Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
File:                     sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json)
Hash identifier:          NxOX9KDX7HrI9MrTInoGkdaO+2dYFLAhHsLrkTt2rho=
Subject key identifier:   DA:F9:58:35:31:CF:31:E5:BE:B7:77:F8:69:55:31:78:CE:C6:CD:03
Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F
Certificate issuer:       /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
Certificate serial:       1429
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
Manifest number:          141C
Signing time:             Sun 04 Oct 2026 16:56:01 +0000
Manifest this update:     Sun 04 Oct 2026 16:56:00 +0000
Manifest next update:     Sun 11 Oct 2026 16:56:00 +0000
Files and hashes:         1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: 5xHwXjOrbf9QiEy8PFRfx+PAfvp+kv9BKGhCScGkkDc=)
                          2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: DL6GA/K6cpxzI2cqMbQjFszw1dEV15dZjZ9FhFB5IeI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl
                          rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5161 (0x1429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F
        Validity
            Not Before: Oct  4 16:56:00 2026 GMT
            Not After : Oct 11 16:56:00 2026 GMT
        Subject: CN=6ac28521-b465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:e5:8a:25:e8:82:43:1a:3a:97:c0:be:e4:
                    67:47:3e:b0:ed:2d:bd:d9:50:ec:46:35:19:9e:e5:
                    22:1e:d3:7f:4b:a3:69:0a:2c:73:e3:6c:ce:24:43:
                    bb:ea:4c:05:35:f8:ff:fe:19:b1:f8:da:54:2a:cb:
                    b1:46:a5:a4:d1:7a:5a:e7:a0:00:e6:78:07:a7:b4:
                    61:ac:51:2a:98:60:e0:1d:00:d7:f2:03:6b:27:23:
                    6e:e4:81:02:7e:33:fe:52:44:8f:7c:c8:6e:27:3e:
                    d5:55:9e:d0:7f:63:83:07:07:59:e7:20:18:f3:25:
                    77:c9:af:7e:05:00:1e:4b:49:f0:24:69:ef:30:df:
                    e6:0b:18:ec:85:ed:e6:dc:cc:ab:7d:0b:68:c9:79:
                    27:73:14:0a:1d:c6:a9:e3:cd:3a:ba:17:1a:f6:de:
                    95:83:e3:f5:7a:b4:75:13:88:72:17:ef:f2:ff:96:
                    9f:29:b3:54:9a:89:7f:b1:82:13:b5:35:75:b3:7c:
                    2a:39:44:00:28:94:98:bd:64:38:1c:73:60:39:4c:
                    97:6e:53:72:76:a7:ec:83:e4:dc:cd:09:30:04:86:
                    29:6e:bf:83:82:6c:73:78:db:cb:d8:80:52:f0:55:
                    cc:4f:25:77:1f:04:b5:37:fc:33:40:60:38:1e:f3:
                    da:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F9:58:35:31:CF:31:E5:BE:B7:77:F8:69:55:31:78:CE:C6:CD:03
            X509v3 Authority Key Identifier:
                keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c2:23:44:80:f1:3d:a9:12:3d:7d:18:b7:a3:06:e8:78:bc:
         ba:69:2d:98:83:d7:c6:17:a5:40:6b:d7:22:c3:81:63:cd:a5:
         f7:5f:be:2b:e7:d9:e3:98:89:f6:a9:82:32:6d:d9:1e:0e:86:
         c8:db:1d:a9:47:cb:94:f6:dc:54:81:ef:cc:9a:e5:1c:da:bb:
         6e:28:1d:c7:aa:76:f4:ab:66:c6:6e:8a:03:05:dc:16:81:04:
         58:f4:6b:80:17:8e:e5:44:eb:2f:04:09:12:19:02:c0:cf:1b:
         91:6f:23:31:59:3b:18:d3:ea:a5:b6:d6:a3:ad:ce:57:66:de:
         70:43:5d:78:fa:39:19:58:45:1a:40:38:3e:34:64:e0:9b:66:
         5e:60:5f:82:52:5d:eb:13:07:63:28:08:ef:48:91:b7:4b:f4:
         ec:16:1c:5a:64:57:56:54:0f:c6:7c:c8:ce:2d:e4:da:21:06:
         98:ae:74:82:9b:11:27:e8:68:77:94:31:b9:fe:33:a2:1f:0e:
         0e:41:18:cf:ed:93:91:68:f8:ad:f4:a1:ca:46:8f:94:b1:85:
         ec:de:09:3a:f0:34:76:42:1b:f1:a3:2e:ff:32:d4:52:30:51:
         be:65:79:ec:d7:b4:19:de:56:a0:a8:f6:e4:ce:55:b3:d1:dc:
         bd:a1:f1:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3
OUE4REY2NUYwHhcNMjYxMDA0MTY1NjAwWhcNMjYxMDExMTY1NjAwWjAYMRYwFAYD
VQQDEw02YWMyODUyMS1iNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwD3liiXogkMaOpfAvuRnRz6w7S292VDsRjUZnuUiHtN/S6NpCixz42zOJEO7
6kwFNfj//hmx+NpUKsuxRqWk0Xpa56AA5ngHp7RhrFEqmGDgHQDX8gNrJyNu5IEC
fjP+UkSPfMhuJz7VVZ7Qf2ODBwdZ5yAY8yV3ya9+BQAeS0nwJGnvMN/mCxjshe3m
3MyrfQtoyXkncxQKHcap4806uhca9t6Vg+P1erR1E4hyF+/y/5afKbNUmol/sYIT
tTV1s3wqOUQAKJSYvWQ4HHNgOUyXblNydqfsg+TczQkwBIYpbr+DgmxzeNvL2IBS
8FXMTyV3HwS1N/wzQGA4HvPaaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNr5WDUx
zzHlvrd3+GlVMXjOxs0DMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE
MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45
bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2
ZU1ibDVyUVBqY0I1cU45bDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxsIjRIDxPakSPX0Yt6MG6Hi8umktmIPXxhelQGvXIsOBY82l91++K+fZ45iJ
9qmCMm3ZHg6GyNsdqUfLlPbcVIHvzJrlHNq7bigdx6p29Ktmxm6KAwXcFoEEWPRr
gBeO5UTrLwQJEhkCwM8bkW8jMVk7GNPqpbbWo63OV2becENdePo5GVhFGkA4PjRk
4JtmXmBfglJd6xMHYygI70iRt0v07BYcWmRXVlQPxnzIzi3k2iEGmK50gpsRJ+ho
d5Qxuf4zoh8ODkEYz+2TkWj4rfShykaPlLGF7N4JOvA0dkIb8aMu/zLUUjBRvmV5
7Ne0Gd5WoKj25M5Vs9HcvaHxdQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:12:21 2026 by rpki-client