Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
File:                     PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json)
Hash identifier:          1MpiG+XOXiWpCbuqkGYtacNrbpZEf/nWTrI2MizE4xo=
Subject key identifier:   FE:16:F0:23:89:29:D2:37:6D:7A:BA:BC:8C:3F:37:C0:16:E6:38:8A
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Certificate issuer:       /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial:       0866
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
Manifest number:          084A
Signing time:             Tue 18 Aug 2026 21:23:11 +0000
Manifest this update:     Tue 18 Aug 2026 21:23:11 +0000
Manifest next update:     Tue 25 Aug 2026 21:23:11 +0000
Files and hashes:         1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: r6m9BnwOeeYJJ8/jVwPFmW2u/Zjr+CmGMmt8Lk2c5UQ=)
                          2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: uC8BC8FOfX07Bz7LL4CTmAUAe/spoS+Jn5Z7MYh3ovQ=)
                          3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: EZxaNB8Cg1CajysGL+HI5uVaed24iixfpfYF8glfmow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
                          rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150 (0x866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
        Validity
            Not Before: Aug 18 21:23:11 2026 GMT
            Not After : Aug 25 21:23:11 2026 GMT
        Subject: CN=6a84cd3f-0d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:b4:1e:b9:d3:da:d2:47:ba:b6:89:08:6d:
                    ac:f0:be:a1:9c:91:06:a9:4f:eb:f6:34:43:cb:3b:
                    e0:b1:8b:4e:99:65:5b:c8:66:ac:00:ad:96:e5:a4:
                    99:7a:a7:e0:9b:10:b3:8b:c8:6b:5f:4e:8b:ef:3f:
                    72:27:1a:ef:43:31:7c:7d:93:32:82:f9:7e:6e:7d:
                    e7:3e:fc:74:63:b1:b1:bb:5c:45:d0:bf:37:1a:d1:
                    20:1a:32:1c:70:95:95:c4:de:75:75:e6:37:7d:5e:
                    16:6a:c8:a6:a2:6b:24:a3:f5:5a:88:3e:8b:25:06:
                    7a:b6:8d:a4:e0:bb:06:fa:fc:25:15:82:5c:ba:27:
                    38:8e:98:20:bf:7c:9b:47:84:da:90:7c:70:88:91:
                    79:2f:da:61:74:ed:a3:9e:a9:a4:8d:ab:2b:c2:31:
                    bd:bf:7f:68:cd:8a:42:ff:c6:7e:46:29:64:a6:82:
                    9f:3b:42:b5:b8:df:00:2b:a5:d6:9f:b3:e2:8b:25:
                    f9:54:43:7a:a0:26:17:04:85:bc:d9:d1:e4:8f:b5:
                    a9:0d:1f:18:a8:0b:7e:0c:a4:97:58:d8:13:89:5b:
                    3f:9f:12:58:cb:4a:e4:9e:fa:aa:85:b7:32:f9:e9:
                    39:51:83:f3:3a:09:9a:92:a3:f3:14:04:81:85:6b:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:F0:23:89:29:D2:37:6D:7A:BA:BC:8C:3F:37:C0:16:E6:38:8A
            X509v3 Authority Key Identifier:
                keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:49:0c:c5:d4:42:e8:5e:d8:7b:8b:5e:da:8d:61:cc:46:98:
         78:92:62:f0:ef:ec:28:b3:c4:1e:0a:96:2f:53:6a:86:43:08:
         77:3d:23:83:4d:81:ad:35:7d:19:80:0c:91:ff:32:35:b0:fd:
         28:e3:26:b4:50:8e:c6:d5:78:ca:35:57:1a:e6:5e:ca:43:ed:
         e5:a0:ee:3a:19:ce:3e:6b:38:f3:e4:d5:9f:d7:72:b7:19:15:
         2d:ab:f1:1b:47:15:92:e0:8a:ec:f4:a3:40:3a:c7:dd:d7:80:
         9f:16:82:18:aa:f5:07:65:2e:84:81:37:15:8b:ad:27:02:49:
         2f:5d:8c:25:3c:ae:5c:7e:ec:0d:b7:17:c9:92:f8:b1:34:52:
         81:b7:05:32:1c:5a:44:eb:22:ed:1e:a1:86:84:cd:28:c3:f1:
         c4:ea:75:27:a5:6c:a0:48:8b:d6:80:1e:d7:f2:0b:9c:18:5b:
         aa:f0:fa:1b:74:e3:dc:a4:4a:ab:cf:b3:71:56:53:3e:de:64:
         81:99:ef:17:f9:ac:7d:86:ab:82:6c:0a:82:a9:37:d1:a0:d9:
         c4:d9:01:6c:52:bd:b1:7e:81:b6:34:d2:23:44:1a:a0:90:3a:
         86:1a:b2:e6:23:60:aa:9a:49:50:78:8c:49:ea:39:88:37:a2:
         0f:a4:5c:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy
NjdFQkFFRUMwHhcNMjYwODE4MjEyMzExWhcNMjYwODI1MjEyMzExWjAYMRYwFAYD
VQQDEw02YTg0Y2QzZi0wZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnHa0HrnT2tJHuraJCG2s8L6hnJEGqU/r9jRDyzvgsYtOmWVbyGasAK2W5aSZ
eqfgmxCzi8hrX06L7z9yJxrvQzF8fZMygvl+bn3nPvx0Y7Gxu1xF0L83GtEgGjIc
cJWVxN51deY3fV4Wasimomsko/VaiD6LJQZ6to2k4LsG+vwlFYJcuic4jpggv3yb
R4TakHxwiJF5L9phdO2jnqmkjasrwjG9v39ozYpC/8Z+RilkpoKfO0K1uN8AK6XW
n7PiiyX5VEN6oCYXBIW82dHkj7WpDR8YqAt+DKSXWNgTiVs/nxJYy0rknvqqhbcy
+ek5UYPzOgmakqPzFASBhWsDDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP4W8COJ
KdI3bXq6vIw/N8AW5jiKMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz
M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy
b0Rra1lXalRKNHNtZnJydXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwUkMxdRC6F7Ye4te2o1hzEaYeJJi8O/sKLPEHgqWL1NqhkMIdz0jg02BrTV9
GYAMkf8yNbD9KOMmtFCOxtV4yjVXGuZeykPt5aDuOhnOPms48+TVn9dytxkVLavx
G0cVkuCK7PSjQDrH3deAnxaCGKr1B2UuhIE3FYutJwJJL12MJTyuXH7sDbcXyZL4
sTRSgbcFMhxaROsi7R6hhoTNKMPxxOp1J6VsoEiL1oAe1/ILnBhbqvD6G3Tj3KRK
q8+zcVZTPt5kgZnvF/msfYargmwKgqk30aDZxNkBbFK9sX6BtjTSI0QaoJA6hhqy
5iNgqppJUHiMSeo5iDeiD6Rc2A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:36 2026 by rpki-client