Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
File:                     E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json)
Hash identifier:          CXP5SSCCFKCs0iBySg/cs3Em3QFsi5swlbmUiKg0gBg=
Subject key identifier:   F1:C2:92:2F:26:4B:E7:DE:19:52:9C:3D:77:21:48:32:B5:86:74:B4
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Certificate issuer:       /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial:       0DD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
Manifest number:          0DAC
Signing time:             Mon 02 Nov 2026 18:05:18 +0000
Manifest this update:     Mon 02 Nov 2026 18:05:17 +0000
Manifest next update:     Mon 09 Nov 2026 18:05:17 +0000
Files and hashes:         1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: 5NLD5BXKzqaJHEeVtHLij0+E+uzW3SrisWJb/0cMAnw=)
                          2: CA0AB7D0539811F19275B1E8AE833773.roa (hash: RJS1Q5SyoLw5kpGy0JR6IuXz+7wLlZLltCqEB6vPsmA=)
                          3: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: J62kW7vY7+y9yEuU2U+Umwljmn5gkb28051yzRtO/0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
                          rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 16:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3538 (0xdd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
        Validity
            Not Before: Nov  2 18:05:17 2026 GMT
            Not After : Nov  9 18:05:17 2026 GMT
        Subject: CN=6ae8d0de-880b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:84:57:26:19:13:b5:fd:59:39:44:6b:9a:
                    fa:0a:14:96:9f:e3:25:c8:92:f3:01:51:f0:1d:06:
                    92:04:cd:c7:9b:a0:f8:37:4a:12:de:94:bd:11:b6:
                    3b:92:ed:35:9e:12:59:ba:c9:11:5b:99:d9:d8:47:
                    00:7f:2c:f6:0a:6a:4a:d6:dd:55:c6:7a:e0:24:60:
                    a0:62:db:b5:ca:d2:df:af:22:df:28:45:34:f9:5f:
                    22:a8:4e:1c:51:72:76:1b:75:df:15:7d:6e:97:65:
                    70:d0:fa:26:9b:b7:5b:fa:dc:fc:8e:a7:ec:cf:f8:
                    94:b5:11:3f:f0:ae:f7:86:06:01:ee:04:1b:6c:f4:
                    73:70:48:56:98:2c:14:6a:95:fe:10:f8:66:fc:53:
                    25:99:88:e6:25:6b:e5:a4:bb:79:93:a4:c0:c2:d0:
                    00:b9:f5:bc:21:da:65:09:b5:3c:e1:02:cc:b6:51:
                    00:41:95:70:eb:9a:b3:78:27:fe:e1:0b:ee:e6:62:
                    10:42:5b:b9:ee:01:99:3d:d5:79:80:cf:15:46:fd:
                    65:99:59:c1:68:26:51:99:87:97:ee:26:cf:ff:a9:
                    45:0f:ab:8e:e0:b4:a4:63:e2:48:d0:c6:e9:ce:e6:
                    35:74:e8:31:a5:2b:35:bb:43:21:95:4d:62:9a:f1:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C2:92:2F:26:4B:E7:DE:19:52:9C:3D:77:21:48:32:B5:86:74:B4
            X509v3 Authority Key Identifier:
                keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3f:25:5e:9b:5a:5c:54:22:6f:16:45:a1:4a:63:34:4c:d8:
         96:23:3d:b8:42:90:88:5a:9e:2f:03:a7:70:69:c1:3f:20:54:
         e1:6c:fb:2d:9b:3a:42:66:fa:fd:bc:1e:8f:17:af:48:bd:40:
         21:b1:2d:4f:1a:8c:a4:53:d3:56:52:03:be:1b:43:f4:15:89:
         72:78:5b:85:5f:81:31:39:e9:c2:2b:c3:ec:b2:50:2c:c5:b4:
         b9:db:bf:1b:3e:23:f0:f0:d8:2e:e8:9f:97:0b:28:4d:3c:37:
         21:7d:e4:01:ec:5c:b7:27:a2:0e:96:e7:b3:e6:05:ae:69:f2:
         22:4f:78:15:ab:54:bb:81:73:5e:21:0e:b1:67:7d:54:f2:33:
         6b:ba:44:0b:a7:09:58:b2:2b:01:83:0f:48:3c:43:50:59:fd:
         68:e4:a0:2c:22:a2:78:10:c2:bd:81:66:78:ec:85:e4:99:db:
         41:33:74:9f:73:94:85:2a:5a:74:25:24:6b:14:73:1a:14:25:
         fe:fb:2d:55:2b:4b:c4:77:49:b9:7f:39:46:2b:c6:56:6d:5a:
         8e:11:8b:ac:38:cf:ef:eb:f5:8f:ab:ed:05:1d:c3:07:7c:7e:
         0f:6c:3f:50:15:c9:09:71:a0:32:94:c7:f6:37:6b:55:a8:b6:
         d7:00:ff:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC
MjFDNERCMDkwHhcNMjYxMTAyMTgwNTE3WhcNMjYxMTA5MTgwNTE3WjAYMRYwFAYD
VQQDEw02YWU4ZDBkZS04ODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApxiEVyYZE7X9WTlEa5r6ChSWn+MlyJLzAVHwHQaSBM3Hm6D4N0oS3pS9EbY7
ku01nhJZuskRW5nZ2EcAfyz2CmpK1t1VxnrgJGCgYtu1ytLfryLfKEU0+V8iqE4c
UXJ2G3XfFX1ul2Vw0Pomm7db+tz8jqfsz/iUtRE/8K73hgYB7gQbbPRzcEhWmCwU
apX+EPhm/FMlmYjmJWvlpLt5k6TAwtAAufW8IdplCbU84QLMtlEAQZVw65qzeCf+
4Qvu5mIQQlu57gGZPdV5gM8VRv1lmVnBaCZRmYeX7ibP/6lFD6uO4LSkY+JI0Mbp
zuY1dOgxpSs1u0MhlU1imvH6zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHCki8m
S+feGVKcPXchSDK1hnS0MB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB
MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn
NDFrUjZjbkpSUFN5SEUyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABT8lXptaXFQibxZFoUpjNEzYliM9uEKQiFqeLwOncGnBPyBU4Wz7LZs6Qmb6
/bwejxevSL1AIbEtTxqMpFPTVlIDvhtD9BWJcnhbhV+BMTnpwivD7LJQLMW0udu/
Gz4j8PDYLuiflwsoTTw3IX3kAexctyeiDpbns+YFrmnyIk94FatUu4FzXiEOsWd9
VPIza7pEC6cJWLIrAYMPSDxDUFn9aOSgLCKieBDCvYFmeOyF5JnbQTN0n3OUhSpa
dCUkaxRzGhQl/vstVStLxHdJuX85RivGVm1ajhGLrDjP7+v1j6vtBR3DB3x+D2w/
UBXJCXGgMpTH9jdrVai21wD/WQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:37:30 2026 by rpki-client