Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
File:                     s4Q_FBVTnelR6maApOmQCK-DeHQ.mft (raw, json)
Hash identifier:          6CTlwZP81PP8cEaQapEHc8NW4zm1fat9slQTcK7WYss=
Subject key identifier:   92:F2:18:CE:38:4A:47:94:BC:0A:2B:8F:7B:87:FC:7C:D9:CE:B1:ED
Authority key identifier: B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74
Certificate issuer:       /CN=A914E6AA/serialNumber=B3843F1415539DE951EA6680A4E99008AF837874
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
Manifest number:          0D2C
Signing time:             Fri 02 Oct 2026 22:29:44 +0000
Manifest this update:     Fri 02 Oct 2026 22:29:44 +0000
Manifest next update:     Fri 09 Oct 2026 22:29:44 +0000
Files and hashes:         1: s4Q_FBVTnelR6maApOmQCK-DeHQ.crl (hash: jTD6dUD56OZpHg9nlE+TCJ+zbmfZ6EG71dfZbYRIQ34=)
                          2: 6017E5BE54FB11F1B81DC57BA3833773.roa (hash: P+pna3FadF29aa6apDihcWdlag9aJJPNQ/+Y5gHcH4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E6AA, serialNumber=B3843F1415539DE951EA6680A4E99008AF837874
        Validity
            Not Before: Oct  2 22:29:44 2026 GMT
            Not After : Oct  9 22:29:44 2026 GMT
        Subject: CN=6ac03058-ade0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:d9:37:51:85:03:c9:4d:0b:de:bc:9e:b7:
                    73:94:6a:6c:2e:ec:80:e5:93:79:e0:d2:41:37:90:
                    0f:e0:f4:65:9c:b7:89:53:39:9f:43:e0:93:86:67:
                    3b:4b:c3:64:e9:7c:a8:fa:20:46:35:68:ff:4b:26:
                    48:2d:56:60:47:44:ff:9d:2b:75:36:f1:f3:dc:74:
                    30:41:71:58:1f:a1:74:50:10:89:64:3d:17:b2:b3:
                    12:8c:c0:13:00:18:af:2c:13:1d:ca:67:cc:cb:aa:
                    e4:db:a5:ee:a3:2f:18:86:d5:ef:4c:06:f7:af:ce:
                    2a:58:9e:3c:2a:01:d9:81:e8:e5:40:f2:b1:60:8a:
                    7e:89:1a:f6:d3:8d:13:5d:6a:5a:3c:fc:fc:52:0b:
                    9b:3f:df:de:57:48:c0:86:a4:31:ab:14:a4:47:e8:
                    37:96:b6:d0:d5:b5:ef:64:96:14:7c:76:aa:94:36:
                    a0:dd:2a:d4:60:27:7c:2a:01:5a:df:21:ce:e2:51:
                    80:62:14:f9:a8:92:8a:77:4b:f5:ea:ef:a0:74:1d:
                    fa:dc:09:41:a8:b3:c7:50:88:39:1f:04:3b:c8:1b:
                    ae:79:13:fa:f8:2a:91:b3:ca:a2:70:16:7a:bb:a9:
                    fd:7a:b9:e0:6c:93:5c:92:99:18:80:3d:4b:01:e7:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F2:18:CE:38:4A:47:94:BC:0A:2B:8F:7B:87:FC:7C:D9:CE:B1:ED
            X509v3 Authority Key Identifier:
                keyid:B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:27:80:2a:cd:87:ca:2f:13:20:3f:a7:bd:98:ac:40:90:35:
         f3:e8:37:9c:9e:31:a2:9a:5e:9b:57:66:16:15:19:01:23:f6:
         a9:83:5a:03:a5:02:38:df:83:1a:85:c5:58:0c:d1:d1:8c:da:
         24:23:bd:49:cd:ba:c4:18:b4:28:d8:2e:f3:7f:2e:28:bd:60:
         68:b0:0c:de:0f:41:27:09:34:9a:2c:26:10:b7:4e:3a:0a:81:
         02:eb:11:a7:53:13:fd:29:98:78:f9:59:54:f3:dc:d9:21:68:
         cc:51:ea:61:eb:a5:ac:8f:84:11:a7:99:c3:4c:9f:46:2d:85:
         54:32:3e:06:5a:8b:65:8e:61:1c:32:9c:1b:30:2a:6b:cc:2e:
         5c:07:41:ce:74:de:cb:f4:7c:a7:c5:43:97:b0:91:1f:0b:b3:
         36:ba:fa:a2:2d:8a:c0:ac:62:52:c8:2e:33:c3:2c:d9:7a:00:
         0e:62:46:47:60:23:25:89:a3:e9:3e:c8:87:44:7d:f1:8a:29:
         50:aa:b9:2e:2f:34:99:50:a7:ac:3c:15:02:16:d6:3b:48:31:
         39:37:2f:19:86:bf:9a:b2:2b:02:02:42:56:7f:87:47:b6:d5:
         40:65:94:f2:a4:73:d4:e2:ec:ff:2e:06:8a:b0:fe:32:8d:a4:
         e6:a6:22:cb
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTZBQTExMC8GA1UEBRMoQjM4NDNGMTQxNTUzOURFOTUxRUE2NjgwQTRFOTkwMDhB
RjgzNzg3NDAeFw0yNjEwMDIyMjI5NDRaFw0yNjEwMDkyMjI5NDRaMBgxFjAUBgNV
BAMTDTZhYzAzMDU4LWFkZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9x9k3UYUDyU0L3ryet3OUamwu7IDlk3ng0kE3kA/g9GWct4lTOZ9D4JOGZztL
w2TpfKj6IEY1aP9LJkgtVmBHRP+dK3U28fPcdDBBcVgfoXRQEIlkPReysxKMwBMA
GK8sEx3KZ8zLquTbpe6jLxiG1e9MBvevzipYnjwqAdmB6OVA8rFgin6JGvbTjRNd
alo8/PxSC5s/395XSMCGpDGrFKRH6DeWttDVte9klhR8dqqUNqDdKtRgJ3wqAVrf
Ic7iUYBiFPmokop3S/Xq76B0HfrcCUGos8dQiDkfBDvIG655E/r4KpGzyqJwFnq7
qf16ueBsk1ySmRiAPUsB56uzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkvIYzjhK
R5S8CiuPe4f8fNnOse0wHwYDVR0jBBgwFoAUs4Q/FBVTnelR6maApOmQCK+DeHQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB
ODExRUJBN0M5RjU2N0M0RjlBRTAyL3M0UV9GQlZUbmVsUjZtYUFwT21RQ0stRGVI
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvczRRX0ZCVlRuZWxSNm1hQXBPbVFDSy1EZUhRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3M0UV9GQlZUbmVs
UjZtYUFwT21RQ0stRGVIUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBNJ4AqzYfKLxMgP6e9mKxAkDXz6DecnjGiml6bV2YWFRkBI/apg1oDpQI434Ma
hcVYDNHRjNokI71JzbrEGLQo2C7zfy4ovWBosAzeD0EnCTSaLCYQt046CoEC6xGn
UxP9KZh4+VlU89zZIWjMUeph66Wsj4QRp5nDTJ9GLYVUMj4GWotljmEcMpwbMCpr
zC5cB0HOdN7L9HynxUOXsJEfC7M2uvqiLYrArGJSyC4zwyzZegAOYkZHYCMliaPp
PsiHRH3xiilQqrkuLzSZUKesPBUCFtY7SDE5Ny8Zhr+asisCAkJWf4dHttVAZZTy
pHPU4uz/LgaKsP4yjaTmpiLL
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:43:45 2026 by rpki-client