Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File:                     aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier:          +N4wGpduyMNmu9/cZsmwrAxV8tnxsNvcEOsgJME9SMo=
Subject key identifier:   DA:E3:98:85:F9:D5:FC:08:A0:89:54:2C:65:78:60:C8:2F:66:49:DA
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer:       /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial:       02D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number:          02C1
Signing time:             Fri 11 Sep 2026 01:26:10 +0000
Manifest this update:     Fri 11 Sep 2026 01:26:10 +0000
Manifest next update:     Fri 18 Sep 2026 01:26:10 +0000
Files and hashes:         1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: Rd4McjUqa+MA4HNDiGjFai42t8ErYDlaTu01HDd9r8c=)
                          2: 95873DC401B511F1AABC9C3D6E6F56BC.roa (hash: JMpkHDzDVK/usfbHjSL6Kqnw95uZaR659+4yGn0oEJc=)
                          3: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: ALR7tiUN9OO7R8fFOreHtqwUwWbttRypaQgzgT65w2M=)
                          4: 0A03942001B311F1BDE34C726D6F56BC.roa (hash: 4okKosxS6IEGC1+htR6SIJMkssQ9kfQRZTp5TOGcyNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
                          rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
        Validity
            Not Before: Sep 11 01:26:10 2026 GMT
            Not After : Sep 18 01:26:10 2026 GMT
        Subject: CN=6aa358b2-19c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:42:67:7b:3d:05:00:a1:41:dd:51:9a:9f:
                    54:4c:8d:1d:0c:ea:24:8d:55:b4:f9:f6:df:ed:33:
                    5e:f6:43:6c:42:2d:00:15:7d:27:56:d0:61:16:92:
                    d6:08:5c:77:e8:44:45:e4:f0:11:34:84:f4:b4:74:
                    27:95:33:76:16:45:6e:ec:63:b5:6a:66:cc:d2:b7:
                    b2:8c:d5:c3:d4:51:26:46:1b:cb:98:91:f6:08:d1:
                    75:3a:61:53:7f:7a:90:b3:01:2d:9d:07:80:e2:cc:
                    13:11:03:da:30:f2:53:1d:47:6e:20:dd:7b:00:03:
                    02:5b:02:c1:96:8f:09:a6:ed:81:ec:4d:9a:73:29:
                    70:3f:ae:4f:06:94:28:e8:25:25:3b:15:90:da:f7:
                    75:8a:d6:76:99:b5:c7:1c:de:bc:fc:be:b9:99:aa:
                    91:bd:34:01:9d:e0:20:d3:76:55:16:53:71:f9:13:
                    e8:1b:ee:38:1e:06:be:93:77:94:21:ac:3c:ad:3c:
                    4c:c4:ea:ab:ab:49:86:a9:87:38:74:34:a2:99:16:
                    e1:6b:83:e9:32:7e:81:4d:7c:67:ae:91:40:82:6b:
                    8a:09:6d:54:18:76:9f:f8:d9:bd:b1:ac:be:2f:00:
                    05:8d:c9:6a:6d:41:5e:cd:d3:6b:3b:8b:77:4c:4d:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E3:98:85:F9:D5:FC:08:A0:89:54:2C:65:78:60:C8:2F:66:49:DA
            X509v3 Authority Key Identifier:
                keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5c:dc:b8:b9:f5:b1:c7:6d:68:c6:ac:45:01:b1:1e:1f:38:
         2d:0f:91:fc:87:06:16:a5:82:91:39:c4:09:3a:ae:14:1e:ba:
         7e:8f:c3:62:14:74:cb:21:b7:26:b5:a8:11:3b:dc:2e:24:01:
         22:83:53:fd:cc:ad:74:1a:e6:81:7b:e3:71:1b:a4:51:33:68:
         9e:d8:3b:5b:ff:eb:59:28:ac:c4:37:ea:21:ab:6d:36:bb:91:
         26:c8:f9:88:69:a1:96:8c:67:d3:d5:42:8c:15:5e:fb:07:db:
         5c:5c:0a:28:df:8a:1b:ec:1e:f4:0c:bd:57:81:c6:0f:63:47:
         f5:b4:83:92:52:4a:15:b3:50:c0:e0:70:13:9d:7e:ca:05:2c:
         dc:33:d6:51:b7:1c:f2:b6:3f:32:7e:1d:71:86:6e:24:81:02:
         66:ba:e4:ee:71:6c:d3:71:ef:2a:e9:5a:44:57:3b:51:d4:cc:
         b4:0c:c3:30:b9:10:0b:9f:ec:ee:d4:48:19:f4:02:91:64:a4:
         7d:bb:9d:d0:31:70:e1:16:5e:6a:e7:7d:6c:50:0a:f4:3d:54:
         10:d0:16:32:45:12:aa:b7:ce:f6:64:1c:66:61:f1:36:2b:f9:
         4b:7a:5e:1d:d1:de:dd:93:00:5f:92:42:f4:1b:f3:75:48:49:
         c2:d0:83:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFRDAxMTAvBgNVBAUTKDY5MkVCRDNEMDNGMjU4NzQ2RTY4NDNCNjEyOEREMjA5
QzUxMjIyRTYwHhcNMjYwOTExMDEyNjEwWhcNMjYwOTE4MDEyNjEwWjAYMRYwFAYD
VQQDEw02YWEzNThiMi0xOWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA08tCZ3s9BQChQd1Rmp9UTI0dDOokjVW0+fbf7TNe9kNsQi0AFX0nVtBhFpLW
CFx36ERF5PARNIT0tHQnlTN2FkVu7GO1ambM0reyjNXD1FEmRhvLmJH2CNF1OmFT
f3qQswEtnQeA4swTEQPaMPJTHUduIN17AAMCWwLBlo8Jpu2B7E2acylwP65PBpQo
6CUlOxWQ2vd1itZ2mbXHHN68/L65maqRvTQBneAg03ZVFlNx+RPoG+44Hga+k3eU
Iaw8rTxMxOqrq0mGqYc4dDSimRbha4PpMn6BTXxnrpFAgmuKCW1UGHaf+Nm9say+
LwAFjclqbUFezdNrO4t3TE1nAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrjmIX5
1fwIoIlULGV4YMgvZknaMB8GA1UdIwQYMBaAFGkuvT0D8lh0bmhDthKN0gnFEiLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVEMC9EREI1ODlBMDgw
MTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdIUnVhRU8yRW8zU0NjVVNJ
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FTNjlQUVB5V0hSdWFFTzJFbzNTQ2NVU0l1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkVEMC9EREI1ODlBMDgwMTkxMUVEQkJCRTMwNkVDNEY5QUUwMi9hUzY5UFFQeVdI
UnVhRU8yRW8zU0NjVVNJdVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgVzcuLn1scdtaMasRQGxHh84LQ+R/IcGFqWCkTnECTquFB66fo/DYhR0yyG3
JrWoETvcLiQBIoNT/cytdBrmgXvjcRukUTNontg7W//rWSisxDfqIattNruRJsj5
iGmhloxn09VCjBVe+wfbXFwKKN+KG+we9Ay9V4HGD2NH9bSDklJKFbNQwOBwE51+
ygUs3DPWUbcc8rY/Mn4dcYZuJIECZrrk7nFs03HvKulaRFc7UdTMtAzDMLkQC5/s
7tRIGfQCkWSkfbud0DFw4RZeaud9bFAK9D1UENAWMkUSqrfO9mQcZmHxNiv5S3pe
HdHe3ZMAX5JC9BvzdUhJwtCDXA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 12:07:43 2026 by rpki-client