Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File:                     q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier:          Yf+Hvk1imSIFe2ajJrlIiCMMeNZaCGDwS5/NBv1bb9w=
Subject key identifier:   10:90:A3:75:CD:3F:24:0F:C7:36:07:D1:02:01:62:DC:9C:A8:1A:C8
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       0858
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number:          0839
Signing time:             Mon 02 Nov 2026 21:21:46 +0000
Manifest this update:     Mon 02 Nov 2026 21:21:46 +0000
Manifest next update:     Mon 09 Nov 2026 21:21:46 +0000
Files and hashes:         1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: 4iVLN1nzW/ZzJQbofCM3vSLf0oiAkRKiMfJQg2A7xUk=)
                          2: 56D3C71687AB11F095613811C4F9AE02.roa (hash: /iyD3hld6gjpTGLsl0+ygpbYTM+w2T0GBHJEgaI/WgU=)
                          3: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: 73c7rPkr5oOJDjoo4nNiA+fWKV7P9/3x9TJs2lmqH+g=)
                          4: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 21:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: Nov  2 21:21:46 2026 GMT
            Not After : Nov  9 21:21:46 2026 GMT
        Subject: CN=6ae8feea-2f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:05:44:ea:8a:8e:f7:74:0a:a6:04:5c:ca:
                    35:bd:62:75:c0:e6:8f:45:c8:b9:a6:bd:49:a5:b7:
                    76:26:61:44:07:f0:15:e7:37:0f:17:48:e7:18:84:
                    a2:71:fd:f8:9a:db:44:c2:c1:63:46:4b:e4:97:e1:
                    c6:4f:39:c5:ee:ac:bc:be:b7:2c:1f:c0:c9:10:25:
                    22:27:7e:0b:95:55:30:5f:17:50:05:e3:35:74:33:
                    09:7d:6b:89:5d:db:d5:9b:a9:30:e5:79:7a:ef:c2:
                    12:46:52:ab:8f:2e:8a:a4:b3:f1:21:08:81:7a:99:
                    81:15:e3:98:32:2e:1e:81:ae:dd:8c:cd:25:51:77:
                    8b:b2:b0:09:8e:dd:fe:57:4a:7a:eb:a3:17:f0:6b:
                    86:39:e7:c4:e5:b2:35:ba:df:b5:e4:0f:f6:58:0b:
                    15:69:a7:d3:79:b2:23:70:6e:1f:f4:f2:04:a9:d1:
                    ff:71:ef:2e:49:54:7d:d5:c6:a7:74:e9:1f:6f:73:
                    8d:ff:0e:a5:43:26:26:11:5a:e6:6a:93:8f:0c:f1:
                    97:bc:7c:01:45:23:0b:00:15:3e:dd:b8:4e:b3:fb:
                    15:f0:ec:60:27:ac:01:7e:d1:2e:40:21:0e:67:a5:
                    51:e5:53:b0:47:25:7b:28:6a:4e:e3:5c:d3:40:ad:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:90:A3:75:CD:3F:24:0F:C7:36:07:D1:02:01:62:DC:9C:A8:1A:C8
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:37:68:00:08:18:c7:ff:2d:46:49:e1:f3:c2:9c:c2:cc:
         14:b5:01:83:8a:01:30:fd:05:90:f6:13:a5:27:ed:9c:89:db:
         e6:c1:2f:25:f9:75:88:74:cc:b8:c5:c4:ec:81:93:27:4a:48:
         7c:2b:64:5a:10:1f:66:74:08:24:fd:3d:f2:9d:a6:fc:ae:d1:
         4e:d8:f5:21:e7:5d:66:5a:3a:09:1f:6b:f0:54:7e:6e:10:9c:
         7e:df:c5:f6:2b:df:a3:29:91:d6:48:2d:56:d8:88:f0:25:25:
         af:e7:b4:36:8f:7b:a5:5d:44:82:52:32:dd:1a:62:89:a5:50:
         6b:6b:ac:2f:36:2b:c5:d5:ec:ed:66:15:76:7c:1a:a1:f8:01:
         9e:7f:50:b7:1a:2b:ef:c8:92:34:42:d9:48:d6:38:6d:9c:ab:
         79:d5:d2:2e:80:b5:0c:56:c4:d8:89:e4:06:3f:6c:d2:a5:7a:
         b8:56:e1:d3:de:84:66:f1:fc:c0:07:17:23:34:2f:f1:24:14:
         ce:b6:9e:36:fa:74:66:6f:50:e9:1b:54:bd:e8:b7:21:15:f9:
         58:b2:5f:00:f6:24:d9:48:6b:d4:e8:7b:f5:12:32:25:2d:c3:
         e5:68:8a:58:2e:30:21:c7:fb:32:1d:81:41:80:2f:56:4c:89:
         23:d0:08:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTVGMTUxMTAvBgNVBAUTKEFCNTM1RTEzMjg4NEJDQTM0NUY3QUY2OTEzQUIwQTM5
Nzc2NUU3QTkwHhcNMjYxMTAyMjEyMTQ2WhcNMjYxMTA5MjEyMTQ2WjAYMRYwFAYD
VQQDEw02YWU4ZmVlYS0yZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmO8FROqKjvd0CqYEXMo1vWJ1wOaPRci5pr1Jpbd2JmFEB/AV5zcPF0jnGISi
cf34mttEwsFjRkvkl+HGTznF7qy8vrcsH8DJECUiJ34LlVUwXxdQBeM1dDMJfWuJ
XdvVm6kw5Xl678ISRlKrjy6KpLPxIQiBepmBFeOYMi4ega7djM0lUXeLsrAJjt3+
V0p666MX8GuGOefE5bI1ut+15A/2WAsVaafTebIjcG4f9PIEqdH/ce8uSVR91can
dOkfb3ON/w6lQyYmEVrmapOPDPGXvHwBRSMLABU+3bhOs/sV8OxgJ6wBftEuQCEO
Z6VR5VOwRyV7KGpO41zTQK1NFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCQo3XN
PyQPxzYH0QIBYtycqBrIMB8GA1UdIwQYMBaAFKtTXhMohLyjRfevaROrCjl3Zeep
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYxNS9GRkVEMjc5NDNB
OTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZLTkY5NjlwRTZzS09YZGw1
NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ExTmVFeWlFdktORjk2OXBFNnNLT1hkbDU2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NUYxNS9GRkVEMjc5NDNBOTMxMUVCQUJERTIzMkZDNEY5QUUwMi9xMU5lRXlpRXZL
TkY5NjlwRTZzS09YZGw1NmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFXs3aAAIGMf/LUZJ4fPCnMLMFLUBg4oBMP0FkPYTpSftnInb5sEvJfl1iHTM
uMXE7IGTJ0pIfCtkWhAfZnQIJP098p2m/K7RTtj1IeddZlo6CR9r8FR+bhCcft/F
9ivfoymR1kgtVtiI8CUlr+e0No97pV1EglIy3RpiiaVQa2usLzYrxdXs7WYVdnwa
ofgBnn9Qtxor78iSNELZSNY4bZyredXSLoC1DFbE2InkBj9s0qV6uFbh096EZvH8
wAcXIzQv8SQUzraeNvp0Zm9Q6RtUvei3IRX5WLJfAPYk2Uhr1Oh79RIyJS3D5WiK
WC4wIcf7Mh2BQYAvVkyJI9AI1A==
-----END CERTIFICATE-----
Generated at Tue Nov 3 08:24:29 2026 by rpki-client