Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
File:                     NAQf45nAdllht5_hJGlBcocgc7s.mft (raw, json)
Hash identifier:          6J42iymMuJqDRkOK/MqEPM6ARA231o15+XoteDqbmME=
Subject key identifier:   3A:70:03:41:91:B8:D2:00:84:A6:2B:2F:A0:C2:F8:C1:64:2F:1A:88
Authority key identifier: 34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB
Certificate issuer:       /CN=A913FD96/serialNumber=34041FE399C0765961B79FE124694172872073BB
Certificate serial:       0BB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
Manifest number:          0BA9
Signing time:             Fri 04 Sep 2026 18:58:30 +0000
Manifest this update:     Fri 04 Sep 2026 18:58:30 +0000
Manifest next update:     Fri 11 Sep 2026 18:58:30 +0000
Files and hashes:         1: NAQf45nAdllht5_hJGlBcocgc7s.crl (hash: +BSdtkFaHwNpvQwwFEAeSFqhgHb0Iyqpv2UUZHFkzC4=)
                          2: FC3B44CE519A11EAB1229A87C4F9AE02.roa (hash: R2rbolYd8fcNYY7tviKGs474hPNIpaUduVb/0JNP9tk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl
                          rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 18:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2995 (0xbb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FD96, serialNumber=34041FE399C0765961B79FE124694172872073BB
        Validity
            Not Before: Sep  4 18:58:30 2026 GMT
            Not After : Sep 11 18:58:30 2026 GMT
        Subject: CN=6a9b14d6-cc45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:09:5c:d6:f1:60:b1:52:36:43:43:69:17:
                    a2:b6:65:cd:7d:0e:92:7d:5e:ad:12:8f:14:ed:1a:
                    9b:7f:be:a5:31:c6:07:bf:f6:89:ea:1a:99:75:77:
                    df:ea:7e:da:c3:e9:c3:ff:6d:af:db:9e:e7:6f:06:
                    bc:da:07:95:73:97:92:12:f6:ae:64:d1:7b:fe:6b:
                    49:cf:ba:98:19:85:65:c5:2b:68:8d:c0:d6:78:7e:
                    2e:2a:87:9f:4b:1a:8a:7c:d6:17:2e:4d:6e:e5:18:
                    05:a4:39:80:ab:bb:b2:8f:62:3d:7a:91:db:5b:29:
                    09:81:42:04:61:69:99:fb:de:0c:b5:8a:cc:cd:d9:
                    a8:8f:97:a8:1e:d0:7b:1e:07:6d:e8:52:0f:4c:25:
                    44:15:21:06:9f:41:72:2c:86:7c:da:20:4a:dd:88:
                    f0:fb:c2:c6:14:4f:97:84:81:2c:19:fc:ac:b8:10:
                    ef:54:f0:bb:ed:71:e0:0d:a8:9a:a8:5a:80:da:c8:
                    e8:09:d9:f2:f2:d0:5e:3a:69:09:51:1c:1b:f5:bb:
                    24:23:60:f6:c6:9f:5c:3b:56:a3:54:fc:e9:9a:7e:
                    89:75:95:71:50:89:fd:e8:dd:be:9f:9f:06:e7:10:
                    f9:44:61:8a:57:ff:32:11:35:98:d3:9e:97:f7:d6:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:03:41:91:B8:D2:00:84:A6:2B:2F:A0:C2:F8:C1:64:2F:1A:88
            X509v3 Authority Key Identifier:
