Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
File:                     4bzIEhAO1GAiFweJMk8cw6-_aq0.mft (raw, json)
Hash identifier:          oD7wtd4HloXlqlTRruhbSkgurf65y2c0gNcvlNQ03Vs=
Subject key identifier:   22:02:51:0E:21:66:1D:A7:FC:E0:3C:08:FF:5E:0C:7A:BC:D1:91:E3
Authority key identifier: E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD
Certificate issuer:       /CN=A916AAFF/serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
Manifest number:          01FC
Signing time:             Wed 09 Sep 2026 03:40:08 +0000
Manifest this update:     Wed 09 Sep 2026 03:40:08 +0000
Manifest next update:     Wed 16 Sep 2026 03:40:08 +0000
Files and hashes:         1: 4bzIEhAO1GAiFweJMk8cw6-_aq0.crl (hash: kC9QGGZwp8//NrKcAifiWmUGpOAF+u6l9x4aAC9zIfI=)
                          2: DB4BDEF8686911F1BDD5F198A147A888.roa (hash: q8Ek5+6nNdWONzD/Q83lO0AsQxKhnhCaZSsgyad3OSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl
                          rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 03:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AAFF, serialNumber=E1BCC812100ED46022170789324F1CC3AFBF6AAD
        Validity
            Not Before: Sep  9 03:40:08 2026 GMT
            Not After : Sep 16 03:40:08 2026 GMT
        Subject: CN=6aa0d518-882d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:07:26:c1:af:8f:e3:c0:e8:d6:90:b1:96:
                    33:c5:a4:18:fc:26:c6:44:33:f5:fb:a2:a0:45:6c:
                    56:84:96:51:78:61:e9:84:59:d8:53:be:68:25:d3:
                    91:0b:31:af:da:08:f2:d5:e7:b8:2c:99:9f:93:3d:
                    59:80:04:c0:72:ec:dc:00:00:5f:ff:42:6f:d0:07:
                    4c:6d:fa:dd:e4:ed:4c:ef:be:5f:e7:e9:04:8c:e4:
                    ad:15:2c:92:c9:76:aa:5a:00:65:cd:25:5c:8a:1d:
                    83:39:e4:9c:c2:9f:5f:f0:d9:1b:60:5a:b8:3b:05:
                    93:1f:3f:dc:6d:47:dd:86:6d:52:c4:a9:2c:02:f0:
                    a9:05:1f:45:b1:fb:6d:75:ad:aa:51:7d:96:c9:df:
                    28:30:82:88:47:6a:8a:18:32:7f:8e:81:89:00:00:
                    4c:bb:85:ac:9b:41:51:3d:21:99:2d:e3:3a:fa:e4:
                    1a:4c:d5:2a:a8:49:2d:1d:96:cf:1a:a3:22:1b:24:
                    2a:52:d6:c6:42:eb:c1:af:0b:79:50:c5:f1:e5:40:
                    ac:92:76:3d:32:f0:77:6c:8a:ab:5b:e8:fc:5f:4b:
                    70:db:c8:6b:47:1c:f3:7e:a6:66:e6:f7:9a:87:09:
                    02:ab:ea:fe:4a:95:82:13:a7:6d:20:fc:ca:45:a8:
                    ff:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:02:51:0E:21:66:1D:A7:FC:E0:3C:08:FF:5E:0C:7A:BC:D1:91:E3
            X509v3 Authority Key Identifier:
