Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
File:                     YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft (raw, json)
Hash identifier:          pEr3VLX3gazskAh844ySOfvcmH4AEfGz820e/GFyyM0=
Subject key identifier:   FB:F6:32:E4:9B:8D:62:D7:14:FF:AF:65:54:0A:D8:02:7B:72:52:84
Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
Certificate issuer:       /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
Manifest number:          97
Signing time:             Sun 11 Oct 2026 08:02:51 +0000
Manifest this update:     Sun 11 Oct 2026 08:02:50 +0000
Manifest next update:     Sun 18 Oct 2026 08:02:50 +0000
Files and hashes:         1: YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl (hash: ksqjx2w4J4Z5ZHKPEdutxHbq7kZzfTE4bsSimIuFVo8=)
                          2: F50431A0E48511F0BEFBEDFF436F56BC.roa (hash: biBbqFto51rOZiPG5JNmrRxR/U8JC7IUfuy2q4b9zao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
                          rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 08:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
        Validity
            Not Before: Oct 11 08:02:50 2026 GMT
            Not After : Oct 18 08:02:50 2026 GMT
        Subject: CN=6acb42ab-892e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:0d:4a:25:99:ef:5e:af:2e:0d:cf:af:b4:
                    6b:3e:64:dc:e5:88:94:a4:fa:5c:6a:6a:1c:59:a2:
                    8b:3d:02:a4:32:5a:eb:6f:08:74:57:bd:91:6f:e4:
                    da:cc:d9:98:11:c0:c4:7f:f0:1f:d4:1b:4a:a7:5c:
                    1e:38:96:f5:aa:ce:df:8f:33:5c:6f:df:93:bd:b6:
                    9c:c4:8f:71:64:fe:4a:70:95:ef:f2:07:68:bf:82:
                    25:3e:d4:fa:a7:c9:36:a9:28:8a:1a:f0:fa:0c:4f:
                    e0:cc:ee:27:df:79:12:49:2a:0e:95:38:e3:e5:b2:
                    f4:46:21:4b:38:33:43:2a:51:96:a5:de:58:8c:96:
                    57:e5:b2:e6:e0:2b:64:8e:88:f4:c5:8c:9d:4d:66:
                    59:18:55:06:63:a5:ad:e2:93:f9:c2:a8:bb:08:ae:
                    f2:91:07:66:2b:30:e5:d0:2e:9c:08:00:78:0e:5e:
                    4b:66:31:76:0d:a2:6c:eb:92:ec:eb:0a:c0:b9:44:
                    8e:bd:ba:7d:2a:93:26:0c:65:de:fd:a5:f7:a0:55:
                    05:4c:38:44:57:41:61:2d:f2:36:e5:9a:25:23:ed:
                    01:1b:9a:7f:6e:74:e4:96:99:c5:b1:f3:37:99:19:
                    b3:26:d1:00:95:7e:8f:7b:6a:99:5c:b3:53:50:96:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F6:32:E4:9B:8D:62:D7:14:FF:AF:65:54:0A:D8:02:7B:72:52:84
            X509v3 Authority Key Identifier:
                keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8d:0e:36:9c:14:b5:a6:3d:88:15:69:63:8b:a4:07:a6:07:
         80:b6:a8:3f:4b:60:a1:43:41:c1:85:71:3b:84:8b:6a:c4:90:
         f7:63:43:df:fd:c6:44:37:27:2d:54:55:67:84:88:f3:f8:c4:
         49:2f:de:36:0c:00:ef:90:c5:eb:a8:21:0c:94:bd:8b:70:fe:
         99:44:7b:85:f7:6b:c2:ee:83:98:81:53:d4:dd:90:42:bf:bd:
         f8:4c:82:44:5d:32:6d:7b:58:04:2f:5f:1e:ef:82:5d:51:3c:
         7d:18:9c:c9:99:2e:e1:94:0a:ae:0b:fa:a1:a6:a6:a5:50:fb:
         73:ba:f6:39:e4:f0:22:b6:5c:f8:ca:4f:30:87:30:cb:a4:75:
         9a:0e:16:86:05:e3:27:72:4e:f8:b3:34:fb:54:cc:e4:80:e0:
         97:e1:b6:fe:ca:b9:a4:00:37:8e:55:01:75:b1:f7:30:30:9b:
         d7:19:56:2f:6f:67:7a:d7:28:2a:ca:5b:21:5b:26:09:91:84:
         20:22:76:23:9d:85:32:09:04:6b:ff:c7:ae:ce:de:3e:08:54:
         59:1c:5c:c8:ec:c1:ce:d1:5e:07:2f:8a:37:44:c5:b9:d9:01:
         6e:2c:11:b8:ca:07:e9:f9:4e:e9:6d:d0:7f:9d:87:22:ed:df:
         3e:51:0d:60
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI1MDkxMTAvBgNVBAUTKDYyQTIzRjMzRTkwQjcyMDYwNTUzNzE5NTE0RDBDNUFC
QzJFMjM0NDcwHhcNMjYxMDExMDgwMjUwWhcNMjYxMDE4MDgwMjUwWjAYMRYwFAYD
VQQDEw02YWNiNDJhYi04OTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwlINSiWZ716vLg3Pr7RrPmTc5YiUpPpcamocWaKLPQKkMlrrbwh0V72Rb+Ta
zNmYEcDEf/Af1BtKp1weOJb1qs7fjzNcb9+TvbacxI9xZP5KcJXv8gdov4IlPtT6
p8k2qSiKGvD6DE/gzO4n33kSSSoOlTjj5bL0RiFLODNDKlGWpd5YjJZX5bLm4Ctk
joj0xYydTWZZGFUGY6Wt4pP5wqi7CK7ykQdmKzDl0C6cCAB4Dl5LZjF2DaJs65Ls
6wrAuUSOvbp9KpMmDGXe/aX3oFUFTDhEV0FhLfI25ZolI+0BG5p/bnTklpnFsfM3
mRmzJtEAlX6Pe2qZXLNTUJa+dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPv2MuSb
jWLXFP+vZVQK2AJ7clKEMB8GA1UdIwQYMBaAFGKiPzPpC3IGBVNxlRTQxavC4jRH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwOS85QjFDRTIxMkU0
ODExMUYwQUM0NjdCQzE0MjZGNTZCQy9ZcUlfTS1rTGNnWUZVM0dWRk5ERnE4TGlO
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lxSV9NLWtMY2dZRlUzR1ZGTkRGcThMaU5FYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjUwOS85QjFDRTIxMkU0ODExMUYwQUM0NjdCQzE0MjZGNTZCQy9ZcUlfTS1rTGNn
WUZVM0dWRk5ERnE4TGlORWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAI0ONpwUtaY9iBVpY4ukB6YHgLaoP0tgoUNBwYVxO4SLasSQ92ND3/3GRDcn
LVRVZ4SI8/jESS/eNgwA75DF66ghDJS9i3D+mUR7hfdrwu6DmIFT1N2QQr+9+EyC
RF0ybXtYBC9fHu+CXVE8fRicyZku4ZQKrgv6oaampVD7c7r2OeTwIrZc+MpPMIcw
y6R1mg4WhgXjJ3JO+LM0+1TM5IDgl+G2/sq5pAA3jlUBdbH3MDCb1xlWL29netco
KspbIVsmCZGEICJ2I52FMgkEa//Hrs7ePghUWRxcyOzBztFeBy+KN0TFudkBbiwR
uMoH6flO6W3Qf52HIu3fPlENYA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 18:38:24 2026 by rpki-client