Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
File:                     8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json)
Hash identifier:          NA0XqYfvGR45+LslPn6XqcH1cmU/oEXebyuZOW/X1Lo=
Subject key identifier:   C2:14:D8:78:8F:F8:51:5C:47:0D:F6:2B:B1:8E:88:28:93:A6:43:F3
Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
Certificate issuer:       /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Certificate serial:       0DA6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
Manifest number:          0D9C
Signing time:             Thu 10 Sep 2026 17:53:28 +0000
Manifest this update:     Thu 10 Sep 2026 17:53:28 +0000
Manifest next update:     Thu 17 Sep 2026 17:53:28 +0000
Files and hashes:         1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: hjf+cfLisxRUK21lOrbuEHqG4/+qELxbnWAtnsQcq+0=)
                          2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: UDW+dsOCznAjSoGbOEEbQ9JmE9TBtIe+eSGscHflZ+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl
                          rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3494 (0xda6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379
        Validity
            Not Before: Sep 10 17:53:28 2026 GMT
            Not After : Sep 17 17:53:28 2026 GMT
        Subject: CN=6aa2ee98-85b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3c:e8:2a:b5:68:47:9f:22:a9:2c:13:c8:02:
                    b6:6b:77:9e:04:26:f2:8e:e8:83:cc:42:5b:8b:d5:
                    a8:36:46:ca:ea:e0:ac:2b:43:ab:e0:08:d0:f8:3a:
                    a2:44:62:00:d2:88:ec:63:2f:46:54:4e:3b:5e:8e:
                    7e:80:9c:22:6a:1f:23:d6:02:7e:27:0f:d9:c8:8a:
                    ef:da:9b:0d:35:9a:2b:73:c5:ab:4d:ce:22:fb:1d:
                    c5:47:ae:eb:57:9c:97:c2:65:b8:2c:c7:da:ed:88:
                    a3:03:be:33:a4:05:6b:b6:2c:73:e8:9a:30:62:e9:
                    54:5f:b0:95:37:a9:03:3a:3f:61:40:9e:89:3a:08:
                    c7:15:df:8f:21:9c:37:fd:c7:07:6a:b3:38:4f:7c:
                    51:08:11:cc:7f:e2:97:02:64:ec:f4:c7:0b:38:67:
                    f6:69:6a:bb:bf:34:cc:c0:06:93:18:59:a7:08:37:
                    e4:3a:41:59:eb:b3:49:48:b7:c3:e9:d1:9b:d9:23:
                    b8:ad:65:33:4e:79:76:99:e4:d5:42:ef:d9:9a:31:
                    30:cd:7e:56:75:7a:36:36:30:83:15:aa:94:4e:a7:
                    80:48:d2:e5:56:c9:36:06:58:15:af:21:17:61:23:
                    9f:b0:31:ae:b8:ee:9c:7d:e3:37:a5:1c:1b:46:90:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:14:D8:78:8F:F8:51:5C:47:0D:F6:2B:B1:8E:88:28:93:A6:43:F3
            X509v3 Authority Key Identifier:
                keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:01:61:a3:12:c7:0a:ab:b1:cc:0e:19:0c:78:ad:1b:5c:6a:
         73:d7:37:bd:50:4e:ad:28:41:d6:86:49:00:00:29:cf:75:63:
         8a:31:d2:d2:1c:0a:9e:c2:1f:1d:8a:1c:24:a7:a5:a0:40:16:
         2e:de:4c:b6:a7:1e:07:55:ab:1a:4f:31:41:80:05:cf:e7:da:
         d4:36:3e:9a:f3:cb:5b:40:82:8b:bc:8e:19:9f:31:99:21:27:
         35:7b:f1:06:be:42:98:5f:75:70:20:62:58:a9:06:94:84:2a:
         44:28:fc:8e:0b:85:ce:29:d8:a2:8d:26:2f:8b:ee:30:2a:78:
         e2:55:26:1f:6d:32:ec:1d:79:a0:b7:7e:97:8b:d2:9e:35:d4:
         c0:ea:72:0e:09:91:6f:09:e5:2d:d1:a8:f5:7a:98:00:50:bc:
         19:f8:ad:d9:2d:6f:08:04:33:3c:9b:28:f5:29:51:55:78:51:
         d0:72:5b:2a:60:db:24:d6:32:2b:9e:68:6a:fd:38:33:63:fc:
         d3:1c:b1:39:78:07:4f:1d:9a:86:84:17:f8:16:1b:c7:ed:f9:
         cf:a6:8f:c8:e5:7a:e5:f4:e6:b3:42:0a:e3:54:64:89:ee:40:
         45:86:e0:e9:6e:8d:b2:4a:66:a9:37:8e:46:e7:91:aa:0e:be:
         a4:b2:66:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD
Mjk1QzczNzkwHhcNMjYwOTEwMTc1MzI4WhcNMjYwOTE3MTc1MzI4WjAYMRYwFAYD
VQQDEw02YWEyZWU5OC04NWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5zzoKrVoR58iqSwTyAK2a3eeBCbyjuiDzEJbi9WoNkbK6uCsK0Or4AjQ+Dqi
RGIA0ojsYy9GVE47Xo5+gJwiah8j1gJ+Jw/ZyIrv2psNNZorc8WrTc4i+x3FR67r
V5yXwmW4LMfa7YijA74zpAVrtixz6JowYulUX7CVN6kDOj9hQJ6JOgjHFd+PIZw3
/ccHarM4T3xRCBHMf+KXAmTs9McLOGf2aWq7vzTMwAaTGFmnCDfkOkFZ67NJSLfD
6dGb2SO4rWUzTnl2meTVQu/ZmjEwzX5WdXo2NjCDFaqUTqeASNLlVsk2BlgVryEX
YSOfsDGuuO6cfeM3pRwbRpAEywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIU2HiP
+FFcRw32K7GOiCiTpkPzMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx
OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI
ajJBcmN4SUFVVkhDbGNjM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgwFhoxLHCquxzA4ZDHitG1xqc9c3vVBOrShB1oZJAAApz3VjijHS0hwKnsIf
HYocJKeloEAWLt5MtqceB1WrGk8xQYAFz+fa1DY+mvPLW0CCi7yOGZ8xmSEnNXvx
Br5CmF91cCBiWKkGlIQqRCj8jguFzinYoo0mL4vuMCp44lUmH20y7B15oLd+l4vS
njXUwOpyDgmRbwnlLdGo9XqYAFC8Gfit2S1vCAQzPJso9SlRVXhR0HJbKmDbJNYy
K55oav04M2P80xyxOXgHTx2ahoQX+BYbx+35z6aPyOV65fTms0IK41Rkie5ARYbg
6W6NskpmqTeORueRqg6+pLJmOQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:07:17 2026 by rpki-client