Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
File:                     2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json)
Hash identifier:          qExJBc6453U1/msURbRU9MAZlSbRi8b+TyKuLKRBozQ=
Subject key identifier:   D2:4D:A5:0B:19:75:AB:87:15:2E:9A:3E:D6:C2:D4:76:4D:4F:83:1F
Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A
Certificate issuer:       /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
Manifest number:          01BD
Signing time:             Wed 07 Oct 2026 04:26:18 +0000
Manifest this update:     Wed 07 Oct 2026 04:26:17 +0000
Manifest next update:     Wed 14 Oct 2026 04:26:17 +0000
Files and hashes:         1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: V3PQKKpnZhhfV2dQMDdGw64xtevZ3Xlg4BbX3XLL390=)
                          2: 6923942E252711EF948A5E18C4F9AE02.roa (hash: O1muA/0EJVSd9L8bh/HkeYxU93aOIw8GOb3fRQGF3F0=)
                          3: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: U+JPeLwDFc/9KD5pjtuqdCZiF9ijWo40ru9xcuKUWDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl
                          rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 03:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A
        Validity
            Not Before: Oct  7 04:26:17 2026 GMT
            Not After : Oct 14 04:26:17 2026 GMT
        Subject: CN=6ac5c9e9-a797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:85:30:86:0a:34:2c:a9:67:9c:12:c3:0c:
                    b3:10:bf:82:c6:a4:d9:52:2a:a5:b3:0a:a3:f3:c9:
                    de:47:e0:e6:e8:b0:87:13:8c:3d:a1:f5:18:66:7e:
                    62:b5:d6:59:13:27:05:57:80:54:50:d6:f9:ce:bd:
                    74:50:72:a4:d8:b5:31:23:c1:07:ae:7b:38:a2:34:
                    e2:c5:dd:1f:2f:eb:9d:f6:4e:e6:4e:ca:d5:87:63:
                    10:47:af:44:38:f6:58:82:e1:65:57:b0:3b:a0:06:
                    48:08:57:d3:57:ed:39:e8:06:d9:2e:a5:50:10:fd:
                    fb:5d:df:93:fa:2f:dc:9a:21:41:ab:a3:cb:f4:01:
                    b7:d4:ff:e5:50:3b:1c:84:e9:67:b3:30:85:2e:46:
                    ea:1d:36:9c:7c:65:31:b9:5b:5f:e6:68:2c:86:88:
                    bf:89:da:c7:6b:7a:92:40:68:4c:3f:29:a2:ec:2b:
                    6a:18:38:01:e7:10:da:d7:33:07:bb:f9:fc:bf:e7:
                    62:6c:4c:1e:c4:34:aa:31:cb:6c:20:af:60:d9:e5:
                    5e:21:24:a7:e4:26:08:7d:2b:ee:12:8c:59:5f:d1:
                    5b:80:3c:2c:41:52:a9:49:fe:b2:f8:58:82:85:c2:
                    78:37:f1:e0:e7:89:bf:15:00:cf:f3:69:fe:5e:73:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4D:A5:0B:19:75:AB:87:15:2E:9A:3E:D6:C2:D4:76:4D:4F:83:1F
            X509v3 Authority Key Identifier:
                keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:72:0e:52:a5:1f:7f:51:94:e0:8e:11:99:ed:b8:39:a8:38:
         57:55:7c:96:c5:ec:5f:28:ca:07:24:93:19:70:4c:dd:60:c0:
         6e:17:bd:55:d5:b5:55:82:ff:ab:03:4e:61:9f:5c:2d:62:05:
         dd:66:64:ea:22:45:e3:5c:82:7d:df:e7:c9:6b:cb:e0:d1:51:
         f4:0d:dd:6e:17:a2:a7:73:b3:0c:82:40:dd:aa:10:51:84:cb:
         25:52:d3:cc:9d:57:07:a8:9b:2d:e6:c8:ac:55:d2:10:9d:63:
         f1:5a:ef:e2:5f:bb:01:d3:48:c2:30:00:d4:24:af:06:04:05:
         e8:be:42:50:a9:41:cd:bd:42:1c:2a:a5:a8:57:a3:1a:e6:54:
         e4:ca:0c:3c:a0:8e:17:bb:58:a8:9d:68:50:7d:fb:bc:40:88:
         85:c5:41:c3:d6:ea:18:49:2c:e8:06:7c:1c:fc:b4:df:9f:81:
         b6:92:ae:13:0b:3a:f7:3a:3f:8b:44:b2:c4:0b:0e:3a:e6:84:
         2d:54:c1:a1:27:01:52:ca:3d:31:fb:d5:54:4f:35:f1:f8:a7:
         b5:d5:8d:29:1e:ff:61:c1:ea:8e:5c:43:00:c5:0e:5e:d7:60:
         46:12:98:01:9b:ea:1b:ab:70:dc:65:50:be:10:31:01:7b:9a:
         dd:fa:08:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE
OTRGNTBBMUEwHhcNMjYxMDA3MDQyNjE3WhcNMjYxMDE0MDQyNjE3WjAYMRYwFAYD
VQQDEw02YWM1YzllOS1hNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAye6FMIYKNCypZ5wSwwyzEL+CxqTZUiqlswqj88neR+Dm6LCHE4w9ofUYZn5i
tdZZEycFV4BUUNb5zr10UHKk2LUxI8EHrns4ojTixd0fL+ud9k7mTsrVh2MQR69E
OPZYguFlV7A7oAZICFfTV+056AbZLqVQEP37Xd+T+i/cmiFBq6PL9AG31P/lUDsc
hOlnszCFLkbqHTacfGUxuVtf5mgshoi/idrHa3qSQGhMPymi7CtqGDgB5xDa1zMH
u/n8v+dibEwexDSqMctsIK9g2eVeISSn5CYIfSvuEoxZX9FbgDwsQVKpSf6y+FiC
hcJ4N/Hg54m/FQDP82n+XnOBXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJNpQsZ
dauHFS6aPtbC1HZNT4MfMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1
MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD
aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt
bDdJb09hOGZwS3paVDFDaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjXIOUqUff1GU4I4Rme24Oag4V1V8lsXsXyjKBySTGXBM3WDAbhe9VdW1VYL/
qwNOYZ9cLWIF3WZk6iJF41yCfd/nyWvL4NFR9A3dbheip3OzDIJA3aoQUYTLJVLT
zJ1XB6ibLebIrFXSEJ1j8Vrv4l+7AdNIwjAA1CSvBgQF6L5CUKlBzb1CHCqlqFej
GuZU5MoMPKCOF7tYqJ1oUH37vECIhcVBw9bqGEks6AZ8HPy035+BtpKuEws69zo/
i0SyxAsOOuaELVTBoScBUso9MfvVVE818fintdWNKR7/YcHqjlxDAMUOXtdgRhKY
AZvqG6tw3GVQvhAxAXua3foIrw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:52:41 2026 by rpki-client