Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
File:                     V3LjuCeMtseqvXrPnvViq1k8LoI.mft (raw, json)
Hash identifier:          i73aBgjY1ghTMjIUpF2XmHBj8b1qKaO5jikeSERzCe8=
Subject key identifier:   5D:3C:D0:8E:64:AC:94:C4:9A:F6:8F:54:1C:8E:B0:00:88:6C:4C:4B
Authority key identifier: 57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82
Certificate issuer:       /CN=A914699C/serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
Manifest number:          04
Signing time:             Fri 04 Sep 2026 02:41:45 +0000
Manifest this update:     Fri 04 Sep 2026 02:41:44 +0000
Manifest next update:     Fri 11 Sep 2026 02:41:44 +0000
Files and hashes:         1: V3LjuCeMtseqvXrPnvViq1k8LoI.crl (hash: Jpfbk8vKFhOaFoZpmYWGiH0rd6jfPsnPjl/ntWyoh1A=)
                          2: 2781681CA80A11F18FD626046A11F970.roa (hash: +M5jX9SWmjMyONwR593XK4NuqGr4X6KNIa9RCUZWpwo=)
                          3: A79907ECA80211F1A53A8FFC6611F970.roa (hash: q4GJ3n3nrluUWyP5K1p4wLbW632gAl3ii1+eWXdy8qo=)
                          4: C9444062A80911F1B773AEF56911F970.roa (hash: Gx7QSfdDQXIJhXZo7KuA4iL5KlnP875Oz/dpgPiArPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl
                          rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 02:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914699C, serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82
        Validity
            Not Before: Sep  4 02:41:44 2026 GMT
            Not After : Sep 11 02:41:44 2026 GMT
        Subject: CN=6a9a2fe9-1c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:7b:50:8c:7d:fa:83:f1:ac:62:75:25:ff:
                    5f:41:2a:a4:5f:6e:b4:29:e3:3a:87:8e:8f:c4:9b:
                    fe:ac:2c:d4:98:85:25:f5:c6:b3:f7:59:20:13:2a:
                    2d:04:5a:12:73:6b:5e:67:b6:27:d5:71:89:3b:96:
                    89:07:3b:43:ea:b4:14:b1:10:97:a7:50:32:fa:66:
                    85:a9:31:75:9e:2c:11:fc:e4:bf:38:92:01:ec:b2:
                    7b:e3:23:48:24:8c:a6:f3:45:8c:7f:2b:35:dc:da:
                    0a:6a:22:d5:6d:70:2e:5d:ef:8a:b9:e7:95:fa:12:
                    19:13:3c:7d:69:03:08:0d:db:e5:ac:2b:ab:0d:bf:
                    a5:5e:6e:13:f1:0a:0a:d0:e8:dd:d2:64:d1:32:2b:
                    77:3b:c0:74:bb:3a:6e:df:52:65:c5:07:e4:ef:1a:
                    f7:bd:46:df:10:90:ad:48:a8:4c:2f:dd:2e:06:da:
                    18:7a:fd:0f:24:dc:fa:c2:b4:ee:ce:e1:6c:7a:77:
                    58:4e:db:b8:f0:29:77:4d:84:62:f3:27:3f:65:bc:
                    ad:3d:54:bf:a6:28:d0:77:a9:94:b9:5c:d3:73:15:
                    73:01:1e:7d:79:14:cc:08:be:28:fb:83:70:1c:af:
                    eb:e1:d1:d9:a6:c3:e7:86:0c:f7:91:80:f7:39:d1:
                    92:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:D0:8E:64:AC:94:C4:9A:F6:8F:54:1C:8E:B0:00:88:6C:4C:4B
            X509v3 Authority Key Identifier:
                keyid:57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e3:74:9e:6c:c2:dc:6c:69:e7:e1:ba:08:8d:f3:cb:50:26:
         cd:8f:1e:bb:79:e6:c5:c0:5a:e0:e8:4a:fd:f9:d8:19:e2:97:
         f4:5b:46:cc:7a:13:46:46:6f:6d:33:19:3c:c8:57:f6:51:30:
         b8:ca:fa:1f:ba:ab:69:de:75:48:c5:1b:00:b4:0b:48:fa:71:
         89:b8:0a:5b:6e:51:ad:d4:29:9e:39:81:94:6c:af:77:4d:16:
         f7:b6:f2:b4:3c:9e:49:af:18:fe:6f:16:3e:7c:e2:ba:77:49:
         4c:86:f9:4d:86:d8:a9:46:dd:04:6f:9c:e4:ed:1c:f0:57:1d:
         ea:94:14:6d:bf:5a:76:a3:17:cf:0f:fc:b2:43:4a:8b:7e:6e:
         01:2f:db:ba:e0:92:de:34:ba:d3:3b:7d:6d:d0:f1:e8:41:c6:
         4c:98:9d:21:7c:20:98:c4:93:e4:9d:8f:f4:a4:90:4b:1c:d6:
         39:b4:a3:ff:34:d9:eb:fb:1d:f8:3b:7d:08:c5:a7:5d:c4:27:
         1e:68:7a:e5:ae:78:29:0a:94:a6:c1:c4:a2:45:f9:2b:47:08:
         c0:61:9b:8f:3f:bc:a4:02:d1:f1:e0:68:fb:6b:10:8c:d0:b3:
         61:ea:ef:a1:54:45:7e:37:01:09:cc:c3:a7:0e:a5:73:dc:e4:
         a4:33:e2:66
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Njk5QzExMC8GA1UEBRMoNTc3MkUzQjgyNzhDQjZDN0FBQkQ3QUNGOUVGNTYyQUI1
OTNDMkU4MjAeFw0yNjA5MDQwMjQxNDRaFw0yNjA5MTEwMjQxNDRaMBgxFjAUBgNV
BAMTDTZhOWEyZmU5LTFjMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC13XtQjH36g/GsYnUl/19BKqRfbrQp4zqHjo/Em/6sLNSYhSX1xrP3WSATKi0E
WhJza15ntifVcYk7lokHO0PqtBSxEJenUDL6ZoWpMXWeLBH85L84kgHssnvjI0gk
jKbzRYx/KzXc2gpqItVtcC5d74q555X6EhkTPH1pAwgN2+WsK6sNv6VebhPxCgrQ
6N3SZNEyK3c7wHS7Om7fUmXFB+TvGve9Rt8QkK1IqEwv3S4G2hh6/Q8k3PrCtO7O
4Wx6d1hO27jwKXdNhGLzJz9lvK09VL+mKNB3qZS5XNNzFXMBHn15FMwIvij7g3Ac
r+vh0dmmw+eGDPeRgPc50ZKvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXTzQjmSs
lMSa9o9UHI6wAIhsTEswHwYDVR0jBBgwFoAUV3LjuCeMtseqvXrPnvViq1k8LoIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTlDL0Q2NkI4RkQ2QTdF
OTExRjE5RjZBODI3NEE2RUU1MjhFL1YzTGp1Q2VNdHNlcXZYclBudlZpcTFrOExv
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG
RDFGRjIvVjNManVDZU10c2VxdlhyUG52VmlxMWs4TG9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2
OTlDL0Q2NkI4RkQ2QTdFOTExRjE5RjZBODI3NEE2RUU1MjhFL1YzTGp1Q2VNdHNl
cXZYclBudlZpcTFrOExvSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAc43SebMLcbGnn4boIjfPLUCbNjx67eebFwFrg6Er9+dgZ4pf0W0bMehNGRm9t
Mxk8yFf2UTC4yvofuqtp3nVIxRsAtAtI+nGJuApbblGt1CmeOYGUbK93TRb3tvK0
PJ5Jrxj+bxY+fOK6d0lMhvlNhtipRt0Eb5zk7RzwVx3qlBRtv1p2oxfPD/yyQ0qL
fm4BL9u64JLeNLrTO31t0PHoQcZMmJ0hfCCYxJPknY/0pJBLHNY5tKP/NNnr+x34
O30IxaddxCceaHrlrngpCpSmwcSiRfkrRwjAYZuPP7ykAtHx4Gj7axCM0LNh6u+h
VEV+NwEJzMOnDqVz3OSkM+Jm
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:48:56 2026 by rpki-client