Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
File:                     PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json)
Hash identifier:          FzWwu4pq3UOemwc0SE7yTmXrilSCnTYUiHGMMFgujX0=
Subject key identifier:   07:8A:58:92:54:36:6A:5D:AF:AD:C0:89:88:05:4F:82:9E:DE:76:C5
Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D
Certificate issuer:       /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
Certificate serial:       0A41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
Manifest number:          0A10
Signing time:             Sat 10 Oct 2026 19:54:27 +0000
Manifest this update:     Sat 10 Oct 2026 19:54:26 +0000
Manifest next update:     Sat 17 Oct 2026 19:54:26 +0000
Files and hashes:         1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: nwtPcDuWdwncwWmt95JGoOcKjBE12nPcC1ymelyhrRg=)
                          2: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: NmQEnmZZ9UqR+eHFVvMygvDoRNNoZAdWFKHVqVOc/DE=)
                          3: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: WBl3Adzv9JwzP22n8WbZ0IPXHKMf+hYie+CoOEeBMQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl
                          rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D
        Validity
            Not Before: Oct 10 19:54:26 2026 GMT
            Not After : Oct 17 19:54:26 2026 GMT
        Subject: CN=6aca97f3-0f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:3d:4f:e1:a8:6d:a9:0a:6c:7e:c7:ff:36:
                    7d:74:5a:85:f6:76:07:87:48:99:96:99:17:02:d2:
                    4f:a8:b4:c6:48:e7:6a:d3:08:2c:3b:5a:b1:63:64:
                    8b:95:72:e8:20:b1:8e:bc:4d:e6:d0:6a:9d:62:7a:
                    05:a5:59:13:e3:fc:7f:04:db:c8:3f:ca:c0:75:58:
                    9d:8c:3b:53:ec:b4:35:ae:96:39:40:05:40:e3:17:
                    cf:f6:e4:bd:56:e7:39:43:7c:02:4e:d5:ae:be:d2:
                    46:c7:b9:83:c4:d1:f5:42:a8:e6:37:5d:09:5e:01:
                    e2:af:40:6f:cf:13:1c:2d:24:85:8b:7c:90:5d:5b:
                    fe:79:b5:a2:37:d8:54:b5:1e:82:14:53:6a:89:a8:
                    ce:28:d9:f1:4f:47:6c:9c:31:8e:fc:96:9f:d4:4b:
                    d4:fe:f7:b8:73:5d:33:73:e6:9a:57:2f:7c:ad:cb:
                    90:1d:dd:a5:28:b2:3c:12:3d:8f:3a:89:51:50:83:
                    64:e2:8c:94:e1:18:bb:29:7c:c0:a0:9d:43:78:ef:
                    59:84:2d:eb:2b:e8:76:2c:81:e6:39:d8:d6:28:a9:
                    73:3f:84:60:68:35:c3:e7:ce:c1:6a:d7:bd:8f:8b:
                    1d:e3:8f:03:1a:d3:48:7b:52:06:fd:05:82:da:0d:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8A:58:92:54:36:6A:5D:AF:AD:C0:89:88:05:4F:82:9E:DE:76:C5
            X509v3 Authority Key Identifier:
                keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:ca:76:13:1c:a2:1a:c2:d0:a9:2d:65:c7:59:85:5b:fb:
         5b:33:98:c8:0d:ec:d0:37:a5:96:ba:84:89:ad:eb:bf:a1:ab:
         fe:0d:b0:8c:7a:fb:d7:18:6a:a8:51:a8:b0:88:70:8c:1e:00:
         df:55:ea:78:41:5a:d8:c9:ee:e6:7b:36:9f:4b:93:1d:57:38:
         1a:33:84:13:b1:77:8d:59:12:55:bc:c1:2b:02:55:ba:02:f2:
         b7:4f:c0:75:08:c6:88:98:78:62:8d:53:ad:23:91:b2:d1:e2:
         cc:95:a3:c7:4e:f2:84:5e:f9:66:69:08:e1:3a:9b:f0:a5:d4:
         92:19:00:7e:bf:96:24:70:de:2e:cd:21:4d:92:18:b3:5b:a9:
         73:e7:a5:fd:49:fc:09:93:3d:71:67:a0:2c:0a:a5:f2:b2:bf:
         ef:8b:13:74:d7:19:18:21:2d:96:b6:86:da:29:2a:cd:26:ab:
         a7:9a:57:79:55:cd:31:06:91:0f:39:de:9e:a4:7c:0c:a8:22:
         6f:e1:73:59:c8:4b:db:65:62:23:71:b2:65:f6:c7:e4:dc:ba:
         73:60:4c:8c:04:a9:26:f2:3f:ac:fd:ab:be:b1:dc:9e:7c:ed:
         32:35:03:c7:f5:61:fe:27:3c:ca:56:32:eb:b3:96:d7:26:ff:
         6a:1d:fb:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYxOTAxMTAvBgNVBAUTKDNERTdFRkMwNDZBNjdCOTkyNUJCQkJEQzYxMzJCMTI5
NzVEQjRBNkQwHhcNMjYxMDEwMTk1NDI2WhcNMjYxMDE3MTk1NDI2WjAYMRYwFAYD
VQQDEw02YWNhOTdmMy0wZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwe49T+GobakKbH7H/zZ9dFqF9nYHh0iZlpkXAtJPqLTGSOdq0wgsO1qxY2SL
lXLoILGOvE3m0GqdYnoFpVkT4/x/BNvIP8rAdVidjDtT7LQ1rpY5QAVA4xfP9uS9
Vuc5Q3wCTtWuvtJGx7mDxNH1QqjmN10JXgHir0BvzxMcLSSFi3yQXVv+ebWiN9hU
tR6CFFNqiajOKNnxT0dsnDGO/Jaf1EvU/ve4c10zc+aaVy98rcuQHd2lKLI8Ej2P
OolRUINk4oyU4Ri7KXzAoJ1DeO9ZhC3rK+h2LIHmOdjWKKlzP4RgaDXD587Bate9
j4sd448DGtNIe1IG/QWC2g3tEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeKWJJU
Nmpdr63AiYgFT4Ke3nbFMB8GA1UdIwQYMBaAFD3n78BGpnuZJbu73GEysSl120pt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE5MC9DMzczMDBFOEFF
MTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1a2x1N3ZjWVRLeEtYWGJT
bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BlZnZ3RWFtZTVrbHU3dmNZVEt4S1hYYlNtMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjE5MC9DMzczMDBFOEFFMTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1
a2x1N3ZjWVRLeEtYWGJTbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbkfKdhMcohrC0KktZcdZhVv7WzOYyA3s0DellrqEia3rv6Gr/g2wjHr71xhq
qFGosIhwjB4A31XqeEFa2Mnu5ns2n0uTHVc4GjOEE7F3jVkSVbzBKwJVugLyt0/A
dQjGiJh4Yo1TrSORstHizJWjx07yhF75ZmkI4Tqb8KXUkhkAfr+WJHDeLs0hTZIY
s1upc+el/Un8CZM9cWegLAql8rK/74sTdNcZGCEtlraG2ikqzSarp5pXeVXNMQaR
DznenqR8DKgib+FzWchL22ViI3GyZfbH5Ny6c2BMjASpJvI/rP2rvrHcnnztMjUD
x/Vh/ic8ylYy67OW1yb/ah374Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:04:45 2026 by rpki-client