Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
File:                     N02aLIMvI0S92MpAYxF5P2bUxzU.mft (raw, json)
Hash identifier:          oQ8BZ1CgPgZwWqxkMNoM626D1kW0CIQkWq1hYrk+sDI=
Subject key identifier:   5B:B6:A8:4E:98:39:37:C8:C5:E4:19:B7:53:66:E3:E6:D2:7C:D5:38
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       0651
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
Manifest number:          0633
Signing time:             Sun 04 Oct 2026 22:49:13 +0000
Manifest this update:     Sun 04 Oct 2026 22:49:12 +0000
Manifest next update:     Sun 11 Oct 2026 22:49:12 +0000
Files and hashes:         1: N02aLIMvI0S92MpAYxF5P2bUxzU.crl (hash: dhRpTU6VzDwmVVpKNBWMFjTRjKS+G6TBCU1k3ZEEHxE=)
                          2: AC3162143ED611EFA3523A6BC4F9AE02.roa (hash: jiJ/Apxk0RCnezc8z5hn0e9XoDw9lt0qYbyy+Q1Gh0Q=)
                          3: BC5887A44B6E11EFA3355126C4F9AE02.roa (hash: JJ5ZiLh38XYP4D8yimnjxevWv+FpQHjzlnERYLydtT4=)
                          4: 54E77A985F1F11EFA979694FC4F9AE02.roa (hash: UnloyJqO5mDJNTuFL9b9idDNwOwv5RK3dGrtJoBgFTQ=)
                          5: 1FC8419E4B6F11EF98BA6B27C4F9AE02.roa (hash: 7uquT9D1sV2YgdxdolpJDoZ9g+QO6lmrDAgSjgdq8+w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 22:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: Oct  4 22:49:12 2026 GMT
            Not After : Oct 11 22:49:12 2026 GMT
        Subject: CN=6ac2d7e8-29ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:49:23:d5:ce:b2:b9:e8:71:75:87:bb:ec:
                    d8:53:7f:29:8c:8e:45:a6:3c:cd:a9:d5:c5:f5:81:
                    9b:08:dc:ca:de:94:bf:08:d4:54:89:cc:c2:9f:08:
                    0e:2c:e1:5b:7b:ce:4b:c3:d7:bc:48:c3:42:1e:12:
                    99:a1:e5:46:d9:de:c3:9d:1b:c0:54:ae:00:24:43:
                    4f:1b:de:2e:7c:8d:95:e7:d4:34:25:c8:b6:e1:55:
                    19:17:43:2a:2e:a1:9a:66:0c:09:a0:9a:75:d2:28:
                    b7:a5:42:6e:e3:f7:65:7b:b8:9d:91:af:5a:3c:5e:
                    7c:b3:84:c0:46:1d:e2:52:f1:e0:3f:60:a5:1b:da:
                    4d:68:6e:58:e4:a1:af:e9:1c:9e:70:5f:71:35:20:
                    e0:84:36:4b:c5:87:bc:a6:01:fd:97:83:e2:34:e6:
                    c6:64:29:e2:3d:6d:81:7c:a4:7e:b8:21:f2:11:0b:
                    42:85:8a:21:be:9c:d8:78:7c:54:a8:0b:af:a6:78:
                    25:13:07:29:65:d2:b2:31:1c:6a:a3:21:55:d4:3b:
                    0a:05:4b:fb:56:bd:b4:a3:c2:6c:75:e2:24:bd:7f:
                    6c:29:7c:32:cc:75:69:62:78:ae:3f:b2:e2:ae:da:
                    c9:62:42:39:18:e0:1b:37:86:79:c0:7e:64:b7:5c:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B6:A8:4E:98:39:37:C8:C5:E4:19:B7:53:66:E3:E6:D2:7C:D5:38
