Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File:                     vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier:          NQ40Rood8Kg2FCNlO1FlutXHLw1ei89opq1rR2Z99Ig=
Subject key identifier:   32:34:90:C0:18:FE:57:8B:1F:D1:DA:33:91:75:E8:16:44:B5:39:98
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer:       /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number:          013D
Signing time:             Wed 07 Oct 2026 05:59:21 +0000
Manifest this update:     Wed 07 Oct 2026 05:59:21 +0000
Manifest next update:     Wed 14 Oct 2026 05:59:21 +0000
Files and hashes:         1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: WAQNwEglh3FslPs/SRtLOh49/h6Ld1ZvuWvGm/6cwpU=)
                          2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: roA3vy8x+jf66csilJCthToT1WHohR3rxK/y2E1bU7k=)
                          3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: 06Hho+RJykAUvzboSlu1tF6rcNxA0i0LVsGzl68LWWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
                          rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
        Validity
            Not Before: Oct  7 05:59:21 2026 GMT
            Not After : Oct 14 05:59:21 2026 GMT
        Subject: CN=6ac5dfb9-ccf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:dd:4a:84:26:27:be:95:1e:2b:7d:02:45:
                    e6:d4:f2:cc:a5:08:4b:3e:43:4e:f2:75:01:9f:b3:
                    07:41:58:62:ea:80:1f:cf:b0:43:89:75:2d:cb:dc:
                    e4:f1:50:06:77:68:03:2f:7d:98:f9:45:90:9c:aa:
                    27:22:b9:27:ad:b3:72:1e:7a:32:15:f7:b0:f5:b6:
                    08:94:0f:ba:18:17:7a:9b:f4:41:ff:d7:c7:49:f5:
                    1a:aa:6a:fb:d7:4f:61:98:b5:67:2d:60:9c:d4:41:
                    a0:8f:12:99:21:05:88:fd:33:27:92:7f:af:a1:82:
                    47:7d:5e:51:e5:c2:7a:d7:63:4e:75:0c:c3:76:26:
                    8a:10:3b:8b:08:43:21:e8:0a:81:eb:9a:48:50:f6:
                    7e:84:32:84:83:81:40:9c:80:bf:f5:b5:e5:41:c0:
                    02:50:b5:cb:8c:df:ba:b9:81:5b:58:28:d0:3f:0a:
                    03:9a:36:5a:d0:dc:93:07:b5:0b:f0:3f:c8:22:a0:
                    62:90:32:c1:c7:91:60:54:0f:18:82:f3:8c:7d:0f:
                    32:8e:23:3b:6a:19:16:a6:b2:4b:fb:ec:44:d1:32:
                    9b:46:57:85:3a:4f:a2:36:2d:c5:fb:49:0c:f0:6b:
                    af:3b:ff:23:35:75:ba:4c:69:48:1d:24:a2:10:f7:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:34:90:C0:18:FE:57:8B:1F:D1:DA:33:91:75:E8:16:44:B5:39:98
            X509v3 Authority Key Identifier:
                keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cb:33:4b:6f:7e:87:6e:32:a7:25:5b:ac:c5:e8:26:bc:64:
         c3:5e:15:44:c2:02:14:75:12:bb:99:4a:5a:c8:fd:1a:a5:d3:
         ad:22:cb:4b:7f:f3:89:39:6e:e5:49:bd:6a:cb:53:72:06:98:
         8d:fa:11:60:fb:b4:08:14:a2:0b:57:90:4b:90:e9:2a:e8:50:
         8a:13:26:40:53:da:a3:e8:51:9b:8b:d4:7f:0b:28:b0:34:93:
         b1:3e:25:8f:4d:63:d6:45:ee:78:bc:f7:91:31:20:f9:91:96:
         12:91:92:5e:32:10:62:23:50:84:7a:22:87:4d:c4:a5:1b:d0:
         49:4f:dc:08:06:52:26:99:2b:ea:c4:3a:b5:fb:01:ef:22:81:
         f6:e4:0d:ef:54:94:be:d3:bf:16:5f:f0:09:cc:21:43:a7:8e:
         96:4d:79:15:9c:11:43:b4:ea:ef:b5:a2:05:2e:4e:94:31:2e:
         3d:9b:d8:9a:0e:eb:58:f9:6d:d6:3b:b7:cf:46:b4:cd:d8:da:
         22:82:c3:1b:be:db:d3:86:c7:f8:8f:c8:5b:81:ab:9c:1e:21:
         0b:b4:f9:f7:0a:11:6d:2f:f9:f0:a9:52:18:4a:e8:9b:3d:17:
         d3:ab:cd:58:26:74:b2:76:db:40:a7:52:5e:64:e7:28:38:3f:
         94:d2:fb:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MURCNjYxMTAvBgNVBAUTKEJDOEM3OUY3ODQ5MUExRDVBQTQ1REJFNDEzM0MwQzEw
RjY5MzY0QUQwHhcNMjYxMDA3MDU1OTIxWhcNMjYxMDE0MDU1OTIxWjAYMRYwFAYD
VQQDEw02YWM1ZGZiOS1jY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0BvdSoQmJ76VHit9AkXm1PLMpQhLPkNO8nUBn7MHQVhi6oAfz7BDiXUty9zk
8VAGd2gDL32Y+UWQnKonIrknrbNyHnoyFfew9bYIlA+6GBd6m/RB/9fHSfUaqmr7
109hmLVnLWCc1EGgjxKZIQWI/TMnkn+voYJHfV5R5cJ612NOdQzDdiaKEDuLCEMh
6AqB65pIUPZ+hDKEg4FAnIC/9bXlQcACULXLjN+6uYFbWCjQPwoDmjZa0NyTB7UL
8D/IIqBikDLBx5FgVA8YgvOMfQ8yjiM7ahkWprJL++xE0TKbRleFOk+iNi3F+0kM
8GuvO/8jNXW6TGlIHSSiEPfTRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDI0kMAY
/leLH9HaM5F16BZEtTmYMB8GA1UdIwQYMBaAFLyMefeEkaHVqkXb5BM8DBD2k2St
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREI2Ni83N0I2MTk5Q0Uw
OUExMUVGQjYzQTgxMzBDNEY5QUUwMi92SXg1OTRTUm9kV3FSZHZrRXp3TUVQYVRa
SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpLMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
REI2Ni83N0I2MTk5Q0UwOUExMUVGQjYzQTgxMzBDNEY5QUUwMi92SXg1OTRTUm9k
V3FSZHZrRXp3TUVQYVRaSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoMszS29+h24ypyVbrMXoJrxkw14VRMICFHUSu5lKWsj9GqXTrSLLS3/ziTlu
5Um9astTcgaYjfoRYPu0CBSiC1eQS5DpKuhQihMmQFPao+hRm4vUfwsosDSTsT4l
j01j1kXueLz3kTEg+ZGWEpGSXjIQYiNQhHoih03EpRvQSU/cCAZSJpkr6sQ6tfsB
7yKB9uQN71SUvtO/Fl/wCcwhQ6eOlk15FZwRQ7Tq77WiBS5OlDEuPZvYmg7rWPlt
1ju3z0a0zdjaIoLDG77b04bH+I/IW4GrnB4hC7T59woRbS/58KlSGEromz0X06vN
WCZ0snbbQKdSXmTnKDg/lNL74Q==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:46:44 2026 by rpki-client