Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
File:                     RE63U1TDcG453qCP6VBEzSZj1q4.mft (raw, json)
Hash identifier:          dFs4TjL5cdYK70+Pqjz0i4MkM/Kk0xHPRRsmUuQXHd4=
Subject key identifier:   3F:8C:6E:3E:D2:A5:42:EC:49:0B:DB:55:0D:E4:DE:8A:2E:99:EC:59
Authority key identifier: 44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE
Certificate issuer:       /CN=A9186004/serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
Certificate serial:       026E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
Manifest number:          0263
Signing time:             Sat 03 Oct 2026 02:48:28 +0000
Manifest this update:     Sat 03 Oct 2026 02:48:27 +0000
Manifest next update:     Sat 10 Oct 2026 02:48:27 +0000
Files and hashes:         1: RE63U1TDcG453qCP6VBEzSZj1q4.crl (hash: On5HrIKqmHSS4N6kqZlLxaEDfhtpfA0KTxrrJaveByA=)
                          2: 2C08945405B311F1930B3931093D8C67.roa (hash: Y9SYZchw4WIRvIQyocFHO0pka+LuGXmAUwGDk93qFtU=)
                          3: 341206FE1EFB11EEB72FB14EC4F9AE02.roa (hash: DOlY7FkM370xwbKtNyGow4RldK4fWwFfSvIieqIj6iU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl
                          rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186004, serialNumber=444EB75354C3706E39DEA08FE95044CD2663D6AE
        Validity
            Not Before: Oct  3 02:48:27 2026 GMT
            Not After : Oct 10 02:48:27 2026 GMT
        Subject: CN=6ac06cfc-d0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:cd:c2:62:5c:13:d7:d3:22:3f:b8:3b:a1:
                    df:9e:4f:af:64:c9:9d:18:5e:90:56:11:61:7d:cc:
                    c8:b6:a3:d9:44:2a:34:1a:7b:75:4e:13:08:d8:15:
                    17:4a:b7:93:48:af:8c:14:b3:f1:91:de:10:31:41:
                    e0:fc:df:d4:b8:4f:63:d3:22:c0:6f:0a:f2:5f:3c:
                    dc:99:78:f2:1b:9f:c6:a0:16:de:64:0f:95:9e:e2:
                    c8:6b:05:3e:00:1f:20:b9:4d:cb:c5:b5:e6:76:59:
                    a3:f6:1e:d1:dc:bf:a0:91:ce:07:b1:b8:d3:2b:3d:
                    d6:c2:ff:cc:bd:d2:ce:d3:1f:0c:fd:ef:51:60:ac:
                    0c:52:78:34:e8:d4:06:6b:1a:01:d9:69:c0:96:e6:
                    5e:73:50:62:e9:0a:45:9a:ee:83:16:0b:2c:ef:51:
                    74:e5:9c:21:9c:42:b7:ce:0c:d6:bb:6e:1d:4b:97:
                    80:80:d3:21:25:63:5d:48:dd:fe:34:c5:c0:05:e9:
                    16:d4:de:d7:e0:80:ce:fb:e0:85:e2:ba:d2:cb:68:
                    03:1b:bb:63:6c:29:91:e7:fd:65:84:0d:cf:45:e9:
                    02:5a:b2:bc:a9:ea:f6:6c:1b:64:6a:d4:d5:ea:24:
                    1e:e6:af:b4:8a:2a:d2:30:ea:3d:ea:b3:34:9b:a9:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:8C:6E:3E:D2:A5:42:EC:49:0B:DB:55:0D:E4:DE:8A:2E:99:EC:59
            X509v3 Authority Key Identifier:
                keyid:44:4E:B7:53:54:C3:70:6E:39:DE:A0:8F:E9:50:44:CD:26:63:D6:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RE63U1TDcG453qCP6VBEzSZj1q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186004/201F68601EF811EEA9265D24C4F9AE02/RE63U1TDcG453qCP6VBEzSZj1q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ec:69:b0:e6:c1:e2:68:7c:7f:c0:66:da:9c:de:67:13:d7:
         46:82:1c:8f:b1:f7:bf:ed:7d:7f:66:1f:df:db:e0:67:37:fb:
         f3:43:b3:f6:a2:f2:9d:cc:cd:0b:e5:73:77:e4:f6:59:cd:0a:
         fa:bd:71:da:d6:ef:49:5f:a9:06:66:34:8a:49:bc:5d:a1:cc:
         fc:83:56:62:6a:52:3f:97:d2:20:da:b0:23:34:89:d4:0e:22:
         d6:96:e5:1a:c8:fb:90:bb:02:27:09:bb:b2:4f:1c:3a:98:fa:
         b7:3b:8c:17:fa:6e:9e:f7:99:d6:99:b5:c5:a8:2d:dc:a0:56:
         9d:8f:9f:63:2c:be:5f:24:99:24:8a:12:74:d2:e2:16:0c:bd:
         d9:7e:6a:85:7b:e6:f0:7f:a9:47:ff:df:e6:b9:1a:1d:02:65:
         83:57:c6:d4:9a:3f:94:59:2b:1b:64:d3:0c:f9:17:b8:2c:15:
         b5:b4:d4:58:58:ae:93:42:a7:0f:48:af:ab:21:04:85:3b:de:
         ac:07:62:89:2e:8a:b5:1c:46:b1:4f:ca:2f:2c:32:0f:5e:23:
         49:f5:0b:fa:d6:cd:00:c0:32:99:e1:2c:e3:ff:31:9d:a0:8a:
         a5:7c:f6:a6:cb:4c:a8:9f:2d:c7:74:b3:bd:95:47:03:1f:61:
         4b:71:da:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYwMDQxMTAvBgNVBAUTKDQ0NEVCNzUzNTRDMzcwNkUzOURFQTA4RkU5NTA0NENE
MjY2M0Q2QUUwHhcNMjYxMDAzMDI0ODI3WhcNMjYxMDEwMDI0ODI3WjAYMRYwFAYD
VQQDEw02YWMwNmNmYy1kMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2HvNwmJcE9fTIj+4O6Hfnk+vZMmdGF6QVhFhfczItqPZRCo0Gnt1ThMI2BUX
SreTSK+MFLPxkd4QMUHg/N/UuE9j0yLAbwryXzzcmXjyG5/GoBbeZA+VnuLIawU+
AB8guU3LxbXmdlmj9h7R3L+gkc4HsbjTKz3Wwv/MvdLO0x8M/e9RYKwMUng06NQG
axoB2WnAluZec1Bi6QpFmu6DFgss71F05ZwhnEK3zgzWu24dS5eAgNMhJWNdSN3+
NMXABekW1N7X4IDO++CF4rrSy2gDG7tjbCmR5/1lhA3PRekCWrK8qer2bBtkatTV
6iQe5q+0iirSMOo96rM0m6mbDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+Mbj7S
pULsSQvbVQ3k3ooumexZMB8GA1UdIwQYMBaAFEROt1NUw3BuOd6gj+lQRM0mY9au
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjAwNC8yMDFGNjg2MDFF
RjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNHNDUzcUNQNlZCRXpTWmox
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFNjNVMVREY0c0NTNxQ1A2VkJFelNaajFxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjAwNC8yMDFGNjg2MDFFRjgxMUVFQTkyNjVEMjRDNEY5QUUwMi9SRTYzVTFURGNH
NDUzcUNQNlZCRXpTWmoxcTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnOxpsObB4mh8f8Bm2pzeZxPXRoIcj7H3v+19f2Yf39vgZzf780Oz9qLynczN
C+Vzd+T2Wc0K+r1x2tbvSV+pBmY0ikm8XaHM/INWYmpSP5fSINqwIzSJ1A4i1pbl
Gsj7kLsCJwm7sk8cOpj6tzuMF/punveZ1pm1xagt3KBWnY+fYyy+XySZJIoSdNLi
Fgy92X5qhXvm8H+pR//f5rkaHQJlg1fG1Jo/lFkrG2TTDPkXuCwVtbTUWFiuk0Kn
D0ivqyEEhTverAdiiS6KtRxGsU/KLywyD14jSfUL+tbNAMAymeEs4/8xnaCKpXz2
pstMqJ8tx3SzvZVHAx9hS3HahQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 11:10:35 2026 by rpki-client