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cd:8d:26:d8:50:dc:83:21:6c:e7:c8:43:77:76:e6:08:39:
         5c:87:09:6c:f3:79:8c:88:6a:68:a0:92:eb:61:b7:b4:15:dc:
         71:2b:d6:cc:2d:e1:c8:00:fb:7b:43:c2:de:f9:85:ba:e2:42:
         e6:4f:3d:ec:ba:ee:3d:d3:25:16:f1:ec:9d:d1:a1:ee:14:91:
         27:f5:d3:e8:0c:f6:aa:fc:96:77:bf:48:4b:56:6c:b8:47:4a:
         c4:09:1b:cc:35:ed:34:fe:b7:06:71:68:3f:b1:fe:bf:55:b0:
         2d:77:26:df:a2:f5:92:e6:96:ad:fa:6d:76:0f:c9:27:44:9f:
         51:cc:bd:b3:4b:1c:44:18:b3:e3:96:e6:fb:99:f7:74:68:8b:
         e7:11:3c:32:ef:8d:e4:62:71:31:c6:b7:b5:d3:dd:d9:e8:b9:
         20:82:88:93:8e:d7:9e:02:7a:de:49:be:5d:6c:2a:83:a7:ee:
         2a:8f:7e:d9:b5:31:56:4a:3b:76:97:84:bf:d5:fd:af:02:86:
         6c:93:cd:a9:c4:bf:dc:aa:c1:d9:72:a7:31:f7:23:31:33:f8:
         b0:af:98:d1:e7:42:6a:7e:b0:83:57:23:b1:9c:66:84:61:3c:
         e7:41:f3:dc:de:aa:49:ed:66:86:8c:dc:a0:05:e6:6f:09:b0:
         40:80:a7:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIwMzkxMTAvBgNVBAUTKDM3NEQ5QTJDODMyRjIzNDRCREQ4Q0E0MDYzMTE3OTNG
NjZENEM3MzUwHhcNMjYxMDA0MjI0OTEyWhcNMjYxMDExMjI0OTEyWjAYMRYwFAYD
VQQDEw02YWMyZDdlOC0yOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqztJI9XOsrnocXWHu+zYU38pjI5FpjzNqdXF9YGbCNzK3pS/CNRUiczCnwgO
LOFbe85Lw9e8SMNCHhKZoeVG2d7DnRvAVK4AJENPG94ufI2V59Q0Jci24VUZF0Mq
LqGaZgwJoJp10ii3pUJu4/dle7idka9aPF58s4TARh3iUvHgP2ClG9pNaG5Y5KGv
6RyecF9xNSDghDZLxYe8pgH9l4PiNObGZCniPW2BfKR+uCHyEQtChYohvpzYeHxU
qAuvpnglEwcpZdKyMRxqoyFV1DsKBUv7Vr20o8JsdeIkvX9sKXwyzHVpYniuP7Li
rtrJYkI5GOAbN4Z5wH5kt1wn/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFu2qE6Y
OTfIxeQZt1Nm4+bSfNU4MB8GA1UdIwQYMBaAFDdNmiyDLyNEvdjKQGMReT9m1Mc1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAzOS9GQjcwREY2QUZG
MjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkwUzkyTXBBWXhGNVAyYlV4
elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL04wMmFMSU12STBTOTJNcEFZeEY1UDJiVXh6VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjAzOS9GQjcwREY2QUZGMjAxMUVCODE2MEFDNTFDNEY5QUUwMi9OMDJhTElNdkkw
UzkyTXBBWXhGNVAyYlV4elUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoM2NJthQ3IMhbOfIQ3d25gg5XIcJbPN5jIhqaKCS62G3tBXccSvWzC3hyAD7
e0PC3vmFuuJC5k897LruPdMlFvHsndGh7hSRJ/XT6Az2qvyWd79IS1ZsuEdKxAkb
zDXtNP63BnFoP7H+v1WwLXcm36L1kuaWrfptdg/JJ0SfUcy9s0scRBiz45bm+5n3
dGiL5xE8Mu+N5GJxMca3tdPd2ei5IIKIk47XngJ63km+XWwqg6fuKo9+2bUxVko7
dpeEv9X9rwKGbJPNqcS/3KrB2XKnMfcjMTP4sK+Y0edCan6wg1cjsZxmhGE850Hz
3N6qSe1mhozcoAXmbwmwQICnBQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 16:16:16 2026 by rpki-client