                keyid:E1:BC:C8:12:10:0E:D4:60:22:17:07:89:32:4F:1C:C3:AF:BF:6A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bzIEhAO1GAiFweJMk8cw6-_aq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AAFF/7BB8BA6CBB3A11EE87C66B0FC4F9AE02/4bzIEhAO1GAiFweJMk8cw6-_aq0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:52:f4:95:7a:f5:fd:0e:ab:25:83:6b:b3:b3:93:3a:37:26:
         0a:19:df:95:ad:c2:1b:0f:00:70:85:04:1a:3b:1c:93:43:4d:
         52:4a:d6:90:4d:a2:fe:62:6d:3f:27:f3:33:d1:7a:f2:4c:2e:
         55:2a:13:a2:cc:0f:95:78:ad:87:42:25:be:5a:eb:ea:ff:ac:
         2e:b2:18:b4:84:57:c0:da:78:03:61:88:bf:db:5f:4a:b3:02:
         3d:ce:ec:7a:af:76:a6:92:d4:1a:53:15:0d:f8:b5:81:0e:d6:
         9d:74:1b:83:d5:3b:4b:c8:8a:90:96:f1:f7:0b:30:50:70:26:
         b9:f3:22:51:09:a0:75:e2:e6:f8:11:e0:51:58:ec:9a:02:28:
         30:e4:ec:b4:e8:a8:ee:a7:9c:3b:30:9a:28:82:71:83:27:63:
         da:51:b6:42:a1:8a:b4:81:89:f8:6f:f0:47:51:0d:77:ee:92:
         d9:d3:a9:fc:40:90:61:3d:0c:8f:8c:6c:0a:a6:b2:52:4e:ca:
         05:e0:ab:c9:71:2a:fa:2c:85:ff:c9:92:09:40:30:54:3b:77:
         7f:0b:1f:05:42:60:24:1d:64:84:20:20:18:53:1d:36:26:fd:
         70:19:c0:7f:3c:84:e4:3b:ba:0a:a9:bb:68:b9:1b:a7:96:35:
         ff:0f:63:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFBRkYxMTAvBgNVBAUTKEUxQkNDODEyMTAwRUQ0NjAyMjE3MDc4OTMyNEYxQ0Mz
QUZCRjZBQUQwHhcNMjYwOTA5MDM0MDA4WhcNMjYwOTE2MDM0MDA4WjAYMRYwFAYD
VQQDEw02YWEwZDUxOC04ODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnjMHJsGvj+PA6NaQsZYzxaQY/CbGRDP1+6KgRWxWhJZReGHphFnYU75oJdOR
CzGv2gjy1ee4LJmfkz1ZgATAcuzcAABf/0Jv0AdMbfrd5O1M775f5+kEjOStFSyS
yXaqWgBlzSVcih2DOeScwp9f8NkbYFq4OwWTHz/cbUfdhm1SxKksAvCpBR9Fsftt
da2qUX2Wyd8oMIKIR2qKGDJ/joGJAABMu4Wsm0FRPSGZLeM6+uQaTNUqqEktHZbP
GqMiGyQqUtbGQuvBrwt5UMXx5UCsknY9MvB3bIqrW+j8X0tw28hrRxzzfqZm5vea
hwkCq+r+SpWCE6dtIPzKRaj/CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCICUQ4h
Zh2n/OA8CP9eDHq80ZHjMB8GA1UdIwQYMBaAFOG8yBIQDtRgIhcHiTJPHMOvv2qt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUFGRi83QkI4QkE2Q0JC
M0ExMUVFODdDNjZCMEZDNEY5QUUwMi80YnpJRWhBTzFHQWlGd2VKTWs4Y3c2LV9h
cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRieklFaEFPMUdBaUZ3ZUpNazhjdzYtX2FxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUFGRi83QkI4QkE2Q0JCM0ExMUVFODdDNjZCMEZDNEY5QUUwMi80YnpJRWhBTzFH
QWlGd2VKTWs4Y3c2LV9hcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAT1L0lXr1/Q6rJYNrs7OTOjcmChnfla3CGw8AcIUEGjsck0NNUkrWkE2i/mJt
PyfzM9F68kwuVSoToswPlXith0Ilvlrr6v+sLrIYtIRXwNp4A2GIv9tfSrMCPc7s
eq92ppLUGlMVDfi1gQ7WnXQbg9U7S8iKkJbx9wswUHAmufMiUQmgdeLm+BHgUVjs
mgIoMOTstOio7qecOzCaKIJxgydj2lG2QqGKtIGJ+G/wR1ENd+6S2dOp/ECQYT0M
j4xsCqayUk7KBeCryXEq+iyF/8mSCUAwVDt3fwsfBUJgJB1khCAgGFMdNib9cBnA
fzyE5Du6Cqm7aLkbp5Y1/w9jsQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:07:47 2026 by rpki-client