Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
File:                     jZoijMUvgA7lpDIwezQyxj2KnYc.mft (raw, json)
Hash identifier:          /3L17styUyL3qtp8oIZKGgOe1TtaMyAMHKAZYnyRE0k=
Subject key identifier:   46:D9:B5:45:8B:FB:1E:F0:FF:74:EA:A4:8C:11:02:B4:84:18:F6:87
Authority key identifier: 8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87
Certificate issuer:       /CN=A918FDBF/serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
Certificate serial:       1CD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
Manifest number:          1CC3
Signing time:             Sun 20 Sep 2026 16:07:44 +0000
Manifest this update:     Sun 20 Sep 2026 16:07:44 +0000
Manifest next update:     Sun 27 Sep 2026 16:07:44 +0000
Files and hashes:         1: jZoijMUvgA7lpDIwezQyxj2KnYc.crl (hash: 7FC0Ju3BaUqqR+ZtBRt/0nWHX3v7knFg9sBBCeoFmwY=)
                          2: 1D88BC36F8C711E6B6C42C6CC4F9AE02.roa (hash: v4wEm0svqrtD1IjR5j2FxmAlp4879SAjK2pcYq+HNMQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl
                          rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7377 (0x1cd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FDBF, serialNumber=8D9A228CC52F800EE5A432307B3432C63D8A9D87
        Validity
            Not Before: Sep 20 16:07:44 2026 GMT
            Not After : Sep 27 16:07:44 2026 GMT
        Subject: CN=6ab004d0-b6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:41:1e:7e:09:b4:6b:1b:34:a4:93:6a:86:
                    96:8e:9e:0e:ec:96:25:bb:89:45:79:b7:5c:d1:3c:
                    db:d0:41:d3:55:db:90:5c:f6:02:5f:fc:b5:f3:29:
                    e4:47:2e:b6:a8:1a:50:ff:98:6b:2b:01:f4:00:09:
                    9e:6f:c5:66:2f:2f:60:26:6d:84:76:d2:4d:1f:0b:
                    24:af:a4:47:0a:e9:d9:4f:30:29:bc:72:e6:8d:31:
                    59:39:f8:d1:71:9e:35:54:4e:3b:34:de:d6:b6:18:
                    08:61:8a:98:e2:77:48:2f:fc:4c:db:38:93:25:c4:
                    91:b7:84:da:6f:3b:28:d7:82:0b:5a:1a:69:c4:7c:
                    99:9c:0e:cc:55:a7:01:12:d8:e1:35:74:9d:56:88:
                    ee:ea:28:f2:58:89:03:b7:43:76:51:72:b2:66:4f:
                    e2:82:62:f3:a7:5a:76:74:93:4a:f2:ac:5e:5f:af:
                    c6:6b:05:bf:9b:8c:73:b4:7c:06:1d:c5:80:3a:51:
                    71:df:6d:cd:3c:9c:76:58:20:3c:1d:54:c4:da:08:
                    99:4c:c9:7a:6e:bb:fd:54:84:f1:15:83:38:ed:b3:
                    38:ca:89:89:47:f2:eb:03:f6:12:51:70:b3:27:42:
                    fb:34:cf:89:f0:22:ad:39:6a:4b:39:df:2d:e7:88:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D9:B5:45:8B:FB:1E:F0:FF:74:EA:A4:8C:11:02:B4:84:18:F6:87
            X509v3 Authority Key Identifier:
