Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
File:                     Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft (raw, json)
Hash identifier:          mrrpCdABtzTrCJq2iCMlpxKJilfH8JiRJu/bi4p5Hpg=
Subject key identifier:   74:EE:D3:11:20:EB:6C:0F:95:8E:D0:FF:0A:4C:87:4A:F4:31:3F:5E
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Certificate issuer:       /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
Manifest number:          0189
Signing time:             Mon 21 Sep 2026 04:37:35 +0000
Manifest this update:     Mon 21 Sep 2026 04:37:35 +0000
Manifest next update:     Mon 28 Sep 2026 04:37:35 +0000
Files and hashes:         1: Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl (hash: h2pKvuln3mditpuJilZ4okBek+vc2lUjGxbXfUf6pJw=)
                          2: 4E9597086B5C11EFABB11F60C4F9AE02.roa (hash: KmFo8WXoDjWbWyLh/FF39LTCZs17MIBxb0+OrFi78Hs=)
                          3: 43749A72824E11F0A1C4B018C4F9AE02.roa (hash: KSDxonhKP2R/jFXcwFf/p6d4f1Qwk//gYks77lT8Zqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
        Validity
            Not Before: Sep 21 04:37:35 2026 GMT
            Not After : Sep 28 04:37:35 2026 GMT
        Subject: CN=6ab0b48f-4cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:82:0e:36:97:2e:b0:1d:79:b5:ef:7a:9e:
                    8d:bf:62:27:f8:87:26:80:b1:3d:f0:75:a5:0a:69:
                    69:41:ec:9f:68:e1:d5:48:65:38:5d:09:f0:2e:52:
                    7a:c3:68:b0:3a:47:1e:fc:c7:4f:b8:a3:9a:a1:cb:
                    15:17:4b:47:35:92:09:80:5b:ae:be:fd:26:64:77:
                    2e:fb:44:58:5a:0a:1e:26:70:4e:96:80:9b:4b:de:
                    14:f9:61:ef:0c:44:26:6c:6e:6a:55:f7:f4:86:d3:
                    41:89:1d:7a:08:dc:f8:0f:85:a0:74:e3:81:62:ad:
                    b0:0c:c3:5d:74:64:f9:92:d3:c5:b1:04:62:0b:d9:
                    3b:5c:88:b5:ab:b4:1c:37:34:61:87:ec:21:de:a4:
                    dc:af:fc:09:7a:5b:aa:9b:59:da:bf:9f:ba:a1:fb:
                    4b:d2:4d:03:b8:f5:57:05:29:36:16:65:2b:d9:a1:
                    17:34:cc:06:4d:0e:ee:8c:54:1b:66:a7:ca:0f:77:
                    45:0a:a0:74:58:b0:0a:bf:ec:27:f6:05:c4:c7:18:
                    12:c1:a4:6f:08:b8:18:ff:2a:3c:b2:4b:46:71:fd:
                    f0:b3:47:88:99:fb:21:b6:7a:2b:49:55:4d:8c:be:
                    89:d2:ec:53:e5:ca:07:49:a0:6d:ca:ba:55:4e:51:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EE:D3:11:20:EB:6C:0F:95:8E:D0:FF:0A:4C:87:4A:F4:31:3F:5E
            X509v3 Authority Key Identifier:
                keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:98:fe:e3:d2:b7:5b:8b:e9:b4:cc:8b:ab:3f:51:70:f0:27:
         8d:13:c4:62:63:79:0c:f1:fc:76:e8:78:0f:32:3c:55:a7:1c:
         df:92:e3:fc:0f:71:f7:41:61:c1:93:4c:10:a2:57:8e:3c:b4:
         20:36:02:01:8a:b0:7e:60:04:f7:14:1d:fb:8e:e0:3a:b4:96:
         c4:5e:67:8f:05:9a:cd:96:3a:4e:a4:a0:f3:70:65:10:e2:b4:
         04:05:00:0d:56:63:03:69:9b:70:7d:40:96:0f:87:85:ef:33:
         da:fc:0c:16:0a:38:ad:2e:0a:c1:90:9c:1f:ba:eb:aa:ac:db:
         df:f9:03:ae:f5:1e:cb:15:51:df:2d:35:1f:ef:c5:96:18:8d:
         4c:dd:91:89:75:cd:26:90:56:0a:1c:e1:fb:23:ca:00:27:09:
         c0:f6:5e:99:62:e1:3e:1d:74:1c:5d:ec:58:bf:97:3a:f4:8d:
         ac:3c:21:ae:50:fd:7e:8a:0b:0a:18:98:d0:47:fa:5d:48:ff:
         df:86:86:77:df:e9:02:34:62:a5:4d:d7:2c:83:61:5f:d3:8a:
         b5:50:1b:90:bc:d0:0f:12:75:71:61:3d:9f:80:53:fa:ed:45:
         c6:3b:4b:7a:5e:6f:ed:36:5d:f2:cc:f0:2e:d8:31:b4:a2:41:
         71:fa:23:98
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZDOEYxMTAvBgNVBAUTKDRFN0VEOTUxQzRGODlGMTFGMTk0NDY4RUE4MTU0NEQ3
MzM1RTRGNTkwHhcNMjYwOTIxMDQzNzM1WhcNMjYwOTI4MDQzNzM1WjAYMRYwFAYD
VQQDEw02YWIwYjQ4Zi00Y2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoByCDjaXLrAdebXvep6Nv2In+IcmgLE98HWlCmlpQeyfaOHVSGU4XQnwLlJ6
w2iwOkce/MdPuKOaocsVF0tHNZIJgFuuvv0mZHcu+0RYWgoeJnBOloCbS94U+WHv
DEQmbG5qVff0htNBiR16CNz4D4WgdOOBYq2wDMNddGT5ktPFsQRiC9k7XIi1q7Qc
NzRhh+wh3qTcr/wJeluqm1nav5+6oftL0k0DuPVXBSk2FmUr2aEXNMwGTQ7ujFQb
ZqfKD3dFCqB0WLAKv+wn9gXExxgSwaRvCLgY/yo8sktGcf3ws0eImfshtnorSVVN
jL6J0uxT5coHSaBtyrpVTlEJVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHTu0xEg
62wPlY7Q/wpMh0r0MT9eMB8GA1UdIwQYMBaAFE5+2VHE+J8R8ZRGjqgVRNczXk9Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GMTRFRUQ5ODZC
NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54SHhsRWFPcUJWRTF6TmVU
MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RuN1pVY1Q0bnhIeGxFYU9xQlZFMXpOZVQxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkM4Ri9GMTRFRUQ5ODZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9UbjdaVWNUNG54
SHhsRWFPcUJWRTF6TmVUMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAapj+49K3W4vptMyLqz9RcPAnjRPEYmN5DPH8duh4DzI8Vacc35Lj/A9x90Fh
wZNMEKJXjjy0IDYCAYqwfmAE9xQd+47gOrSWxF5njwWazZY6TqSg83BlEOK0BAUA
DVZjA2mbcH1Alg+Hhe8z2vwMFgo4rS4KwZCcH7rrqqzb3/kDrvUeyxVR3y01H+/F
lhiNTN2RiXXNJpBWChzh+yPKACcJwPZemWLhPh10HF3sWL+XOvSNrDwhrlD9fooL
ChiY0Ef6XUj/34aGd9/pAjRipU3XLINhX9OKtVAbkLzQDxJ1cWE9n4BT+u1FxjtL
el5v7TZd8szwLtgxtKJBcfojmA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:25:13 2026 by rpki-client