Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
File:                     aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json)
Hash identifier:          LFODim5UcRm4u2bWDrVpdE5HZ56jcGFQnc9eY627o1s=
Subject key identifier:   12:71:5C:97:A9:E4:10:21:43:F4:FE:5D:2C:27:C2:AF:B4:D4:CA:67
Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C
Certificate issuer:       /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
Certificate serial:       088E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
Manifest number:          0885
Signing time:             Mon 28 Sep 2026 20:55:03 +0000
Manifest this update:     Mon 28 Sep 2026 20:55:02 +0000
Manifest next update:     Mon 05 Oct 2026 20:55:02 +0000
Files and hashes:         1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: 1vAxxvcBg0CbDh4j5VnkbIN4AY/vUNFAHNaN6uh1/0M=)
                          2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: 88dSTypvMEDb3pKUi5fTmzTP9AZUTUP0VcTwh0erjfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl
                          rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 20:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C
        Validity
            Not Before: Sep 28 20:55:02 2026 GMT
            Not After : Oct  5 20:55:02 2026 GMT
        Subject: CN=6abad426-723a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a2:7f:7d:7a:51:43:13:ff:c3:92:f4:f2:f3:
                    49:f4:52:ca:67:9c:71:25:37:0c:87:d7:34:a3:09:
                    e6:2f:af:78:ce:e8:bb:80:a4:17:6f:84:2e:40:27:
                    1f:e8:d3:53:ef:04:16:e8:25:52:77:2b:aa:d0:3a:
                    32:04:2e:3f:02:ce:e5:cf:ab:20:6a:cc:1d:75:de:
                    e0:b9:5e:74:99:bc:bd:34:cf:08:d1:bf:a4:0d:2a:
                    87:ca:86:d6:18:b8:9b:8c:ca:69:57:b5:17:62:50:
                    c6:90:2d:f2:1e:25:d6:2e:95:c2:3e:11:37:93:99:
                    6c:ee:23:f7:93:a4:96:b0:f6:c3:00:6b:10:79:aa:
                    c9:e9:6e:5b:2b:a1:21:72:9c:90:47:2b:4e:ee:fd:
                    ed:dd:d5:5b:3a:22:0e:c6:41:1b:ee:a7:3b:70:4b:
                    bb:1c:75:67:f6:f3:35:c8:18:35:a7:e2:a6:5a:66:
                    0c:fb:db:7e:71:6e:80:fe:e2:a9:c1:01:89:65:4d:
                    b7:6a:0b:e3:37:3f:48:05:dd:22:bc:78:72:e4:70:
                    67:60:0d:ca:8b:f6:0d:af:5f:39:08:5b:24:86:7a:
                    6c:54:16:f9:8a:ec:ac:b3:8e:7f:0d:d5:b7:d3:15:
                    de:ab:7b:17:0c:ec:71:b7:7f:1d:e7:8c:be:3a:74:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:5C:97:A9:E4:10:21:43:F4:FE:5D:2C:27:C2:AF:B4:D4:CA:67
            X509v3 Authority Key Identifier:
                keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:60:2b:52:84:5f:7a:e1:91:54:6e:6c:d5:69:69:06:90:ad:
         ad:23:77:a1:e5:a8:17:4b:06:5e:ba:59:55:a7:b8:88:7a:f3:
         13:2a:ea:cc:08:35:04:26:55:30:fb:22:b7:9f:e1:b0:15:44:
         c6:bc:e5:e4:13:60:60:a9:03:79:7a:a0:c5:07:15:64:37:b1:
         54:f9:af:0d:ea:6b:05:db:dc:30:18:d2:77:2e:d4:ab:50:da:
         d1:39:ef:41:67:00:25:d0:e7:4c:c6:4f:bb:8e:20:b7:35:f1:
         60:84:bf:6b:2e:33:2f:87:5b:07:0c:9a:6e:c5:c1:c7:46:b1:
         80:c4:f3:84:0f:45:8c:f6:77:c2:71:0f:8d:5e:5c:24:79:54:
         32:cf:29:2b:bc:c8:ff:34:cd:86:0c:f6:6c:03:9d:0d:2b:c7:
         d4:cb:13:e9:f1:f4:be:e0:bb:7c:3c:9a:bb:89:9b:62:37:48:
         3d:53:ba:71:ae:7b:97:93:f2:4f:e0:f5:33:94:78:56:98:97:
         e8:0d:1a:06:e6:e8:30:04:58:33:87:ae:fb:ea:c1:21:44:ca:
         6f:42:78:47:d3:65:d8:1f:5e:d1:d7:06:57:c7:f4:08:cf:dc:
         ee:8d:99:a8:91:3c:08:08:d4:55:7c:14:c1:6f:20:94:07:05:
         67:bd:da:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw
QjhFMzcxNkMwHhcNMjYwOTI4MjA1NTAyWhcNMjYxMDA1MjA1NTAyWjAYMRYwFAYD
VQQDEw02YWJhZDQyNi03MjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxqJ/fXpRQxP/w5L08vNJ9FLKZ5xxJTcMh9c0ownmL694zui7gKQXb4QuQCcf
6NNT7wQW6CVSdyuq0DoyBC4/As7lz6sgaswddd7guV50mby9NM8I0b+kDSqHyobW
GLibjMppV7UXYlDGkC3yHiXWLpXCPhE3k5ls7iP3k6SWsPbDAGsQearJ6W5bK6Eh
cpyQRytO7v3t3dVbOiIOxkEb7qc7cEu7HHVn9vM1yBg1p+KmWmYM+9t+cW6A/uKp
wQGJZU23agvjNz9IBd0ivHhy5HBnYA3Ki/YNr185CFskhnpsVBb5iuyss45/DdW3
0xXeq3sXDOxxt38d54y+OnROawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJxXJep
5BAhQ/T+XSwnwq+01MpnMB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF
N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj
V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf
ZmUtcWFNQi10QndMampjV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWGArUoRfeuGRVG5s1WlpBpCtrSN3oeWoF0sGXrpZVae4iHrzEyrqzAg1BCZV
MPsit5/hsBVExrzl5BNgYKkDeXqgxQcVZDexVPmvDeprBdvcMBjSdy7Uq1Da0Tnv
QWcAJdDnTMZPu44gtzXxYIS/ay4zL4dbBwyabsXBx0axgMTzhA9FjPZ3wnEPjV5c
JHlUMs8pK7zI/zTNhgz2bAOdDSvH1MsT6fH0vuC7fDyau4mbYjdIPVO6ca57l5Py
T+D1M5R4VpiX6A0aBuboMARYM4eu++rBIUTKb0J4R9Nl2B9e0dcGV8f0CM/c7o2Z
qJE8CAjUVXwUwW8glAcFZ73aPA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:20:56 2026 by rpki-client