Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft
File:                     cGjaz2pbXiZfvAzluaSV8Im24FA.mft (raw, json)
Hash identifier:          o/n3/iswq22iBqrLzs+LYPHHDdDluEMhIM2qmrVyxZ0=
Subject key identifier:   2C:4E:4B:03:03:4A:D2:28:86:21:C1:C7:6A:5D:6B:2A:BA:41:7E:B0
Authority key identifier: 70:68:DA:CF:6A:5B:5E:26:5F:BC:0C:E5:B9:A4:95:F0:89:B6:E0:50
Certificate issuer:       /CN=A914DB80/serialNumber=7068DACF6A5B5E265FBC0CE5B9A495F089B6E050
Certificate serial:       07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft
Manifest number:          05
Signing time:             Mon 05 Oct 2026 09:46:09 +0000
Manifest this update:     Mon 05 Oct 2026 09:46:08 +0000
Manifest next update:     Mon 12 Oct 2026 09:46:08 +0000
Files and hashes:         1: cGjaz2pbXiZfvAzluaSV8Im24FA.crl (hash: QLEROeyhHJuJgH0gDXoQHAYnNW1K2h6qP272dQgcAEA=)
                          2: LxI9tON6NNjn3bVg0Httl1Wx1SU.asa (hash: qpAq5HHyNv1pYsQKGuoyPlcsxFsA95bB3IWQEzst+8Y=)
                          3: D2996894BD3111F1A57D50EB5111F970.roa (hash: GRfKnOOMPFxAQIyw+SLp7bii3WJZvJN70Pmrrt/VNpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.crl
                          rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DB80, serialNumber=7068DACF6A5B5E265FBC0CE5B9A495F089B6E050
        Validity
            Not Before: Oct  5 09:46:08 2026 GMT
            Not After : Oct 12 09:46:08 2026 GMT
        Subject: CN=6ac371e1-25ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:8f:a4:83:f9:24:4c:0b:33:29:1e:fe:4d:
                    a3:91:db:39:69:ce:55:22:fd:b6:80:9a:7f:c5:c9:
                    bc:4a:76:1c:37:d4:a0:a8:b5:d0:db:de:2f:ce:b3:
                    97:84:ca:54:05:a1:af:81:84:f1:0b:87:68:cc:f5:
                    69:a3:a3:a5:d2:df:d1:66:54:cd:14:ff:89:ca:da:
                    01:80:f7:03:06:27:b6:93:5e:8d:41:7d:fd:b9:b2:
                    60:8c:03:af:34:5b:ee:e3:8d:71:75:3d:90:9b:18:
                    73:34:aa:66:f0:97:36:a3:13:39:fb:bc:83:40:f8:
                    ec:cb:8b:f3:f3:f8:cd:21:77:aa:9f:17:e7:05:f9:
                    3c:e9:ab:59:7c:1c:4a:a0:60:40:e1:37:44:98:d5:
                    a1:c8:ca:f2:fa:39:c9:06:35:e7:1e:f9:7b:c3:d4:
                    b8:49:73:0c:2f:aa:67:7e:23:d5:9b:0a:ca:97:22:
                    59:a3:6a:38:d8:6f:ad:d0:30:da:ed:a5:06:8a:95:
                    13:5d:dd:63:64:0b:02:07:6c:dd:ae:91:6c:2a:96:
                    26:c1:fd:de:59:bc:e1:ac:75:12:f7:5a:b7:4a:21:
                    a7:ee:6f:65:da:56:b1:09:53:80:f1:b4:a5:b3:40:
                    52:36:9f:c0:02:66:fe:da:b8:28:7f:91:0e:82:82:
                    e9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4E:4B:03:03:4A:D2:28:86:21:C1:C7:6A:5D:6B:2A:BA:41:7E:B0
            X509v3 Authority Key Identifier:
