Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
File:                     B2qM_AnS8rcX4jyBAokXiMq1UT4.mft (raw, json)
Hash identifier:          SYO2qHZ9iLROL8tRnYYYe7lpH8QgJoDzfbWtIasjhVI=
Subject key identifier:   A1:5F:D6:72:2B:03:22:5B:EB:C3:09:F4:FA:A2:2A:E3:BB:48:C5:7A
Authority key identifier: 07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E
Certificate issuer:       /CN=A914C9CD/serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
Manifest number:          2A
Signing time:             Sat 03 Oct 2026 09:32:12 +0000
Manifest this update:     Sat 03 Oct 2026 09:32:11 +0000
Manifest next update:     Sat 10 Oct 2026 09:32:11 +0000
Files and hashes:         1: B2qM_AnS8rcX4jyBAokXiMq1UT4.crl (hash: 2CQlw8Ym9pM/px1sBPcsEj3AA4X35/ztzUMCsggX4vc=)
                          2: 4F2C0476865E11F19C092B2C95A30FBC.roa (hash: egifpNM5XF4+DHAIdWtYVVii3Yk/k7piv94MdlcO3yE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.crl
                          rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C9CD, serialNumber=076A8CFC09D2F2B717E23C8102891788CAB5513E
        Validity
            Not Before: Oct  3 09:32:11 2026 GMT
            Not After : Oct 10 09:32:11 2026 GMT
        Subject: CN=6ac0cb9b-85f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:56:05:79:21:94:f3:4c:63:5f:ef:95:f7:
                    a9:fc:fc:92:32:c9:f2:57:58:a2:6c:34:2b:a8:01:
                    41:35:0b:7c:1f:1c:13:d2:d5:ba:5c:59:e4:a0:b2:
                    65:b9:58:e0:75:51:8c:67:87:af:d7:e3:40:07:78:
                    42:db:e2:4a:9e:fa:d3:0c:29:21:f4:f7:18:2c:b0:
                    fb:80:7b:c9:2a:6d:5c:ec:11:67:98:7e:6c:ac:b0:
                    f2:8d:cd:33:ab:a6:ee:a9:0e:07:84:ef:1a:22:05:
                    33:bd:63:9a:83:3c:d4:5f:9e:2e:80:2b:78:4e:7b:
                    36:a9:db:bd:6b:c0:d1:05:77:30:9c:05:35:a2:45:
                    8a:a3:30:69:60:4d:0d:45:f3:59:c4:71:bf:0a:33:
                    e7:7f:4c:15:24:ee:55:6a:42:68:82:38:81:1f:a7:
                    cd:0b:5f:a0:aa:b4:99:09:89:8b:95:94:fb:11:79:
                    90:6e:d1:13:2c:f1:9c:c6:71:54:0a:e8:b6:8f:f5:
                    59:d1:f2:e3:91:56:92:59:d9:c9:63:09:46:f0:ea:
                    5b:13:33:45:84:2b:ba:17:93:5a:b9:4a:14:6b:a3:
                    7f:48:4d:be:f6:53:b6:48:03:de:50:aa:87:fc:4b:
                    82:fa:ff:96:ac:09:eb:b0:10:93:67:84:76:ef:a3:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5F:D6:72:2B:03:22:5B:EB:C3:09:F4:FA:A2:2A:E3:BB:48:C5:7A
            X509v3 Authority Key Identifier:
                keyid:07:6A:8C:FC:09:D2:F2:B7:17:E2:3C:81:02:89:17:88:CA:B5:51:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2qM_AnS8rcX4jyBAokXiMq1UT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C9CD/0786670C865811F1B882EAF592A30FBC/B2qM_AnS8rcX4jyBAokXiMq1UT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b1:30:9b:1d:d8:9b:ae:d5:79:3b:91:4c:7e:97:a8:75:19:
         2d:62:e4:c2:8e:d1:05:46:9c:8c:e6:90:ed:22:a5:40:76:6c:
         47:f0:b7:96:98:1e:30:68:ec:66:ff:9a:07:4b:f0:c0:eb:07:
         0c:d3:3c:8e:f0:b3:62:95:b9:55:a5:b2:fd:da:f9:64:83:9b:
         da:09:73:b0:4d:c6:32:bc:52:4e:86:cc:4a:4a:b2:7b:3c:1d:
         ba:fd:dc:19:07:b0:e2:70:a8:38:18:88:d0:4f:dd:34:59:b3:
         13:6a:09:3c:d8:01:8e:a7:fb:11:6d:b7:a2:1e:15:8f:7f:a8:
         fd:67:91:23:d0:f2:ad:18:0c:28:32:c8:be:c1:cb:7d:cb:5d:
         1b:d7:4d:cb:59:6b:7f:a3:b7:7c:34:c4:7e:42:bd:fc:be:55:
         48:7f:db:b0:36:a7:17:61:b2:a0:12:e6:8f:4d:fd:3b:20:73:
         85:d4:40:14:40:83:bb:e0:68:52:88:82:64:b3:69:d5:e3:12:
         e8:65:9b:77:cd:4d:02:85:2f:77:d7:99:94:c2:81:ae:5c:23:
         c3:06:b2:4e:8b:11:b6:90:64:cb:b7:14:91:f9:47:95:06:fc:
         bd:14:f4:70:b7:f9:b9:e8:4d:eb:9e:21:94:a4:e6:54:30:dc:
         bf:46:56:29
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QzlDRDExMC8GA1UEBRMoMDc2QThDRkMwOUQyRjJCNzE3RTIzQzgxMDI4OTE3ODhD
QUI1NTEzRTAeFw0yNjEwMDMwOTMyMTFaFw0yNjEwMTAwOTMyMTFaMBgxFjAUBgNV
BAMTDTZhYzBjYjliLTg1ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7bFYFeSGU80xjX++V96n8/JIyyfJXWKJsNCuoAUE1C3wfHBPS1bpcWeSgsmW5
WOB1UYxnh6/X40AHeELb4kqe+tMMKSH09xgssPuAe8kqbVzsEWeYfmyssPKNzTOr
pu6pDgeE7xoiBTO9Y5qDPNRfni6AK3hOezap271rwNEFdzCcBTWiRYqjMGlgTQ1F
81nEcb8KM+d/TBUk7lVqQmiCOIEfp80LX6CqtJkJiYuVlPsReZBu0RMs8ZzGcVQK
6LaP9VnR8uORVpJZ2cljCUbw6lsTM0WEK7oXk1q5ShRro39ITb72U7ZIA95Qqof8
S4L6/5asCeuwEJNnhHbvo5HbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoV/WcisD
Ilvrwwn0+qIq47tIxXowHwYDVR0jBBgwFoAUB2qM/AnS8rcX4jyBAokXiMq1UT4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDOUNELzA3ODY2NzBDODY1
ODExRjFCODgyRUFGNTkyQTMwRkJDL0IycU1fQW5TOHJjWDRqeUJBb2tYaU1xMVVU
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQjJxTV9BblM4cmNYNGp5QkFva1hpTXExVVQ0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD
OUNELzA3ODY2NzBDODY1ODExRjFCODgyRUFGNTkyQTMwRkJDL0IycU1fQW5TOHJj
WDRqeUJBb2tYaU1xMVVUNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCrsTCbHdibrtV5O5FMfpeodRktYuTCjtEFRpyM5pDtIqVAdmxH8LeWmB4waOxm
/5oHS/DA6wcM0zyO8LNilblVpbL92vlkg5vaCXOwTcYyvFJOhsxKSrJ7PB26/dwZ
B7DicKg4GIjQT900WbMTagk82AGOp/sRbbeiHhWPf6j9Z5Ej0PKtGAwoMsi+wct9
y10b103LWWt/o7d8NMR+Qr38vlVIf9uwNqcXYbKgEuaPTf07IHOF1EAUQIO74GhS
iIJks2nV4xLoZZt3zU0ChS9315mUwoGuXCPDBrJOixG2kGTLtxSR+UeVBvy9FPRw
t/m56E3rniGUpOZUMNy/RlYp
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:23:51 2026 by rpki-client