Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
File:                     lUpwG6oMkx0BduSFt6KHwTFlJg4.mft (raw, json)
Hash identifier:          avGxvVsTu+v/+ZHEj5pFHHr7+DTKEUJE9nnyrCzX22E=
Subject key identifier:   0D:92:C2:2D:16:DA:56:A2:E9:AA:81:19:90:03:98:D0:98:3B:08:59
Authority key identifier: 95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E
Certificate issuer:       /CN=A9185CED/serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
Certificate serial:       072E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
Manifest number:          0728
Signing time:             Fri 04 Sep 2026 21:48:54 +0000
Manifest this update:     Fri 04 Sep 2026 21:48:53 +0000
Manifest next update:     Fri 11 Sep 2026 21:48:53 +0000
Files and hashes:         1: lUpwG6oMkx0BduSFt6KHwTFlJg4.crl (hash: FdCxMVtdbzQByQtgmi8quqIvrDO2cC6XBPrKLtmjQlw=)
                          2: 3A84DC2C44E411EFB0C1A135C4F9AE02.roa (hash: Xp4lD/QSImDCE4efuMgqe92Y/4E3I4XjwfeB+l5VEAw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl
                          rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 21:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1838 (0x72e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185CED, serialNumber=954A701BAA0C931D0176E485B7A287C13165260E
        Validity
            Not Before: Sep  4 21:48:53 2026 GMT
            Not After : Sep 11 21:48:53 2026 GMT
        Subject: CN=6a9b3cc5-4738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:09:81:ac:c2:1d:0f:94:f2:f6:f4:aa:01:
                    5a:2c:58:2f:89:90:21:b8:ea:7c:a1:f1:c2:20:d6:
                    9f:3f:71:85:55:d4:78:44:05:e5:2d:7c:20:36:a2:
                    21:af:bb:b7:d0:09:02:27:84:29:23:e6:38:9b:c3:
                    06:00:51:db:76:6a:0a:3d:ba:20:f4:09:51:3c:d2:
                    b1:53:3a:b9:e5:c4:28:39:2b:72:9f:d9:68:4e:5d:
                    b9:8b:5c:b1:7f:a2:4a:f7:78:28:17:66:72:5b:73:
                    e0:c8:58:74:68:5b:6b:f1:1c:b4:ac:ac:b0:2e:3a:
                    be:d7:48:96:39:b5:f4:6e:7c:41:ed:c0:28:03:cb:
                    f1:a6:b7:60:a8:e7:bc:79:25:64:3e:29:05:9d:d2:
                    ae:dc:bc:ab:87:27:d1:92:97:b9:2e:e8:53:0b:7e:
                    5a:fa:5c:99:68:83:e6:95:45:60:81:7a:7b:70:0c:
                    b3:c0:b1:f8:90:2a:3a:ec:ce:88:30:72:c2:75:f2:
                    e9:97:a7:26:f0:89:fe:6e:c6:2a:dc:07:9c:71:7c:
                    70:5a:80:59:7d:8f:0c:37:61:e1:4b:32:d3:db:64:
                    e6:1c:0e:b8:bc:dc:cb:58:a3:82:dd:1c:cc:73:cb:
                    90:1f:04:87:c6:98:5d:b9:a8:f7:9c:f4:42:90:fd:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:92:C2:2D:16:DA:56:A2:E9:AA:81:19:90:03:98:D0:98:3B:08:59
            X509v3 Authority Key Identifier:
