Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
File:                     nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft (raw, json)
Hash identifier:          c1UurYWEGvOYL17KOXjE9FV/ZuoOmlqUSea5cKQebzw=
Subject key identifier:   59:66:C0:57:80:85:2A:A0:89:BF:17:CC:FA:DB:49:CF:D1:9F:F7:80
Authority key identifier: 9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62
Certificate issuer:       /CN=A9154840/serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
Manifest number:          0172
Signing time:             Mon 05 Oct 2026 05:20:10 +0000
Manifest this update:     Mon 05 Oct 2026 05:20:10 +0000
Manifest next update:     Mon 12 Oct 2026 05:20:10 +0000
Files and hashes:         1: nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl (hash: MK1Ex40O3OqeAc8x2CBHVEXHsc6EeZpX7UjJ4Wghe68=)
                          2: A2FA17E869FB11F1BD4359E86747A888.roa (hash: 8h1Puq097u2DO2U0Cp/aa4dNK2IfnuKSlHLUcyn8kpA=)
                          3: 9950A304A55011EFA7FFA969C4F9AE02.roa (hash: p3YSKm0XiU+1I3RwB+h4QT+40+6ZmIED9W91tOylVnw=)
                          4: 5D3864CA693911F18A70725D6747A888.roa (hash: a9atcZqee9X4BLrwPHEuLo/r/iXObJQc/qgMYMCAlCc=)
                          5: 5DC57C34693911F18A70725D6747A888.roa (hash: Q1jEQutJW+UDOf1ARhhn/ls0vuW1BtzzkdSA42DY4hQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl
                          rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154840, serialNumber=9CF71478BF59B008B1B542FA93A7C10EFB7F4D62
        Validity
            Not Before: Oct  5 05:20:10 2026 GMT
            Not After : Oct 12 05:20:10 2026 GMT
        Subject: CN=6ac3338a-6fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:18:05:de:c2:ca:45:7c:2c:db:6b:9d:5a:
                    e5:c8:d0:54:24:5d:96:1e:d3:c6:26:d6:d2:31:14:
                    3a:44:67:3a:56:63:d2:46:ba:51:3d:ca:d6:df:3c:
                    39:9d:94:7c:58:11:eb:db:20:1d:6b:05:5c:ea:b5:
                    41:97:20:33:c3:e2:cc:b0:81:63:63:12:dc:77:b0:
                    09:11:7a:12:72:b4:59:93:d8:ec:d4:58:82:18:66:
                    7f:99:0d:f7:59:cd:ad:85:08:8f:6b:12:38:b6:d4:
                    be:57:e0:9e:93:23:76:2d:57:4b:75:6c:fb:12:44:
                    b1:25:7d:42:3e:5d:e7:22:ad:8c:3b:67:a9:a7:bf:
                    ce:52:3a:ea:31:95:02:9f:69:ec:00:ba:bb:2c:32:
                    88:c4:6b:a1:d0:22:5c:f0:4a:57:9a:c7:b5:ea:57:
                    3a:6c:80:de:75:43:01:1b:2f:2f:b3:3b:32:21:f0:
                    a9:26:16:96:ea:57:b6:1e:45:c6:13:c3:5e:e9:e3:
                    e7:1b:c9:03:47:ae:10:23:77:94:6b:f1:04:f6:59:
                    33:f8:bd:71:6c:55:02:37:31:2e:10:18:df:96:c5:
                    ee:9d:96:20:9b:a7:0e:60:51:f2:a1:f5:50:28:4c:
                    ca:03:93:c0:a5:06:98:a6:94:3d:a1:8b:22:b2:f5:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:66:C0:57:80:85:2A:A0:89:BF:17:CC:FA:DB:49:CF:D1:9F:F7:80
