Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File:                     -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier:          HJY7ruh5WhZgyXEGmsYJeM7603L/Pjpq0y5tztl/wTw=
Subject key identifier:   9D:24:58:FD:15:DA:51:C4:7D:50:1A:80:1B:4A:EB:A8:05:7E:8D:C1
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer:       /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial:       35FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number:          35C8
Signing time:             Tue 06 Oct 2026 14:17:48 +0000
Manifest this update:     Tue 06 Oct 2026 14:17:48 +0000
Manifest next update:     Tue 13 Oct 2026 14:17:48 +0000
Files and hashes:         1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: e5Ph553/R9FxgfGFkSbh/qpgW6fZij3/lYHQjVW5Ig4=)
                          2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: hFcT6GGoZtfB5obxWLs1zq4yzpXCoVBcNvn/SUcTV4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
                          rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13822 (0x35fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
        Validity
            Not Before: Oct  6 14:17:48 2026 GMT
            Not After : Oct 13 14:17:48 2026 GMT
        Subject: CN=6ac5030c-1acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9b:38:af:df:3b:05:b6:32:f6:1d:8b:a1:34:
                    6f:ee:91:c8:c5:54:30:c7:9e:c5:98:37:50:b9:23:
                    b6:0a:12:b1:7b:cb:be:bc:d7:fa:e4:c4:08:69:79:
                    94:73:5d:99:2e:a9:94:71:e4:c2:1c:98:b8:5b:a8:
                    30:ad:bd:ad:93:2e:80:f6:24:b3:8f:14:46:3d:6e:
                    29:c2:64:d4:b4:ce:5b:e2:fd:40:de:8c:c6:6f:a4:
                    8c:87:f4:fc:33:00:a1:3b:f0:3c:72:c2:21:46:4c:
                    fe:83:d2:84:8d:07:de:87:f2:de:34:ad:29:65:94:
                    a4:32:b9:6a:9a:3a:a2:c9:90:45:4b:2f:e1:0a:82:
                    84:8d:7a:a6:33:04:f9:4b:8b:99:0b:3c:89:28:82:
                    fb:84:9d:8a:63:87:3c:fa:e1:d5:00:47:9c:a1:aa:
                    65:31:6c:6e:0c:99:4b:ef:34:50:8f:9e:28:51:86:
                    f7:89:e2:2b:c5:88:7b:6f:1d:de:af:35:53:a0:f8:
                    1f:3f:d2:53:59:35:e9:8b:60:55:e7:1e:b3:df:f5:
                    d1:1f:39:23:c1:06:df:f8:27:c9:ce:66:05:de:5d:
                    88:55:70:69:36:5c:d3:da:5b:b3:55:69:96:0d:72:
                    08:e5:6a:9c:25:79:b7:86:c6:da:b4:c9:fc:2e:51:
                    5b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:24:58:FD:15:DA:51:C4:7D:50:1A:80:1B:4A:EB:A8:05:7E:8D:C1
            X509v3 Authority Key Identifier:
                keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:43:20:31:74:06:15:92:86:de:59:d1:e6:77:5c:31:96:
         ac:1f:9e:50:2b:43:1f:20:85:a9:6b:21:cf:29:95:16:4f:eb:
         83:8b:a0:ea:4c:2e:16:e0:b3:f9:a3:d8:aa:eb:5f:2b:d2:63:
         f1:d5:79:d5:f6:ea:7f:a4:58:23:0c:1d:c4:fb:a2:38:8a:a3:
         3e:d7:03:64:0c:34:27:a5:08:fb:01:31:04:bf:b8:d9:55:ea:
         16:ac:b4:6f:e4:04:66:f1:32:dc:f9:38:87:94:b2:b9:34:27:
         a4:4e:31:96:db:ae:fa:ac:4d:42:64:32:52:b5:79:28:95:70:
         3b:c5:6c:5c:68:30:e9:e9:da:49:34:aa:e2:12:53:4c:91:9e:
         98:12:89:74:63:3b:26:43:f4:d6:bc:29:1d:95:cc:fa:8b:d1:
         bc:bd:f6:63:00:42:3a:de:e3:fe:17:20:33:64:04:8a:9b:05:
         08:bb:84:03:f9:03:b6:9d:20:df:62:12:2e:dd:d9:08:55:72:
         47:43:ba:ef:ae:32:cc:d8:c6:e1:ca:a1:c4:f6:1a:1b:27:55:
         0d:e9:36:df:2f:f4:12:40:e4:27:4f:68:2c:28:04:5d:36:4d:
         41:a5:64:08:8d:e5:14:fa:f1:0e:16:57:71:b4:fa:b6:94:63:
         38:d8:17:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2
RjU1NDFFNDAwHhcNMjYxMDA2MTQxNzQ4WhcNMjYxMDEzMTQxNzQ4WjAYMRYwFAYD
VQQDEw02YWM1MDMwYy0xYWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ps4r987BbYy9h2LoTRv7pHIxVQwx57FmDdQuSO2ChKxe8u+vNf65MQIaXmU
c12ZLqmUceTCHJi4W6gwrb2tky6A9iSzjxRGPW4pwmTUtM5b4v1A3ozGb6SMh/T8
MwChO/A8csIhRkz+g9KEjQfeh/LeNK0pZZSkMrlqmjqiyZBFSy/hCoKEjXqmMwT5
S4uZCzyJKIL7hJ2KY4c8+uHVAEecoaplMWxuDJlL7zRQj54oUYb3ieIrxYh7bx3e
rzVToPgfP9JTWTXpi2BV5x6z3/XRHzkjwQbf+CfJzmYF3l2IVXBpNlzT2luzVWmW
DXII5WqcJXm3hsbatMn8LlFb8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ0kWP0V
2lHEfVAagBtK66gFfo3BMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE
NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0
OTJfdk1YYnR1Znh2VlVIa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFIpDIDF0BhWSht5Z0eZ3XDGWrB+eUCtDHyCFqWshzymVFk/rg4ug6kwuFuCz
+aPYqutfK9Jj8dV51fbqf6RYIwwdxPuiOIqjPtcDZAw0J6UI+wExBL+42VXqFqy0
b+QEZvEy3Pk4h5SyuTQnpE4xltuu+qxNQmQyUrV5KJVwO8VsXGgw6enaSTSq4hJT
TJGemBKJdGM7JkP01rwpHZXM+ovRvL32YwBCOt7j/hcgM2QEipsFCLuEA/kDtp0g
32ISLt3ZCFVyR0O6764yzNjG4cqhxPYaGydVDek23y/0EkDkJ09oLCgEXTZNQaVk
CI3lFPrxDhZXcbT6tpRjONgXfQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:30:31 2026 by rpki-client