Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
File:                     DVYqrcHASY2u4mEMGn2odb5jXOo.mft (raw, json)
Hash identifier:          /oU2S5Z3OUjgEIogc3DaWEKEK1AmZAuVQG2MhOEFK3M=
Subject key identifier:   4A:AC:99:64:F4:3C:A0:16:9D:79:C5:99:B4:5E:C0:2E:D2:7E:E3:65
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Certificate issuer:       /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial:       03B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
Manifest number:          03A9
Signing time:             Sat 05 Sep 2026 00:22:27 +0000
Manifest this update:     Sat 05 Sep 2026 00:22:26 +0000
Manifest next update:     Sat 12 Sep 2026 00:22:26 +0000
Files and hashes:         1: DVYqrcHASY2u4mEMGn2odb5jXOo.crl (hash: Sw9o3dsnVWFnONZjnhZ9TR2Lt/YHosoXJQhmrHMMGEk=)
                          2: ACC8D92C543611EEA8C54616C4F9AE02.roa (hash: TyACizyKg5nG1P594B0tUhGaTLm7UayV4k2Lp5KCE6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
                          rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
        Validity
            Not Before: Sep  5 00:22:26 2026 GMT
            Not After : Sep 12 00:22:26 2026 GMT
        Subject: CN=6a9b60c3-b106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:26:75:1a:8d:4f:56:18:1b:8b:81:12:ff:f3:
                    8c:8f:98:f7:a9:79:38:8b:44:40:6b:b9:5b:16:62:
                    aa:10:05:21:16:11:f1:3e:9b:ae:6d:e9:86:b7:f0:
                    33:e1:eb:c9:cf:59:de:3b:6e:d5:7e:e6:c1:f2:24:
                    ce:1e:40:80:4c:e8:6a:fb:2d:90:15:9b:d0:53:1b:
                    ce:f7:9d:06:ad:35:1d:b5:2a:8f:77:08:3b:7f:88:
                    4a:38:eb:43:20:79:7f:a0:4d:ff:8d:33:2c:7a:50:
                    04:49:df:50:4d:26:d8:44:9a:d2:24:49:1d:94:2e:
                    f1:ca:e6:aa:57:ac:2c:48:4e:83:53:34:07:a7:6c:
                    e6:3e:36:dc:cb:2b:62:f2:3b:2b:f7:ad:7a:50:15:
                    24:79:20:da:4f:f3:80:b6:16:e3:15:87:fd:bf:15:
                    47:5a:b7:32:0a:e8:ac:9a:04:63:92:09:2c:eb:9f:
                    3a:12:3c:2f:d6:e6:4d:c3:bc:19:11:2a:24:15:4b:
                    02:ae:27:ff:e7:fa:17:37:9a:dd:20:d2:a7:68:fc:
                    d5:c5:ad:9b:22:31:b8:c5:61:ba:26:f5:05:ea:cc:
                    82:73:c1:96:50:80:3b:f1:ab:ea:4d:aa:3d:1e:49:
                    79:ec:55:d6:50:7f:74:6f:12:13:b1:e3:4e:13:4b:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AC:99:64:F4:3C:A0:16:9D:79:C5:99:B4:5E:C0:2E:D2:7E:E3:65
            X509v3 Authority Key Identifier:
                keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:22:de:97:5c:e1:7e:c4:54:6b:81:19:7c:a2:5c:17:26:9f:
         6c:5a:d4:71:38:d9:3f:52:46:32:bd:9b:16:c3:b5:53:15:2f:
         7f:4a:95:ca:ac:a6:82:e2:e0:f2:33:8c:ef:a2:f5:fb:ad:f4:
         18:73:49:0a:42:13:06:16:23:8c:a1:76:a5:27:ec:57:88:03:
         43:34:59:94:43:b0:15:63:7c:17:ae:63:5b:a2:bc:a3:c6:66:
         e0:0e:fc:84:b0:6f:f5:2e:4e:0d:5e:87:a0:d8:dd:f4:3d:6e:
         e8:f1:ac:ad:07:ef:24:bb:68:73:19:fd:8d:38:89:5b:4f:8d:
         53:fd:79:47:67:c9:37:9f:85:f3:fa:e7:e0:e6:c7:6b:56:74:
         09:ca:6b:f1:2e:92:08:dd:bd:df:ee:15:e3:ce:aa:d7:77:be:
         ea:30:9b:f7:b1:0b:77:6a:ba:86:7f:1f:fb:00:52:2c:fe:40:
         46:2b:e0:3d:e5:dc:b9:ac:ca:40:a5:52:50:33:ab:e9:ae:05:
         13:42:24:64:7c:2d:52:54:27:b5:b2:cd:5e:86:76:1f:92:7b:
         a6:ff:7a:e8:b8:55:55:55:3d:11:cb:8f:36:ef:a8:30:4d:e7:
         bb:d1:38:91:88:f5:8b:7d:3f:3f:a9:36:1a:be:0e:0f:26:85:
         8e:32:b6:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3NTYxMTAvBgNVBAUTKDBENTYyQUFEQzFDMDQ5OERBRUUyNjEwQzFBN0RBODc1
QkU2MzVDRUEwHhcNMjYwOTA1MDAyMjI2WhcNMjYwOTEyMDAyMjI2WjAYMRYwFAYD
VQQDEw02YTliNjBjMy1iMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8iZ1Go1PVhgbi4ES//OMj5j3qXk4i0RAa7lbFmKqEAUhFhHxPpuubemGt/Az
4evJz1neO27VfubB8iTOHkCATOhq+y2QFZvQUxvO950GrTUdtSqPdwg7f4hKOOtD
IHl/oE3/jTMselAESd9QTSbYRJrSJEkdlC7xyuaqV6wsSE6DUzQHp2zmPjbcyyti
8jsr9616UBUkeSDaT/OAthbjFYf9vxVHWrcyCuismgRjkgks6586Ejwv1uZNw7wZ
ESokFUsCrif/5/oXN5rdINKnaPzVxa2bIjG4xWG6JvUF6syCc8GWUIA78avqTao9
Hkl57FXWUH90bxITseNOE0vCqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqsmWT0
PKAWnXnFmbRewC7SfuNlMB8GA1UdIwQYMBaAFA1WKq3BwEmNruJhDBp9qHW+Y1zq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc1Ni85MTkwNjg1MkY4
OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZMnU0bUVNR24yb2RiNWpY
T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RWWXFyY0hBU1kydTRtRU1HbjJvZGI1alhPby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Qzc1Ni85MTkwNjg1MkY4OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZ
MnU0bUVNR24yb2RiNWpYT28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjCLel1zhfsRUa4EZfKJcFyafbFrUcTjZP1JGMr2bFsO1UxUvf0qVyqymguLg
8jOM76L1+630GHNJCkITBhYjjKF2pSfsV4gDQzRZlEOwFWN8F65jW6K8o8Zm4A78
hLBv9S5ODV6HoNjd9D1u6PGsrQfvJLtocxn9jTiJW0+NU/15R2fJN5+F8/rn4ObH
a1Z0Ccpr8S6SCN293+4V486q13e+6jCb97ELd2q6hn8f+wBSLP5ARivgPeXcuazK
QKVSUDOr6a4FE0IkZHwtUlQntbLNXoZ2H5J7pv966LhVVVU9EcuPNu+oME3nu9E4
kYj1i30/P6k2Gr4ODyaFjjK2ow==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:47:08 2026 by rpki-client