Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
File:                     cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft (raw, json)
Hash identifier:          WT4nWWw9a1VM0cttmWFb7kMIn/XA9+Mk0lO/bWN/+o8=
Subject key identifier:   4D:DA:BF:82:F9:E1:48:ED:51:25:81:3F:28:84:85:38:0A:48:5F:F2
Authority key identifier: 70:F0:14:20:4B:55:62:3E:7C:B8:BF:D9:2C:2D:CA:D1:79:FA:BC:E5
Certificate issuer:       /CN=A9116679/serialNumber=70F014204B55623E7CB8BFD92C2DCAD179FABCE5
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
Manifest number:          1B
Signing time:             Mon 05 Oct 2026 09:27:20 +0000
Manifest this update:     Mon 05 Oct 2026 09:27:20 +0000
Manifest next update:     Mon 12 Oct 2026 09:27:20 +0000
Files and hashes:         1: cPAUIEtVYj58uL_ZLC3K0Xn6vOU.crl (hash: 3FvlGemg4M8L18hTTBvidbnsH6DbbS3ybGEtdnRim0E=)
                          2: 799FBC2C9B1A11F1A788EDC06311F970.roa (hash: mqjazDyZwdEQTpa+3NzwCacJOd2OekyYO3k/BMrGqTE=)
                          3: AC3E9B26B28011F1BB2A7E6C3711F970.roa (hash: eTVC3z5boUvm+yt+Jv1/aRKQsyKBvItk4M90uE+J8H0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.crl
                          rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116679, serialNumber=70F014204B55623E7CB8BFD92C2DCAD179FABCE5
        Validity
            Not Before: Oct  5 09:27:20 2026 GMT
            Not After : Oct 12 09:27:20 2026 GMT
        Subject: CN=6ac36d78-fde8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:9e:b1:0c:b1:95:af:0f:06:2b:18:d8:53:
                    1f:2f:33:be:e0:3e:b8:e3:94:4c:99:cc:b7:31:18:
                    7f:64:0a:12:44:23:10:d6:13:62:35:08:70:ef:0c:
                    af:e2:ca:e3:86:46:f3:49:7d:51:b7:0d:07:6c:70:
                    37:66:a4:da:88:22:85:91:c5:bc:d8:ff:a9:61:31:
                    7d:4d:9c:0a:27:85:8c:ad:43:94:e9:8c:2a:9d:9e:
                    37:30:c0:41:c8:32:c9:33:93:c3:51:72:f8:dc:da:
                    d9:9d:09:1f:67:62:b8:71:f7:23:e7:64:c0:4a:17:
                    f2:b9:d3:03:93:a8:31:85:45:87:9e:80:47:48:3a:
                    fd:79:7b:8f:cb:67:0e:89:8c:a2:c6:f3:18:5d:01:
                    6c:cc:8a:41:eb:59:d0:81:19:fe:98:f3:d8:00:76:
                    6c:e3:af:35:65:9f:a8:4c:44:19:30:e0:57:68:0a:
                    28:1e:8e:6f:d9:c5:0e:79:1b:34:96:5d:b4:15:23:
                    6f:09:b8:21:24:04:4a:4c:81:da:c5:c7:98:7f:de:
                    4e:f2:3b:1f:f1:5a:d4:6e:a4:57:1a:22:a8:74:25:
                    50:2c:65:5f:3a:eb:65:cb:7c:f9:65:67:00:5d:e3:
                    c0:e3:85:de:ff:fd:ea:0f:95:9c:23:f7:d1:9d:0b:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DA:BF:82:F9:E1:48:ED:51:25:81:3F:28:84:85:38:0A:48:5F:F2
            X509v3 Authority Key Identifier:
