Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
File:                     mqwVb6kYtDBXQdrp1duikzdGzoc.mft (raw, json)
Hash identifier:          /uaBrmafhj3reWZ21PaY5hBGPCMUKjC0udWvXTNZf9A=
Subject key identifier:   EB:F4:07:A8:C4:50:B8:67:5B:83:C0:F4:8F:0D:F7:46:5C:04:70:38
Authority key identifier: 9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87
Certificate issuer:       /CN=A9133CD2/serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
Manifest number:          02A8
Signing time:             Sat 05 Sep 2026 01:28:50 +0000
Manifest this update:     Sat 05 Sep 2026 01:28:50 +0000
Manifest next update:     Sat 12 Sep 2026 01:28:50 +0000
Files and hashes:         1: mqwVb6kYtDBXQdrp1duikzdGzoc.crl (hash: Z7CtTMEeNbvU8zWW1PItzYLih61xKz4z1SM6UUiIxoo=)
                          2: A46B24207D3811EF8EE86E6BC4F9AE02.roa (hash: nko7oXcOwkjYvH5kMeaot9wb2VmnzHR8v/MSp3IbrH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl
                          rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 01:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133CD2, serialNumber=9AAC156FA918B4305741DAE9D5DBA2933746CE87
        Validity
            Not Before: Sep  5 01:28:50 2026 GMT
            Not After : Sep 12 01:28:50 2026 GMT
        Subject: CN=6a9b7052-0774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:34:fb:ff:38:d6:a2:4c:8a:31:5d:a9:ac:
                    ab:87:84:9c:d1:f9:9d:af:00:6f:e2:0f:b2:75:2e:
                    a7:01:d9:cb:1a:f9:c9:4d:da:88:19:82:dc:fe:94:
                    14:49:ac:27:a0:55:b9:1b:56:e1:58:57:a9:b8:2e:
                    0f:64:e2:3f:07:1e:67:4a:bf:e5:a2:39:94:91:15:
                    b1:16:e4:ba:51:c5:17:d1:de:d8:95:1c:64:0a:b1:
                    2c:f8:04:81:b7:13:f5:79:5a:79:b5:14:54:ba:b7:
                    88:c1:95:20:2d:79:e8:cf:d3:6c:26:4d:56:72:e7:
                    b9:c1:d3:14:48:54:ec:8b:03:b4:5d:c0:34:a1:e0:
                    ed:f5:ca:90:cd:7c:fd:c6:2b:e8:68:d6:01:c5:da:
                    77:5a:31:cf:7b:4c:bd:8f:13:da:ea:4e:d2:d2:76:
                    f2:2a:39:b0:6f:e0:d2:a3:ff:bd:0f:0f:9c:a7:2a:
                    db:43:32:6d:36:21:9b:37:e4:31:54:4b:2c:0d:f4:
                    e9:6b:d5:e9:a5:24:59:bc:a3:10:cc:96:bb:52:22:
                    98:b4:fd:70:f3:b2:23:ba:15:06:6b:82:59:da:97:
                    ad:f5:95:47:66:6e:9b:df:9f:f9:32:24:49:54:b2:
                    60:3c:44:c6:36:5f:10:37:6b:ec:92:02:1c:a9:49:
                    2b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F4:07:A8:C4:50:B8:67:5B:83:C0:F4:8F:0D:F7:46:5C:04:70:38
            X509v3 Authority Key Identifier:
