Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File:                     eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier:          ejE32M7fxCSXSbo141Js2zDTJIKoVVCaAp5mrtHT1yE=
Subject key identifier:   0D:78:DA:E7:68:CD:5D:A5:2B:11:2E:A3:61:63:AF:7E:CC:EB:4D:66
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer:       /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number:          0173
Signing time:             Mon 05 Oct 2026 05:15:25 +0000
Manifest this update:     Mon 05 Oct 2026 05:15:25 +0000
Manifest next update:     Mon 12 Oct 2026 05:15:25 +0000
Files and hashes:         1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: EcsjBuV8d/YN1Qc6nOKaw3oQSsRmCFqsNOEMg3L/WeE=)
                          2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: zQjdwBYrCmNJ6NC3Jbu/wsnNVtPFgbdvd9Z7ELK9Okw=)
                          3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: CTkMutpvAk7yYXe3XyhfPht58lpcIVgdH5hdBMm7y34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
                          rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
        Validity
            Not Before: Oct  5 05:15:25 2026 GMT
            Not After : Oct 12 05:15:25 2026 GMT
        Subject: CN=6ac3326d-0fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:af:8f:7b:e5:35:4d:03:c0:31:a2:b1:08:
                    7f:89:f9:2a:18:dc:c8:5e:18:c7:4c:19:65:5e:28:
                    20:34:e9:d4:76:74:be:65:4f:4a:66:1e:87:a7:c3:
                    2f:a2:6a:2b:70:ab:92:35:78:6f:dc:d6:a7:0e:f6:
                    c7:7b:d3:c7:64:15:eb:a7:f4:e9:19:b4:b1:bb:00:
                    68:b9:01:69:49:57:9e:53:a5:7d:1a:af:d4:a8:b5:
                    2c:33:cc:c1:3d:5a:83:ad:13:4e:c3:d2:55:76:ed:
                    68:1f:00:28:a0:45:e6:aa:ce:85:99:0f:05:3a:e7:
                    21:5b:26:bb:45:00:1c:a8:89:25:b5:e4:47:5f:84:
                    b5:81:c7:8a:76:df:75:00:5c:dc:42:67:f9:c4:f8:
                    87:04:0c:f1:fc:23:bd:07:a1:d0:f7:0c:a3:a1:7f:
                    b3:b4:df:b0:a0:b4:8f:ec:86:a0:f2:15:0e:3c:ce:
                    de:6d:ad:4f:c9:30:60:5c:ce:95:ce:98:7a:31:cf:
                    fb:49:b4:73:d3:a7:8f:7a:e2:b3:83:7e:f0:4c:4b:
                    3e:2d:14:12:1b:d0:8b:c8:ae:32:7d:95:b4:63:05:
                    a4:44:84:e7:71:f9:06:f0:48:16:30:58:49:c0:e8:
                    a5:e5:f9:ef:74:3c:e1:8f:c3:1a:6a:f5:62:06:6f:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:78:DA:E7:68:CD:5D:A5:2B:11:2E:A3:61:63:AF:7E:CC:EB:4D:66
            X509v3 Authority Key Identifier:
                keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9b:ef:ba:2e:ef:30:cf:6f:db:98:67:c8:d9:e6:ef:24:34:
         9d:8c:7e:9f:19:7a:02:6e:4f:5a:aa:a3:aa:79:b4:13:59:9d:
         c3:4e:b5:2c:af:d7:a5:21:65:30:85:5a:d5:c7:30:18:9f:b4:
         4b:70:48:5e:c9:99:ed:de:34:dd:4d:80:e8:4d:64:b3:ef:1a:
         fd:3f:03:6e:da:81:8a:94:2f:a6:32:53:e4:09:ca:6a:7a:8b:
         3f:f7:11:43:ba:f9:67:28:26:50:f8:ce:b4:e2:5a:ec:89:db:
         7a:14:3e:d6:32:4a:03:16:7b:5c:57:bf:8b:b1:3a:3b:51:82:
         cf:c3:c7:14:2a:a0:54:1a:5f:a5:ec:ed:51:34:f4:b7:44:67:
         7a:fc:85:6a:dc:9d:94:1d:d9:a0:19:56:5e:cd:d3:74:33:e1:
         ac:53:2d:59:b5:f5:9f:00:db:ed:99:14:25:8c:15:75:02:ba:
         15:10:87:74:4c:9a:02:a4:49:b0:f9:8c:0d:85:0f:25:a2:37:
         78:c3:43:20:52:88:41:68:e5:0f:73:f0:81:12:d6:25:01:b5:
         42:af:f0:91:22:e3:01:eb:d1:2e:ff:38:d6:01:38:ea:16:ce:
         c8:4a:2d:b5:a2:d4:a7:b8:d0:ec:7f:d1:09:99:86:39:9b:45:
         49:d6:42:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE1NTQxMTAvBgNVBAUTKDc5MjBGOENBODRFQzkxM0M2OUE5OEQ1NDM3MTIwOUI0
MzRDMzMxOTEwHhcNMjYxMDA1MDUxNTI1WhcNMjYxMDEyMDUxNTI1WjAYMRYwFAYD
VQQDEw02YWMzMzI2ZC0wZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx6uvj3vlNU0DwDGisQh/ifkqGNzIXhjHTBllXiggNOnUdnS+ZU9KZh6Hp8Mv
omorcKuSNXhv3NanDvbHe9PHZBXrp/TpGbSxuwBouQFpSVeeU6V9Gq/UqLUsM8zB
PVqDrRNOw9JVdu1oHwAooEXmqs6FmQ8FOuchWya7RQAcqIklteRHX4S1gceKdt91
AFzcQmf5xPiHBAzx/CO9B6HQ9wyjoX+ztN+woLSP7Iag8hUOPM7eba1PyTBgXM6V
zph6Mc/7SbRz06ePeuKzg37wTEs+LRQSG9CLyK4yfZW0YwWkRITncfkG8EgWMFhJ
wOil5fnvdDzhj8MaavViBm9W0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA142udo
zV2lKxEuo2Fjr37M601mMB8GA1UdIwQYMBaAFHkg+MqE7JE8aamNVDcSCbQ0wzGR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1NC83OUY4OTk4Mjkz
NTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tUeHBxWTFVTnhJSnREVERN
WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1aRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTU1NC83OUY4OTk4MjkzNTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tU
eHBxWTFVTnhJSnREVERNWkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADJvvui7vMM9v25hnyNnm7yQ0nYx+nxl6Am5PWqqjqnm0E1mdw061LK/XpSFl
MIVa1ccwGJ+0S3BIXsmZ7d403U2A6E1ks+8a/T8DbtqBipQvpjJT5AnKanqLP/cR
Q7r5ZygmUPjOtOJa7InbehQ+1jJKAxZ7XFe/i7E6O1GCz8PHFCqgVBpfpeztUTT0
t0RnevyFatydlB3ZoBlWXs3TdDPhrFMtWbX1nwDb7ZkUJYwVdQK6FRCHdEyaAqRJ
sPmMDYUPJaI3eMNDIFKIQWjlD3PwgRLWJQG1Qq/wkSLjAevRLv841gE46hbOyEot
taLUp7jQ7H/RCZmGOZtFSdZCuA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 08:50:07 2026 by rpki-client