Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft
File:                     0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft (raw, json)
Hash identifier:          PzhtsS6Kxhh1/5Vl3Yg1z6paUb9boXfywxzaZ/RRFiQ=
Subject key identifier:   0B:E7:36:B1:37:DB:AD:6E:A1:A1:25:B2:4C:A9:17:E0:21:08:78:1C
Authority key identifier: D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01
Certificate issuer:       /CN=A9181292/serialNumber=D248E5B7859738417219C739320BDAFB83B50501
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft
Manifest number:          26
Signing time:             Mon 05 Oct 2026 09:18:19 +0000
Manifest this update:     Mon 05 Oct 2026 09:18:18 +0000
Manifest next update:     Mon 12 Oct 2026 09:18:18 +0000
Files and hashes:         1: 0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl (hash: TTEXXwWVpQ4TIxNJt/l70WmHG+P40vfM9hO698g04z4=)
                          2: C735270A8B4911F197B84AD94811F970.roa (hash: +LKnrorxjBkm1K+JOzimfHxI4AeC1+1bODCZ0IR/L8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl
                          rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181292, serialNumber=D248E5B7859738417219C739320BDAFB83B50501
        Validity
            Not Before: Oct  5 09:18:18 2026 GMT
            Not After : Oct 12 09:18:18 2026 GMT
        Subject: CN=6ac36b5b-eab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:a2:0d:0e:aa:84:9b:f9:1a:24:e4:3c:1a:
                    ec:f5:91:90:8f:bd:5c:0c:af:15:c9:64:4f:69:29:
                    8d:64:f1:36:c7:4e:35:b5:27:61:60:2f:b5:c1:a3:
                    83:c4:33:72:84:4f:71:d4:f9:c3:f4:30:16:be:f0:
                    eb:96:1a:cc:86:87:7b:ab:43:5d:a0:d3:61:6b:9f:
                    08:4c:2a:bc:d6:78:c1:27:d0:72:da:f6:07:64:b9:
                    c1:ab:38:57:96:fd:50:75:e9:d7:b6:58:8b:8b:89:
                    7a:84:70:9d:0e:27:1e:56:49:ed:ed:cd:26:5c:8d:
                    e8:c0:bf:c9:ca:a0:46:13:c5:d0:44:76:85:47:67:
                    82:9f:c9:8c:2a:f4:32:6e:56:46:c2:8f:bd:06:af:
                    29:e5:b1:b7:cf:e9:d7:f3:e1:76:bc:23:3c:a4:68:
                    3f:51:6d:01:7d:c2:6d:77:10:ae:92:60:2c:e1:1a:
                    1d:ac:e7:cb:30:8d:9a:9c:c3:75:c3:15:d1:4d:2c:
                    d0:1b:e1:65:42:4e:c2:c5:4f:dc:da:57:ea:69:1d:
                    3e:35:9a:40:fb:d0:15:8d:a2:00:1b:50:6f:70:b1:
                    c4:25:54:31:67:4e:9a:f5:ec:53:c7:33:45:f7:8e:
                    f1:6a:71:2e:42:ab:04:9e:1d:4d:e9:29:bb:68:a6:
                    ea:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E7:36:B1:37:DB:AD:6E:A1:A1:25:B2:4C:A9:17:E0:21:08:78:1C
