Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
File:                     1Siei3312SAW7HmO7v8FvHPoVYA.mft (raw, json)
Hash identifier:          RK99iSSiseOIPW4dgrrPGc4fVTaW4AhPvUgRUM1OJiw=
Subject key identifier:   0F:6D:A9:67:20:62:BF:87:26:DA:B0:22:F8:7B:F5:60:48:53:4C:E5
Authority key identifier: D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80
Certificate issuer:       /CN=A9137722/serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
Manifest number:          01BD
Signing time:             Wed 21 Oct 2026 04:25:52 +0000
Manifest this update:     Wed 21 Oct 2026 04:25:52 +0000
Manifest next update:     Wed 28 Oct 2026 04:25:52 +0000
Files and hashes:         1: 1Siei3312SAW7HmO7v8FvHPoVYA.crl (hash: 3nW1aDGPZKwr3aVHMewKqlmJiUteu+rhGPxqYiUvsls=)
                          2: B4684D8A288D11EF96BC5135C4F9AE02.roa (hash: lfEsq4p4yuFqLApmHSLVmbK+Csyf4ooQWc1GARzxtqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl
                          rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137722, serialNumber=D5289E8B7DF5D92016EC798EEEFF05BC73E85580
        Validity
            Not Before: Oct 21 04:25:52 2026 GMT
            Not After : Oct 28 04:25:52 2026 GMT
        Subject: CN=6ad83ed0-d4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:77:2c:7a:d1:8a:42:47:3d:94:f1:b2:79:
                    57:9f:9b:44:40:d8:f1:1d:76:a9:b2:f6:87:7b:d9:
                    7c:8d:d8:72:5f:54:53:b6:94:c7:ef:1d:5b:f3:da:
                    67:ea:04:8d:97:53:0f:65:35:79:6b:33:a7:6c:de:
                    44:8a:14:c3:37:ef:15:f0:0b:50:7e:b8:d1:3a:81:
                    6b:5d:85:45:2b:8e:9d:56:eb:29:64:f1:79:47:6c:
                    fc:8e:cb:ec:db:8b:e6:b5:7d:41:94:60:4c:30:8b:
                    28:61:a1:e3:4d:9a:a5:d3:d1:2c:e9:f6:01:fe:b7:
                    5e:06:3e:8e:01:de:64:1a:15:2f:dd:80:a0:8f:14:
                    4f:a8:3d:c0:93:5e:e8:26:0a:7d:98:49:08:eb:8a:
                    fe:7d:a3:fb:f5:03:d2:30:a8:19:ee:eb:ae:5b:3c:
                    f3:4a:da:8a:58:91:5e:85:ea:81:fc:3c:e1:e7:ec:
                    19:ac:97:ce:e1:6f:88:bf:fa:c0:89:fd:04:d3:6c:
                    de:86:15:3e:52:bc:fc:a5:5a:80:07:99:90:f0:b0:
                    b8:82:b1:75:05:24:5b:c3:fb:19:64:9d:fd:b2:12:
                    93:a1:a7:50:ae:41:7f:51:ce:11:9a:eb:2a:65:df:
                    42:fd:d2:6e:90:97:20:a0:7b:85:e8:08:7a:5e:5f:
                    c3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6D:A9:67:20:62:BF:87:26:DA:B0:22:F8:7B:F5:60:48:53:4C:E5
            X509v3 Authority Key Identifier:
