Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
File:                     weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json)
Hash identifier:          ruXo6M1mBMoll4K/bk1cTPtqpDRyFD4tggXTAblicFk=
Subject key identifier:   34:80:6A:9E:54:94:C2:2A:D3:61:25:29:24:C7:21:37:3A:C7:01:F2
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Certificate issuer:       /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial:       2A1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
Manifest number:          29E1
Signing time:             Sat 24 Oct 2026 15:32:55 +0000
Manifest this update:     Sat 24 Oct 2026 15:32:55 +0000
Manifest next update:     Sat 31 Oct 2026 15:32:55 +0000
Files and hashes:         1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: H5Uldu7AF+JB6qVTr9zf17+/CsfpZJv9bxwjbNMs8yA=)
                          2: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=)
                          3: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=)
                          4: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
                          rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 15:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10781 (0x2a1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
        Validity
            Not Before: Oct 24 15:32:55 2026 GMT
            Not After : Oct 31 15:32:55 2026 GMT
        Subject: CN=6adccfa7-54fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:00:1b:ea:ea:e4:ec:e9:94:75:fb:aa:1c:
                    f8:44:2c:9a:69:3a:e3:57:5b:69:f6:d3:ae:48:f2:
                    bb:41:b8:95:6e:d4:0f:38:4e:70:c6:83:6c:11:70:
                    d1:6e:7f:20:c2:ff:e6:42:38:7a:1f:ff:fc:d2:85:
                    37:5a:95:46:50:76:66:2c:0a:f7:e6:4a:08:98:09:
                    35:21:45:14:36:d1:3f:7d:b7:c3:d2:4b:de:db:01:
                    44:a6:9c:f3:63:4b:5c:da:90:30:c1:e3:b3:de:04:
                    ce:c2:49:be:db:1e:9f:40:c5:99:32:b2:9d:90:13:
                    56:e7:ac:f1:28:3f:b1:7b:1e:f8:1c:9b:0f:44:e6:
                    fc:99:e4:33:6c:50:a4:5a:54:f7:99:49:18:4d:fb:
                    c0:80:37:ad:39:6e:d7:1b:de:b3:03:63:c4:5a:b7:
                    8a:d9:aa:d4:a9:5c:b5:94:52:c8:83:1a:a9:2d:30:
                    f5:84:e5:d4:9b:51:08:35:11:46:76:25:9b:eb:23:
                    54:3b:2f:fd:d2:92:4d:d4:a4:b9:27:38:26:71:b6:
                    7d:89:3d:09:48:e1:b0:00:65:14:02:0c:95:a8:07:
                    01:1b:31:5f:a4:e4:65:59:16:43:84:e6:5b:19:e8:
                    8d:3c:6f:3e:d8:24:cf:6d:86:00:6a:14:1d:64:61:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:80:6A:9E:54:94:C2:2A:D3:61:25:29:24:C7:21:37:3A:C7:01:F2
            X509v3 Authority Key Identifier:
                keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:75:ef:7d:e0:9e:08:c3:5f:1e:03:36:00:63:21:98:55:2c:
         3e:85:56:74:14:97:3f:b0:47:4b:07:be:26:cd:93:10:51:30:
         13:ac:c8:04:b9:cd:7d:80:ec:87:2e:ac:77:99:f3:71:cf:aa:
         fc:d2:6e:9b:5c:8e:db:8f:e5:2e:1d:38:c8:ce:39:54:95:b1:
         a2:23:01:15:6c:fc:80:cb:17:70:29:62:20:a6:12:44:5e:73:
         7e:69:b6:79:b0:7f:69:16:43:f1:59:91:a2:28:28:2a:9a:45:
         3b:40:06:c4:32:cd:b2:d7:0e:d2:bf:89:8a:c4:dc:46:a8:09:
         75:d0:18:b7:5d:70:9f:c7:bf:fc:b8:e0:3a:93:fb:c2:50:0e:
         11:1a:2e:2c:0a:ff:5b:69:58:ee:4f:6d:53:03:70:ed:82:05:
         07:3e:7e:7b:45:ed:2d:31:83:dd:b8:1a:99:0b:d5:fb:58:9f:
         cf:23:43:ba:e0:15:8a:a5:98:0b:e5:5f:de:bc:98:0a:12:51:
         54:eb:be:06:21:73:84:0e:ed:7c:e3:0b:13:0e:83:4f:f3:19:
         44:e9:96:56:af:b8:8f:2a:cf:7f:f9:00:4b:aa:ba:a5:87:a8:
         c6:29:f2:96:5e:d4:43:d8:44:20:b8:76:f5:84:51:be:f8:75:
         86:b5:f8:5e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2
NzIzQjYwQUQwHhcNMjYxMDI0MTUzMjU1WhcNMjYxMDMxMTUzMjU1WjAYMRYwFAYD
VQQDEw02YWRjY2ZhNy01NGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApxAAG+rq5OzplHX7qhz4RCyaaTrjV1tp9tOuSPK7QbiVbtQPOE5wxoNsEXDR
bn8gwv/mQjh6H//80oU3WpVGUHZmLAr35koImAk1IUUUNtE/fbfD0kve2wFEppzz
Y0tc2pAwweOz3gTOwkm+2x6fQMWZMrKdkBNW56zxKD+xex74HJsPROb8meQzbFCk
WlT3mUkYTfvAgDetOW7XG96zA2PEWreK2arUqVy1lFLIgxqpLTD1hOXUm1EINRFG
diWb6yNUOy/90pJN1KS5JzgmcbZ9iT0JSOGwAGUUAgyVqAcBGzFfpORlWRZDhOZb
GeiNPG8+2CTPbYYAahQdZGFqCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDSAap5U
lMIq02ElKSTHITc6xwHyMB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw
QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f
dkJoM0d1eUxZQUpuSTdZSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO3XvfeCeCMNfHgM2AGMhmFUsPoVWdBSXP7BHSwe+Js2TEFEwE6zIBLnNfYDs
hy6sd5nzcc+q/NJum1yO24/lLh04yM45VJWxoiMBFWz8gMsXcCliIKYSRF5zfmm2
ebB/aRZD8VmRoigoKppFO0AGxDLNstcO0r+JisTcRqgJddAYt11wn8e//LjgOpP7
wlAOERouLAr/W2lY7k9tUwNw7YIFBz5+e0XtLTGD3bgamQvV+1ifzyNDuuAViqWY
C+Vf3ryYChJRVOu+BiFzhA7tfOMLEw6DT/MZROmWVq+4jyrPf/kAS6q6pYeoxiny
ll7UQ9hEILh29YRRvvh1hrX4Xg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:59:07 2026 by rpki-client