Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File:                     zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier:          Ibzc79uvsK9jw2fcXlQgbex8TNKbr5nBZabnntx/Tn0=
Subject key identifier:   33:CF:20:5F:B2:5B:B5:5A:1C:90:0E:4F:87:EB:ED:16:40:DB:3F:0B
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer:       /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number:          9F
Signing time:             Thu 29 Oct 2026 08:07:18 +0000
Manifest this update:     Thu 29 Oct 2026 08:07:17 +0000
Manifest next update:     Thu 05 Nov 2026 08:07:17 +0000
Files and hashes:         1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: 6LgMf8fIjsxRSaJ389yS8A3XCQQzYkpd7KSK+ly/HPs=)
                          2: 5B7F78E0948A11F193C8715B6511F970.roa (hash: p83LjNke8Ymi6mycmLDbyA/QmdOPAdeSckRGwIMfBdg=)
                          3: F48C677A94A611F18AF960C06E11F970.roa (hash: RiTXH+oE8/EvAfBAsrOw7LlQy+djoD6hDUue74QmBm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 08:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
        Validity
            Not Before: Oct 29 08:07:17 2026 GMT
            Not After : Nov  5 08:07:17 2026 GMT
        Subject: CN=6ae2feb6-cb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:82:5d:cc:6e:17:05:84:dc:9c:3a:54:2b:
                    bd:38:8f:5d:e6:24:ed:0e:93:d5:53:82:59:f4:56:
                    68:9b:9e:87:5f:5a:1b:84:4a:e5:30:86:d3:28:79:
                    5d:31:5d:b6:c3:51:dc:ab:5d:43:2d:e7:d5:af:d7:
                    d1:5e:24:4a:99:ee:7b:ae:9a:de:2a:2c:60:4f:a4:
                    a8:35:42:18:9d:ad:d2:7b:4b:0f:1d:3d:f9:92:04:
                    cc:1e:84:57:43:6b:90:e2:df:20:24:2b:3d:7f:d9:
                    f0:4a:5e:c5:39:75:c5:6c:aa:bb:3e:87:b0:07:70:
                    03:53:47:33:43:e1:94:7a:ab:dd:38:a3:65:ce:1a:
                    03:e6:64:e1:ee:76:ca:b9:e1:d7:b4:98:22:04:75:
                    7c:e0:a9:1d:d2:e0:ae:aa:2b:1f:f5:f8:57:5f:ad:
                    1a:8e:c4:90:dc:6d:62:2d:3e:a0:0e:33:85:bc:05:
                    dc:4c:5e:22:87:94:9d:43:29:47:4e:8c:93:ba:5f:
                    80:24:d7:06:bb:d9:be:b2:fb:64:56:86:68:f3:67:
                    6f:86:4a:a6:42:08:b5:f5:44:67:a6:e7:b7:3c:41:
                    5c:42:81:69:5b:c6:48:d6:03:4d:e1:17:ed:24:01:
                    01:79:e5:c5:e3:96:8f:83:45:9c:7e:a2:78:90:af:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CF:20:5F:B2:5B:B5:5A:1C:90:0E:4F:87:EB:ED:16:40:DB:3F:0B
            X509v3 Authority Key Identifier:
                keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b1:22:1c:9a:6f:12:3e:09:be:74:9d:23:64:bf:20:f3:58:
         e1:ac:22:11:fd:a2:6c:30:9e:8b:64:e8:22:ae:54:73:5c:e4:
         cf:84:2d:57:a3:fa:30:0b:07:47:01:b5:2a:37:6e:a7:67:b8:
         07:19:a5:b8:77:90:59:4b:b6:db:e8:48:34:0c:1c:4c:a6:7a:
         8d:f5:2e:25:d4:fa:b1:d4:57:a2:43:53:f4:90:19:a1:5d:28:
         a9:d1:f6:09:03:d9:b5:25:b0:5f:48:73:fb:0d:96:05:48:03:
         56:6f:ac:4d:19:e7:57:07:67:31:9a:7f:39:ec:e6:8f:b5:ae:
         0f:b9:03:b5:f7:80:b4:a0:b7:52:26:db:30:b4:06:34:5a:5c:
         c4:bf:c9:76:30:d7:3b:15:e6:1b:62:7b:26:55:bd:af:94:84:
         85:30:a5:1e:c0:de:c5:4a:bc:a6:1f:03:83:9f:7f:69:c9:11:
         ea:23:eb:9f:97:4f:88:03:18:8a:61:c9:34:30:c9:d6:40:41:
         0d:f9:a9:f3:e2:aa:cd:48:cb:24:f1:b2:49:6e:d6:9c:a1:61:
         73:19:3d:5f:94:88:53:92:84:c8:e4:77:f5:6c:80:81:68:49:
         67:f7:fd:28:98:57:f8:c9:16:4c:cc:02:11:58:94:79:0e:91:
         24:56:52:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5MDkxMTAvBgNVBAUTKENFQUVDMEU4N0Q5NTg1MkI0NEMwNjEzOTU1NDZCN0Uw
QzFEMTFDNTcwHhcNMjYxMDI5MDgwNzE3WhcNMjYxMTA1MDgwNzE3WjAYMRYwFAYD
VQQDEw02YWUyZmViNi1jYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmfKCXcxuFwWE3Jw6VCu9OI9d5iTtDpPVU4JZ9FZom56HX1obhErlMIbTKHld
MV22w1Hcq11DLefVr9fRXiRKme57rpreKixgT6SoNUIYna3Se0sPHT35kgTMHoRX
Q2uQ4t8gJCs9f9nwSl7FOXXFbKq7PoewB3ADU0czQ+GUeqvdOKNlzhoD5mTh7nbK
ueHXtJgiBHV84Kkd0uCuqisf9fhXX60ajsSQ3G1iLT6gDjOFvAXcTF4ih5SdQylH
ToyTul+AJNcGu9m+svtkVoZo82dvhkqmQgi19URnpue3PEFcQoFpW8ZI1gNN4Rft
JAEBeeXF45aPg0WcfqJ4kK+p6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPPIF+y
W7VaHJAOT4fr7RZA2z8LMB8GA1UdIwQYMBaAFM6uwOh9lYUrRMBhOVVGt+DB0RxX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkwOS81QzJEMTA2NEVC
QzkxMUYwOTM2RURCODM2NzZGNTZCQy96cTdBNkgyVmhTdEV3R0U1VlVhMzRNSFJI
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3pxN0E2SDJWaFN0RXdHRTVWVWEzNE1IUkhGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjkwOS81QzJEMTA2NEVCQzkxMUYwOTM2RURCODM2NzZGNTZCQy96cTdBNkgyVmhT
dEV3R0U1VlVhMzRNSFJIRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuLEiHJpvEj4JvnSdI2S/IPNY4awiEf2ibDCei2ToIq5Uc1zkz4QtV6P6MAsH
RwG1Kjdup2e4BxmluHeQWUu22+hINAwcTKZ6jfUuJdT6sdRXokNT9JAZoV0oqdH2
CQPZtSWwX0hz+w2WBUgDVm+sTRnnVwdnMZp/Oezmj7WuD7kDtfeAtKC3UibbMLQG
NFpcxL/JdjDXOxXmG2J7JlW9r5SEhTClHsDexUq8ph8Dg59/ackR6iPrn5dPiAMY
imHJNDDJ1kBBDfmp8+KqzUjLJPGySW7WnKFhcxk9X5SIU5KEyOR39WyAgWhJZ/f9
KJhX+MkWTMwCEViUeQ6RJFZS3Q==
-----END CERTIFICATE-----
Generated at Fri Oct 30 07:54:47 2026 by rpki-client