Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft
File:                     mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json)
Hash identifier:          HqSCOeMXdMJYeEl+0PHp9lSeJBEd9UZu+I09NcP9QRQ=
Subject key identifier:   68:2F:29:26:63:6C:A2:AD:77:24:87:2E:E2:D2:74:A7:EF:3E:80:94
Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D
Certificate issuer:       /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D
Certificate serial:       0595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft
Manifest number:          058D
Signing time:             Fri 02 Oct 2026 23:33:27 +0000
Manifest this update:     Fri 02 Oct 2026 23:33:27 +0000
Manifest next update:     Fri 09 Oct 2026 23:33:27 +0000
Files and hashes:         1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: wTGhOclOhYs2ojRGkH1QhLtGZ7svPUjiT6nRgaQ3RZg=)
                          2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: PEJr+Mm39qdGaPmAkNHpAbI5gf+Z7mrX4P7uIMXjoD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl
                          rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D
        Validity
            Not Before: Oct  2 23:33:27 2026 GMT
            Not After : Oct  9 23:33:27 2026 GMT
        Subject: CN=6ac03f47-8667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:b9:27:fe:59:39:b8:42:01:95:a4:22:b1:
                    b7:a9:54:a0:ce:ac:fa:dc:bb:cf:0e:b9:0e:38:96:
                    1a:91:c7:4a:9b:d9:50:6a:62:3d:cb:5e:c9:bd:c1:
                    ab:d5:48:cd:ed:c7:18:bc:b5:60:27:6f:6f:75:fe:
                    be:20:92:85:17:3a:02:b2:23:26:ca:0e:69:23:b7:
                    bd:a9:6f:a0:62:1f:b7:a4:85:6c:be:f1:79:4d:bb:
                    74:cf:85:50:e3:23:78:b0:7e:8c:39:88:76:7b:0b:
                    0d:0f:8e:f8:d2:6b:64:9f:d5:7e:36:ca:1c:1e:bc:
                    40:a3:58:99:14:b2:5b:f6:7c:6c:0a:36:60:23:52:
                    1c:d4:e5:01:b9:c1:44:e8:42:63:69:79:3d:06:5b:
                    c4:ec:8a:79:f1:9c:c3:01:91:6c:bb:69:27:28:6a:
                    b5:a5:3c:ae:65:de:21:48:26:da:df:80:37:88:8e:
                    ba:80:ad:4f:ed:84:c9:10:ee:aa:35:d2:21:bd:23:
                    2b:4d:cd:ad:f7:70:5d:6c:54:4e:cf:ad:54:13:3a:
                    08:02:b6:b6:39:bd:22:e0:43:31:d5:bb:e6:ca:68:
                    a3:cd:c3:eb:10:d7:6d:06:32:fc:50:15:e3:af:00:
                    f3:5d:3d:26:e8:5a:75:48:a6:eb:7e:df:9e:65:42:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2F:29:26:63:6C:A2:AD:77:24:87:2E:E2:D2:74:A7:EF:3E:80:94
            X509v3 Authority Key Identifier:
                keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cd:e4:b1:18:f9:3e:66:50:4e:77:03:75:32:71:79:94:ee:
         e5:9f:50:4e:23:82:ca:ae:c7:74:cf:d9:4c:fa:c2:b6:12:68:
         9a:49:41:c5:2b:5b:ca:79:38:f6:b2:37:e2:06:4d:5c:ea:5d:
         7c:ef:13:cd:2c:97:25:5e:7d:14:05:fe:a8:98:b1:bc:91:97:
         e5:22:22:e7:c1:c5:5a:81:0f:75:ce:1c:f0:0a:76:58:36:90:
         6e:aa:6f:66:ea:71:52:e2:3f:41:af:7d:d4:1c:87:43:28:4c:
         2c:65:64:ef:8f:cf:8f:b9:e3:c0:ce:31:50:79:37:df:38:83:
         9c:25:98:08:07:94:de:a5:60:ed:60:55:4f:77:43:0f:6e:fe:
         21:69:57:1b:17:82:6d:02:4a:8f:a4:e7:0c:e9:8b:3c:f6:30:
         72:b6:6d:b7:0e:97:c9:0a:3e:7a:ba:41:dc:66:ff:00:0c:12:
         42:a3:d5:2d:be:93:f0:f9:3c:3b:8c:e2:31:81:9a:7c:1f:95:
         ce:32:ef:cc:57:87:68:48:4d:1e:72:d3:9a:98:44:2b:42:c5:
         5b:18:62:56:e0:ce:2a:fd:47:86:97:9e:9e:b6:27:d8:25:4f:
         bf:21:26:02:f5:71:62:a3:4e:66:f5:7d:61:5f:56:5e:3c:bb:
         8a:32:be:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD
ODVGMUIxOEQwHhcNMjYxMDAyMjMzMzI3WhcNMjYxMDA5MjMzMzI3WjAYMRYwFAYD
VQQDEw02YWMwM2Y0Ny04NjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArSG5J/5ZObhCAZWkIrG3qVSgzqz63LvPDrkOOJYakcdKm9lQamI9y17JvcGr
1UjN7ccYvLVgJ29vdf6+IJKFFzoCsiMmyg5pI7e9qW+gYh+3pIVsvvF5Tbt0z4VQ
4yN4sH6MOYh2ewsND4740mtkn9V+NsocHrxAo1iZFLJb9nxsCjZgI1Ic1OUBucFE
6EJjaXk9BlvE7Ip58ZzDAZFsu2knKGq1pTyuZd4hSCba34A3iI66gK1P7YTJEO6q
NdIhvSMrTc2t93BdbFROz61UEzoIAra2Ob0i4EMx1bvmymijzcPrENdtBjL8UBXj
rwDzXT0m6Fp1SKbrft+eZUKYQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGgvKSZj
bKKtdySHLuLSdKfvPoCUMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND
QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW
aUZjWThaQzZvdUxJWHhzWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN83ksRj5PmZQTncDdTJxeZTu5Z9QTiOCyq7HdM/ZTPrCthJomklBxStbynk4
9rI34gZNXOpdfO8TzSyXJV59FAX+qJixvJGX5SIi58HFWoEPdc4c8Ap2WDaQbqpv
ZupxUuI/Qa991ByHQyhMLGVk74/Pj7njwM4xUHk33ziDnCWYCAeU3qVg7WBVT3dD
D27+IWlXGxeCbQJKj6TnDOmLPPYwcrZttw6XyQo+erpB3Gb/AAwSQqPVLb6T8Pk8
O4ziMYGafB+VzjLvzFeHaEhNHnLTmphEK0LFWxhiVuDOKv1HhpeenrYn2CVPvyEm
AvVxYqNOZvV9YV9WXjy7ijK+wA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:53:52 2026 by rpki-client