Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
File:                     rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json)
Hash identifier:          gYetWrJpMCdFlf9ZVMOv6+YD5J5+qxGYAFowszk+m5c=
Subject key identifier:   27:25:7D:CE:54:DE:3C:D3:E8:98:8B:B0:6D:C0:15:2F:D0:23:61:A4
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Certificate issuer:       /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial:       13C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
Manifest number:          139D
Signing time:             Fri 04 Sep 2026 16:55:54 +0000
Manifest this update:     Fri 04 Sep 2026 16:55:54 +0000
Manifest next update:     Fri 11 Sep 2026 16:55:54 +0000
Files and hashes:         1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: ivq0Ino7SPH9D0Y2G2OPqxM0znN+VBlDGsdNUvaulH0=)
                          2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: azHcEZz2GBJVjDyR8Vdr2A5zsoqu99TMJIuTeQ/WvfY=)
                          3: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: VSOMGpR0/e2J9EQLKTIhVqJ/wQMqC0LOmUgq8KK0Szk=)
                          4: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: XY8B3tTzPyJBZMYoI9Ehi8tJlU71I3ce0cvFxvp+s6U=)
                          5: 403398AA233111EEAF768F66C4F9AE02.roa (hash: Y52+tRvMTfL460RUNVYk3L8TtXM2/GdPu6P2ErCDVWQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5063 (0x13c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
        Validity
            Not Before: Sep  4 16:55:54 2026 GMT
            Not After : Sep 11 16:55:54 2026 GMT
        Subject: CN=6a9af81a-fc68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:45:86:93:b3:12:a5:cc:96:b2:88:64:66:
                    f2:3d:29:92:2c:4d:91:94:96:a2:10:96:13:0d:68:
                    d9:bb:d5:71:6d:fc:43:25:87:36:c2:f3:de:2b:6e:
                    3d:d7:ae:6a:ca:59:49:a6:dd:78:78:3b:32:fa:a2:
                    cd:53:0a:d4:b5:ec:5f:04:5d:21:3b:3c:d1:09:6d:
                    fa:7b:ea:ff:a4:2a:40:f3:7f:3f:17:e9:13:5c:51:
                    b7:15:d9:c6:c2:4c:5a:74:6a:8b:94:f3:82:41:da:
                    2d:fe:4a:f3:39:6e:6f:66:b5:77:d9:d6:92:55:27:
                    e1:6e:a6:93:bd:dd:3b:99:a0:1c:71:f9:92:af:ee:
                    d8:c4:87:40:b3:21:ee:b7:eb:b1:c6:41:5e:12:f2:
                    8f:86:1b:71:84:9a:1b:e7:58:bc:46:0f:3e:cd:10:
                    c4:45:23:d9:4a:02:42:74:75:83:f3:6e:d5:c8:3a:
                    4b:03:f9:75:38:6e:0b:ce:3a:58:11:9a:b7:6e:9a:
                    60:5e:1c:ba:f9:e4:a8:f0:59:14:54:a2:38:df:04:
                    39:e5:e4:ab:9b:87:0b:a1:1b:1e:32:21:b8:f1:a1:
                    ce:fe:31:60:82:74:20:aa:24:dc:de:38:82:c9:29:
                    67:76:28:73:f6:93:11:b4:ee:2b:01:f8:86:59:5a:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:7D:CE:54:DE:3C:D3:E8:98:8B:B0:6D:C0:15:2F:D0:23:61:A4
            X509v3 Authority Key Identifier:
                keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:99:7a:37:c1:9f:9d:a5:78:39:a7:90:e0:1e:1e:fd:b1:
         fe:88:96:a4:d7:9b:84:7e:fe:6a:d8:e9:4f:5e:af:85:7f:b6:
         00:82:0a:6a:1d:31:c4:51:f8:52:bc:d6:b8:89:cf:85:5e:62:
         d2:79:4e:4c:91:1c:6e:f9:37:c9:f2:cb:21:37:e1:5f:3e:26:
         c4:5d:78:4a:7f:2f:9b:12:d6:04:fd:63:1e:28:96:a9:07:68:
         4a:24:a6:73:f9:a1:fc:e7:04:61:bc:0d:58:5f:a3:fa:f6:92:
         f8:1d:64:1b:11:7c:d0:39:b1:77:d8:46:4e:d0:c8:d7:71:1a:
         39:4e:31:ed:0c:89:66:96:ab:eb:9e:ee:a2:0b:f0:24:15:1e:
         ec:58:c0:55:a2:c4:3e:76:82:5f:49:f8:11:c2:4a:3a:cf:23:
         ce:43:da:4b:1e:52:fe:77:50:99:98:27:d8:72:53:eb:8e:ef:
         54:10:07:ed:38:6c:99:31:2c:72:2e:a2:50:41:7b:ee:33:d7:
         a8:76:a0:2e:42:c6:9d:b6:55:1c:a1:06:a1:81:2e:f6:d2:ba:
         8a:fe:13:92:89:50:c1:0a:2f:d4:9c:cc:62:b0:b1:22:5f:f8:
         ad:fc:37:5e:15:d6:5d:c9:d3:7d:e9:01:6e:73:f6:87:f6:69:
         69:9f:1d:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF
QzhGOUQzNjcwHhcNMjYwOTA0MTY1NTU0WhcNMjYwOTExMTY1NTU0WjAYMRYwFAYD
VQQDEw02YTlhZjgxYS1mYzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyk5FhpOzEqXMlrKIZGbyPSmSLE2RlJaiEJYTDWjZu9VxbfxDJYc2wvPeK249
165qyllJpt14eDsy+qLNUwrUtexfBF0hOzzRCW36e+r/pCpA838/F+kTXFG3FdnG
wkxadGqLlPOCQdot/krzOW5vZrV32daSVSfhbqaTvd07maAccfmSr+7YxIdAsyHu
t+uxxkFeEvKPhhtxhJob51i8Rg8+zRDERSPZSgJCdHWD827VyDpLA/l1OG4LzjpY
EZq3bppgXhy6+eSo8FkUVKI43wQ55eSrm4cLoRseMiG48aHO/jFggnQgqiTc3jiC
ySlndihz9pMRtO4rAfiGWVqJgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCclfc5U
3jzT6JiLsG3AFS/QI2GkMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3
OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTQzNi9BMzBCNUE0QUM3OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15
YlhGV2d2c0VFMUhzajUwMmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoYeZejfBn52leDmnkOAeHv2x/oiWpNebhH7+atjpT16vhX+2AIIKah0xxFH4
UrzWuInPhV5i0nlOTJEcbvk3yfLLITfhXz4mxF14Sn8vmxLWBP1jHiiWqQdoSiSm
c/mh/OcEYbwNWF+j+vaS+B1kGxF80Dmxd9hGTtDI13EaOU4x7QyJZpar657uogvw
JBUe7FjAVaLEPnaCX0n4EcJKOs8jzkPaSx5S/ndQmZgn2HJT647vVBAH7ThsmTEs
ci6iUEF77jPXqHagLkLGnbZVHKEGoYEu9tK6iv4TkolQwQov1JzMYrCxIl/4rfw3
XhXWXcnTfekBbnP2h/ZpaZ8dKQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:26:25 2026 by rpki-client