Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File:                     Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier:          l/NTMm+VtNpUQsanmnhbLbfwMR5VeTwji7NpIgR1lzU=
Subject key identifier:   FB:55:71:D3:E9:4E:1E:95:3A:CC:06:CD:AF:FB:CB:B6:3A:59:9B:36
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer:       /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number:          0213
Signing time:             Sat 05 Sep 2026 02:53:00 +0000
Manifest this update:     Sat 05 Sep 2026 02:53:00 +0000
Manifest next update:     Sat 12 Sep 2026 02:53:00 +0000
Files and hashes:         1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: IuoxJcBSdEE6yR1ZAPaBjf3Fg5cRFG7QkwnrSBjWvok=)
                          2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=)
                          3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
                          rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
        Validity
            Not Before: Sep  5 02:53:00 2026 GMT
            Not After : Sep 12 02:53:00 2026 GMT
        Subject: CN=6a9b840c-6b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:20:13:27:b5:8a:db:62:c9:a1:99:15:3b:51:
                    3a:b9:2e:20:e0:f4:ad:62:db:cb:db:ce:43:3b:02:
                    85:fb:ff:97:d5:1c:c5:64:85:21:ab:a4:7d:bf:0a:
                    f7:5a:5e:86:23:f5:98:e1:ca:a0:ab:a9:b0:30:bb:
                    f6:7f:20:f9:f3:e9:e0:eb:0e:a9:5d:5e:aa:4d:45:
                    06:f4:c2:66:89:dc:67:a4:04:da:f8:4e:ce:e4:4c:
                    5e:c5:50:98:16:49:4e:b0:78:02:b0:85:f0:ec:72:
                    68:42:fa:f2:d2:99:b4:21:b1:91:12:48:74:38:bd:
                    44:9f:17:3b:87:d8:7a:cf:3b:3e:9d:59:73:f9:07:
                    92:f3:62:53:cc:79:19:f6:51:fa:57:09:cc:38:20:
                    eb:19:70:e7:24:b6:b2:3a:89:0a:a9:ba:7c:81:64:
                    71:c1:a4:80:5c:f0:a9:c6:87:b2:b0:25:9b:86:df:
                    17:79:06:89:93:6c:dd:9e:85:30:23:78:b9:b8:76:
                    2d:30:e7:b0:3a:83:0a:67:43:88:a8:ea:f3:f7:ed:
                    a7:7a:af:09:95:39:80:48:7e:80:b3:21:17:ff:50:
                    e3:dd:20:5d:3f:8a:df:cc:97:d7:d3:e2:ef:ca:81:
                    06:b9:13:0c:40:0c:7c:67:19:c0:91:14:e9:cd:b3:
                    1b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:55:71:D3:E9:4E:1E:95:3A:CC:06:CD:AF:FB:CB:B6:3A:59:9B:36
            X509v3 Authority Key Identifier:
                keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:52:81:10:b9:2e:72:9b:4c:e5:81:e6:f5:fd:e2:3f:6d:9f:
         46:62:35:e1:6b:a6:02:f7:1d:03:a0:20:7f:33:3a:75:17:78:
         e9:97:c5:aa:0d:81:9a:09:2a:00:34:23:c0:bb:19:2e:c2:9b:
         10:c9:89:25:c5:7b:23:e1:90:78:2a:5c:5e:fc:4f:b4:4f:81:
         03:1c:fa:bd:31:1d:5b:d3:e0:04:35:7b:b6:f4:8c:f7:b2:b3:
         4c:3f:bc:9b:b5:5e:97:13:bb:b0:53:2b:fa:69:86:b8:e2:5b:
         54:38:51:38:4c:13:ed:44:0a:93:2a:83:f4:b4:fd:3d:e4:cb:
         a8:13:93:89:20:3b:42:77:a6:a4:77:59:af:6a:34:d1:1b:1b:
         7d:84:b4:18:f5:04:d6:66:d3:18:31:f3:42:ca:b7:a9:76:a0:
         ec:82:67:aa:8c:dd:e2:6a:67:13:22:c8:c5:f8:46:27:5f:81:
         dc:b1:cc:f4:33:80:f6:98:f2:b3:53:43:bb:47:57:0d:60:1e:
         34:02:d5:1e:9e:35:7f:e9:9e:d2:64:63:7f:b1:4c:2c:45:d3:
         69:29:75:9e:c3:72:12:aa:dc:a6:73:78:2f:83:ed:1e:5c:12:
         44:27:d5:b3:91:52:55:ee:fa:5b:e9:78:d7:4d:a8:ba:40:54:
         8e:8d:5c:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3
ODEzNTYzNjIwHhcNMjYwOTA1MDI1MzAwWhcNMjYwOTEyMDI1MzAwWjAYMRYwFAYD
VQQDEw02YTliODQwYy02YjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiiATJ7WK22LJoZkVO1E6uS4g4PStYtvL285DOwKF+/+X1RzFZIUhq6R9vwr3
Wl6GI/WY4cqgq6mwMLv2fyD58+ng6w6pXV6qTUUG9MJmidxnpATa+E7O5ExexVCY
FklOsHgCsIXw7HJoQvry0pm0IbGREkh0OL1Enxc7h9h6zzs+nVlz+QeS82JTzHkZ
9lH6VwnMOCDrGXDnJLayOokKqbp8gWRxwaSAXPCpxoeysCWbht8XeQaJk2zdnoUw
I3i5uHYtMOewOoMKZ0OIqOrz9+2neq8JlTmASH6AsyEX/1Dj3SBdP4rfzJfX0+Lv
yoEGuRMMQAx8ZxnAkRTpzbMbCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtVcdPp
Th6VOswGza/7y7Y6WZs2MB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB
QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i
UFlDUDk2WUtDTGg0RTFZMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKlKBELkucptM5YHm9f3iP22fRmI14WumAvcdA6AgfzM6dRd46ZfFqg2Bmgkq
ADQjwLsZLsKbEMmJJcV7I+GQeCpcXvxPtE+BAxz6vTEdW9PgBDV7tvSM97KzTD+8
m7VelxO7sFMr+mmGuOJbVDhROEwT7UQKkyqD9LT9PeTLqBOTiSA7QnempHdZr2o0
0RsbfYS0GPUE1mbTGDHzQsq3qXag7IJnqozd4mpnEyLIxfhGJ1+B3LHM9DOA9pjy
s1NDu0dXDWAeNALVHp41f+me0mRjf7FMLEXTaSl1nsNyEqrcpnN4L4PtHlwSRCfV
s5FSVe76W+l4102oukBUjo1c3Q==
-----END CERTIFICATE-----
Generated at Sat Sep 5 11:44:53 2026 by rpki-client