                keyid:34:04:1F:E3:99:C0:76:59:61:B7:9F:E1:24:69:41:72:87:20:73:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAQf45nAdllht5_hJGlBcocgc7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FD96/A624FC44519811EA97225983C4F9AE02/NAQf45nAdllht5_hJGlBcocgc7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a4:08:72:19:c0:39:8e:ce:0f:7c:5f:36:58:dd:11:ee:a5:
         b5:8c:c8:d4:de:9d:30:d6:17:df:21:51:45:8b:9b:bb:27:8d:
         fe:d3:41:0d:ff:59:9d:d9:10:70:60:9f:f2:86:77:2c:1f:76:
         83:c2:0e:26:a2:d9:c2:6c:94:b1:ee:e4:13:15:0c:f8:7c:14:
         58:eb:a0:ad:a2:24:d5:3f:45:b6:74:d6:cf:93:44:45:c2:ad:
         87:a4:61:8b:9b:b4:13:25:92:40:70:8d:5f:f8:2f:7f:62:7b:
         d2:ea:b3:4a:84:01:b9:c1:53:93:e7:2b:7d:3d:30:3c:2e:9a:
         a0:c7:2c:74:46:c0:29:08:5b:62:4a:dd:1f:a1:c2:50:64:2d:
         a3:f0:7d:cb:ee:66:9a:b7:e2:71:73:9c:fd:60:76:12:db:b4:
         1f:11:2c:38:fb:87:51:38:e1:80:93:56:6a:87:99:be:69:fe:
         d8:83:c6:38:fc:21:4f:08:46:27:4a:9f:8e:93:9c:ce:96:dd:
         60:f3:6e:6f:8b:26:14:9d:41:ef:aa:f9:b0:93:1e:8b:d7:87:
         72:c9:0b:fe:e3:dd:68:c8:4f:3f:a0:cc:27:e4:1c:f6:0a:30:
         ac:03:a5:f5:ba:f3:a4:7d:69:30:7a:71:f9:df:65:db:6c:83:
         5f:c9:21:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZEOTYxMTAvBgNVBAUTKDM0MDQxRkUzOTlDMDc2NTk2MUI3OUZFMTI0Njk0MTcy
ODcyMDczQkIwHhcNMjYwOTA0MTg1ODMwWhcNMjYwOTExMTg1ODMwWjAYMRYwFAYD
VQQDEw02YTliMTRkNi1jYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAui8JXNbxYLFSNkNDaReitmXNfQ6SfV6tEo8U7Rqbf76lMcYHv/aJ6hqZdXff
6n7aw+nD/22v257nbwa82geVc5eSEvauZNF7/mtJz7qYGYVlxStojcDWeH4uKoef
SxqKfNYXLk1u5RgFpDmAq7uyj2I9epHbWykJgUIEYWmZ+94MtYrMzdmoj5eoHtB7
Hgdt6FIPTCVEFSEGn0FyLIZ82iBK3Yjw+8LGFE+XhIEsGfysuBDvVPC77XHgDaia
qFqA2sjoCdny8tBeOmkJURwb9bskI2D2xp9cO1ajVPzpmn6JdZVxUIn96N2+n58G
5xD5RGGKV/8yETWY056X99Y+dwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpwA0GR
uNIAhKYrL6DC+MFkLxqIMB8GA1UdIwQYMBaAFDQEH+OZwHZZYbef4SRpQXKHIHO7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkQ5Ni9BNjI0RkM0NDUx
OTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRsbGh0NV9oSkdsQmNvY2dj
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05BUWY0NW5BZGxsaHQ1X2hKR2xCY29jZ2M3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkQ5Ni9BNjI0RkM0NDUxOTgxMUVBOTcyMjU5ODNDNEY5QUUwMi9OQVFmNDVuQWRs
bGh0NV9oSkdsQmNvY2djN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQqQIchnAOY7OD3xfNljdEe6ltYzI1N6dMNYX3yFRRYubuyeN/tNBDf9ZndkQ
cGCf8oZ3LB92g8IOJqLZwmyUse7kExUM+HwUWOugraIk1T9FtnTWz5NERcKth6Rh
i5u0EyWSQHCNX/gvf2J70uqzSoQBucFTk+crfT0wPC6aoMcsdEbAKQhbYkrdH6HC
UGQto/B9y+5mmrficXOc/WB2Etu0HxEsOPuHUTjhgJNWaoeZvmn+2IPGOPwhTwhG
J0qfjpOczpbdYPNub4smFJ1B76r5sJMei9eHcskL/uPdaMhPP6DMJ+Qc9gowrAOl
9brzpH1pMHpx+d9l22yDX8kh8w==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:53 2026 by rpki-client