Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
File:                     v3p9VKnGtsG13SUCa_u6fXfkUns.mft (raw, json)
Hash identifier:          CePyCYLxN2Op0UxfHFbA9ZphmFOY2C5Duybt5rdr1H0=
Subject key identifier:   8A:FF:70:5F:2E:85:10:1B:8B:EF:CF:8E:3F:49:7E:7B:B8:9A:93:A1
Authority key identifier: BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B
Certificate issuer:       /CN=A9136302/serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
Manifest number:          0162
Signing time:             Wed 19 Aug 2026 05:36:05 +0000
Manifest this update:     Wed 19 Aug 2026 05:36:05 +0000
Manifest next update:     Wed 26 Aug 2026 05:36:05 +0000
Files and hashes:         1: v3p9VKnGtsG13SUCa_u6fXfkUns.crl (hash: CSslltkqdgF5Ye3mFeq0PPnVzEAS/FMj+hYNcXM+Gzk=)
                          2: 94922566814411EFA0DF4C09C4F9AE02.roa (hash: E9mAZb8xSaXl7oqYSgHwt0AXSurnvpPNcWXcsPgaaag=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl
                          rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136302, serialNumber=BF7A7D54A9C6B6C1B5DD25026BFBBA7D77E4527B
        Validity
            Not Before: Aug 19 05:36:05 2026 GMT
            Not After : Aug 26 05:36:05 2026 GMT
        Subject: CN=6a8540c5-c75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:46:00:05:70:76:8a:9b:d5:d1:4d:a2:80:
                    af:8c:15:1c:53:e9:74:8e:fd:35:a6:fd:60:e4:aa:
                    18:aa:68:83:46:2c:ae:d9:43:d9:3c:e1:ab:8b:87:
                    b6:5c:1c:57:e6:41:8d:f4:46:13:98:d5:74:c7:b3:
                    31:f1:94:26:11:09:8d:0c:de:c0:f5:75:b1:98:33:
                    01:e9:f2:13:cf:03:cb:03:ce:46:76:2a:9a:cf:ef:
                    05:ca:2e:c6:4e:bd:e5:22:6e:4b:82:80:fb:ac:6a:
                    41:f9:a6:de:cb:ad:26:db:ff:97:c3:90:ab:98:af:
                    54:06:87:f7:2a:a0:68:ea:4e:19:5b:eb:2c:88:dd:
                    c5:91:2e:9a:4b:b5:86:60:e2:ef:ce:9d:27:15:b2:
                    82:53:a8:65:9d:5e:8f:af:00:2c:3c:5d:7b:1d:f0:
                    7e:4b:dd:54:18:1a:88:b6:00:51:3f:49:ac:31:8a:
                    4a:d7:4d:14:fd:cb:6c:c4:e0:fc:30:37:aa:ea:b6:
                    ce:31:5d:90:05:8c:0a:75:4a:ca:82:19:db:8d:9c:
                    85:c6:cc:3c:ac:04:47:3a:29:f2:7b:6e:d4:d8:8d:
                    4b:b9:fa:5f:dd:bc:89:ee:56:a2:65:b8:1e:12:48:
                    6f:c0:5b:be:d7:28:49:33:9b:f1:a2:87:5d:35:94:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FF:70:5F:2E:85:10:1B:8B:EF:CF:8E:3F:49:7E:7B:B8:9A:93:A1
            X509v3 Authority Key Identifier:
                keyid:BF:7A:7D:54:A9:C6:B6:C1:B5:DD:25:02:6B:FB:BA:7D:77:E4:52:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3p9VKnGtsG13SUCa_u6fXfkUns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136302/2FC4A712814411EF95AFC148C4F9AE02/v3p9VKnGtsG13SUCa_u6fXfkUns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b1:73:1a:f5:d4:ab:55:2a:89:38:ab:99:a0:65:6f:ee:8b:
         1a:1e:ad:f3:ed:76:55:5b:be:18:25:31:13:5c:0d:76:b9:50:
         53:fc:03:64:fd:d0:80:74:f6:11:4c:6d:8d:e6:17:db:d9:1c:
         d5:d2:11:30:a7:71:70:2f:eb:46:76:6a:7d:04:0e:0d:07:01:
         e6:d4:b5:7d:0e:cf:93:35:19:38:b2:d3:ce:3b:32:c2:40:70:
         91:f7:c4:28:7c:ed:04:f2:f2:57:ee:e8:6e:f3:31:37:0c:18:
         50:f0:a5:4f:70:0d:7e:f3:ea:ee:18:79:e4:5e:ee:46:7d:8a:
         0f:a6:e6:93:18:ab:88:5d:76:56:1c:f1:82:e8:e2:e1:96:3d:
         8d:54:11:6f:5e:95:37:4a:97:90:8d:fb:97:47:2b:7d:51:c3:
         a0:3d:d5:31:d0:3e:a0:ae:ec:d6:24:29:00:7d:7c:11:59:d7:
         ca:03:52:34:d4:a9:e7:a9:21:f8:22:a9:40:4e:ca:4f:68:de:
         15:02:e2:9f:81:b2:03:23:0a:87:a4:a1:6b:de:76:46:0a:d6:
         d5:a9:72:9d:3d:64:46:a8:21:87:18:8e:89:68:b0:77:b3:dc:
         d7:32:f0:3e:e9:43:c8:68:cd:1b:b3:f4:c1:b0:4e:5c:ed:66:
         33:7c:c4:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYzMDIxMTAvBgNVBAUTKEJGN0E3RDU0QTlDNkI2QzFCNUREMjUwMjZCRkJCQTdE
NzdFNDUyN0IwHhcNMjYwODE5MDUzNjA1WhcNMjYwODI2MDUzNjA1WjAYMRYwFAYD
VQQDEw02YTg1NDBjNS1jNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkNGAAVwdoqb1dFNooCvjBUcU+l0jv01pv1g5KoYqmiDRiyu2UPZPOGri4e2
XBxX5kGN9EYTmNV0x7Mx8ZQmEQmNDN7A9XWxmDMB6fITzwPLA85Gdiqaz+8Fyi7G
Tr3lIm5LgoD7rGpB+abey60m2/+Xw5CrmK9UBof3KqBo6k4ZW+ssiN3FkS6aS7WG
YOLvzp0nFbKCU6hlnV6PrwAsPF17HfB+S91UGBqItgBRP0msMYpK100U/ctsxOD8
MDeq6rbOMV2QBYwKdUrKghnbjZyFxsw8rARHOinye27U2I1Lufpf3byJ7laiZbge
EkhvwFu+1yhJM5vxooddNZSpUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIr/cF8u
hRAbi+/Pjj9Jfnu4mpOhMB8GA1UdIwQYMBaAFL96fVSpxrbBtd0lAmv7un135FJ7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjMwMi8yRkM0QTcxMjgx
NDQxMUVGOTVBRkMxNDhDNEY5QUUwMi92M3A5VktuR3RzRzEzU1VDYV91NmZYZmtV
bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YzcDlWS25HdHNHMTNTVUNhX3U2Zlhma1Vucy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjMwMi8yRkM0QTcxMjgxNDQxMUVGOTVBRkMxNDhDNEY5QUUwMi92M3A5VktuR3Rz
RzEzU1VDYV91NmZYZmtVbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATbFzGvXUq1UqiTirmaBlb+6LGh6t8+12VVu+GCUxE1wNdrlQU/wDZP3QgHT2
EUxtjeYX29kc1dIRMKdxcC/rRnZqfQQODQcB5tS1fQ7PkzUZOLLTzjsywkBwkffE
KHztBPLyV+7obvMxNwwYUPClT3ANfvPq7hh55F7uRn2KD6bmkxiriF12Vhzxguji
4ZY9jVQRb16VN0qXkI37l0crfVHDoD3VMdA+oK7s1iQpAH18EVnXygNSNNSp56kh
+CKpQE7KT2jeFQLin4GyAyMKh6Sha952RgrW1alynT1kRqghhxiOiWiwd7Pc1zLw
PulDyGjNG7P0wbBOXO1mM3zE5w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:22 2026 by rpki-client