Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
File:                     -mtidXvK1FesoHClHEgItLfJM3A.mft (raw, json)
Hash identifier:          ZB19qqHVVhm9UpVnBEmqbRqVb6WX/jttLDSnqMhALaE=
Subject key identifier:   12:9C:18:32:63:5A:7E:94:12:5D:28:7A:DE:1D:A0:04:6E:1D:29:06
Authority key identifier: FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70
Certificate issuer:       /CN=A917E322/serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
Manifest number:          71
Signing time:             Mon 05 Oct 2026 08:21:25 +0000
Manifest this update:     Mon 05 Oct 2026 08:21:24 +0000
Manifest next update:     Mon 12 Oct 2026 08:21:24 +0000
Files and hashes:         1: -mtidXvK1FesoHClHEgItLfJM3A.crl (hash: VZiL+abW2iRBzXX2aelGjuJ/R1a3n6RSnrpMIrQhKoQ=)
                          2: 824F8AD0187711F1AF6111A7363D8C67.roa (hash: OrnpOdJKnCgLpJvnuyIAECeq3kEpUYn5ubA/jjG/jvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl
                          rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E322, serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370
        Validity
            Not Before: Oct  5 08:21:24 2026 GMT
            Not After : Oct 12 08:21:24 2026 GMT
        Subject: CN=6ac35e04-1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:4d:83:ab:94:c3:d0:da:a3:e0:7c:8f:3d:
                    f4:ed:ec:d7:e5:d2:e4:b2:77:43:38:0f:8e:a9:2c:
                    31:f3:90:d3:f6:5c:97:aa:57:94:59:a6:39:7a:37:
                    d4:b3:dc:51:0a:e6:6b:fd:a1:d9:71:c2:67:ee:8b:
                    58:14:a1:67:c6:bd:ed:23:54:91:86:b1:90:a9:30:
                    43:4c:ee:e9:7f:d9:ff:4a:58:4e:ea:9a:75:de:96:
                    c3:11:31:23:ad:9d:b2:82:2f:3a:42:e3:2f:e0:96:
                    c0:e7:c0:30:60:2c:ee:87:38:b1:73:dd:3f:50:a4:
                    7a:95:c2:bb:88:98:83:e0:21:fb:0e:1d:bd:aa:89:
                    7c:60:b4:f0:9d:58:a6:3d:7d:7d:44:02:39:b1:24:
                    37:86:0c:be:4c:fe:ef:b3:7c:72:96:45:48:76:16:
                    60:03:03:92:c4:71:89:fd:5d:cc:60:e3:90:a1:c6:
                    8b:e6:7e:ad:49:9a:f7:fd:9d:40:9a:ea:fd:47:94:
                    9a:ef:f5:b1:62:2b:0d:67:40:34:ee:5f:27:e5:00:
                    6b:03:f9:e2:8d:89:f2:0d:90:22:8d:b4:da:95:50:
                    da:82:eb:85:ad:a3:ea:5b:30:ae:96:72:b3:e8:71:
                    b3:0f:af:df:cf:82:e6:f4:1f:33:28:d9:35:87:77:
                    1b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9C:18:32:63:5A:7E:94:12:5D:28:7A:DE:1D:A0:04:6E:1D:29:06
            X509v3 Authority Key Identifier:
                keyid:FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:80:52:72:47:1d:5f:3b:f0:48:c4:dc:aa:8e:4a:5a:ed:bc:
         8f:de:e0:5f:6a:c8:2f:24:71:45:e8:41:e8:b8:39:2e:56:ed:
         1c:54:88:a2:70:48:a4:0c:ab:4d:b2:25:02:70:75:2c:a6:51:
         5a:df:cd:dd:f8:25:63:96:cd:d1:11:31:27:93:b5:17:3b:c2:
         a5:f4:eb:82:7e:d5:db:c3:f7:a7:16:ff:ea:14:af:2a:47:98:
         f6:df:38:69:e6:c0:d9:45:98:ac:cf:d4:1f:66:ae:b0:2f:eb:
         e0:0c:63:76:fb:1e:5c:64:5d:4c:8c:95:50:6f:2e:f8:5e:b6:
         82:96:c5:1f:4d:0f:61:8c:db:21:cf:5c:e4:70:a4:0a:88:db:
         52:44:4f:ce:d0:c1:f2:86:03:bf:62:b6:df:bf:7e:b6:46:fd:
         aa:04:06:9e:76:97:5f:06:52:d2:f6:10:4d:bf:71:50:e8:88:
         4f:cf:24:45:4f:1b:5a:94:e3:ed:9a:80:92:4d:56:62:24:27:
         e1:3b:8b:29:a2:45:70:0b:f0:28:95:07:49:d3:02:75:ce:ae:
         db:17:72:a7:29:05:05:ab:e0:72:b7:ad:f6:fc:f2:fd:96:b7:
         c0:5f:a7:6f:b1:e9:e7:d3:0a:30:c6:b1:01:ae:bb:22:e7:7b:
         fb:90:ce:6e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RTMyMjExMC8GA1UEBRMoRkE2QjYyNzU3QkNBRDQ1N0FDQTA3MEE1MUM0ODA4QjRC
N0M5MzM3MDAeFw0yNjEwMDUwODIxMjRaFw0yNjEwMTIwODIxMjRaMBgxFjAUBgNV
BAMTDTZhYzM1ZTA0LTEyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVFU2Dq5TD0Nqj4HyPPfTt7Nfl0uSyd0M4D46pLDHzkNP2XJeqV5RZpjl6N9Sz
3FEK5mv9odlxwmfui1gUoWfGve0jVJGGsZCpMENM7ul/2f9KWE7qmnXelsMRMSOt
nbKCLzpC4y/glsDnwDBgLO6HOLFz3T9QpHqVwruImIPgIfsOHb2qiXxgtPCdWKY9
fX1EAjmxJDeGDL5M/u+zfHKWRUh2FmADA5LEcYn9Xcxg45Chxovmfq1Jmvf9nUCa
6v1HlJrv9bFiKw1nQDTuXyflAGsD+eKNifINkCKNtNqVUNqC64Wto+pbMK6WcrPo
cbMPr9/Pgub0HzMo2TWHdxsHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEpwYMmNa
fpQSXSh63h2gBG4dKQYwHwYDVR0jBBgwFoAU+mtidXvK1FesoHClHEgItLfJM3Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMzIyL0M5QzJBQUQ4MTg3
NjExRjE4NjI4NEU0RTM2M0Q4QzY3Ly1tdGlkWHZLMUZlc29IQ2xIRWdJdExmSk0z
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLW10aWRYdksxRmVzb0hDbEhFZ0l0TGZKTTNBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF
MzIyL0M5QzJBQUQ4MTg3NjExRjE4NjI4NEU0RTM2M0Q4QzY3Ly1tdGlkWHZLMUZl
c29IQ2xIRWdJdExmSk0zQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCWgFJyRx1fO/BIxNyqjkpa7byP3uBfasgvJHFF6EHouDkuVu0cVIiicEikDKtN
siUCcHUsplFa383d+CVjls3RETEnk7UXO8Kl9OuCftXbw/enFv/qFK8qR5j23zhp
5sDZRZisz9QfZq6wL+vgDGN2+x5cZF1MjJVQby74XraClsUfTQ9hjNshz1zkcKQK
iNtSRE/O0MHyhgO/Yrbfv362Rv2qBAaedpdfBlLS9hBNv3FQ6IhPzyRFTxtalOPt
moCSTVZiJCfhO4spokVwC/AolQdJ0wJ1zq7bF3KnKQUFq+Byt632/PL9lrfAX6dv
senn0wowxrEBrrsi53v7kM5u
-----END CERTIFICATE-----
Generated at Tue Oct 6 17:56:08 2026 by rpki-client