                keyid:70:68:DA:CF:6A:5B:5E:26:5F:BC:0C:E5:B9:A4:95:F0:89:B6:E0:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGjaz2pbXiZfvAzluaSV8Im24FA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB80/1F892D44BD3011F19B1589CC5111F970/cGjaz2pbXiZfvAzluaSV8Im24FA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:4e:2f:1b:2c:37:96:55:28:a9:73:e2:9b:25:6b:44:79:
         5a:cd:d5:40:e8:33:42:5c:6a:b1:0b:12:ef:55:9c:c1:41:07:
         4a:0b:94:52:a6:05:8b:8b:7e:51:5d:56:d4:64:96:ad:59:f7:
         4c:92:3c:b6:c9:25:1a:37:aa:ec:34:9c:b3:97:13:b6:af:9b:
         4b:62:83:24:7e:d9:41:dd:b3:ba:ea:3c:43:d2:2b:84:2c:e5:
         b6:7a:c6:38:73:1d:f1:03:4d:d3:27:9f:fc:19:c7:63:69:34:
         55:99:23:35:59:49:f2:75:84:03:ce:6d:91:d2:86:f7:79:07:
         ea:eb:9c:41:fb:01:75:fc:21:69:2c:5c:db:85:f9:74:be:4a:
         01:f9:5f:ca:a2:aa:fc:7f:cd:96:f1:9a:d8:31:11:84:3b:fa:
         b2:d2:8c:94:15:ab:da:5b:e2:97:d2:4f:3f:07:dd:bd:95:f0:
         3e:82:25:21:3f:0e:87:60:0f:57:7c:d6:63:dc:14:44:62:d7:
         8b:69:2d:dc:6f:e2:06:6a:b0:1c:98:73:f3:a8:e4:23:e5:ff:
         31:9e:c9:87:b5:21:91:b8:58:7c:ad:e7:17:89:fb:b3:d3:fa:
         a3:e7:84:38:34:fc:ea:1d:a6:fc:d4:99:6b:69:40:ee:e2:78:
         1e:35:ce:4b
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
REI4MDExMC8GA1UEBRMoNzA2OERBQ0Y2QTVCNUUyNjVGQkMwQ0U1QjlBNDk1RjA4
OUI2RTA1MDAeFw0yNjEwMDUwOTQ2MDhaFw0yNjEwMTIwOTQ2MDhaMBgxFjAUBgNV
BAMTDTZhYzM3MWUxLTI1YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJmY+kg/kkTAszKR7+TaOR2zlpzlUi/baAmn/FybxKdhw31KCotdDb3i/Os5eE
ylQFoa+BhPELh2jM9Wmjo6XS39FmVM0U/4nK2gGA9wMGJ7aTXo1Bff25smCMA680
W+7jjXF1PZCbGHM0qmbwlzajEzn7vINA+OzLi/Pz+M0hd6qfF+cF+Tzpq1l8HEqg
YEDhN0SY1aHIyvL6OckGNece+XvD1LhJcwwvqmd+I9WbCsqXIlmjajjYb63QMNrt
pQaKlRNd3WNkCwIHbN2ukWwqlibB/d5ZvOGsdRL3WrdKIafub2XaVrEJU4DxtKWz
QFI2n8ACZv7auCh/kQ6CgunlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQULE5LAwNK
0iiGIcHHal1rKrpBfrAwHwYDVR0jBBgwFoAUcGjaz2pbXiZfvAzluaSV8Im24FAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREQjgwLzFGODkyRDQ0QkQz
MDExRjE5QjE1ODlDQzUxMTFGOTcwL2NHamF6MnBiWGlaZnZBemx1YVNWOEltMjRG
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY0dqYXoycGJYaVpmdkF6bHVhU1Y4SW0yNEZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE
QjgwLzFGODkyRDQ0QkQzMDExRjE5QjE1ODlDQzUxMTFGOTcwL2NHamF6MnBiWGla
ZnZBemx1YVNWOEltMjRGQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBaAE4vGyw3llUoqXPimyVrRHlazdVA6DNCXGqxCxLvVZzBQQdKC5RSpgWLi35R
XVbUZJatWfdMkjy2ySUaN6rsNJyzlxO2r5tLYoMkftlB3bO66jxD0iuELOW2esY4
cx3xA03TJ5/8GcdjaTRVmSM1WUnydYQDzm2R0ob3eQfq65xB+wF1/CFpLFzbhfl0
vkoB+V/Koqr8f82W8ZrYMRGEO/qy0oyUFavaW+KX0k8/B929lfA+giUhPw6HYA9X
fNZj3BREYteLaS3cb+IGarAcmHPzqOQj5f8xnsmHtSGRuFh8recXifuz0/qj54Q4
NPzqHab81JlraUDu4ngeNc5L
-----END CERTIFICATE-----
Generated at Wed Oct 7 03:22:27 2026 by rpki-client