            X509v3 Authority Key Identifier:
                keyid:D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:40:6c:ac:47:fd:48:e3:f7:55:54:4f:d1:b4:c9:fc:93:76:
         9a:dc:7d:e2:7c:fb:98:4e:f3:99:e4:5a:dc:4c:91:73:6b:b4:
         68:d8:90:c9:cd:9a:1c:1e:cb:c0:24:8b:e5:26:66:3d:1f:be:
         17:9f:27:c8:0e:cf:4d:0d:e6:2d:54:b2:9a:02:d2:68:ee:54:
         9d:2f:d4:5d:40:25:c1:cc:1f:fc:c3:a6:49:fb:da:38:98:e8:
         0b:1f:d9:6f:04:21:d5:54:81:7c:8c:ef:4d:bc:ba:52:eb:68:
         6d:ed:45:b0:5a:82:12:6d:42:45:01:aa:9f:a3:04:a7:3c:71:
         ec:cd:b7:ab:e5:0f:da:fa:45:27:ba:2c:8a:d0:2c:ae:56:5e:
         68:a1:11:9c:d3:2a:88:7c:64:98:38:57:34:8f:21:44:0b:bd:
         fa:a9:ca:3a:d1:8a:de:57:c9:3c:60:6d:f0:25:e3:8a:1e:ef:
         a7:7a:03:f5:bf:43:bd:6e:26:22:08:3f:14:b1:6f:ee:07:49:
         cb:13:ba:ff:a0:7b:69:c8:18:dc:95:28:6c:6c:0b:3a:09:c8:
         1f:d9:5a:f7:51:1d:85:92:7b:18:d9:1d:22:6d:ef:fa:6d:7d:
         19:7a:61:f9:f7:9d:c4:25:8a:11:c5:7a:6d:6c:b4:15:49:97:
         a4:6e:9b:41
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTI5MjExMC8GA1UEBRMoRDI0OEU1Qjc4NTk3Mzg0MTcyMTlDNzM5MzIwQkRBRkI4
M0I1MDUwMTAeFw0yNjEwMDUwOTE4MThaFw0yNjEwMTIwOTE4MThaMBgxFjAUBgNV
BAMTDTZhYzM2YjViLWVhYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDX2KINDqqEm/kaJOQ8Guz1kZCPvVwMrxXJZE9pKY1k8TbHTjW1J2FgL7XBo4PE
M3KET3HU+cP0MBa+8OuWGsyGh3urQ12g02FrnwhMKrzWeMEn0HLa9gdkucGrOFeW
/VB16de2WIuLiXqEcJ0OJx5WSe3tzSZcjejAv8nKoEYTxdBEdoVHZ4KfyYwq9DJu
VkbCj70GrynlsbfP6dfz4Xa8IzykaD9RbQF9wm13EK6SYCzhGh2s58swjZqcw3XD
FdFNLNAb4WVCTsLFT9zaV+ppHT41mkD70BWNogAbUG9wscQlVDFnTpr17FPHM0X3
jvFqcS5CqwSeHU3pKbtopuqPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUC+c2sTfb
rW6hoSWyTKkX4CEIeBwwHwYDVR0jBBgwFoAU0kjlt4WXOEFyGcc5Mgva+4O1BQEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxMjkyLzUxRTUwNTIyOEI0
NjExRjE5MkU3QTY0OTQ2MTFGOTcwLzBramx0NFdYT0VGeUdjYzVNZ3ZhLTRPMUJR
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMGtqbHQ0V1hPRUZ5R2NjNU1ndmEtNE8xQlFFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
MjkyLzUxRTUwNTIyOEI0NjExRjE5MkU3QTY0OTQ2MTFGOTcwLzBramx0NFdYT0VG
eUdjYzVNZ3ZhLTRPMUJRRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBNQGysR/1I4/dVVE/RtMn8k3aa3H3ifPuYTvOZ5FrcTJFza7Ro2JDJzZocHsvA
JIvlJmY9H74XnyfIDs9NDeYtVLKaAtJo7lSdL9RdQCXBzB/8w6ZJ+9o4mOgLH9lv
BCHVVIF8jO9NvLpS62ht7UWwWoISbUJFAaqfowSnPHHszber5Q/a+kUnuiyK0Cyu
Vl5ooRGc0yqIfGSYOFc0jyFEC736qco60YreV8k8YG3wJeOKHu+negP1v0O9biYi
CD8UsW/uB0nLE7r/oHtpyBjclShsbAs6Ccgf2Vr3UR2FknsY2R0ibe/6bX0ZemH5
953EJYoRxXptbLQVSZekbptB
-----END CERTIFICATE-----
Generated at Tue Oct 6 13:57:00 2026 by rpki-client