Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
File:                     U_b3klO824sdFxgs5PGdOf1JnfU.mft (raw, json)
Hash identifier:          kso0Bx4pZ5vMCs8SjhsJNPusYB3ILw1iHAhcHCMV3cM=
Subject key identifier:   5A:5A:A9:30:33:6B:5B:6D:5F:80:44:B7:9A:6D:59:96:9C:91:63:1E
Authority key identifier: 53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5
Certificate issuer:       /CN=A9154340/serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
Certificate serial:       0743
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
Manifest number:          073C
Signing time:             Tue 06 Oct 2026 22:04:25 +0000
Manifest this update:     Tue 06 Oct 2026 22:04:25 +0000
Manifest next update:     Tue 13 Oct 2026 22:04:25 +0000
Files and hashes:         1: U_b3klO824sdFxgs5PGdOf1JnfU.crl (hash: ShLSE0JJ0Zp+6aYtBzeHRRBj3VKhCAWDjOQYfW2QFoY=)
                          2: 28D1785891E311EBA138E330C4F9AE02.roa (hash: P7BP6/E5VR32Uv8oMFIhpGR35nhbqoxIBUDOIRvP5g8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl
                          rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859 (0x743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154340, serialNumber=53F6F79253BCDB8B1D17182CE4F19D39FD499DF5
        Validity
            Not Before: Oct  6 22:04:25 2026 GMT
            Not After : Oct 13 22:04:25 2026 GMT
        Subject: CN=6ac57069-c9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:b0:39:f0:ff:0f:bb:b4:8f:47:52:89:53:
                    ab:e9:0e:a1:2a:eb:90:6a:16:f9:23:08:6a:32:bf:
                    88:d3:8c:e5:77:d6:6a:51:e1:33:99:8d:eb:e3:e2:
                    b7:03:e6:0c:60:13:d5:3f:f5:46:97:b5:1d:65:76:
                    e3:52:86:20:6d:28:75:75:e5:a1:55:8f:13:9d:b4:
                    16:56:02:18:13:1c:d6:bd:38:a5:86:9f:6b:45:5b:
                    50:b6:05:3a:69:1c:cc:fe:6c:44:19:ae:fe:2c:89:
                    8d:9d:29:2f:a2:e0:1a:33:7d:85:2d:3f:65:7c:ca:
                    fd:72:d9:10:de:5b:0a:4f:62:32:d5:16:05:fd:8a:
                    c3:dc:17:b9:3e:30:d1:0e:1d:dc:7b:2c:63:fb:d2:
                    95:0d:86:d5:11:17:0a:42:f2:32:62:da:6a:85:be:
                    47:2f:28:a6:2f:f4:43:ee:6c:2b:25:44:36:5b:c2:
                    a3:a4:a5:11:fd:9d:80:6f:10:b5:42:b6:fd:bd:71:
                    9d:08:cc:a3:3e:d3:d5:b9:03:f4:c4:d9:be:d4:fd:
                    81:28:13:b3:58:45:a2:fb:26:46:9d:8b:0b:bc:cb:
                    e5:65:5d:40:c1:50:a2:b5:0b:2f:25:a8:4f:70:29:
                    8a:90:08:c4:75:c3:cf:02:17:13:96:8f:c6:53:1c:
                    68:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5A:A9:30:33:6B:5B:6D:5F:80:44:B7:9A:6D:59:96:9C:91:63:1E
            X509v3 Authority Key Identifier:
