Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File:                     cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier:          4ptngotOmhlfwjGmN5Usfmok8gOkkpibm4VA8sqDQ9w=
Subject key identifier:   31:F6:80:95:53:13:8F:AA:C3:79:4E:3C:3E:79:AA:DC:B0:77:CD:7E
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer:       /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial:       0CAD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number:          0C96
Signing time:             Tue 06 Oct 2026 18:44:28 +0000
Manifest this update:     Tue 06 Oct 2026 18:44:28 +0000
Manifest next update:     Tue 13 Oct 2026 18:44:28 +0000
Files and hashes:         1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: FePXtlGejBMvzGafip7TcTQ1tKnVClk6sH7Oi9oaOVo=)
                          2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=)
                          3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
                          rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3245 (0xcad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
        Validity
            Not Before: Oct  6 18:44:28 2026 GMT
            Not After : Oct 13 18:44:28 2026 GMT
        Subject: CN=6ac5418c-392c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:2a:b2:17:4c:3c:b6:85:b0:35:e4:1a:ac:
                    e0:92:90:98:ba:0f:32:06:ef:f2:80:63:4c:5f:99:
                    82:df:cf:c6:f8:af:85:ce:99:a8:4e:77:ad:f5:fa:
                    9e:21:8f:d8:02:06:5f:2a:02:17:86:48:93:fa:2d:
                    c9:7f:5b:28:db:3e:28:33:5a:83:a0:1c:58:9e:bb:
                    0d:e6:94:f5:24:64:fb:e1:68:0f:c1:33:e2:ed:dd:
                    e5:44:aa:fb:f1:28:0e:0c:db:f4:41:78:a0:88:30:
                    fd:ab:9d:1d:3f:c2:e9:80:03:71:53:7b:84:b5:2e:
                    3f:0a:93:8e:4b:8f:d3:c8:81:12:40:b0:5c:c7:a1:
                    27:03:7a:ef:7e:2c:ff:65:27:d6:fd:39:40:37:80:
                    2c:09:49:f8:72:ae:b9:ab:85:e7:98:88:6f:64:5a:
                    7b:fb:39:2f:57:6c:d4:25:03:29:44:e6:99:5e:20:
                    53:3a:1b:b4:9d:39:86:96:5a:53:c8:c5:04:b6:8b:
                    54:35:41:9e:7c:9e:57:ab:67:9c:a8:43:a2:76:6b:
                    0c:d4:4e:da:aa:bc:b8:21:02:c5:ae:3c:79:2f:ce:
                    6d:42:5f:1e:b8:75:4f:26:36:38:e7:99:23:34:ca:
                    65:57:90:ca:8a:89:93:70:cb:dc:8e:f4:f8:31:90:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F6:80:95:53:13:8F:AA:C3:79:4E:3C:3E:79:AA:DC:B0:77:CD:7E
            X509v3 Authority Key Identifier:
                keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:b0:67:cc:e4:7e:4b:07:57:93:52:46:03:8c:14:7b:b2:
         3c:23:57:6a:3e:f3:40:4b:71:2c:40:13:17:f6:76:26:4c:c6:
         17:1c:01:c5:16:29:ff:bf:1b:ea:2c:89:23:a7:b2:cc:1a:c6:
         59:8c:51:b4:5d:3b:8d:21:88:b7:df:2f:45:40:c2:af:22:4c:
         b9:fe:f4:aa:f2:54:b9:b4:ad:52:0d:03:83:14:c4:15:a5:f4:
         eb:b6:6e:53:74:cb:54:5a:83:b3:4d:72:f7:25:76:d7:6e:1f:
         1f:d5:a2:54:6d:eb:79:27:73:99:84:81:c7:f8:55:3b:48:80:
         be:3d:9d:4a:b7:6e:c5:76:f8:cc:75:cd:a8:5b:fe:97:90:6d:
         58:c3:55:02:eb:f6:ec:ae:59:09:f0:9f:ef:b3:2b:95:c0:8d:
         de:e7:ea:d6:9e:63:2f:2c:0f:0a:8d:a2:d5:9d:14:64:39:a9:
         7f:41:a8:c3:ca:ce:06:ac:ac:27:02:65:fd:51:f1:5b:1b:60:
         f8:09:8a:28:9c:9e:11:e2:79:6d:db:e4:61:74:92:5d:47:e0:
         6d:5f:30:e6:2c:e1:bc:99:c1:c1:3a:b2:07:1a:94:95:ff:ef:
         e6:ae:6e:6b:f3:57:22:11:d5:74:83:62:ee:f8:16:29:41:ec:
         06:7f:37:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjMyMEIxMTAvBgNVBAUTKDcwNDZGODk4M0RGQzM3MDRCNkU1Q0Q3RUExMjgwRkQw
RjUyOTc5QTAwHhcNMjYxMDA2MTg0NDI4WhcNMjYxMDEzMTg0NDI4WjAYMRYwFAYD
VQQDEw02YWM1NDE4Yy0zOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApU0qshdMPLaFsDXkGqzgkpCYug8yBu/ygGNMX5mC38/G+K+FzpmoTnet9fqe
IY/YAgZfKgIXhkiT+i3Jf1so2z4oM1qDoBxYnrsN5pT1JGT74WgPwTPi7d3lRKr7
8SgODNv0QXigiDD9q50dP8LpgANxU3uEtS4/CpOOS4/TyIESQLBcx6EnA3rvfiz/
ZSfW/TlAN4AsCUn4cq65q4XnmIhvZFp7+zkvV2zUJQMpROaZXiBTOhu0nTmGllpT
yMUEtotUNUGefJ5Xq2ecqEOidmsM1E7aqry4IQLFrjx5L85tQl8euHVPJjY455kj
NMplV5DKiomTcMvcjvT4MZB15QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDH2gJVT
E4+qw3lOPD55qtywd81+MB8GA1UdIwQYMBaAFHBG+Jg9/DcEtuXNfqEoD9D1KXmg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzIwQi8wRkZGN0FBQTI3
QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53UzI1YzEtb1NnUDBQVXBl
YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NFYjRtRDM4TndTMjVjMS1vU2dQMFBVcGVhQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MzIwQi8wRkZGN0FBQTI3QUUxMUVBODU5NTZFNzhDNEY5QUUwMi9jRWI0bUQzOE53
UzI1YzEtb1NnUDBQVXBlYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXX+wZ8zkfksHV5NSRgOMFHuyPCNXaj7zQEtxLEATF/Z2JkzGFxwBxRYp/78b
6iyJI6eyzBrGWYxRtF07jSGIt98vRUDCryJMuf70qvJUubStUg0DgxTEFaX067Zu
U3TLVFqDs01y9yV2124fH9WiVG3reSdzmYSBx/hVO0iAvj2dSrduxXb4zHXNqFv+
l5BtWMNVAuv27K5ZCfCf77MrlcCN3ufq1p5jLywPCo2i1Z0UZDmpf0Gow8rOBqys
JwJl/VHxWxtg+AmKKJyeEeJ5bdvkYXSSXUfgbV8w5izhvJnBwTqyBxqUlf/v5q5u
a/NXIhHVdINi7vgWKUHsBn83ew==
-----END CERTIFICATE-----
Generated at Thu Oct 8 01:08:39 2026 by rpki-client