Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
File:                     b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json)
Hash identifier:          F/VFlVXS39tZfvoWH+BopjF2b+qcHjL5CGXdlGWEVXE=
Subject key identifier:   0C:BF:45:C3:DF:F4:81:B7:BB:DF:52:7B:EC:AC:76:48:96:49:51:B7
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Certificate issuer:       /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial:       096C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
Manifest number:          094B
Signing time:             Mon 14 Sep 2026 20:06:41 +0000
Manifest this update:     Mon 14 Sep 2026 20:06:40 +0000
Manifest next update:     Mon 21 Sep 2026 20:06:40 +0000
Files and hashes:         1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: wG3MtlGucaQ0w1y3Zbk+tuk1M/oiHeb/t+jAkBad6fo=)
                          2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: PoWHbD4GJtdImYAMon+IcO81vzMzM3tbtCeI0of3Fd8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
                          rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 20:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2412 (0x96c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
        Validity
            Not Before: Sep 14 20:06:40 2026 GMT
            Not After : Sep 21 20:06:40 2026 GMT
        Subject: CN=6aa853d1-3a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:b1:c9:bf:f8:45:9c:0d:ab:87:47:31:83:
                    ea:dd:c2:66:21:b9:0c:38:ec:0a:b1:76:81:6a:10:
                    8b:5e:a1:a6:b7:29:3f:73:d3:55:16:76:9a:b5:35:
                    0b:07:25:87:1e:83:35:12:47:50:27:f3:fb:88:f1:
                    48:ca:d5:7e:f4:11:32:4a:f2:3a:a7:bd:4d:c8:0d:
                    78:f2:b6:14:90:5d:48:3a:37:d7:80:17:76:f1:8a:
                    12:16:3d:6f:9c:e6:a1:73:50:a4:26:36:1d:27:bf:
                    da:29:36:57:c0:41:21:d2:36:44:61:e9:bd:3e:85:
                    aa:16:cf:69:0c:e9:e3:65:73:7c:dd:d5:33:69:ed:
                    40:ec:ce:af:0b:04:eb:d8:1d:f3:fe:bc:52:ff:83:
                    0b:7f:41:1f:6d:3c:82:d1:bc:fe:c6:19:c7:e3:f4:
                    27:98:14:7b:e6:7d:22:8e:cf:8b:2a:f6:60:c8:6c:
                    58:1c:cf:3c:46:c5:33:03:30:87:26:50:cb:31:a5:
                    42:ff:95:57:44:e1:bb:84:7c:e6:cf:bc:ef:71:e6:
                    06:f7:f5:07:41:e6:a5:57:c5:29:61:05:2c:2b:93:
                    ea:21:1b:16:61:5b:6e:ed:7a:b6:79:df:0d:eb:b6:
                    80:40:49:c8:37:40:14:82:3e:39:3a:30:fe:7a:1e:
                    d6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:45:C3:DF:F4:81:B7:BB:DF:52:7B:EC:AC:76:48:96:49:51:B7
            X509v3 Authority Key Identifier:
                keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5f:a1:01:99:05:ee:24:1e:76:a6:b1:7b:f9:3f:13:65:8a:
         9c:13:8f:3f:cd:78:75:1c:7f:38:6f:d0:09:f5:40:07:e3:49:
         03:17:5a:98:d6:cd:49:35:6b:33:ff:21:6b:35:31:b2:7e:71:
         1c:6d:c2:70:0b:9b:fb:19:c0:9b:23:f1:d0:38:ca:86:6b:77:
         bc:3a:f7:e1:89:bb:4b:c4:fc:44:5f:fc:66:ec:7b:5f:6f:a5:
         64:b9:e4:8f:ea:59:13:e3:7a:ac:0d:d3:f5:ea:3d:90:6c:8a:
         aa:62:c1:b4:26:a4:dc:eb:b0:6a:b8:e1:c6:3c:f4:cb:0d:b9:
         5b:03:e0:1d:09:c7:88:2a:6e:11:44:ce:7b:cb:25:a2:0b:3e:
         1a:54:6a:33:d2:1e:aa:eb:c0:93:e7:05:a9:43:40:3f:5e:ab:
         5f:77:58:76:d5:e0:9d:d2:1c:8e:ca:21:66:98:69:a4:97:0a:
         da:41:e5:a0:5a:1a:96:ba:90:a6:7d:e6:41:8d:4f:99:97:86:
         1d:0e:6b:8a:e0:26:6e:03:36:e2:70:4f:7a:18:af:4f:e6:b4:
         a8:44:d1:47:c8:15:e3:41:2d:54:57:34:4f:e0:f6:83:6e:35:
         1e:8d:ff:2b:05:25:78:9a:75:32:a7:67:96:e0:89:64:9e:37:
         e4:19:60:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M2MjcxMTAvBgNVBAUTKDZGRkE1REIxNTlENDBBM0ExNzJEQkM3NEY1QzMyQjU1
NTE3OTc5QUYwHhcNMjYwOTE0MjAwNjQwWhcNMjYwOTIxMjAwNjQwWjAYMRYwFAYD
VQQDEw02YWE4NTNkMS0zYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx4Kxyb/4RZwNq4dHMYPq3cJmIbkMOOwKsXaBahCLXqGmtyk/c9NVFnaatTUL
ByWHHoM1EkdQJ/P7iPFIytV+9BEySvI6p71NyA148rYUkF1IOjfXgBd28YoSFj1v
nOahc1CkJjYdJ7/aKTZXwEEh0jZEYem9PoWqFs9pDOnjZXN83dUzae1A7M6vCwTr
2B3z/rxS/4MLf0EfbTyC0bz+xhnH4/QnmBR75n0ijs+LKvZgyGxYHM88RsUzAzCH
JlDLMaVC/5VXROG7hHzmz7zvceYG9/UHQealV8UpYQUsK5PqIRsWYVtu7Xq2ed8N
67aAQEnIN0AUgj45OjD+eh7WeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAy/RcPf
9IG3u99Se+ysdkiWSVG3MB8GA1UdIwQYMBaAFG/6XbFZ1Ao6Fy28dPXDK1VReXmv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzYyNy9DMjY1QzFBNEQw
N0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNqb1hMYngwOWNNclZWRjVl
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JfcGRzVm5VQ2pvWExieDA5Y01yVlZGNWVhOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzYyNy9DMjY1QzFBNEQwN0QxMUVBODYwMDk4NkRDNEY5QUUwMi9iX3Bkc1ZuVUNq
b1hMYngwOWNNclZWRjVlYTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFV+hAZkF7iQedqaxe/k/E2WKnBOPP814dRx/OG/QCfVAB+NJAxdamNbNSTVr
M/8hazUxsn5xHG3CcAub+xnAmyPx0DjKhmt3vDr34Ym7S8T8RF/8Zux7X2+lZLnk
j+pZE+N6rA3T9eo9kGyKqmLBtCak3Ouwarjhxjz0yw25WwPgHQnHiCpuEUTOe8sl
ogs+GlRqM9IequvAk+cFqUNAP16rX3dYdtXgndIcjsohZphppJcK2kHloFoalrqQ
pn3mQY1PmZeGHQ5riuAmbgM24nBPehivT+a0qETRR8gV40EtVFc0T+D2g241Ho3/
KwUleJp1MqdnluCJZJ435BlggA==
-----END CERTIFICATE-----
Generated at Tue Sep 15 10:44:53 2026 by rpki-client