Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
File:                     lWVe5y4XegIJbAy2BnaqHmaa5-A.mft (raw, json)
Hash identifier:          q2NeDTbfEALBmDCscZjfCqTbwYRABppLapDCebTOWvw=
Subject key identifier:   ED:C4:AF:95:C8:13:DE:46:7B:74:8D:8B:DD:88:B2:77:EA:5E:EE:01
Authority key identifier: 95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0
Certificate issuer:       /CN=A9127898/serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
Manifest number:          086B
Signing time:             Thu 10 Sep 2026 22:41:08 +0000
Manifest this update:     Thu 10 Sep 2026 22:41:07 +0000
Manifest next update:     Thu 17 Sep 2026 22:41:07 +0000
Files and hashes:         1: lWVe5y4XegIJbAy2BnaqHmaa5-A.crl (hash: 5ohfxw3uq4g4JMPH2jjR2707qgxBst1LjSxXryOGN60=)
                          2: BFD5DDF0D95311EF9B045445C4F9AE02.roa (hash: ZZTRP8ZYh6abdb/gEV6kUhHlPU73mYT2fjwS4t3Y8Vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl
                          rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127898, serialNumber=95655EE72E177A02096C0CB60676AA1E669AE7E0
        Validity
            Not Before: Sep 10 22:41:07 2026 GMT
            Not After : Sep 17 22:41:07 2026 GMT
        Subject: CN=6aa33204-2ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:ac:81:24:cd:5b:66:60:26:7d:97:c5:a0:
                    b2:96:81:bd:c2:7d:1b:9c:f4:bf:e0:04:37:8f:0a:
                    d7:3e:2c:77:31:61:f0:31:91:b8:64:de:05:f1:5e:
                    98:6f:80:12:ad:64:06:ec:d5:d3:7c:9d:c5:30:ca:
                    10:00:09:8b:c5:a7:d8:95:11:21:27:b1:19:41:7e:
                    24:0e:d9:d7:06:b1:04:e7:0d:b3:65:3a:d5:b2:66:
                    ec:05:5f:c2:41:36:c4:b5:d0:54:b5:32:63:27:55:
                    1d:eb:4b:17:0e:dd:a9:9f:da:89:5c:7f:71:32:30:
                    ad:43:b2:e6:33:21:a1:e6:67:2d:5d:82:57:50:27:
                    43:ea:a6:12:20:b8:24:c8:ae:ef:cd:c0:e8:f5:1d:
                    82:f8:3f:24:75:21:c5:3e:59:99:f1:5b:15:27:04:
                    d5:5c:2e:ea:27:16:6a:33:4b:42:3b:90:a6:49:ec:
                    67:7f:d7:eb:76:3f:b5:0b:cb:fb:77:3a:8b:e8:30:
                    23:6d:f9:e6:a9:f2:23:2c:fe:bd:5a:5a:5d:79:82:
                    47:8a:43:9d:cf:e2:8d:7c:69:35:70:08:d3:f7:d9:
                    8a:d8:59:6a:e7:a5:7b:80:f9:56:a3:2d:36:52:b8:
                    70:2a:d1:9a:1b:0c:8a:75:f1:70:3b:20:1b:89:de:
                    98:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C4:AF:95:C8:13:DE:46:7B:74:8D:8B:DD:88:B2:77:EA:5E:EE:01
            X509v3 Authority Key Identifier:
                keyid:95:65:5E:E7:2E:17:7A:02:09:6C:0C:B6:06:76:AA:1E:66:9A:E7:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWVe5y4XegIJbAy2BnaqHmaa5-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127898/2069F5FCFC0D11EBAE95147BC4F9AE02/lWVe5y4XegIJbAy2BnaqHmaa5-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:aa:4c:40:75:ce:82:a9:8e:e4:97:f8:90:2f:d5:cd:b6:12:
         7b:08:b8:f5:26:e5:2f:d7:f1:63:8f:9d:91:cd:4a:d1:a7:a3:
         13:2d:19:90:88:f0:bd:15:1c:df:bf:e5:37:6a:bc:75:cf:78:
         f7:37:af:4e:5b:38:64:7d:49:3e:1b:a5:7d:6a:4d:e2:e5:b3:
         f5:84:73:b7:08:3c:08:4e:90:d6:64:e2:f5:37:c4:3e:01:7a:
         c6:25:54:30:3e:9f:8e:40:7e:df:4f:a8:c4:84:d2:2b:50:76:
         6c:e6:fd:a9:60:e9:a0:98:50:3e:1c:27:6f:33:59:7d:f9:5b:
         af:c2:ab:95:5f:cf:9e:b9:14:ed:65:49:f9:43:0b:ba:de:21:
         9a:13:91:82:74:4c:a5:fd:bc:4f:ef:23:70:06:0c:b7:3f:94:
         12:6b:10:02:ac:0d:e9:3a:56:96:fb:6b:5b:e1:75:24:7c:25:
         8e:47:6f:2f:11:4d:ab:0d:69:d2:79:e8:6e:f6:8e:e1:4a:a6:
         ba:78:be:a1:7e:ad:9b:46:3b:a3:62:50:e2:01:5c:f4:26:77:
         8c:5e:84:aa:dd:e7:2b:be:02:73:8d:ff:17:46:1a:68:93:61:
         83:77:ce:af:eb:b0:22:44:5a:9e:f6:c5:89:cf:0c:36:59:cf:
         19:9c:77:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4OTgxMTAvBgNVBAUTKDk1NjU1RUU3MkUxNzdBMDIwOTZDMENCNjA2NzZBQTFF
NjY5QUU3RTAwHhcNMjYwOTEwMjI0MTA3WhcNMjYwOTE3MjI0MTA3WjAYMRYwFAYD
VQQDEw02YWEzMzIwNC0yZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfqsgSTNW2ZgJn2XxaCyloG9wn0bnPS/4AQ3jwrXPix3MWHwMZG4ZN4F8V6Y
b4ASrWQG7NXTfJ3FMMoQAAmLxafYlREhJ7EZQX4kDtnXBrEE5w2zZTrVsmbsBV/C
QTbEtdBUtTJjJ1Ud60sXDt2pn9qJXH9xMjCtQ7LmMyGh5mctXYJXUCdD6qYSILgk
yK7vzcDo9R2C+D8kdSHFPlmZ8VsVJwTVXC7qJxZqM0tCO5CmSexnf9frdj+1C8v7
dzqL6DAjbfnmqfIjLP69WlpdeYJHikOdz+KNfGk1cAjT99mK2Flq56V7gPlWoy02
UrhwKtGaGwyKdfFwOyAbid6YoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3Er5XI
E95Ge3SNi92IsnfqXu4BMB8GA1UdIwQYMBaAFJVlXucuF3oCCWwMtgZ2qh5mmufg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzg5OC8yMDY5RjVGQ0ZD
MEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVnSUpiQXkyQm5hcUhtYWE1
LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xXVmU1eTRYZWdJSmJBeTJCbmFxSG1hYTUtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzg5OC8yMDY5RjVGQ0ZDMEQxMUVCQUU5NTE0N0JDNEY5QUUwMi9sV1ZlNXk0WGVn
SUpiQXkyQm5hcUhtYWE1LUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATKpMQHXOgqmO5Jf4kC/VzbYSewi49SblL9fxY4+dkc1K0aejEy0ZkIjwvRUc
37/lN2q8dc949zevTls4ZH1JPhulfWpN4uWz9YRztwg8CE6Q1mTi9TfEPgF6xiVU
MD6fjkB+30+oxITSK1B2bOb9qWDpoJhQPhwnbzNZfflbr8KrlV/PnrkU7WVJ+UML
ut4hmhORgnRMpf28T+8jcAYMtz+UEmsQAqwN6TpWlvtrW+F1JHwljkdvLxFNqw1p
0nnobvaO4Uqmuni+oX6tm0Y7o2JQ4gFc9CZ3jF6Eqt3nK74Cc43/F0YaaJNhg3fO
r+uwIkRanvbFic8MNlnPGZx3Aw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:56:20 2026 by rpki-client