Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
File:                     tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json)
Hash identifier:          n5IAHKXeYQuIpZK1D8JHXk6WIwAXzEu2Z0x69EMbFFA=
Subject key identifier:   0D:87:96:F3:68:61:35:81:D8:65:E6:4C:F6:43:09:D4:81:F3:D6:0A
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
Manifest number:          027B
Signing time:             Mon 07 Sep 2026 02:01:24 +0000
Manifest this update:     Mon 07 Sep 2026 02:01:23 +0000
Manifest next update:     Mon 14 Sep 2026 02:01:23 +0000
Files and hashes:         1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: YKDz5zKFUNUDzEs5kh6v7z8tFrgLqRl1SUP8oYJuPHU=)
                          2: C94C5FD4163911F1B9B26C9A3C3D8C67.roa (hash: MYDqaVFwRJB1jmhIu+ie4ItmCnxfdWtMitAnA5vk2cU=)
                          3: 873859B668B611F1BCF0B20C8047A888.roa (hash: xerdXCtgfdD81kACTYlmhobJVdQsaQnlYFPryqqERd4=)
                          4: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: 8l1Wjg/gDk9CaJhrRm6w9SVvYUtM+TgdHiZO59WdB4Y=)
                          5: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: 2t2Wq1XOsxAK8xIPHJCFe3jwKEwQMUnGPVMPG/cdN/Y=)
                          6: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: 8RovJ5HrPwKr7ltpxn4WzuCgory3ey/kpplqDXgEB7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Sep  7 02:01:23 2026 GMT
            Not After : Sep 14 02:01:23 2026 GMT
        Subject: CN=6a9e1af4-6739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:a0:58:75:f4:ad:2c:a5:dc:c1:cb:41:19:
                    dc:b3:10:58:b5:cc:f1:83:29:83:9a:5b:71:e8:29:
                    00:52:cd:45:1f:ca:03:d5:52:6d:32:13:d0:6f:64:
                    e6:e2:4f:73:14:d3:00:f3:82:9b:02:3b:e3:14:7a:
                    b7:fc:ab:82:5c:06:10:6c:fe:55:45:ec:c8:5e:1e:
                    42:1c:d4:59:2e:4a:6a:78:5b:61:01:b6:a6:c4:bc:
                    7a:91:87:aa:e1:4e:60:1d:78:ba:d6:94:0b:e2:ad:
                    b2:e4:7e:d2:5f:42:44:bb:43:c6:38:4c:b8:13:7f:
                    a7:f8:e8:cc:6b:5c:6c:fb:93:73:46:70:c9:e8:81:
                    76:23:88:d6:32:93:a9:43:1b:8d:a5:fb:ca:ab:56:
                    ac:45:e7:bc:f4:69:f9:92:fb:fa:88:3a:37:70:32:
                    70:df:c8:e1:49:c4:80:e4:90:43:9a:18:c5:5c:ca:
                    5b:91:6f:84:11:fb:05:f5:e5:d3:e9:50:f7:26:49:
                    a6:61:56:51:49:59:00:09:d3:92:61:0e:c0:63:b4:
                    d8:4b:6c:67:8b:4e:da:6d:bb:74:3a:1d:ff:f6:28:
                    2d:3b:d0:b3:2d:57:38:9b:bd:18:15:e3:ba:53:24:
                    b2:c5:47:19:0e:61:ea:6a:14:72:07:fa:6b:07:e3:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:87:96:F3:68:61:35:81:D8:65:E6:4C:F6:43:09:D4:81:F3:D6:0A
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:22:db:98:1b:cd:2b:fe:43:71:b5:89:50:a1:54:83:bf:b3:
         a7:22:8b:6c:33:c9:c0:04:a8:1f:8a:38:41:5a:57:e1:ad:3a:
         85:9a:72:0a:02:bb:43:77:4e:69:b1:fe:3f:87:f9:b4:70:dd:
         e9:5b:0c:85:b5:36:5d:57:84:c6:13:6f:8a:34:e1:3a:b0:5e:
         8e:34:c1:2e:85:05:d9:36:fd:60:3e:11:93:4a:f1:e2:7f:a0:
         ae:cc:5d:b2:aa:a6:e6:50:c8:a6:0f:43:2f:97:b9:ae:02:4d:
         01:da:a0:d6:1a:91:3b:7f:ea:3e:df:91:40:cf:17:31:48:36:
         b2:4e:62:9f:69:7d:45:ee:db:86:29:81:f1:14:4e:78:a7:ad:
         b3:48:5d:97:4b:58:e0:ad:0f:c8:74:da:ec:1a:72:a3:c4:0b:
         e0:41:78:58:79:ce:28:c2:87:f8:97:b3:f8:07:0e:d6:04:2f:
         60:12:35:88:ff:2c:a7:69:49:a1:68:2c:f5:e5:32:23:f1:46:
         a6:9d:ea:98:83:aa:c9:e8:74:a8:dc:bf:8d:f9:2c:51:62:dd:
         25:71:6c:40:52:44:05:b9:1b:61:d5:eb:06:e2:cc:56:5e:bb:
         47:8e:2c:b7:5f:c3:94:62:ad:56:c5:d8:30:d7:68:9b:df:d1:
         de:41:f7:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5
NTY1Qzk0RDgwHhcNMjYwOTA3MDIwMTIzWhcNMjYwOTE0MDIwMTIzWjAYMRYwFAYD
VQQDEw02YTllMWFmNC02NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeugWHX0rSyl3MHLQRncsxBYtczxgymDmltx6CkAUs1FH8oD1VJtMhPQb2Tm
4k9zFNMA84KbAjvjFHq3/KuCXAYQbP5VRezIXh5CHNRZLkpqeFthAbamxLx6kYeq
4U5gHXi61pQL4q2y5H7SX0JEu0PGOEy4E3+n+OjMa1xs+5NzRnDJ6IF2I4jWMpOp
QxuNpfvKq1asRee89Gn5kvv6iDo3cDJw38jhScSA5JBDmhjFXMpbkW+EEfsF9eXT
6VD3JkmmYVZRSVkACdOSYQ7AY7TYS2xni07abbt0Oh3/9igtO9CzLVc4m70YFeO6
UySyxUcZDmHqahRyB/prB+PdVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2HlvNo
YTWB2GXmTPZDCdSB89YKMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB
NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0
Z3pVNFFnTGItN09WWmNsTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjyLbmBvNK/5DcbWJUKFUg7+zpyKLbDPJwASoH4o4QVpX4a06hZpyCgK7Q3dO
abH+P4f5tHDd6VsMhbU2XVeExhNvijThOrBejjTBLoUF2Tb9YD4Rk0rx4n+grsxd
sqqm5lDIpg9DL5e5rgJNAdqg1hqRO3/qPt+RQM8XMUg2sk5in2l9Re7bhimB8RRO
eKets0hdl0tY4K0PyHTa7Bpyo8QL4EF4WHnOKMKH+Jez+AcO1gQvYBI1iP8sp2lJ
oWgs9eUyI/FGpp3qmIOqyeh0qNy/jfksUWLdJXFsQFJEBbkbYdXrBuLMVl67R44s
t1/DlGKtVsXYMNdom9/R3kH3gQ==
-----END CERTIFICATE-----
Generated at Tue Sep 8 21:57:24 2026 by rpki-client