Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
File:                     gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json)
Hash identifier:          6rwm7phVdEMlMkewXDWURh6kAhxFgPEKQYGMua3t3X4=
Subject key identifier:   2D:78:35:E1:07:69:4F:08:28:7A:13:22:CF:BA:A2:A6:25:FE:FA:84
Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
Certificate issuer:       /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
Manifest number:          010F
Signing time:             Mon 05 Oct 2026 06:23:20 +0000
Manifest this update:     Mon 05 Oct 2026 06:23:19 +0000
Manifest next update:     Mon 12 Oct 2026 06:23:19 +0000
Files and hashes:         1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: 7q17WEY1MPuQc8vVdcDUzmmReFfQ2a+CcL7QK/nJ1DA=)
                          2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: ytK8wWdrYPra1E/l8xXWI1AT8E/6aAB7MEKN1b5tfbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
        Validity
            Not Before: Oct  5 06:23:19 2026 GMT
            Not After : Oct 12 06:23:19 2026 GMT
        Subject: CN=6ac34258-4da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:68:f2:e4:1f:5c:5a:58:5d:f0:a4:55:86:
                    08:84:73:39:75:d1:bf:2a:5d:ff:0e:83:04:68:91:
                    5c:08:9d:b9:d7:bd:87:2f:98:b3:d9:d9:03:83:53:
                    71:48:2b:98:67:00:c7:cf:84:94:9b:72:f6:83:fb:
                    07:82:1f:03:ce:dd:fc:56:cf:10:03:33:34:00:e6:
                    50:52:bd:2f:53:56:5d:1f:75:e5:80:52:7b:5a:05:
                    5e:e7:5f:93:7f:f1:49:95:42:39:d2:c3:05:3b:a1:
                    46:5c:4b:64:1a:cf:23:7c:5b:f3:96:cf:b0:f7:d1:
                    41:8a:93:e0:8f:50:a5:1e:52:0d:15:ec:42:7d:f3:
                    a0:0f:38:fd:42:39:d5:18:00:f9:ee:97:1d:2e:1f:
                    fd:b8:45:26:67:38:01:e9:f7:45:b5:61:12:29:63:
                    fb:21:b7:85:f6:50:1f:c9:b2:f0:9c:ef:b4:c0:28:
                    0b:ee:c7:b7:54:5e:1d:ad:6f:df:e1:f1:c0:29:c2:
                    08:25:2d:f4:14:ec:f3:17:22:6f:d8:68:24:28:3e:
                    00:a4:c4:df:ac:5e:f7:ed:17:95:1e:2a:89:42:1e:
                    2b:4a:8e:92:c2:76:19:d8:80:6b:f0:b3:e9:64:e8:
                    48:f5:cc:28:62:e4:62:77:8f:e5:10:8c:a2:37:f2:
                    cb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:78:35:E1:07:69:4F:08:28:7A:13:22:CF:BA:A2:A6:25:FE:FA:84
            X509v3 Authority Key Identifier:
                keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0b:50:ab:1d:82:57:b3:53:21:a5:a8:93:5c:ed:ba:47:d9:
         42:5c:d0:9c:30:c6:60:51:41:33:f5:48:da:38:af:e4:e7:66:
         3f:1a:50:7c:00:4b:db:4c:2a:ca:cd:5e:a0:b6:52:df:64:f6:
         10:08:33:4e:6a:ad:86:c1:f2:3d:20:37:97:46:f3:e1:cb:0b:
         72:da:0c:c4:a7:39:e2:1d:b9:02:7d:ae:cc:17:22:fc:69:40:
         f5:0c:b1:35:4f:0d:1e:83:be:aa:ce:94:f1:9c:94:f2:e2:00:
         e5:8a:97:9f:bc:6f:8b:cc:09:8e:c9:43:64:da:34:d3:51:67:
         f3:f5:99:96:c0:65:b3:5a:6e:d6:d6:31:15:57:02:e7:aa:0d:
         15:3a:58:05:e8:a3:07:22:42:96:5b:cc:da:5b:2b:35:2e:1d:
         b0:df:9e:7a:7b:a1:93:b7:9f:b6:b8:4a:f4:da:aa:4e:37:65:
         cb:2b:00:cc:43:19:d2:de:d1:8f:df:e3:e0:fe:42:c5:35:16:
         f1:e0:5e:37:20:e4:9f:9a:fc:34:f9:7e:93:63:2c:6f:af:eb:
         ce:df:ce:dd:77:69:83:4d:3d:6a:ca:dc:57:28:6c:61:88:44:
         cf:a3:d7:40:0c:6a:7f:30:4d:1a:3a:1b:87:f9:00:c0:87:b8:
         b4:1a:57:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZFQjcxMTAvBgNVBAUTKDgwNUFBQTM2QzAxN0U5RTg2QzMwMzJBM0RBQUU4RDI2
OEJERDQyNTQwHhcNMjYxMDA1MDYyMzE5WhcNMjYxMDEyMDYyMzE5WjAYMRYwFAYD
VQQDEw02YWMzNDI1OC00ZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq0Zo8uQfXFpYXfCkVYYIhHM5ddG/Kl3/DoMEaJFcCJ25172HL5iz2dkDg1Nx
SCuYZwDHz4SUm3L2g/sHgh8Dzt38Vs8QAzM0AOZQUr0vU1ZdH3XlgFJ7WgVe51+T
f/FJlUI50sMFO6FGXEtkGs8jfFvzls+w99FBipPgj1ClHlINFexCffOgDzj9QjnV
GAD57pcdLh/9uEUmZzgB6fdFtWESKWP7IbeF9lAfybLwnO+0wCgL7se3VF4drW/f
4fHAKcIIJS30FOzzFyJv2GgkKD4ApMTfrF737ReVHiqJQh4rSo6SwnYZ2IBr8LPp
ZOhI9cwoYuRid4/lEIyiN/LLKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC14NeEH
aU8IKHoTIs+6oqYl/vqEMB8GA1UdIwQYMBaAFIBaqjbAF+nobDAyo9qujSaL3UJU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkVCNy84MzFBODQyQTFG
REUxMUYwQjk2NTQ3MTdDNEY5QUUwMi9nRnFxTnNBWDZlaHNNREtqMnE2TkpvdmRR
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dGcXFOc0FYNmVoc01ES2oycTZOSm92ZFFsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkVCNy84MzFBODQyQTFGREUxMUYwQjk2NTQ3MTdDNEY5QUUwMi9nRnFxTnNBWDZl
aHNNREtqMnE2TkpvdmRRbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQwtQqx2CV7NTIaWok1ztukfZQlzQnDDGYFFBM/VI2jiv5OdmPxpQfABL20wq
ys1eoLZS32T2EAgzTmqthsHyPSA3l0bz4csLctoMxKc54h25An2uzBci/GlA9Qyx
NU8NHoO+qs6U8ZyU8uIA5YqXn7xvi8wJjslDZNo001Fn8/WZlsBls1pu1tYxFVcC
56oNFTpYBeijByJCllvM2lsrNS4dsN+eenuhk7eftrhK9NqqTjdlyysAzEMZ0t7R
j9/j4P5CxTUW8eBeNyDkn5r8NPl+k2Msb6/rzt/O3Xdpg009asrcVyhsYYhEz6PX
QAxqfzBNGjobh/kAwIe4tBpXXw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 07:41:50 2026 by rpki-client