            X509v3 Authority Key Identifier:
                keyid:9C:F7:14:78:BF:59:B0:08:B1:B5:42:FA:93:A7:C1:0E:FB:7F:4D:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPcUeL9ZsAixtUL6k6fBDvt_TWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154840/342F80D09FC411EF9631F836C4F9AE02/nPcUeL9ZsAixtUL6k6fBDvt_TWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c8:fa:66:4b:d4:ce:65:67:7c:f8:86:73:24:1e:3d:94:bf:
         b9:41:36:d4:74:66:2d:a4:53:5b:15:a0:76:ad:f8:50:91:86:
         06:46:e5:be:9f:f2:d5:e2:86:aa:35:4b:84:c0:d2:b2:a3:92:
         40:dd:a0:4a:31:be:0e:fe:de:4a:1b:ac:b4:de:6e:64:df:52:
         c0:12:63:d9:43:8e:91:9f:fe:aa:14:7c:fe:5f:66:ce:ef:7e:
         41:06:b0:e4:02:92:91:d3:d4:46:42:4e:fb:4c:d8:f0:8c:14:
         0f:3d:18:b5:ae:10:f7:48:7e:ae:dc:ea:c9:f0:5f:ee:b1:96:
         30:9b:6c:47:ec:3a:46:bb:49:de:fe:54:ac:12:d8:a9:f7:3c:
         e4:d9:63:57:fa:04:3e:76:c5:2a:5f:07:a0:22:2e:e4:e0:05:
         ae:5c:22:26:41:fd:97:46:00:d6:27:61:53:cd:62:0d:da:59:
         cd:1f:11:13:c7:ee:54:50:20:c0:15:31:8c:cd:2c:67:c5:f8:
         f2:0f:c9:39:fc:14:40:d7:39:4e:e9:4b:be:c4:5d:09:5b:34:
         cd:ca:26:df:49:3c:69:78:2a:30:c6:93:18:e2:78:da:e7:a1:
         54:de:5b:fe:4a:f1:af:85:af:a5:7e:77:34:ca:d9:69:fa:8d:
         62:b0:00:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ4NDAxMTAvBgNVBAUTKDlDRjcxNDc4QkY1OUIwMDhCMUI1NDJGQTkzQTdDMTBF
RkI3RjRENjIwHhcNMjYxMDA1MDUyMDEwWhcNMjYxMDEyMDUyMDEwWjAYMRYwFAYD
VQQDEw02YWMzMzM4YS02ZmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFAYBd7CykV8LNtrnVrlyNBUJF2WHtPGJtbSMRQ6RGc6VmPSRrpRPcrW3zw5
nZR8WBHr2yAdawVc6rVBlyAzw+LMsIFjYxLcd7AJEXoScrRZk9js1FiCGGZ/mQ33
Wc2thQiPaxI4ttS+V+CekyN2LVdLdWz7EkSxJX1CPl3nIq2MO2epp7/OUjrqMZUC
n2nsALq7LDKIxGuh0CJc8EpXmse16lc6bIDedUMBGy8vszsyIfCpJhaW6le2HkXG
E8Ne6ePnG8kDR64QI3eUa/EE9lkz+L1xbFUCNzEuEBjflsXunZYgm6cOYFHyofVQ
KEzKA5PApQaYppQ9oYsisvXC8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFlmwFeA
hSqgib8XzPrbSc/Rn/eAMB8GA1UdIwQYMBaAFJz3FHi/WbAIsbVC+pOnwQ77f01i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDg0MC8zNDJGODBEMDlG
QzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNBaXh0VUw2azZmQkR2dF9U
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25QY1VlTDlac0FpeHRVTDZrNmZCRHZ0X1RXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDg0MC8zNDJGODBEMDlGQzQxMUVGOTYzMUY4MzZDNEY5QUUwMi9uUGNVZUw5WnNB
aXh0VUw2azZmQkR2dF9UV0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdcj6ZkvUzmVnfPiGcyQePZS/uUE21HRmLaRTWxWgdq34UJGGBkblvp/y1eKG
qjVLhMDSsqOSQN2gSjG+Dv7eShustN5uZN9SwBJj2UOOkZ/+qhR8/l9mzu9+QQaw
5AKSkdPURkJO+0zY8IwUDz0Yta4Q90h+rtzqyfBf7rGWMJtsR+w6RrtJ3v5UrBLY
qfc85NljV/oEPnbFKl8HoCIu5OAFrlwiJkH9l0YA1idhU81iDdpZzR8RE8fuVFAg
wBUxjM0sZ8X48g/JOfwUQNc5TulLvsRdCVs0zcom30k8aXgqMMaTGOJ42uehVN5b
/krxr4WvpX53NMrZafqNYrAAqA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:19:28 2026 by rpki-client