                keyid:95:4A:70:1B:AA:0C:93:1D:01:76:E4:85:B7:A2:87:C1:31:65:26:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUpwG6oMkx0BduSFt6KHwTFlJg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CED/1AAF7D94922711EBBE734F40C4F9AE02/lUpwG6oMkx0BduSFt6KHwTFlJg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:46:8f:34:d9:ec:d5:b7:ba:3f:92:c1:cc:56:fb:50:75:17:
         21:c4:fd:2a:5e:16:00:f0:78:ac:f7:93:40:b4:4a:2b:c7:eb:
         13:e1:ee:1f:f4:64:05:55:32:9f:01:42:67:8b:1a:63:b6:07:
         61:69:ba:97:ae:d2:35:54:52:19:19:ef:87:86:82:97:7f:ab:
         72:c3:59:80:89:72:83:5d:5e:96:aa:80:2a:f9:aa:28:d3:1e:
         d8:23:d9:d9:f1:63:fb:5b:1c:29:fd:79:bd:c6:1e:d9:00:9b:
         df:5f:15:36:ab:6f:ca:1e:55:e8:3e:fe:bc:a4:53:02:0f:91:
         d7:e3:2c:37:d5:46:4b:50:9c:97:69:db:bd:39:13:76:86:f7:
         c0:ef:88:43:54:24:db:ac:61:36:b5:b9:3d:d8:5b:84:59:53:
         08:f9:29:68:bf:04:da:b3:17:fd:48:17:0d:bb:78:d8:6e:e6:
         21:b8:1e:60:e3:78:1b:65:cb:de:8a:db:db:bf:06:df:75:91:
         f7:f9:4a:60:49:61:30:41:3f:dc:91:9e:96:2a:e1:12:bd:0f:
         25:1c:7a:f7:ae:47:27:64:95:90:13:2a:91:04:f8:c4:c7:92:
         22:46:e6:4b:30:c0:c0:36:c1:81:34:de:8e:ae:0d:cb:68:e8:
         bb:a6:d6:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVDRUQxMTAvBgNVBAUTKDk1NEE3MDFCQUEwQzkzMUQwMTc2RTQ4NUI3QTI4N0Mx
MzE2NTI2MEUwHhcNMjYwOTA0MjE0ODUzWhcNMjYwOTExMjE0ODUzWjAYMRYwFAYD
VQQDEw02YTliM2NjNS00NzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2J4JgazCHQ+U8vb0qgFaLFgviZAhuOp8ofHCINafP3GFVdR4RAXlLXwgNqIh
r7u30AkCJ4QpI+Y4m8MGAFHbdmoKPbog9AlRPNKxUzq55cQoOStyn9loTl25i1yx
f6JK93goF2ZyW3PgyFh0aFtr8Ry0rKywLjq+10iWObX0bnxB7cAoA8vxprdgqOe8
eSVkPikFndKu3LyrhyfRkpe5LuhTC35a+lyZaIPmlUVggXp7cAyzwLH4kCo67M6I
MHLCdfLpl6cm8In+bsYq3AeccXxwWoBZfY8MN2HhSzLT22TmHA64vNzLWKOC3RzM
c8uQHwSHxphduaj3nPRCkP0JbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA2Swi0W
2lai6aqBGZADmNCYOwhZMB8GA1UdIwQYMBaAFJVKcBuqDJMdAXbkhbeih8ExZSYO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNFRC8xQUFGN0Q5NDky
MjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4MEJkdVNGdDZLSHdURmxK
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xVcHdHNm9Na3gwQmR1U0Z0NktId1RGbEpnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUNFRC8xQUFGN0Q5NDkyMjcxMUVCQkU3MzRGNDBDNEY5QUUwMi9sVXB3RzZvTWt4
MEJkdVNGdDZLSHdURmxKZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArUaPNNns1be6P5LBzFb7UHUXIcT9Kl4WAPB4rPeTQLRKK8frE+HuH/RkBVUy
nwFCZ4saY7YHYWm6l67SNVRSGRnvh4aCl3+rcsNZgIlyg11elqqAKvmqKNMe2CPZ
2fFj+1scKf15vcYe2QCb318VNqtvyh5V6D7+vKRTAg+R1+MsN9VGS1Ccl2nbvTkT
dob3wO+IQ1Qk26xhNrW5PdhbhFlTCPkpaL8E2rMX/UgXDbt42G7mIbgeYON4G2XL
3orb278G33WR9/lKYElhMEE/3JGelirhEr0PJRx6965HJ2SVkBMqkQT4xMeSIkbm
SzDAwDbBgTTejq4Ny2jou6bW8Q==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:01:10 2026 by rpki-client