Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
File:                     U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json)
Hash identifier:          eCi36j/LwK86XK7MCGh1VTqrR/K/LtnHUbeA/nd6HnM=
Subject key identifier:   68:EA:93:76:A7:D0:98:42:FE:C7:F4:6B:61:53:E1:A4:C2:71:E1:B5
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Certificate issuer:       /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial:       23D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
Manifest number:          234F
Signing time:             Mon 28 Sep 2026 15:52:01 +0000
Manifest this update:     Mon 28 Sep 2026 15:52:01 +0000
Manifest next update:     Mon 05 Oct 2026 15:52:01 +0000
Files and hashes:         1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: 1saZY6u1+RJi0/TTA783AX9BotOyY+j2oEylD/IbQqk=)
                          2: 5NBcqAlaOg66pNLmm5Cl2dgPO6s.asa (hash: fr4lj7FdfvgLl5ywkg0niKHxid5/V/hlakYyow27Qzg=)
                          3: E0545560A69911F19356F80F3411F970.roa (hash: SjYLGZr4+ZOZ/u3aSGi0yftLThB18UNy/uh/0relhEs=)
                          4: B15431EA8FEC11F192E24EFD3611F970.roa (hash: j6IsOaRC5UjcuZB//e5LEfsO4bAFxMvKvzbMQJeon0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
                          rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 15:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9175 (0x23d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
        Validity
            Not Before: Sep 28 15:52:01 2026 GMT
            Not After : Oct  5 15:52:01 2026 GMT
        Subject: CN=6aba8d21-ffac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8b:97:61:ba:fb:ae:42:8a:ba:99:cd:96:10:
                    f2:8b:ae:b4:cc:b1:63:2d:70:49:eb:c6:99:b4:8c:
                    c8:9e:e8:37:4f:25:c6:9d:90:c0:88:6e:47:8b:26:
                    f3:4e:e2:7d:72:e5:ff:3e:5e:10:1b:60:ee:98:71:
                    f3:09:2d:39:51:95:34:5f:4c:24:4d:38:78:28:a1:
                    c6:ce:a5:32:79:4a:85:94:a0:61:e6:2c:82:b4:31:
                    7a:6a:e9:5f:34:07:a7:26:53:64:66:37:26:17:65:
                    0d:ca:43:b0:40:06:a4:c8:cc:75:6f:e9:6a:df:36:
                    6d:e3:67:a0:fb:26:87:a0:4e:e5:de:a4:45:d1:d2:
                    93:7d:9d:8b:91:85:f7:de:de:42:e0:89:ed:27:d7:
                    5b:db:86:65:67:9f:ea:c3:2b:f6:df:ed:6f:93:d8:
                    6a:76:10:9a:b6:35:72:f6:3a:0e:34:a3:39:9b:a8:
                    62:63:ec:9b:01:59:4a:48:94:d8:9b:0c:e9:fd:c2:
                    3c:a2:85:7b:b2:6c:ff:3b:cd:ca:a7:30:f9:f8:16:
                    50:a6:6b:b6:9e:eb:9b:87:eb:c1:fd:7f:c1:81:68:
                    04:ee:52:8b:81:19:41:79:7f:25:95:c0:56:c9:44:
                    ee:b1:5b:fa:e1:11:40:e5:92:b9:15:58:17:f4:0c:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EA:93:76:A7:D0:98:42:FE:C7:F4:6B:61:53:E1:A4:C2:71:E1:B5
            X509v3 Authority Key Identifier:
                keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:eb:cb:79:87:7a:8d:30:a4:18:78:f0:d3:56:a7:2a:dd:5c:
         94:fd:cf:95:c8:fc:c0:ab:54:d4:cb:66:64:58:80:46:47:cf:
         34:86:a5:ef:51:09:25:90:08:80:c1:cb:4e:d3:f0:33:44:36:
         87:3e:76:e6:b4:37:6e:3a:e8:ef:97:42:3c:d7:17:fa:d2:88:
         92:b0:7e:eb:ff:27:b0:c8:46:6c:b8:6f:88:ae:60:a7:78:0b:
         ca:41:84:ee:3a:1a:f1:dc:1b:01:36:90:e3:30:6e:42:10:fa:
         58:39:d2:0f:23:86:95:f3:a1:17:74:65:fc:6a:c1:99:dd:98:
         51:bc:1a:5c:e2:73:8c:b6:a1:cc:29:70:df:c7:c7:65:60:4a:
         a4:ff:de:72:a3:f7:a7:4a:3e:7c:e4:63:a1:d1:e5:2d:09:07:
         54:dc:67:97:a2:58:28:26:db:60:b8:e8:f8:fd:b6:01:b5:13:
         ea:29:b3:fd:f3:cb:13:15:ce:68:5f:29:d7:fe:c8:3d:4f:fc:
         3f:86:9b:8d:ea:6a:68:7e:5d:bf:2a:26:40:22:21:76:87:e8:
         6b:bd:95:de:a4:bf:09:e3:50:68:ca:be:98:13:ae:34:7f:f5:
         74:f4:88:57:e6:4b:f6:ae:fb:34:d6:17:01:a6:af:bb:17:21:
         38:a9:0a:74
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICI9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2
OEY2OTg1M0IwHhcNMjYwOTI4MTU1MjAxWhcNMjYxMDA1MTU1MjAxWjAYMRYwFAYD
VQQDEw02YWJhOGQyMS1mZmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApIuXYbr7rkKKupnNlhDyi660zLFjLXBJ68aZtIzInug3TyXGnZDAiG5Hiybz
TuJ9cuX/Pl4QG2DumHHzCS05UZU0X0wkTTh4KKHGzqUyeUqFlKBh5iyCtDF6aulf
NAenJlNkZjcmF2UNykOwQAakyMx1b+lq3zZt42eg+yaHoE7l3qRF0dKTfZ2LkYX3
3t5C4IntJ9db24ZlZ5/qwyv23+1vk9hqdhCatjVy9joONKM5m6hiY+ybAVlKSJTY
mwzp/cI8ooV7smz/O83KpzD5+BZQpmu2nuubh+vB/X/BgWgE7lKLgRlBeX8llcBW
yUTusVv64RFA5ZK5FVgX9Awt7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjqk3an
0JhC/sf0a2FT4aTCceG1MB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy
RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0
N09GTlFFV2JxNXhvOXBoVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvevLeYd6jTCkGHjw01anKt1clP3Plcj8wKtU1MtmZFiARkfPNIal71EJJZAI
gMHLTtPwM0Q2hz525rQ3bjro75dCPNcX+tKIkrB+6/8nsMhGbLhviK5gp3gLykGE
7joa8dwbATaQ4zBuQhD6WDnSDyOGlfOhF3Rl/GrBmd2YUbwaXOJzjLahzClw38fH
ZWBKpP/ecqP3p0o+fORjodHlLQkHVNxnl6JYKCbbYLjo+P22AbUT6imz/fPLExXO
aF8p1/7IPU/8P4abjepqaH5dvyomQCIhdofoa72V3qS/CeNQaMq+mBOuNH/1dPSI
V+ZL9q77NNYXAaavuxchOKkKdA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:52:09 2026 by rpki-client