Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
File:                     m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json)
Hash identifier:          OMvNr4YU4w/OtSbegu0vUoodYwVGDYGzMXHzSdbU5m8=
Subject key identifier:   E3:5B:B5:8C:C0:BC:13:5F:90:18:56:00:21:43:12:1E:86:B3:91:68
Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB
Certificate issuer:       /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
Certificate serial:       09A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
Manifest number:          0998
Signing time:             Tue 18 Aug 2026 20:19:23 +0000
Manifest this update:     Tue 18 Aug 2026 20:19:23 +0000
Manifest next update:     Tue 25 Aug 2026 20:19:23 +0000
Files and hashes:         1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: D1TGqm4YpkoEhrldNRxJRjcDYkc97ItjWXl/Y5/4ItU=)
                          2: C6B310B077E711F0B31CEB36C4F9AE02.roa (hash: NwQGIFAATHh4qnUFk70n9aQ78O4/bONv+lkYJMLHi/I=)
                          3: 46106B5077E811F0B822833AC4F9AE02.roa (hash: hVi8R5MoEeImI8jjWziXAy2bRDHXtAtcy1qMeWpfzVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl
                          rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169DB2, serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
        Validity
            Not Before: Aug 18 20:19:23 2026 GMT
            Not After : Aug 25 20:19:23 2026 GMT
        Subject: CN=6a84be4b-12c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:6f:71:36:67:34:7b:9f:16:5e:e0:1a:01:
                    70:04:86:5e:11:5f:01:6b:f4:ec:92:ac:8e:84:aa:
                    56:ed:c9:43:c0:24:9a:07:b1:c0:ba:04:14:38:0e:
                    0a:91:a2:fa:cd:8f:7c:d4:b0:91:a5:15:82:0b:3a:
                    d8:b3:a8:2b:60:b0:0d:28:f8:fc:c2:ef:a5:41:41:
                    7e:77:41:d8:3c:57:6e:a5:82:9b:17:3c:1a:ef:96:
                    93:80:57:ed:08:6a:84:54:3e:ea:0d:31:2b:b2:6d:
                    d9:61:d5:63:ff:e0:fe:67:96:86:f6:f0:ef:ba:2c:
                    00:7a:4a:2a:28:42:75:fb:76:89:41:8d:2e:7c:2f:
                    d0:84:c0:62:80:3b:0a:65:1b:8c:7e:fa:cb:bf:77:
                    7c:18:8b:cf:a2:61:11:cf:f2:7b:b2:34:f2:88:43:
                    5e:20:c8:c6:ec:4a:3e:56:65:b8:52:cf:22:38:c0:
                    76:8d:b4:e5:b0:86:32:94:ac:95:79:da:32:71:58:
                    fe:78:97:aa:3e:48:a8:13:ac:8e:0e:43:0c:3a:12:
                    37:f2:1a:a8:8f:0b:ab:d8:87:13:1e:aa:a4:5c:10:
                    20:0a:46:cc:b3:93:91:5a:d9:c7:5c:f5:35:97:8a:
                    9f:b8:63:c1:42:07:d9:29:c2:a2:78:6f:94:ae:6a:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:B5:8C:C0:BC:13:5F:90:18:56:00:21:43:12:1E:86:B3:91:68
            X509v3 Authority Key Identifier:
                keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:90:b1:19:d5:ee:6e:cf:9b:8b:ca:38:de:79:de:3b:ab:90:
         dd:0d:05:d3:1f:62:3a:22:f2:9a:fe:ce:73:7b:34:f1:2b:a7:
         2d:05:6c:0f:e6:e6:24:ea:d3:e0:3e:5d:4f:c8:47:98:35:23:
         bf:72:4b:9c:28:9c:4e:be:4d:bb:a6:db:7a:c7:c5:22:97:91:
         5e:b1:1c:c2:85:4a:18:f6:28:2c:b5:9a:a2:22:22:4f:1b:ea:
         2d:fe:f6:5a:b9:ad:b7:6a:93:df:a1:25:a0:d3:69:17:8c:ae:
         16:72:8b:24:a1:64:f5:e9:5e:f5:5c:d0:11:05:bd:22:27:b2:
         04:f5:39:f0:eb:5d:37:f5:88:6c:26:5d:6b:95:f9:5c:e9:cb:
         08:79:ef:2e:a8:28:17:11:3c:04:b8:e9:4a:19:ef:aa:c6:6e:
         d9:c3:61:85:98:e9:e6:4f:11:cc:c0:4d:3b:c7:db:36:fe:47:
         c4:b0:f0:9d:bd:06:b7:a0:e0:dd:ad:c7:de:a6:ae:b0:a7:6c:
         6c:0e:4e:e1:f7:05:e0:f6:3e:bf:a7:d1:35:7d:d2:a4:9f:01:
         3b:b1:f9:c6:02:b2:81:ab:1a:d2:33:1c:9f:4f:f7:89:37:ae:
         6c:f4:a5:3b:89:82:3c:d2:32:a6:c5:78:a6:63:60:2d:de:44:
         54:91:5a:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlEQjIxMTAvBgNVBAUTKDlCODI1OUY3QjNDMURFREQ0NzE5QkMwQURDNTg3QjNE
Qjg5RTdCREIwHhcNMjYwODE4MjAxOTIzWhcNMjYwODI1MjAxOTIzWjAYMRYwFAYD
VQQDEw02YTg0YmU0Yi0xMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtqZvcTZnNHufFl7gGgFwBIZeEV8Ba/TskqyOhKpW7clDwCSaB7HAugQUOA4K
kaL6zY981LCRpRWCCzrYs6grYLANKPj8wu+lQUF+d0HYPFdupYKbFzwa75aTgFft
CGqEVD7qDTErsm3ZYdVj/+D+Z5aG9vDvuiwAekoqKEJ1+3aJQY0ufC/QhMBigDsK
ZRuMfvrLv3d8GIvPomERz/J7sjTyiENeIMjG7Eo+VmW4Us8iOMB2jbTlsIYylKyV
edoycVj+eJeqPkioE6yODkMMOhI38hqojwur2IcTHqqkXBAgCkbMs5ORWtnHXPU1
l4qfuGPBQgfZKcKieG+Urmp4MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONbtYzA
vBNfkBhWACFDEh6Gs5FoMB8GA1UdIwQYMBaAFJuCWfezwd7dRxm8CtxYez24nnvb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OURCMi9BOUNDNDlCNkI5
QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0MUhHYndLM0ZoN1BiaWVl
OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL200Slo5N1BCM3QxSEdid0szRmg3UGJpZWU5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OURCMi9BOUNDNDlCNkI5QkIxMUVBQkREMEZEODRDNEY5QUUwMi9tNEpaOTdQQjN0
MUhHYndLM0ZoN1BiaWVlOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfpCxGdXubs+bi8o43nneO6uQ3Q0F0x9iOiLymv7Oc3s08SunLQVsD+bmJOrT
4D5dT8hHmDUjv3JLnCicTr5Nu6bbesfFIpeRXrEcwoVKGPYoLLWaoiIiTxvqLf72
Wrmtt2qT36EloNNpF4yuFnKLJKFk9ele9VzQEQW9IieyBPU58OtdN/WIbCZda5X5
XOnLCHnvLqgoFxE8BLjpShnvqsZu2cNhhZjp5k8RzMBNO8fbNv5HxLDwnb0Gt6Dg
3a3H3qausKdsbA5O4fcF4PY+v6fRNX3SpJ8BO7H5xgKygasa0jMcn0/3iTeubPSl
O4mCPNIypsV4pmNgLd5EVJFazg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:51 2026 by rpki-client