                keyid:9A:AC:15:6F:A9:18:B4:30:57:41:DA:E9:D5:DB:A2:93:37:46:CE:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqwVb6kYtDBXQdrp1duikzdGzoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133CD2/45F3AA7EAC1611EDB947B860C4F9AE02/mqwVb6kYtDBXQdrp1duikzdGzoc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d8:91:ef:4d:ea:43:b4:2b:ba:27:5c:b0:76:3d:c4:d3:c9:
         b9:98:77:e2:b8:b2:95:0e:db:d0:ba:2f:3f:e8:48:be:f8:fd:
         27:34:91:ff:ca:a6:44:94:27:db:c2:95:da:b8:fc:e5:ed:61:
         7c:98:5f:fc:8e:8d:0d:31:97:ce:0f:74:27:c6:df:b3:96:42:
         61:7e:79:3c:f8:bb:2b:78:e2:eb:31:e2:ba:8b:34:b8:d2:b5:
         b2:49:2d:a2:b5:a0:49:1c:9e:a3:75:63:96:ae:62:6a:98:34:
         79:94:83:ec:4f:c0:43:1d:63:cb:49:25:cc:5a:1a:ab:08:16:
         50:16:e2:2b:31:96:f8:ac:8f:28:01:da:02:b1:cb:ae:17:f7:
         08:79:41:9e:b2:bc:9e:48:92:f8:48:8d:4d:0a:15:8a:ff:ba:
         25:0e:ec:8d:6c:9b:a7:25:7d:5a:5a:34:6d:1f:00:ba:5c:e6:
         7b:e4:9e:b0:1c:65:08:9e:88:8f:f0:b4:34:db:95:01:cf:6d:
         07:99:ae:75:57:86:03:3c:d4:dc:4b:e3:2c:ab:cd:51:db:3d:
         cf:af:af:74:9f:91:27:b0:1e:2b:e7:ae:d4:ff:41:92:90:29:
         a0:7e:41:7d:64:7b:75:f9:08:79:59:48:f8:17:9f:56:65:3f:
         5f:d7:ee:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzNDRDIxMTAvBgNVBAUTKDlBQUMxNTZGQTkxOEI0MzA1NzQxREFFOUQ1REJBMjkz
Mzc0NkNFODcwHhcNMjYwOTA1MDEyODUwWhcNMjYwOTEyMDEyODUwWjAYMRYwFAYD
VQQDEw02YTliNzA1Mi0wNzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjo0+/841qJMijFdqayrh4Sc0fmdrwBv4g+ydS6nAdnLGvnJTdqIGYLc/pQU
SawnoFW5G1bhWFepuC4PZOI/Bx5nSr/lojmUkRWxFuS6UcUX0d7YlRxkCrEs+ASB
txP1eVp5tRRUureIwZUgLXnoz9NsJk1Wcue5wdMUSFTsiwO0XcA0oeDt9cqQzXz9
xivoaNYBxdp3WjHPe0y9jxPa6k7S0nbyKjmwb+DSo/+9Dw+cpyrbQzJtNiGbN+Qx
VEssDfTpa9XppSRZvKMQzJa7UiKYtP1w87IjuhUGa4JZ2pet9ZVHZm6b35/5MiRJ
VLJgPETGNl8QN2vskgIcqUkrvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOv0B6jE
ULhnW4PA9I8N90ZcBHA4MB8GA1UdIwQYMBaAFJqsFW+pGLQwV0Ha6dXbopM3Rs6H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0NEMi80NUYzQUE3RUFD
MTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXREQlhRZHJwMWR1aWt6ZEd6
b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21xd1ZiNmtZdERCWFFkcnAxZHVpa3pkR3pvYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
M0NEMi80NUYzQUE3RUFDMTYxMUVEQjk0N0I4NjBDNEY5QUUwMi9tcXdWYjZrWXRE
QlhRZHJwMWR1aWt6ZEd6b2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo9iR703qQ7QruidcsHY9xNPJuZh34riylQ7b0LovP+hIvvj9JzSR/8qmRJQn
28KV2rj85e1hfJhf/I6NDTGXzg90J8bfs5ZCYX55PPi7K3ji6zHiuos0uNK1skkt
orWgSRyeo3Vjlq5iapg0eZSD7E/AQx1jy0klzFoaqwgWUBbiKzGW+KyPKAHaArHL
rhf3CHlBnrK8nkiS+EiNTQoViv+6JQ7sjWybpyV9Wlo0bR8Aulzme+SesBxlCJ6I
j/C0NNuVAc9tB5mudVeGAzzU3EvjLKvNUds9z6+vdJ+RJ7AeK+eu1P9BkpApoH5B
fWR7dfkIeVlI+BefVmU/X9fu5w==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:15:05 2026 by rpki-client