                keyid:D5:28:9E:8B:7D:F5:D9:20:16:EC:79:8E:EE:FF:05:BC:73:E8:55:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Siei3312SAW7HmO7v8FvHPoVYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137722/46BDDC00288D11EFB1904721C4F9AE02/1Siei3312SAW7HmO7v8FvHPoVYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8c:f1:8c:17:b5:98:9d:19:8d:c0:c7:80:55:14:2e:7c:2e:
         5f:3e:89:89:7d:8b:a8:a9:df:17:31:62:47:4e:2a:54:ae:e0:
         e6:9d:68:c3:d6:49:76:9c:67:a3:fa:70:7f:8d:b4:46:e6:45:
         7d:c2:48:ae:f8:4a:1c:20:33:c5:da:fc:cb:46:0a:92:ea:34:
         ed:92:bb:ed:f1:06:4f:14:d0:9f:2c:bc:65:d3:50:31:28:6c:
         46:38:ff:12:86:9e:93:60:b1:d1:17:60:4d:b4:f1:e9:2b:dc:
         69:28:d0:43:ca:6b:9e:ee:f3:e4:57:8e:5d:a6:ae:9e:73:e5:
         05:49:e4:79:60:17:c7:ff:3b:30:03:e1:62:d5:28:3b:e5:8b:
         af:fe:f2:b8:05:1f:5a:db:40:a2:9b:8f:52:a2:a9:81:fe:26:
         39:75:f3:4b:6d:2e:8c:d7:77:42:f2:fe:01:eb:d0:91:6b:51:
         88:ab:ee:dc:89:00:d4:09:9d:07:e4:2d:fb:44:10:e0:06:0c:
         ed:e6:b9:f2:22:9e:b6:32:44:4c:8e:f2:0a:e9:26:db:4d:95:
         84:76:63:c6:49:d1:12:15:39:2b:1c:78:14:97:47:c1:b4:8d:
         ec:cd:63:6a:a7:74:a3:a1:a9:68:61:66:62:8f:6a:59:bc:e9:
         53:0e:2d:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc3MjIxMTAvBgNVBAUTKEQ1Mjg5RThCN0RGNUQ5MjAxNkVDNzk4RUVFRkYwNUJD
NzNFODU1ODAwHhcNMjYxMDIxMDQyNTUyWhcNMjYxMDI4MDQyNTUyWjAYMRYwFAYD
VQQDEw02YWQ4M2VkMC1kNGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs853LHrRikJHPZTxsnlXn5tEQNjxHXapsvaHe9l8jdhyX1RTtpTH7x1b89pn
6gSNl1MPZTV5azOnbN5EihTDN+8V8AtQfrjROoFrXYVFK46dVuspZPF5R2z8jsvs
24vmtX1BlGBMMIsoYaHjTZql09Es6fYB/rdeBj6OAd5kGhUv3YCgjxRPqD3Ak17o
Jgp9mEkI64r+faP79QPSMKgZ7uuuWzzzStqKWJFeheqB/Dzh5+wZrJfO4W+Iv/rA
if0E02zehhU+Urz8pVqAB5mQ8LC4grF1BSRbw/sZZJ39shKToadQrkF/Uc4Rmusq
Zd9C/dJukJcgoHuF6Ah6Xl/DDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA9tqWcg
Yr+HJtqwIvh79WBIU0zlMB8GA1UdIwQYMBaAFNUonot99dkgFux5ju7/Bbxz6FWA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzcyMi80NkJEREMwMDI4
OEQxMUVGQjE5MDQ3MjFDNEY5QUUwMi8xU2llaTMzMTJTQVc3SG1PN3Y4RnZIUG9W
WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFTaWVpMzMxMlNBVzdIbU83djhGdkhQb1ZZQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzcyMi80NkJEREMwMDI4OEQxMUVGQjE5MDQ3MjFDNEY5QUUwMi8xU2llaTMzMTJT
QVc3SG1PN3Y4RnZIUG9WWUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcIzxjBe1mJ0ZjcDHgFUULnwuXz6JiX2LqKnfFzFiR04qVK7g5p1ow9ZJdpxn
o/pwf420RuZFfcJIrvhKHCAzxdr8y0YKkuo07ZK77fEGTxTQnyy8ZdNQMShsRjj/
Eoaek2Cx0RdgTbTx6SvcaSjQQ8prnu7z5FeOXaaunnPlBUnkeWAXx/87MAPhYtUo
O+WLr/7yuAUfWttAopuPUqKpgf4mOXXzS20ujNd3QvL+AevQkWtRiKvu3IkA1Amd
B+Qt+0QQ4AYM7ea58iKetjJETI7yCukm202VhHZjxknREhU5Kxx4FJdHwbSN7M1j
aqd0o6GpaGFmYo9qWbzpUw4tgQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:21:25 2026 by rpki-client