Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft
File:                     5imE0s0CFCbG34LJV7TilIT_Q2I.mft (raw, json)
Hash identifier:          n0cFgPcmkuj02r2pX/hi5xGiPpOEniWjkx/XGvSEWq0=
Subject key identifier:   9E:3F:3E:7D:33:64:7E:94:2E:E2:62:EC:7C:CE:CB:42:E9:8E:14:25
Authority key identifier: E6:29:84:D2:CD:02:14:26:C6:DF:82:C9:57:B4:E2:94:84:FF:43:62
Certificate issuer:       /CN=A9173526/serialNumber=E62984D2CD021426C6DF82C957B4E29484FF4362
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft
Manifest number:          0A
Signing time:             Mon 31 Aug 2026 09:35:25 +0000
Manifest this update:     Mon 31 Aug 2026 09:35:25 +0000
Manifest next update:     Mon 07 Sep 2026 09:35:25 +0000
Files and hashes:         1: 5imE0s0CFCbG34LJV7TilIT_Q2I.crl (hash: 4fSyHWjpTfmum0y8ZTgT26N2dfq82yqIAD1PCcpVvxU=)
                          2: 9A230CB4A1C411F18B639EF37011F970.roa (hash: jN77xCqz4BuEwPpgFbg35RBWUcfVOZyD82B73N0I+TI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.crl
                          rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 09:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173526, serialNumber=E62984D2CD021426C6DF82C957B4E29484FF4362
        Validity
            Not Before: Aug 31 09:35:25 2026 GMT
            Not After : Sep  7 09:35:25 2026 GMT
        Subject: CN=6a954add-e9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:49:94:12:6a:a5:41:ea:bb:63:7f:c2:72:
                    cf:eb:35:02:cc:a0:5a:9b:8d:33:e9:12:6e:b0:bb:
                    11:ae:7e:c1:bc:61:82:47:88:9c:ce:b0:bc:dc:d4:
                    3a:e4:13:a7:f6:eb:b4:24:ac:75:83:f8:63:64:1b:
                    00:3c:73:ed:b4:8d:4d:99:d7:10:45:07:4e:1f:2c:
                    a6:3f:fe:28:dd:2b:72:76:67:e5:be:31:b3:4d:a4:
                    cb:eb:e0:23:c1:90:54:53:93:44:b5:47:fe:76:8b:
                    c2:a6:d7:a5:bb:31:56:58:68:ac:61:e0:f0:7e:89:
                    8f:ee:96:e5:0e:42:cb:66:db:13:af:40:7e:8d:e9:
                    4c:39:47:8f:97:0b:13:35:98:88:b1:04:2f:e5:73:
                    0d:7c:69:a9:ed:22:7d:05:9c:f7:b2:4b:9e:b4:e6:
                    35:90:e0:fd:26:d3:75:00:b1:7c:e3:06:cd:09:6f:
                    5f:e4:e0:8d:56:82:39:5b:be:2a:0f:da:ff:7f:d9:
                    71:45:cd:39:4a:f3:67:fc:c7:37:c0:ad:0b:a2:1f:
                    7c:7d:31:98:42:68:e9:41:5d:7d:50:33:f3:2c:0e:
                    57:e6:bb:d9:b0:df:02:80:30:04:f8:e6:f3:d9:3a:
                    e6:22:8a:71:81:0c:f6:4e:d2:e6:67:57:e3:6a:75:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3F:3E:7D:33:64:7E:94:2E:E2:62:EC:7C:CE:CB:42:E9:8E:14:25
            X509v3 Authority Key Identifier:
