VQQDEw02YWIwMzE4Ny1jYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqoWTjVfCsS6Zsq5nwFzm/3dhnTIiRyeStYr6jItG8dicxKAN4qYRSTdQoJPo
mqOr8ZK+uzYfR0yTqcE0g9w4qB8deNTkyvxSXiJey+0C0bwwwUR+Ybnz/PctGkEU
Kfn4VJjI5KzJyaZEe46nwRjtx2bzeoWpDl07gx0Q8QDyZ0ApVyVL6XJM5KkTstTy
qx44vsh1vFh2LOJfq3RC/jwhjyiywofeAQaNkItLA4IC9DH+E6H/oN4bMbaAybqW
3hP/109Whlt1XPyGRh93TSm/TpIpJWU8BElt2X14lMkzibhqBrkJlkfXK7ETH8wm
SQX60W4zhN5Ll8WYM41LANgGgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMdFmYNN
RwLDlrC1Mxj4JOpAZgbQMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3
RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu
RWhJQVhkbkNjRWVyUVl5S2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA6bo/AGIi6GOilIZ9145h8i9v+Hb69+Mesl2+a6PKrmGbnNsaSBvVLutYYBNH
9RaVqAIjDdQy9rz+gYRVjbv6EDi8ZMOwqpK/PD9f/f+UEjIWMRjh3oFCOeBu5STo
xNTjFJ5NuqJG75KPYSsxVgidmSlfEZJWTMrsCd/vGa6Sc2R3QKJAcy5UKzTjSg6Y
Sx00Z+zcgcCggIQHNEs/erfHzc0YQj/s22ocC8gcAiTX/OoI4iQVhH10U6TPS3F0
zDpfQPTRwDketAb8Axqkq3r23GGJm6BHjQpZmxAaVGd9ObI2v7NU7i4wlHPqOQ2G
FZ8VFFFHVo25oYeAmPophc2Fqg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:50:36 2026 by rpki-client