Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File:                     G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier:          7pE4xOQJxv4UQbc9dgxNJB0IK4j4yRIJcthoSdZk3NI=
Subject key identifier:   41:A7:26:32:18:9B:11:2D:1F:E2:C3:01:B5:EC:8D:48:19:B9:C2:33
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer:       /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number:          A5
Signing time:             Sun 11 Oct 2026 07:49:51 +0000
Manifest this update:     Sun 11 Oct 2026 07:49:50 +0000
Manifest next update:     Sun 18 Oct 2026 07:49:50 +0000
Files and hashes:         1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: R8vlqL6Z8WFi8qTIvWzNFZUMNOrm5kF9ejQ7LImE7DM=)
                          2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
                          rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
        Validity
            Not Before: Oct 11 07:49:50 2026 GMT
            Not After : Oct 18 07:49:50 2026 GMT
        Subject: CN=6acb3f9f-3e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:cf:25:c2:02:96:88:62:6b:5a:c5:03:71:
                    68:b3:21:b3:19:68:b2:4b:99:21:03:ef:21:69:a5:
                    b8:31:13:86:87:d4:14:ed:39:90:2d:9e:87:29:db:
                    71:61:21:c0:e5:1d:88:da:e9:70:f2:63:37:d8:11:
                    1f:9f:d2:fa:0d:fc:d3:07:86:94:2f:46:c4:1e:bd:
                    5d:a8:5c:cc:0b:f4:54:61:61:ab:7a:70:af:1c:51:
                    ed:d0:fa:c6:a6:4f:17:c7:ad:47:4a:62:80:9c:ea:
                    f6:cd:62:59:c1:83:8a:ea:81:92:63:fb:ec:b0:c5:
                    cc:f8:62:b2:ff:83:64:a2:5d:60:5b:30:81:db:8c:
                    f0:da:5d:c6:e0:e1:66:29:43:20:fa:93:26:79:76:
                    5e:11:ad:6b:53:9b:cc:a5:5e:92:c0:bf:36:4e:6c:
                    bb:fb:4e:67:cb:31:76:ab:9e:9b:5e:6c:bb:eb:50:
                    c9:3f:73:cf:c6:4e:ca:6f:bf:47:11:41:01:59:74:
                    cd:ad:bc:5c:3e:e2:f6:94:99:7f:9e:94:ad:5b:4a:
                    7c:b9:b2:d9:3c:f2:42:53:c9:8c:a8:94:d8:70:33:
                    c4:7c:4f:3f:47:b2:3e:37:88:62:fe:7a:9c:60:ee:
                    16:fc:19:78:bd:17:e0:4f:b2:1a:50:f2:e8:57:87:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A7:26:32:18:9B:11:2D:1F:E2:C3:01:B5:EC:8D:48:19:B9:C2:33
            X509v3 Authority Key Identifier:
                keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:dc:e4:e5:87:05:be:44:3f:22:27:f7:b2:37:fb:be:a0:ab:
         6f:dc:be:1b:95:0f:c7:1a:8d:41:e4:bf:e6:dd:81:66:c3:ad:
         6b:06:b8:55:a2:27:5a:7f:f4:96:e2:9a:d8:ec:95:b3:23:8d:
         d9:a5:d9:aa:fa:fb:e6:80:48:de:4e:dd:e4:6e:1d:a2:2f:57:
         c6:71:31:c6:c5:c5:e9:b4:eb:cb:44:67:40:76:75:6d:97:d6:
         be:5d:b3:7b:f0:39:05:d3:95:e2:20:bd:b3:20:97:62:27:f0:
         2f:e6:49:f3:99:f1:94:f6:8f:5b:6e:eb:15:71:73:59:42:7b:
         f8:07:74:9f:8f:7a:5d:ca:42:e8:34:af:21:0e:18:8a:fd:b6:
         0c:74:ab:41:cb:27:cf:b9:0d:f2:a7:9b:fc:d3:8c:05:f6:9d:
         a7:a5:c1:16:d2:50:9f:2a:95:a5:75:0b:61:c4:04:60:65:a6:
         16:71:fc:a4:91:a0:1f:0a:20:31:06:1d:c9:97:63:d4:36:21:
         cc:15:b0:d7:b6:87:b1:56:fe:ed:82:34:7f:13:92:e6:b8:a0:
         46:1d:9b:93:71:a5:fd:b4:7b:52:66:53:55:32:ee:da:fb:82:
         a0:c1:4c:f9:13:0c:ae:ae:80:c0:45:17:13:03:13:46:54:de:
         9a:13:93:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhGNTAxMTAvBgNVBAUTKDFCRUEzODExNEU5RUU4MkU0MDY0RUIzQkY5MTMyODA4
NkMzNTdCNjEwHhcNMjYxMDExMDc0OTUwWhcNMjYxMDE4MDc0OTUwWjAYMRYwFAYD
VQQDEw02YWNiM2Y5Zi0zZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PrPJcIClohia1rFA3FosyGzGWiyS5khA+8haaW4MROGh9QU7TmQLZ6HKdtx
YSHA5R2I2ulw8mM32BEfn9L6DfzTB4aUL0bEHr1dqFzMC/RUYWGrenCvHFHt0PrG
pk8Xx61HSmKAnOr2zWJZwYOK6oGSY/vssMXM+GKy/4Nkol1gWzCB24zw2l3G4OFm
KUMg+pMmeXZeEa1rU5vMpV6SwL82Tmy7+05nyzF2q56bXmy761DJP3PPxk7Kb79H
EUEBWXTNrbxcPuL2lJl/npStW0p8ubLZPPJCU8mMqJTYcDPEfE8/R7I+N4hi/nqc
YO4W/Bl4vRfgT7IaUPLoV4ejkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEGnJjIY
mxEtH+LDAbXsjUgZucIzMB8GA1UdIwQYMBaAFBvqOBFOnuguQGTrO/kTKAhsNXth
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEY1MC8wMzNFQ0Q3MkM5
QjMxMUYwQUQ2M0ZDNzhDNEY5QUUwMi9HLW80RVU2ZTZDNUFaT3M3LVJNb0NHdzFl
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ctbzRFVTZlNkM1QVpPczctUk1vQ0d3MWUyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OEY1MC8wMzNFQ0Q3MkM5QjMxMUYwQUQ2M0ZDNzhDNEY5QUUwMi9HLW80RVU2ZTZD
NUFaT3M3LVJNb0NHdzFlMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArNzk5YcFvkQ/Iif3sjf7vqCrb9y+G5UPxxqNQeS/5t2BZsOtawa4VaInWn/0
luKa2OyVsyON2aXZqvr75oBI3k7d5G4doi9XxnExxsXF6bTry0RnQHZ1bZfWvl2z
e/A5BdOV4iC9syCXYifwL+ZJ85nxlPaPW27rFXFzWUJ7+Ad0n496XcpC6DSvIQ4Y
iv22DHSrQcsnz7kN8qeb/NOMBfadp6XBFtJQnyqVpXULYcQEYGWmFnH8pJGgHwog
MQYdyZdj1DYhzBWw17aHsVb+7YI0fxOS5rigRh2bk3Gl/bR7UmZTVTLu2vuCoMFM
+RMMrq6AwEUXEwMTRlTemhOTSw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:18:46 2026 by rpki-client