Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
File:                     nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json)
Hash identifier:          OxjKvMMfZXSab6072u/+nTIK56mbbOBjSggeMYt/pSc=
Subject key identifier:   C9:05:7E:BF:E4:16:F9:ED:03:2B:1D:86:C6:74:7B:26:E2:1E:4A:4D
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Certificate issuer:       /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial:       0937
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
Manifest number:          08F9
Signing time:             Thu 10 Sep 2026 20:29:27 +0000
Manifest this update:     Thu 10 Sep 2026 20:29:26 +0000
Manifest next update:     Thu 17 Sep 2026 20:29:26 +0000
Files and hashes:         1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: zinP9hWL7+ygodqUgp2P9v0NxCJ7DbtTIrtantPxYvM=)
                          2: 30A238FA7C0311F192D3088B8FA30FBC.roa (hash: X1FnYer6ian8Ac0sFfx3IyMLAtIA4fKJbnOQ0obiOyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
                          rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2359 (0x937)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
        Validity
            Not Before: Sep 10 20:29:26 2026 GMT
            Not After : Sep 17 20:29:26 2026 GMT
        Subject: CN=6aa31327-18c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:37:f3:94:94:91:a5:60:e9:b3:e9:ee:b8:
                    1e:63:a0:8f:76:f8:e8:72:0d:a9:43:c6:02:41:f8:
                    c5:7e:ee:3d:51:ca:ce:97:33:29:9e:19:df:3f:ef:
                    b4:ee:65:ec:bb:64:72:0b:2c:0f:0a:64:c7:6c:c0:
                    d2:15:5e:28:98:bb:19:76:33:14:66:c7:8e:8e:71:
                    9c:18:45:9d:af:d1:cf:b4:c4:5d:0b:70:49:e1:45:
                    da:e3:05:a2:0d:18:95:77:9d:6f:7d:d7:9c:21:a0:
                    a3:fb:f2:73:d4:38:cf:69:05:7b:8b:cf:54:bb:7c:
                    26:01:e2:8d:34:3b:c2:3a:0b:dc:23:99:76:2b:ed:
                    88:ca:83:3f:7e:4f:90:d7:a8:83:0c:8b:72:43:75:
                    8c:75:d4:5f:22:09:7b:9d:1d:ee:58:e1:29:f1:77:
                    ce:c9:0f:2e:37:dc:ad:2a:f1:b3:f7:45:1a:53:d2:
                    d3:9f:09:3e:9d:79:5a:3f:b0:12:1d:6b:b5:71:a4:
                    ee:8e:d4:cc:99:c0:a6:eb:a3:f3:c3:51:fa:c1:65:
                    06:17:05:93:f7:6c:bb:ad:59:ac:cd:09:d8:43:21:
                    f6:f9:83:63:e0:9c:74:51:56:14:1f:41:d3:59:fd:
                    f1:ef:be:0d:2c:70:db:f3:26:d5:b4:3b:9a:01:ea:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:05:7E:BF:E4:16:F9:ED:03:2B:1D:86:C6:74:7B:26:E2:1E:4A:4D
            X509v3 Authority Key Identifier:
                keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:25:e2:16:1b:10:21:73:35:85:f8:f3:02:d2:75:96:1a:c6:
         20:f2:ea:08:06:d8:44:64:d0:53:e0:4c:45:54:c1:d5:01:60:
         54:1d:a5:d2:29:15:40:53:28:d1:b7:95:ec:96:93:a2:05:bb:
         64:76:7a:5c:54:1a:83:d4:2b:5e:17:1c:02:04:8c:59:a8:3f:
         2a:3c:aa:5d:b5:7a:f0:15:90:ca:73:a2:c5:6b:d3:e4:75:82:
         07:07:5b:6a:96:4a:e9:b5:c6:32:73:27:ff:6d:cc:1e:43:46:
         fb:6e:c0:50:b6:4e:76:45:29:d9:19:cf:a8:29:6a:f9:e5:8a:
         15:ed:67:b0:95:fb:5e:2e:84:b2:f0:37:1d:7b:ec:9f:75:5a:
         0f:ee:53:da:12:14:51:b9:1e:12:7e:f0:14:ae:14:87:b9:33:
         9e:cc:8e:07:74:4e:92:88:b4:09:8e:34:5c:d1:68:e9:a5:79:
         fd:6b:90:c3:c6:03:79:a6:d9:c5:9b:6c:bd:86:3f:59:04:21:
         19:61:b3:85:d5:7b:28:94:d5:7f:20:79:ba:10:95:0f:d2:8f:
         de:ca:87:f5:31:35:9d:33:58:4f:73:82:6a:c7:4d:16:d4:a3:
         6e:28:f6:7e:22:e2:f5:19:62:dd:2f:ee:54:31:b5:04:c8:72:
         28:20:60:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3
MzVGNEU0NzAwHhcNMjYwOTEwMjAyOTI2WhcNMjYwOTE3MjAyOTI2WjAYMRYwFAYD
VQQDEw02YWEzMTMyNy0xOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdk385SUkaVg6bPp7rgeY6CPdvjocg2pQ8YCQfjFfu49UcrOlzMpnhnfP++0
7mXsu2RyCywPCmTHbMDSFV4omLsZdjMUZseOjnGcGEWdr9HPtMRdC3BJ4UXa4wWi
DRiVd51vfdecIaCj+/Jz1DjPaQV7i89Uu3wmAeKNNDvCOgvcI5l2K+2IyoM/fk+Q
16iDDItyQ3WMddRfIgl7nR3uWOEp8XfOyQ8uN9ytKvGz90UaU9LTnwk+nXlaP7AS
HWu1caTujtTMmcCm66Pzw1H6wWUGFwWT92y7rVmszQnYQyH2+YNj4Jx0UVYUH0HT
Wf3x774NLHDb8ybVtDuaAeqnrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkFfr/k
FvntAysdhsZ0eybiHkpNMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB
MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1
SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG
ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAACXiFhsQIXM1hfjzAtJ1lhrGIPLqCAbYRGTQU+BMRVTB1QFgVB2l0ikVQFMo
0beV7JaTogW7ZHZ6XFQag9QrXhccAgSMWag/KjyqXbV68BWQynOixWvT5HWCBwdb
apZK6bXGMnMn/23MHkNG+27AULZOdkUp2RnPqClq+eWKFe1nsJX7Xi6EsvA3HXvs
n3VaD+5T2hIUUbkeEn7wFK4Uh7kznsyOB3ROkoi0CY40XNFo6aV5/WuQw8YDeabZ
xZtsvYY/WQQhGWGzhdV7KJTVfyB5uhCVD9KP3sqH9TE1nTNYT3OCasdNFtSjbij2
fiLi9Rli3S/uVDG1BMhyKCBggQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:05:52 2026 by rpki-client