Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
File:                     r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json)
Hash identifier:          BpEwOP9r00O+6/qi1w34mTpiPrzbPDvW69oA3dLA6Sk=
Subject key identifier:   39:73:61:A0:EF:5F:BE:27:76:15:F5:BA:02:AC:2D:53:6B:D2:D8:1A
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Certificate issuer:       /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial:       0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
Manifest number:          03E6
Signing time:             Mon 21 Sep 2026 00:19:53 +0000
Manifest this update:     Mon 21 Sep 2026 00:19:52 +0000
Manifest next update:     Mon 28 Sep 2026 00:19:52 +0000
Files and hashes:         1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: Wqchk37WX57pLCvkIEJg4h6fVYKpZqwjYCzQb2GJ5aQ=)
                          2: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: Tl//mlJpb2VMGBb+QtBeeHRCi1hlUkdF28Hoha7r34U=)
                          3: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: avd1BRD3UmGj21dyPoHC4i5mdB/6dCsth0FrDgLd998=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
                          rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
        Validity
            Not Before: Sep 21 00:19:52 2026 GMT
            Not After : Sep 28 00:19:52 2026 GMT
        Subject: CN=6ab07829-ae41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:d4:e6:42:fe:32:e9:9f:d3:f8:20:5f:e4:
                    bb:bb:16:9f:2b:a4:63:59:3b:b2:00:6e:5a:91:2b:
                    66:15:58:1e:8b:ea:65:f7:25:37:c9:7c:cc:1e:ab:
                    11:11:67:09:ab:c0:04:53:7d:1c:d6:46:bb:68:12:
                    9c:4b:e7:50:79:02:38:64:21:a4:40:65:ab:5f:95:
                    27:4d:be:36:03:56:e0:c3:58:ce:cb:21:09:20:ea:
                    14:23:3e:22:35:9e:51:ae:8e:d3:f0:97:e6:5b:5d:
                    c1:e4:f2:f8:03:c5:8e:2e:d5:85:b8:e9:d3:73:d0:
                    92:76:be:26:ec:e6:06:08:7d:b9:ff:2f:0d:ad:f2:
                    84:11:cb:0e:2f:88:45:71:a3:01:7c:ee:db:f2:32:
                    38:45:a6:60:ae:73:3a:d1:ed:ee:a5:3f:47:59:f4:
                    e4:2c:a6:b1:ff:9f:a1:63:bc:0a:b6:37:cb:f5:81:
                    92:d6:3b:d3:4f:2f:45:0e:28:10:dc:c7:37:80:9c:
                    b3:ad:82:90:fc:e2:58:5b:d3:c3:bb:09:dc:de:8e:
                    9d:ea:9a:d4:7d:96:58:62:d0:31:0a:de:ad:90:e6:
                    a2:20:26:c2:9a:57:74:9e:35:bd:0d:83:0a:87:3b:
                    f4:37:dc:aa:3c:43:6f:2e:f6:ab:dc:a4:cd:56:35:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:73:61:A0:EF:5F:BE:27:76:15:F5:BA:02:AC:2D:53:6B:D2:D8:1A
            X509v3 Authority Key Identifier:
                keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9d:d0:30:d8:4b:0c:89:a2:59:27:12:1b:1f:e6:c7:79:3e:
         a8:98:42:2c:03:da:fa:fd:3f:d7:de:0d:29:20:0f:45:59:2d:
         71:96:ab:ac:d8:2c:7f:1d:f9:12:e5:91:20:3b:c3:2d:c8:95:
         1a:33:5e:eb:ce:bc:51:3d:13:57:16:9e:36:b5:cc:ca:00:d0:
         bb:08:29:e2:05:c6:e2:57:58:bc:c7:c3:9b:0a:ba:62:64:c5:
         eb:0b:7d:80:a7:74:c7:1e:ac:21:5f:b7:91:50:9a:b9:c2:49:
         04:12:34:60:c2:81:69:6a:10:0d:0a:ea:7a:27:12:39:34:d7:
         fe:95:72:b4:4b:fe:30:da:10:22:0a:46:96:3e:19:bc:41:f2:
         29:85:8f:85:db:55:f8:a7:6e:a9:44:bb:6f:24:ff:03:b8:96:
         c4:da:99:6b:f6:ed:f7:9b:6c:37:bd:7f:e8:ee:14:43:72:5d:
         35:7a:a2:1c:74:bf:83:bc:61:8a:a2:a7:66:8e:dc:22:9e:8e:
         ff:55:80:a2:4e:9a:53:d6:26:78:70:36:b1:a0:71:76:04:5d:
         96:69:44:44:b5:ad:84:d5:59:a4:9e:1e:f9:2e:0d:a1:0e:91:
         44:67:09:af:e3:55:02:ff:14:d8:57:e7:23:f6:29:c8:6a:51:
         e3:c0:9f:69
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxNEUxMTAvBgNVBAUTKEFGNjcxMzJEODM3RDU3NkZGRjc3NzIyN0EzNzI1RDYw
MUVEOTEwNUQwHhcNMjYwOTIxMDAxOTUyWhcNMjYwOTI4MDAxOTUyWjAYMRYwFAYD
VQQDEw02YWIwNzgyOS1hZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo6DU5kL+Mumf0/ggX+S7uxafK6RjWTuyAG5akStmFVgei+pl9yU3yXzMHqsR
EWcJq8AEU30c1ka7aBKcS+dQeQI4ZCGkQGWrX5UnTb42A1bgw1jOyyEJIOoUIz4i
NZ5Rro7T8JfmW13B5PL4A8WOLtWFuOnTc9CSdr4m7OYGCH25/y8NrfKEEcsOL4hF
caMBfO7b8jI4RaZgrnM60e3upT9HWfTkLKax/5+hY7wKtjfL9YGS1jvTTy9FDigQ
3Mc3gJyzrYKQ/OJYW9PDuwnc3o6d6prUfZZYYtAxCt6tkOaiICbCmld0njW9DYMK
hzv0N9yqPENvLvar3KTNVjVGZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlzYaDv
X74ndhX1ugKsLVNr0tgaMB8GA1UdIwQYMBaAFK9nEy2DfVdv/3dyJ6NyXWAe2RBd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE0RS80QzVFMkZCOEUz
RkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYyX19kM0lubzNKZFlCN1pF
RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IyY1RMWU45VjJfX2QzSW5vM0pkWUI3WkVGMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDE0RS80QzVFMkZCOEUzRkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYy
X19kM0lubzNKZFlCN1pFRjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHp3QMNhLDImiWScSGx/mx3k+qJhCLAPa+v0/194NKSAPRVktcZarrNgsfx35
EuWRIDvDLciVGjNe6868UT0TVxaeNrXMygDQuwgp4gXG4ldYvMfDmwq6YmTF6wt9
gKd0xx6sIV+3kVCaucJJBBI0YMKBaWoQDQrqeicSOTTX/pVytEv+MNoQIgpGlj4Z
vEHyKYWPhdtV+KduqUS7byT/A7iWxNqZa/bt95tsN71/6O4UQ3JdNXqiHHS/g7xh
iqKnZo7cIp6O/1WAok6aU9YmeHA2saBxdgRdlmlERLWthNVZpJ4e+S4NoQ6RRGcJ
r+NVAv8U2FfnI/YpyGpR48CfaQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:05:51 2026 by rpki-client