Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
File:                     U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json)
Hash identifier:          4OO6qCIx2RQrO9hgPwpEu6TtatYCV0IltUPLh7sOIqU=
Subject key identifier:   67:CD:47:0F:93:58:78:E9:73:04:97:F0:79:90:6D:1E:A9:A9:AB:73
Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E
Certificate issuer:       /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
Manifest number:          BD
Signing time:             Tue 13 Oct 2026 04:14:35 +0000
Manifest this update:     Tue 13 Oct 2026 04:14:34 +0000
Manifest next update:     Tue 20 Oct 2026 04:14:34 +0000
Files and hashes:         1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: rMwafAoLkc6qFGnGDU6nmJwlpbHjeDkEZWKZJjBE6D0=)
                          2: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (hash: U7Wzt+B8FiIYGK+MKYg3UA1qAj6b/eB2Gqgc5UuWazk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl
                          rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 04:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E
        Validity
            Not Before: Oct 13 04:14:34 2026 GMT
            Not After : Oct 20 04:14:34 2026 GMT
        Subject: CN=6acdb02b-4101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6d:53:e8:7f:57:f0:12:67:7c:2c:a4:a3:28:
                    2d:ac:31:43:9e:81:92:e1:49:0a:f9:34:50:66:d3:
                    af:fd:d2:15:c1:83:4c:bd:68:53:93:41:a0:2d:7c:
                    53:73:e7:5b:57:c2:ac:a3:a4:52:73:7d:c2:80:a9:
                    01:2d:86:2c:81:5d:dd:f8:b7:07:32:95:90:9c:9f:
                    12:d5:2d:81:bb:e0:c8:a5:b6:32:6a:f2:20:65:0d:
                    cd:78:c2:e0:cf:ae:f5:e4:9a:57:0f:f7:96:79:1d:
                    a5:e4:ed:85:c1:04:4a:a6:8f:bc:57:45:87:a1:70:
                    1c:22:9b:85:5a:a9:d1:cc:aa:27:5c:7c:b6:f5:80:
                    93:10:74:fb:ee:fb:6e:e8:df:d2:90:b8:58:64:6c:
                    25:1b:ef:60:29:1a:d2:3b:2d:e3:60:0a:69:b7:72:
                    1d:27:eb:f2:62:7c:ff:fb:73:cc:ec:86:7d:39:8e:
                    a4:ec:f2:1d:d8:bf:06:6c:51:09:66:97:67:33:9d:
                    76:af:48:bb:36:e1:66:4d:f1:d5:a9:b8:41:a5:9b:
                    58:31:48:ef:20:e3:2f:a6:b9:86:c7:b6:4f:ad:15:
                    21:4f:e7:3d:d1:82:45:6c:25:b7:37:5b:4e:1b:d2:
                    0b:47:f1:f6:fb:d4:9c:57:d5:17:fb:66:55:9c:68:
                    7b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CD:47:0F:93:58:78:E9:73:04:97:F0:79:90:6D:1E:A9:A9:AB:73
            X509v3 Authority Key Identifier:
                keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:30:90:98:11:e4:4e:40:70:9d:01:e4:c9:f6:45:bc:e8:d6:
         19:e3:17:ce:43:cc:ab:74:c6:db:85:65:18:68:3f:de:67:74:
         0d:74:4f:1e:24:65:06:1f:97:b7:0b:28:de:da:89:c1:82:cc:
         16:ab:07:1c:d0:de:0d:aa:ac:3e:c4:8c:62:cd:8d:1c:b3:ab:
         c9:67:dd:66:c6:3c:07:05:8d:0c:8e:a0:66:16:e0:d7:5c:35:
         47:c4:ef:1a:8d:f4:53:79:63:52:5d:08:d2:62:41:9c:f7:0b:
         4b:b5:9d:6a:b0:69:6c:aa:0e:e1:2e:80:cd:57:e6:80:f6:f3:
         c6:1d:bc:fa:5e:9a:6a:98:3c:50:4d:c1:8e:67:e6:00:eb:13:
         2d:49:5d:12:56:1f:c7:eb:98:ff:c8:8a:e9:65:8a:1c:28:19:
         99:cb:0b:8a:22:9c:a0:1b:74:38:95:6b:89:06:e8:ff:5a:9e:
         98:57:80:9d:c8:c5:a3:0d:44:8e:c2:0f:90:07:61:54:53:2f:
         0a:c6:9b:a7:57:d2:2d:f2:0e:4a:48:77:a0:dc:98:cc:70:d0:
         69:0a:45:2b:77:f8:64:b9:18:e4:48:50:e8:78:09:8e:22:6a:
         74:3a:4d:0a:c7:16:c5:75:59:c3:69:99:6a:29:fd:d2:c4:57:
         48:8b:c7:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE2MjMxMTAvBgNVBAUTKDUzNDkyQjk5RDZEMDdEOTQ5RjY5MEE5MzY5NUIxNDky
ODIxNjlBMkUwHhcNMjYxMDEzMDQxNDM0WhcNMjYxMDIwMDQxNDM0WjAYMRYwFAYD
VQQDEw02YWNkYjAyYi00MTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqG1T6H9X8BJnfCykoygtrDFDnoGS4UkK+TRQZtOv/dIVwYNMvWhTk0GgLXxT
c+dbV8Kso6RSc33CgKkBLYYsgV3d+LcHMpWQnJ8S1S2Bu+DIpbYyavIgZQ3NeMLg
z6715JpXD/eWeR2l5O2FwQRKpo+8V0WHoXAcIpuFWqnRzKonXHy29YCTEHT77vtu
6N/SkLhYZGwlG+9gKRrSOy3jYAppt3IdJ+vyYnz/+3PM7IZ9OY6k7PId2L8GbFEJ
ZpdnM512r0i7NuFmTfHVqbhBpZtYMUjvIOMvprmGx7ZPrRUhT+c90YJFbCW3N1tO
G9ILR/H2+9ScV9UX+2ZVnGh7owIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfNRw+T
WHjpcwSX8HmQbR6pqatzMB8GA1UdIwQYMBaAFFNJK5nW0H2Un2kKk2lbFJKCFpou
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTYyMy85MDcwMDBGNkFC
MjQxMUYwQUZDRTVEMkZDNEY5QUUwMi9VMGtybWRiUWZaU2ZhUXFUYVZzVWtvSVdt
aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21pNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTYyMy85MDcwMDBGNkFCMjQxMUYwQUZDRTVEMkZDNEY5QUUwMi9VMGtybWRiUWZa
U2ZhUXFUYVZzVWtvSVdtaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKTCQmBHkTkBwnQHkyfZFvOjWGeMXzkPMq3TG24VlGGg/3md0DXRPHiRlBh+X
twso3tqJwYLMFqsHHNDeDaqsPsSMYs2NHLOryWfdZsY8BwWNDI6gZhbg11w1R8Tv
Go30U3ljUl0I0mJBnPcLS7WdarBpbKoO4S6AzVfmgPbzxh28+l6aapg8UE3Bjmfm
AOsTLUldElYfx+uY/8iK6WWKHCgZmcsLiiKcoBt0OJVriQbo/1qemFeAncjFow1E
jsIPkAdhVFMvCsabp1fSLfIOSkh3oNyYzHDQaQpFK3f4ZLkY5EhQ6HgJjiJqdDpN
CscWxXVZw2mZain90sRXSIvHPg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:45:27 2026 by rpki-client