Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
File:                     9FQft3ll3hSln57yM94Z-SBfX5g.mft (raw, json)
Hash identifier:          ls9FJyaLkoeay9ub22+yh/0ivTU6GoCKbFLHPnlYD24=
Subject key identifier:   DA:CA:D4:F4:42:10:6B:2E:82:4E:D7:4F:62:A1:AD:B2:74:C8:A3:3D
Authority key identifier: F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98
Certificate issuer:       /CN=A9137917/serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
Certificate serial:       0885
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
Manifest number:          0864
Signing time:             Fri 14 Aug 2026 21:09:23 +0000
Manifest this update:     Fri 14 Aug 2026 21:09:23 +0000
Manifest next update:     Fri 21 Aug 2026 21:09:23 +0000
Files and hashes:         1: 9FQft3ll3hSln57yM94Z-SBfX5g.crl (hash: q2PL+9vk+q4DkuF35bbAe8X7LrObZzPMvQ/DGYnyU1c=)
                          2: 978FBCD82A0E11EB8CC1535DC4F9AE02.roa (hash: 1KjRG3v8pkaGSW0/hInFx/2rpIZZ7GFqFAtwvgwsN4M=)
                          3: DF8912BEB1E511EB90B9DD25C4F9AE02.roa (hash: s0JtQjaquy1haDTdVO3sJ1UiTrHlMay3DOPS02FW8WQ=)
                          4: 992104CE2EA211EBA8D67685C4F9AE02.roa (hash: Mq0l/N1vCUMtxfQV/uhAAkIAGBUYqoCXgKbxS8XYpMA=)
                          5: BB0569102A0411EB992DD32EC4F9AE02.roa (hash: HkzCk2HljndiEq4GBL2zGsRRu25qjHkzwRnuz6BJbuM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl
                          rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Aug 2026 21:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137917, serialNumber=F4541FB77965DE14A59F9EF233DE19F9205F5F98
        Validity
            Not Before: Aug 14 21:09:23 2026 GMT
            Not After : Aug 21 21:09:23 2026 GMT
        Subject: CN=6a7f8403-60d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:bc:33:b7:fa:fc:dc:6f:8e:a1:21:ae:87:
                    1f:6d:6f:05:7f:36:57:65:07:5a:10:17:fa:5e:a5:
                    a1:e7:ec:17:57:3c:10:da:b7:b2:ce:5a:b1:f5:4b:
                    9f:ca:3d:de:2d:fc:f4:eb:4a:8f:c9:ab:46:91:5f:
                    6b:a7:67:ed:cd:55:e0:ec:f7:81:0e:37:96:2e:73:
                    9e:72:c9:ef:0b:e9:12:e5:bf:c6:34:34:3f:e4:03:
                    70:9b:0e:ee:d8:42:37:5a:25:a9:27:0d:08:b6:f1:
                    ac:db:47:1e:f4:3a:22:84:a6:47:de:f7:4f:2e:e7:
                    14:3f:9a:63:22:e9:07:6e:3d:70:45:6f:c1:e3:7b:
                    e8:a4:61:8e:cb:7e:73:b4:b2:8c:31:39:15:8c:d4:
                    dc:d8:86:e3:c1:bf:8d:b9:68:39:26:d4:76:c3:13:
                    8a:c7:bc:5f:1c:85:7a:3e:fa:1b:15:0d:5b:e0:4b:
                    80:68:29:c1:0c:1b:bb:a7:70:65:db:dc:48:09:66:
                    28:0f:26:e1:62:7e:0c:b7:e7:26:7d:14:de:38:b7:
                    e8:6e:a4:85:8b:a2:8b:02:68:ac:fe:44:ce:67:1f:
                    80:d1:d8:7b:f0:5b:17:8a:72:c8:6d:76:4f:69:e5:
                    67:17:3f:d5:89:b9:bd:9e:d9:33:bb:41:b4:90:1a:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CA:D4:F4:42:10:6B:2E:82:4E:D7:4F:62:A1:AD:B2:74:C8:A3:3D