                keyid:8D:9A:22:8C:C5:2F:80:0E:E5:A4:32:30:7B:34:32:C6:3D:8A:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZoijMUvgA7lpDIwezQyxj2KnYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FDBF/99A30AF8F8C511E69EBC556AC4F9AE02/jZoijMUvgA7lpDIwezQyxj2KnYc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:82:0b:ba:12:7b:72:37:20:4e:01:fe:a0:f2:ea:13:ec:7a:
         47:4a:a5:26:2b:8f:09:01:63:24:8b:80:6a:44:95:a7:e2:54:
         85:7d:fa:4d:fd:ee:00:78:2f:2c:12:96:81:3f:c9:6b:ca:27:
         97:22:e1:8b:b0:00:5f:9a:48:e1:53:43:01:30:a4:18:05:a7:
         8d:9e:c2:4c:6d:7f:93:5a:c4:14:a7:17:13:57:ce:68:7a:3d:
         c6:d1:66:4c:33:b5:bc:e3:b0:2f:31:03:04:50:f6:22:86:98:
         64:a6:d3:f0:67:e0:24:10:dd:39:af:60:67:41:2d:2a:42:bf:
         33:9f:14:ec:d5:7e:90:6b:8a:49:7b:32:1b:c5:35:a7:ca:c8:
         3d:02:7e:dd:46:8a:21:1b:59:26:f4:7f:fd:8b:0c:fe:e0:a4:
         94:8f:70:d1:22:2c:4f:46:34:da:03:0e:09:8d:0f:2a:b8:29:
         f9:f3:1c:d5:72:46:12:13:66:54:46:61:db:53:39:c2:c2:20:
         e9:17:c5:1e:63:21:c5:da:be:b5:de:41:bf:83:2f:1d:c3:a8:
         f5:d9:e3:29:9a:4b:36:87:9e:87:b9:b5:0e:4a:c5:4c:27:59:
         0c:b3:71:04:38:58:c3:0c:b2:53:26:eb:43:eb:8f:fe:4d:df:
         51:8b:c8:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZEQkYxMTAvBgNVBAUTKDhEOUEyMjhDQzUyRjgwMEVFNUE0MzIzMDdCMzQzMkM2
M0Q4QTlEODcwHhcNMjYwOTIwMTYwNzQ0WhcNMjYwOTI3MTYwNzQ0WjAYMRYwFAYD
VQQDEw02YWIwMDRkMC1iNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvaJBHn4JtGsbNKSTaoaWjp4O7JYlu4lFebdc0Tzb0EHTVduQXPYCX/y18ynk
Ry62qBpQ/5hrKwH0AAmeb8VmLy9gJm2EdtJNHwskr6RHCunZTzApvHLmjTFZOfjR
cZ41VE47NN7WthgIYYqY4ndIL/xM2ziTJcSRt4Tabzso14ILWhppxHyZnA7MVacB
EtjhNXSdVoju6ijyWIkDt0N2UXKyZk/igmLzp1p2dJNK8qxeX6/GawW/m4xztHwG
HcWAOlFx323NPJx2WCA8HVTE2giZTMl6brv9VITxFYM47bM4yomJR/LrA/YSUXCz
J0L7NM+J8CKtOWpLOd8t54hDzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbZtUWL
+x7w/3TqpIwRArSEGPaHMB8GA1UdIwQYMBaAFI2aIozFL4AO5aQyMHs0MsY9ip2H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkRCRi85OUEzMEFGOEY4
QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdBN2xwREl3ZXpReXhqMktu
WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pab2lqTVV2Z0E3bHBESXdlelF5eGoyS25ZYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkRCRi85OUEzMEFGOEY4QzUxMUU2OUVCQzU1NkFDNEY5QUUwMi9qWm9pak1VdmdB
N2xwREl3ZXpReXhqMktuWWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVoILuhJ7cjcgTgH+oPLqE+x6R0qlJiuPCQFjJIuAakSVp+JUhX36Tf3uAHgv
LBKWgT/Ja8onlyLhi7AAX5pI4VNDATCkGAWnjZ7CTG1/k1rEFKcXE1fOaHo9xtFm
TDO1vOOwLzEDBFD2IoaYZKbT8GfgJBDdOa9gZ0EtKkK/M58U7NV+kGuKSXsyG8U1
p8rIPQJ+3UaKIRtZJvR//YsM/uCklI9w0SIsT0Y02gMOCY0PKrgp+fMc1XJGEhNm
VEZh21M5wsIg6RfFHmMhxdq+td5Bv4MvHcOo9dnjKZpLNoeeh7m1DkrFTCdZDLNx
BDhYwwyyUybrQ+uP/k3fUYvI8w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:49:48 2026 by rpki-client