                keyid:53:F6:F7:92:53:BC:DB:8B:1D:17:18:2C:E4:F1:9D:39:FD:49:9D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U_b3klO824sdFxgs5PGdOf1JnfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154340/7C1FD1D291E111EBB6878C2EC4F9AE02/U_b3klO824sdFxgs5PGdOf1JnfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:74:43:90:f3:7a:27:27:1e:b1:f2:5f:51:ea:4e:2b:07:29:
         09:7f:05:c7:8b:45:2a:da:fb:c4:e7:85:59:1d:2b:ce:27:cd:
         3b:16:67:8c:d5:45:e5:7a:c1:90:8d:68:e5:d1:1e:25:89:2c:
         35:58:16:f9:78:db:98:4a:e5:d4:d4:80:cd:f7:72:e0:53:c7:
         b2:3c:19:d4:d1:d3:1a:a7:63:58:e2:88:74:3e:93:02:fd:27:
         17:8a:9c:ca:6e:88:31:85:2f:e2:ee:4b:8b:85:1f:4d:a0:b5:
         74:d2:a5:15:98:e4:67:b7:f9:54:33:95:77:e9:f5:f3:84:06:
         72:e0:61:3f:d8:7e:7d:d0:e0:c3:d9:0a:d1:5e:51:35:4b:02:
         fe:c6:4e:60:ba:74:0a:89:61:9f:db:34:d8:f9:0e:8f:58:5f:
         22:4c:9f:6d:1a:c6:0e:1e:82:18:da:66:ae:c6:04:8e:fe:0f:
         da:c6:d3:1b:cc:94:77:fc:93:70:80:8e:e8:f7:02:e8:ad:67:
         27:f7:2f:8a:d2:3d:26:1d:43:09:82:c5:f6:52:4b:ad:68:9a:
         16:20:25:45:fc:fa:89:27:bf:3b:57:a4:2a:f1:de:76:6d:c4:
         e4:2a:b4:4e:22:56:c3:bd:66:f6:f7:0a:6f:84:be:36:6d:43:
         3a:9b:fb:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQzNDAxMTAvBgNVBAUTKDUzRjZGNzkyNTNCQ0RCOEIxRDE3MTgyQ0U0RjE5RDM5
RkQ0OTlERjUwHhcNMjYxMDA2MjIwNDI1WhcNMjYxMDEzMjIwNDI1WjAYMRYwFAYD
VQQDEw02YWM1NzA2OS1jOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhywOfD/D7u0j0dSiVOr6Q6hKuuQahb5IwhqMr+I04zld9ZqUeEzmY3r4+K3
A+YMYBPVP/VGl7UdZXbjUoYgbSh1deWhVY8TnbQWVgIYExzWvTilhp9rRVtQtgU6
aRzM/mxEGa7+LImNnSkvouAaM32FLT9lfMr9ctkQ3lsKT2Iy1RYF/YrD3Be5PjDR
Dh3ceyxj+9KVDYbVERcKQvIyYtpqhb5HLyimL/RD7mwrJUQ2W8KjpKUR/Z2AbxC1
Qrb9vXGdCMyjPtPVuQP0xNm+1P2BKBOzWEWi+yZGnYsLvMvlZV1AwVCitQsvJahP
cCmKkAjEdcPPAhcTlo/GUxxoIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpaqTAz
a1ttX4BEt5ptWZackWMeMB8GA1UdIwQYMBaAFFP295JTvNuLHRcYLOTxnTn9SZ31
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM0MC83QzFGRDFEMjkx
RTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0c2RGeGdzNVBHZE9mMUpu
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VfYjNrbE84MjRzZEZ4Z3M1UEdkT2YxSm5mVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDM0MC83QzFGRDFEMjkxRTExMUVCQjY4NzhDMkVDNEY5QUUwMi9VX2Iza2xPODI0
c2RGeGdzNVBHZE9mMUpuZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl3RDkPN6JycesfJfUepOKwcpCX8Fx4tFKtr7xOeFWR0rzifNOxZnjNVF5XrB
kI1o5dEeJYksNVgW+XjbmErl1NSAzfdy4FPHsjwZ1NHTGqdjWOKIdD6TAv0nF4qc
ym6IMYUv4u5Li4UfTaC1dNKlFZjkZ7f5VDOVd+n184QGcuBhP9h+fdDgw9kK0V5R
NUsC/sZOYLp0Colhn9s02PkOj1hfIkyfbRrGDh6CGNpmrsYEjv4P2sbTG8yUd/yT
cICO6PcC6K1nJ/cvitI9Jh1DCYLF9lJLrWiaFiAlRfz6iSe/O1ekKvHedm3E5Cq0
TiJWw71m9vcKb4S+Nm1DOpv7Kg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 07:27:16 2026 by rpki-client