            X509v3 Authority Key Identifier:
                keyid:F4:54:1F:B7:79:65:DE:14:A5:9F:9E:F2:33:DE:19:F9:20:5F:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FQft3ll3hSln57yM94Z-SBfX5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137917/492AB5942A0311EBA69DDD2DC4F9AE02/9FQft3ll3hSln57yM94Z-SBfX5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:46:fa:83:01:58:07:01:e9:c6:95:51:04:93:b1:78:d3:3c:
         64:7d:ce:a5:0b:46:8b:c3:af:ec:c3:c6:75:23:42:78:9c:44:
         b6:0d:1b:ff:84:69:d1:0f:61:9d:1d:e0:0c:5d:5d:ab:07:fa:
         76:e4:20:78:09:de:5d:c7:ec:1e:37:52:0c:6e:0b:39:1f:c1:
         52:0b:6d:54:2d:92:03:f4:77:67:01:18:ef:b2:22:90:1e:b4:
         3f:a4:66:78:29:58:7d:11:07:62:63:07:f2:e9:8b:ef:bc:a5:
         ab:b0:64:31:b4:50:99:88:2e:07:4b:01:08:4a:2b:a6:53:52:
         32:80:63:2d:ef:0c:6a:5e:42:9d:74:8b:58:56:b5:8f:cc:f8:
         0e:7f:c8:75:08:85:84:56:9a:c5:db:6a:04:d7:05:de:a9:33:
         f1:b2:7a:59:3a:c4:e5:3e:a0:db:43:b6:3c:34:f6:1d:c0:cb:
         e6:32:d9:4d:54:6e:30:80:9e:b9:f4:ce:62:74:9a:43:c5:fa:
         15:9d:74:e0:fc:ef:f8:41:23:bf:1a:22:17:53:96:29:bd:82:
         f5:78:54:e5:60:7f:75:42:f9:0f:0c:29:48:b0:c7:64:d8:6a:
         25:c9:71:d4:e6:91:36:fc:8d:59:cc:54:0c:f2:cd:e6:82:01:
         4f:da:21:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzc5MTcxMTAvBgNVBAUTKEY0NTQxRkI3Nzk2NURFMTRBNTlGOUVGMjMzREUxOUY5
MjA1RjVGOTgwHhcNMjYwODE0MjEwOTIzWhcNMjYwODIxMjEwOTIzWjAYMRYwFAYD
VQQDEw02YTdmODQwMy02MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj6i8M7f6/NxvjqEhrocfbW8FfzZXZQdaEBf6XqWh5+wXVzwQ2reyzlqx9Uuf
yj3eLfz060qPyatGkV9rp2ftzVXg7PeBDjeWLnOecsnvC+kS5b/GNDQ/5ANwmw7u
2EI3WiWpJw0ItvGs20ce9DoihKZH3vdPLucUP5pjIukHbj1wRW/B43vopGGOy35z
tLKMMTkVjNTc2Ibjwb+NuWg5JtR2wxOKx7xfHIV6PvobFQ1b4EuAaCnBDBu7p3Bl
29xICWYoDybhYn4Mt+cmfRTeOLfobqSFi6KLAmis/kTOZx+A0dh78FsXinLIbXZP
aeVnFz/Vibm9ntkzu0G0kBpvqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrK1PRC
EGsugk7XT2KhrbJ0yKM9MB8GA1UdIwQYMBaAFPRUH7d5Zd4UpZ+e8jPeGfkgX1+Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzkxNy80OTJBQjU5NDJB
MDMxMUVCQTY5REREMkRDNEY5QUUwMi85RlFmdDNsbDNoU2xuNTd5TTk0Wi1TQmZY
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGUWZ0M2xsM2hTbG41N3lNOTRaLVNCZlg1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzkxNy80OTJBQjU5NDJBMDMxMUVCQTY5REREMkRDNEY5QUUwMi85RlFmdDNsbDNo
U2xuNTd5TTk0Wi1TQmZYNWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMEb6gwFYBwHpxpVRBJOxeNM8ZH3OpQtGi8Ov7MPGdSNCeJxEtg0b/4Rp0Q9h
nR3gDF1dqwf6duQgeAneXcfsHjdSDG4LOR/BUgttVC2SA/R3ZwEY77IikB60P6Rm
eClYfREHYmMH8umL77ylq7BkMbRQmYguB0sBCEorplNSMoBjLe8Mal5CnXSLWFa1
j8z4Dn/IdQiFhFaaxdtqBNcF3qkz8bJ6WTrE5T6g20O2PDT2HcDL5jLZTVRuMICe
ufTOYnSaQ8X6FZ104Pzv+EEjvxoiF1OWKb2C9XhU5WB/dUL5DwwpSLDHZNhqJclx
1OaRNvyNWcxUDPLN5oIBT9ohYA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:46 2026 by rpki-client