Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
File:                     lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json)
Hash identifier:          cIr2Esb8mqy2iZC6T58I+5WOxfIEoCeGL2L7tNksmHI=
Subject key identifier:   A4:E8:FA:75:26:1B:62:9F:EC:92:C5:6A:2B:B2:F0:F9:6F:D8:13:0C
Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
Certificate issuer:       /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
Manifest number:          0132
Signing time:             Thu 03 Sep 2026 05:50:00 +0000
Manifest this update:     Thu 03 Sep 2026 05:49:59 +0000
Manifest next update:     Thu 10 Sep 2026 05:49:59 +0000
Files and hashes:         1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: s0B2X414PUifqnUcdRHra///4KEdSVupqIxmwTGVHqc=)
                          2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: zpf55g2EZGmJ8domoDiH0XWR0tTe31ZdyOLgVVw44Oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
                          rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 05:49:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
        Validity
            Not Before: Sep  3 05:49:59 2026 GMT
            Not After : Sep 10 05:49:59 2026 GMT
        Subject: CN=6a990a87-d34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:1d:3d:fe:88:6a:3d:bf:67:5d:f2:39:aa:
                    bc:8b:9a:7e:7c:34:e7:02:88:5d:78:68:57:2f:8f:
                    a3:fb:99:24:23:17:f2:ea:99:c1:5d:bd:d3:68:bb:
                    18:f8:48:a4:05:41:85:cd:c8:2c:06:5e:aa:82:cb:
                    44:16:ff:b7:e4:68:73:4c:53:40:46:c7:ee:c1:54:
                    6a:be:a6:cf:0a:96:87:b7:f9:f8:e1:e0:ef:45:fc:
                    b3:5d:5b:15:98:f5:0f:53:0a:e5:29:82:f0:71:ac:
                    73:b5:76:e7:8f:8e:27:d1:d1:24:57:ad:53:f8:2b:
                    bf:42:5f:0b:9d:74:82:13:f7:33:33:57:98:bc:ad:
                    f7:32:76:fa:2b:35:3c:cf:0f:63:87:55:5f:80:7e:
                    f4:db:b8:4e:94:60:1c:11:1f:55:9a:c2:50:69:91:
                    95:23:c0:b9:c1:61:5f:d6:9b:1d:e3:44:57:85:39:
                    70:fb:f5:70:98:95:60:f1:d4:bc:98:10:d3:e6:44:
                    09:8e:9a:b4:40:98:15:d7:5a:7b:dc:f5:bc:f2:61:
                    9d:a3:c7:94:91:51:c6:40:ad:16:10:52:2e:5e:b9:
                    4c:3c:0c:5f:51:91:09:17:0a:33:7e:5b:66:26:23:
                    3a:39:a7:00:c1:0c:9a:5d:e6:cc:c6:d0:3b:3f:7c:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E8:FA:75:26:1B:62:9F:EC:92:C5:6A:2B:B2:F0:F9:6F:D8:13:0C
            X509v3 Authority Key Identifier:
                keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0f:d7:cd:18:76:49:a9:13:18:48:b6:fe:f7:a1:a5:05:34:
         5e:b0:fb:7f:16:96:df:4d:16:a7:72:aa:cb:73:f9:64:89:29:
         0e:81:ca:e0:96:51:71:02:83:62:e8:a3:25:04:8b:52:a0:aa:
         97:b3:68:7e:7e:2e:0b:3d:a5:50:23:7f:9a:07:0c:b5:81:d3:
         f1:0e:5e:d2:5d:78:8e:55:9e:8e:f8:18:8a:00:78:d2:0f:aa:
         30:a1:8c:39:ae:ae:1f:e0:36:2f:5b:dc:68:1c:2b:01:e9:ee:
         ad:30:c5:31:c2:1d:18:f6:5f:0a:33:61:dc:94:3c:22:8c:20:
         55:89:78:c9:48:9c:88:b0:05:9c:08:2f:71:97:13:24:4d:d6:
         d4:af:f2:0d:60:f4:85:c6:ae:e4:e9:8b:f3:bd:85:cd:e2:76:
         db:55:de:ca:d1:be:e6:d0:01:c4:80:9a:0b:95:b7:e6:9f:e5:
         05:cb:ed:bf:7e:05:49:75:80:a2:11:fd:1b:b2:89:43:4b:e0:
         36:b5:c1:a7:e8:b8:74:17:36:ab:68:77:6d:70:54:13:b7:7d:
         9d:00:9f:15:97:2a:b5:b6:87:ca:b4:bd:c2:89:96:ff:df:2a:
         dc:49:9b:d4:e8:80:82:8c:03:57:0c:d6:98:ab:a3:fe:78:a5:
         9d:3a:0a:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg3NDkxMTAvBgNVBAUTKDk1NDU5RDVEMUVCMDQwOTVGRDE2M0YwRDg0RDFGM0E0
NkMxNUU0RjAwHhcNMjYwOTAzMDU0OTU5WhcNMjYwOTEwMDU0OTU5WjAYMRYwFAYD
VQQDEw02YTk5MGE4Ny1kMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5EdPf6Iaj2/Z13yOaq8i5p+fDTnAohdeGhXL4+j+5kkIxfy6pnBXb3TaLsY
+EikBUGFzcgsBl6qgstEFv+35GhzTFNARsfuwVRqvqbPCpaHt/n44eDvRfyzXVsV
mPUPUwrlKYLwcaxztXbnj44n0dEkV61T+Cu/Ql8LnXSCE/czM1eYvK33Mnb6KzU8
zw9jh1VfgH7027hOlGAcER9VmsJQaZGVI8C5wWFf1psd40RXhTlw+/VwmJVg8dS8
mBDT5kQJjpq0QJgV11p73PW88mGdo8eUkVHGQK0WEFIuXrlMPAxfUZEJFwozfltm
JiM6OacAwQyaXebMxtA7P3yzKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKTo+nUm
G2Kf7JLFaiuy8Plv2BMMMB8GA1UdIwQYMBaAFJVFnV0esECV/RY/DYTR86RsFeTw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODc0OS9CQTU3REJBNkRD
MjAxMUVGOTFCNTQwMUVDNEY5QUUwMi9sVVdkWFI2d1FKWDlGajhOaE5IenBHd1Y1
UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xVV2RYUjZ3UUpYOUZqOE5oTkh6cEd3VjVQQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODc0OS9CQTU3REJBNkRDMjAxMUVGOTFCNTQwMUVDNEY5QUUwMi9sVVdkWFI2d1FK
WDlGajhOaE5IenBHd1Y1UEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlw/XzRh2SakTGEi2/vehpQU0XrD7fxaW300Wp3Kqy3P5ZIkpDoHK4JZRcQKD
YuijJQSLUqCql7Nofn4uCz2lUCN/mgcMtYHT8Q5e0l14jlWejvgYigB40g+qMKGM
Oa6uH+A2L1vcaBwrAenurTDFMcIdGPZfCjNh3JQ8IowgVYl4yUiciLAFnAgvcZcT
JE3W1K/yDWD0hcau5OmL872FzeJ221XeytG+5tABxICaC5W35p/lBcvtv34FSXWA
ohH9G7KJQ0vgNrXBp+i4dBc2q2h3bXBUE7d9nQCfFZcqtbaHyrS9womW/98q3Emb
1OiAgowDVwzWmKuj/nilnToKdw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:20 2026 by rpki-client