Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          OU6FjAqoJ35cWf2+nrjBhHSR+3rvcrO8b7RSI9/+LQU=
Subject key identifier:   C5:71:D0:90:C4:8B:64:C0:5D:6E:40:99:3F:BB:6B:62:E8:E6:9C:53
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       02DA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          02D4
Signing time:             Wed 21 Oct 2026 01:35:40 +0000
Manifest this update:     Wed 21 Oct 2026 01:35:40 +0000
Manifest next update:     Wed 28 Oct 2026 01:35:40 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: JCNzm8PzgYhH6QE/91dipBnEjm6Iw0Qj9lM3CW1N+VU=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: 7+Gv58zskCYKY8U8/3pkQdLUJ38W9+Ov4Vj6lTNdiOY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 01:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Oct 21 01:35:40 2026 GMT
            Not After : Oct 28 01:35:40 2026 GMT
        Subject: CN=6ad816ec-340d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:96:e9:46:be:d8:52:85:57:0e:2f:c5:7c:
                    0a:e4:7f:95:d1:41:3b:c0:83:fc:b6:14:11:40:8d:
                    53:e8:ef:09:a6:89:36:3b:62:28:fb:9f:a5:7c:38:
                    df:24:14:e8:5e:13:3d:0d:fd:30:7e:f8:b3:84:79:
                    e2:77:31:76:87:31:0f:fb:69:7d:ad:6a:d7:31:6c:
                    a4:cf:6b:61:c1:f1:73:2c:be:35:a6:0d:e5:7b:ca:
                    b8:c8:28:bc:8f:fd:f3:3a:bb:4a:24:75:9b:81:f4:
                    d3:df:50:4d:e9:1e:af:26:06:b2:98:9e:74:6e:dd:
                    75:2f:ca:c4:f3:05:c2:ca:c7:3b:a6:75:d9:83:48:
                    48:3e:ee:50:1a:94:24:ce:6a:26:b8:d7:fd:5f:9f:
                    2e:27:d6:b5:74:28:a2:48:da:e7:58:ab:b6:ef:b6:
                    39:8f:5a:f4:3b:5d:2a:b8:10:7c:41:89:72:e1:8c:
                    97:a9:fa:c9:cb:ba:3b:85:2f:69:31:5f:06:a6:e5:
                    72:88:cc:6d:6c:04:73:c9:d0:89:ae:2c:10:d2:f4:
                    d1:58:22:69:ff:a7:d1:0c:b2:0f:cc:43:5d:96:23:
                    75:56:1d:b9:23:63:ca:4e:9b:32:44:5d:54:2a:19:
                    5c:a6:4c:06:e2:91:74:9c:9a:70:db:84:0a:ca:86:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:71:D0:90:C4:8B:64:C0:5D:6E:40:99:3F:BB:6B:62:E8:E6:9C:53
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:08:48:cf:27:3e:dc:9c:90:7c:95:09:42:ad:c2:7d:3e:04:
         46:2a:13:ed:5a:ba:d6:16:4d:97:6a:53:bd:fd:30:d4:6c:77:
         fe:c7:3b:1a:90:6c:98:41:38:83:7c:86:4e:79:a6:2c:7c:cd:
         d8:c2:14:49:9e:25:6d:c2:da:05:7d:bc:15:11:e8:e1:c2:cc:
         c9:d2:c9:3d:fa:a8:ee:fb:54:cf:db:0c:19:3d:58:d7:77:7c:
         b6:38:a4:a6:52:1b:8b:ef:95:95:72:92:99:ec:c8:d0:f2:30:
         93:97:36:fb:4d:a3:13:4c:a0:d1:e0:0f:c1:28:83:3a:91:fa:
         86:f5:7e:35:ec:95:aa:ab:89:ad:28:e7:a9:b1:5e:20:6c:69:
         5e:58:51:07:e1:c3:75:3c:5b:95:7a:28:ab:2c:50:1e:ea:4c:
         fa:e2:c6:04:cb:2b:a2:e5:91:81:d4:c8:5c:30:67:34:b8:1b:
         35:52:5a:8e:e5:7d:86:bd:71:4e:cc:b9:29:1c:9b:99:4a:07:
         21:a7:83:e4:ab:da:67:7b:5b:8f:6f:6b:59:76:7d:7f:e3:e0:
         6f:7c:ab:38:34:11:88:98:b4:59:34:af:7e:d0:40:1b:b9:21:
         4f:0f:a9:1c:c5:1b:64:2f:dd:95:3a:c0:7b:a1:89:a2:7b:7a:
         4d:6d:20:3c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFCMDAxMTAvBgNVBAUTKEJCRDJFOUQ5MTNDNjQ1QzhBMDUxOTI0NzRDRkZBODk2
QkI5QTRFQTYwHhcNMjYxMDIxMDEzNTQwWhcNMjYxMDI4MDEzNTQwWjAYMRYwFAYD
VQQDEw02YWQ4MTZlYy0zNDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGGW6Ua+2FKFVw4vxXwK5H+V0UE7wIP8thQRQI1T6O8Jpok2O2Io+5+lfDjf
JBToXhM9Df0wfvizhHnidzF2hzEP+2l9rWrXMWykz2thwfFzLL41pg3le8q4yCi8
j/3zOrtKJHWbgfTT31BN6R6vJgaymJ50bt11L8rE8wXCysc7pnXZg0hIPu5QGpQk
zmomuNf9X58uJ9a1dCiiSNrnWKu277Y5j1r0O10quBB8QYly4YyXqfrJy7o7hS9p
MV8GpuVyiMxtbARzydCJriwQ0vTRWCJp/6fRDLIPzENdliN1Vh25I2PKTpsyRF1U
KhlcpkwG4pF0nJpw24QKyoY92QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVx0JDE
i2TAXW5AmT+7a2Lo5pxTMB8GA1UdIwQYMBaAFLvS6dkTxkXIoFGSR0z/qJa7mk6m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUIwMC8xM0NBNTE5Mjc1
RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1JjaWdVWkpIVFAtb2xydWFU
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3U5THAyUlBHUmNpZ1VaSkhUUC1vbHJ1YVRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUIwMC8xM0NBNTE5Mjc1RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1Jj
aWdVWkpIVFAtb2xydWFUcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAighIzyc+3JyQfJUJQq3CfT4ERioT7Vq61hZNl2pTvf0w1Gx3/sc7GpBsmEE4
g3yGTnmmLHzN2MIUSZ4lbcLaBX28FRHo4cLMydLJPfqo7vtUz9sMGT1Y13d8tjik
plIbi++VlXKSmezI0PIwk5c2+02jE0yg0eAPwSiDOpH6hvV+NeyVqquJrSjnqbFe
IGxpXlhRB+HDdTxblXooqyxQHupM+uLGBMsrouWRgdTIXDBnNLgbNVJajuV9hr1x
Tsy5KRybmUoHIaeD5KvaZ3tbj29rWXZ9f+Pgb3yrODQRiJi0WTSvftBAG7khTw+p
HMUbZC/dlTrAe6GJont6TW0gPA==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:35:32 2026 by rpki-client