                keyid:70:F0:14:20:4B:55:62:3E:7C:B8:BF:D9:2C:2D:CA:D1:79:FA:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116679/26CA95A49B1911F1AF020DB86211F970/cPAUIEtVYj58uL_ZLC3K0Xn6vOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:09:c9:d7:40:f6:04:2a:81:08:e6:c8:b4:54:34:99:a0:36:
         2a:cd:46:28:cd:ac:78:1d:f1:d2:fa:7e:d4:38:fb:40:3c:45:
         1c:f4:ba:37:70:20:e7:3d:77:0c:04:55:cc:8a:27:2b:77:d4:
         ed:4a:d2:56:5b:7d:5c:7f:ef:d3:e8:26:c9:79:64:f9:64:61:
         27:c0:b2:a9:16:e9:84:5e:2d:e1:6f:7a:7c:31:05:b3:46:c9:
         df:40:bf:b5:55:c0:a8:df:c3:1d:2a:a9:53:ca:b8:f4:3c:e8:
         84:e2:4e:0d:80:3a:19:60:ac:a1:14:0a:62:ff:31:9d:03:74:
         b6:e7:6c:f0:0f:3e:67:f5:b4:1c:fe:f7:5a:87:1b:58:b3:d1:
         b5:3a:90:dd:b3:ae:43:6c:59:7e:48:f1:26:ca:b6:14:5a:5e:
         a6:3e:d8:6f:e7:34:98:05:24:1e:ba:60:6b:14:05:3f:2e:79:
         a2:0c:8a:21:3e:d8:db:61:ed:ad:57:f6:fb:a8:54:7a:ea:c1:
         41:26:83:9e:78:ea:cd:e2:93:0d:76:07:8d:72:00:a0:31:e2:
         96:7b:57:27:e0:52:57:0b:2f:5f:6b:64:82:32:3f:c4:38:85:
         df:ff:02:bf:6b:72:56:42:bc:e6:b6:8c:14:42:61:07:6c:ea:
         ee:bf:e1:79
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjY3OTExMC8GA1UEBRMoNzBGMDE0MjA0QjU1NjIzRTdDQjhCRkQ5MkMyRENBRDE3
OUZBQkNFNTAeFw0yNjEwMDUwOTI3MjBaFw0yNjEwMTIwOTI3MjBaMBgxFjAUBgNV
BAMTDTZhYzM2ZDc4LWZkZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDM5p6xDLGVrw8GKxjYUx8vM77gPrjjlEyZzLcxGH9kChJEIxDWE2I1CHDvDK/i
yuOGRvNJfVG3DQdscDdmpNqIIoWRxbzY/6lhMX1NnAonhYytQ5TpjCqdnjcwwEHI
Mskzk8NRcvjc2tmdCR9nYrhx9yPnZMBKF/K50wOTqDGFRYeegEdIOv15e4/LZw6J
jKLG8xhdAWzMikHrWdCBGf6Y89gAdmzjrzVln6hMRBkw4FdoCigejm/ZxQ55GzSW
XbQVI28JuCEkBEpMgdrFx5h/3k7yOx/xWtRupFcaIqh0JVAsZV8662XLfPllZwBd
48Djhd7//eoPlZwj99GdCyHrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTdq/gvnh
SO1RJYE/KISFOApIX/IwHwYDVR0jBBgwFoAUcPAUIEtVYj58uL/ZLC3K0Xn6vOUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Njc5LzI2Q0E5NUE0OUIx
OTExRjFBRjAyMERCODYyMTFGOTcwL2NQQVVJRXRWWWo1OHVMX1pMQzNLMFhuNnZP
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY1BBVUlFdFZZajU4dUxfWkxDM0swWG42dk9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
Njc5LzI2Q0E5NUE0OUIxOTExRjFBRjAyMERCODYyMTFGOTcwL2NQQVVJRXRWWWo1
OHVMX1pMQzNLMFhuNnZPVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCmCcnXQPYEKoEI5si0VDSZoDYqzUYozax4HfHS+n7UOPtAPEUc9Lo3cCDnPXcM
BFXMiicrd9TtStJWW31cf+/T6CbJeWT5ZGEnwLKpFumEXi3hb3p8MQWzRsnfQL+1
VcCo38MdKqlTyrj0POiE4k4NgDoZYKyhFApi/zGdA3S252zwDz5n9bQc/vdahxtY
s9G1OpDds65DbFl+SPEmyrYUWl6mPthv5zSYBSQeumBrFAU/LnmiDIohPtjbYe2t
V/b7qFR66sFBJoOeeOrN4pMNdgeNcgCgMeKWe1cn4FJXCy9fa2SCMj/EOIXf/wK/
a3JWQrzmtowUQmEHbOruv+F5
-----END CERTIFICATE-----
Generated at Tue Oct 6 23:10:03 2026 by rpki-client