                keyid:E6:29:84:D2:CD:02:14:26:C6:DF:82:C9:57:B4:E2:94:84:FF:43:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5imE0s0CFCbG34LJV7TilIT_Q2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173526/70A022C49AAC11F1B63AA1684111F970/5imE0s0CFCbG34LJV7TilIT_Q2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:59:53:c9:da:25:23:34:7a:0f:82:b5:1a:3c:17:8e:35:9c:
         e1:50:55:bc:51:7e:fe:fd:87:39:4d:71:7b:ee:d4:31:58:f1:
         a7:d5:8a:98:5c:fd:1a:30:51:3a:35:94:98:9c:9c:ea:eb:49:
         72:53:3b:5a:e0:b0:77:f2:92:ec:7d:fd:e9:1d:3a:e6:f1:9b:
         93:77:b9:02:75:a9:67:66:3e:38:9f:d3:74:a8:7f:8a:64:05:
         f5:c6:d2:ef:b9:62:ba:5f:57:f9:82:6d:66:c5:19:88:9a:4b:
         a5:15:46:ac:0a:2e:f4:62:85:57:c1:18:8a:60:d2:ea:91:39:
         e0:06:b7:36:5f:d4:61:c3:7a:7e:85:80:30:4f:8e:c8:0d:1c:
         94:79:d4:12:05:b3:3c:41:48:2e:2c:c6:71:3e:3e:52:71:e8:
         c2:78:60:e0:c6:b3:08:9d:80:28:75:a2:1b:ee:d4:c1:73:02:
         46:37:69:53:4b:a1:cc:a6:e1:a6:5c:29:79:3a:ef:e2:d3:4a:
         a7:d8:4c:ab:97:b8:b7:d7:0e:32:18:e1:cd:de:ed:4d:70:bb:
         b7:2b:d0:f4:d1:6f:dc:43:b8:40:dc:b3:7e:78:66:43:82:32:
         4a:97:fd:ba:61:47:13:48:29:1a:d3:76:c6:fb:e7:03:9d:4d:
         aa:9b:fe:9c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MzUyNjExMC8GA1UEBRMoRTYyOTg0RDJDRDAyMTQyNkM2REY4MkM5NTdCNEUyOTQ4
NEZGNDM2MjAeFw0yNjA4MzEwOTM1MjVaFw0yNjA5MDcwOTM1MjVaMBgxFjAUBgNV
BAMTDTZhOTU0YWRkLWU5YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwSEmUEmqlQeq7Y3/Ccs/rNQLMoFqbjTPpEm6wuxGufsG8YYJHiJzOsLzc1Drk
E6f267QkrHWD+GNkGwA8c+20jU2Z1xBFB04fLKY//ijdK3J2Z+W+MbNNpMvr4CPB
kFRTk0S1R/52i8Km16W7MVZYaKxh4PB+iY/uluUOQstm2xOvQH6N6Uw5R4+XCxM1
mIixBC/lcw18aantIn0FnPeyS5605jWQ4P0m03UAsXzjBs0Jb1/k4I1WgjlbvioP
2v9/2XFFzTlK82f8xzfArQuiH3x9MZhCaOlBXX1QM/MsDlfmu9mw3wKAMAT45vPZ
OuYiinGBDPZO0uZnV+NqdRIzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnj8+fTNk
fpQu4mLsfM7LQumOFCUwHwYDVR0jBBgwFoAU5imE0s0CFCbG34LJV7TilIT/Q2Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczNTI2LzcwQTAyMkM0OUFB
QzExRjFCNjNBQTE2ODQxMTFGOTcwLzVpbUUwczBDRkNiRzM0TEpWN1RpbElUX1Ey
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNWltRTBzMENGQ2JHMzRMSlY3VGlsSVRfUTJJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz
NTI2LzcwQTAyMkM0OUFBQzExRjFCNjNBQTE2ODQxMTFGOTcwLzVpbUUwczBDRkNi
RzM0TEpWN1RpbElUX1EySS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBGWVPJ2iUjNHoPgrUaPBeONZzhUFW8UX7+/Yc5TXF77tQxWPGn1YqYXP0aMFE6
NZSYnJzq60lyUzta4LB38pLsff3pHTrm8ZuTd7kCdalnZj44n9N0qH+KZAX1xtLv
uWK6X1f5gm1mxRmImkulFUasCi70YoVXwRiKYNLqkTngBrc2X9Rhw3p+hYAwT47I
DRyUedQSBbM8QUguLMZxPj5ScejCeGDgxrMInYAodaIb7tTBcwJGN2lTS6HMpuGm
XCl5Ou/i00qn2Eyrl7i31w4yGOHN3u1NcLu3K9D00W/cQ7hA3LN+eGZDgjJKl/26
YUcTSCka03bG++cDnU2qm/6c
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:28:46 2026 by rpki-client