Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          k67t76coMadI8rhFLuevnPmTUl066dLhEwQIs6YKs98=
Subject key identifier:   D6:19:FD:FA:F0:CE:E2:C4:6C:9C:B1:8E:5B:76:D0:50:60:E6:EE:7D
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       03E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          0355
Signing time:             Wed 09 Sep 2026 06:30:24 +0000
Manifest this update:     Wed 09 Sep 2026 06:30:23 +0000
Manifest next update:     Wed 16 Sep 2026 06:30:23 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: jFyrbQBqkRtCGzf9NJxnBB72zkQD71hDnZTAFUx5vrU=)
                          2: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=)
                          3: 42EEA7CE184D11F182F41629283D8C67.roa (hash: TVrPLmIBli4Y5DGPh5WbtZCgPebXr/yJxB3rRfwNFHI=)
                          4: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=)
                          5: AA65E9CE7CF911F1BF3745CD5DA30FBC.roa (hash: VsVW210rfsi+fEPH7TRhYAoRWgsqSNO0ugQGNB8wDQQ=)
                          6: E8672B1C381511F1ABE15B0C98833773.roa (hash: anai9qYPZOFiCk3SsK0WZEhRCz/0EmZXl4ZZ1i9lDIg=)
                          7: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=)
                          8: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=)
                          9: E9A2C6AAAC1711F1AC2C3D313311F970.roa (hash: IUVg4aIeQJz80P8SnnQNdARYWjlA4YkPhCYesR8rZeY=)
                          10: E76A810A381511F1ABE15B0C98833773.roa (hash: o2/3WY/X8q2n8a29ZI+8ohjXtfNwONgobpYeiQVr1FE=)
                          11: AAFF38CC7CF911F1BF3745CD5DA30FBC.roa (hash: 41180uIkYX6ypunpJR0wZ+Ob3N/HYbkDfmA9Kieuceo=)
                          12: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=)
                          13: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: h4q9+s6LKkIzk4CyJWXnprv1pvkZF4sAJykGIi6Qgw0=)
                          14: A8A37DCE44A311F1A5A6D795B1833773.roa (hash: ib0KxOFCjXjQMDET9+2Xmpzp90tn7a7KE1jjG4RD0SU=)
                          15: 460770DE8F0411F1812E6F496D11F970.roa (hash: MPHZ4gZ7BUbaXJ4GyjND7xBqAuLWN8we1t6I6nFoW+E=)
                          16: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 06:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Sep  9 06:30:23 2026 GMT
            Not After : Sep 16 06:30:23 2026 GMT
        Subject: CN=6aa0fcff-82c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:09:c8:c3:a0:87:ab:00:69:24:69:b4:6f:1f:
                    ba:06:90:3a:88:e2:f1:d2:7d:36:a2:ce:50:f6:fc:
                    65:a8:20:35:3f:17:0a:ed:3d:17:57:4a:60:cb:50:
                    9f:4f:02:25:95:76:08:4d:67:35:19:a2:2b:1c:8a:
                    f0:57:63:c7:4b:0b:60:7e:47:f5:78:b5:cc:1a:f8:
                    25:8e:08:cc:62:56:87:88:a3:48:46:1e:ed:c8:bc:
                    45:42:c6:3c:ac:8c:50:8e:88:cc:05:62:ba:61:b2:
                    84:17:09:5d:72:56:ce:b1:e5:bc:8e:5d:7f:1b:22:
                    5f:48:8c:02:3b:ed:c5:88:0c:50:94:01:9b:f3:7b:
                    3f:dc:a9:61:ea:19:4d:e5:51:d3:2c:1c:a5:31:a8:
                    b0:43:89:31:b4:c7:ed:54:32:45:8e:a7:bd:45:61:
                    75:b2:6a:02:cb:be:88:52:cb:93:fb:a5:f3:db:97:
                    7f:a1:e2:7e:ec:27:c2:6b:13:e4:52:88:de:89:2c:
                    f2:73:cc:a9:b1:70:91:6a:a2:7a:d8:dc:23:e4:42:
                    50:2f:ab:6a:0a:f6:5f:7e:2c:b9:7d:3a:6d:1c:26:
                    bf:57:aa:10:69:4b:5c:72:6c:d6:e0:96:27:2d:ea:
                    f9:e4:22:42:31:15:ab:82:47:3c:0e:a8:00:6d:ce:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:19:FD:FA:F0:CE:E2:C4:6C:9C:B1:8E:5B:76:D0:50:60:E6:EE:7D
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:24:ce:32:40:4f:ac:ad:d8:77:bb:ca:8b:5d:aa:a0:94:
         4e:e4:35:30:85:b9:44:4c:9e:d0:1b:2a:6d:4c:cd:26:2c:53:
         32:25:ee:4d:3a:ed:a2:a3:f7:22:5a:72:a2:82:e3:a5:df:93:
         3a:3b:89:c0:13:50:ee:5c:88:7f:07:49:f3:49:23:d3:e3:d2:
         ef:db:46:b0:d6:05:f0:41:ff:9d:a9:22:31:f9:7d:fb:8d:f2:
         8d:84:8d:c8:f6:61:09:6b:87:b2:63:55:18:e6:02:34:ef:aa:
         c5:e6:ec:fd:e5:4c:0e:b9:37:bf:a6:53:e3:78:af:ef:94:f7:
         7f:ea:30:26:0c:c3:38:35:1e:ca:9b:ae:dd:3a:ab:f7:e6:ca:
         6b:24:21:05:3b:d2:39:92:f2:87:dc:df:13:53:12:8a:e4:1c:
         52:b7:a8:7f:df:bf:56:74:34:8a:44:a9:8b:a4:3c:24:0f:40:
         b2:61:17:04:aa:b0:f6:f3:77:2e:ab:6c:b0:ea:78:56:7c:79:
         90:a3:a5:27:3d:5a:67:cf:ed:3e:80:ba:23:47:82:e6:b7:91:
         e0:ce:c9:5f:1c:fd:63:03:54:1d:ee:0c:98:48:c0:5f:1b:d5:
         6d:7e:0c:2d:3a:5e:06:4c:ed:ba:5f:db:b6:7e:83:8c:23:3a:
         30:ed:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:19:54 2026 by rpki-client