Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
File:                     rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json)
Hash identifier:          4bXvT/Gs06e5TvzImSjao3c1+wHzsJRmhaMZWRK2O+0=
Subject key identifier:   B7:E7:E2:62:5D:9B:36:45:DD:1B:6A:47:46:29:25:1C:0F:16:AD:25
Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80
Certificate issuer:       /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
Certificate serial:       3621
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
Manifest number:          35CD
Signing time:             Fri 04 Sep 2026 14:40:30 +0000
Manifest this update:     Fri 04 Sep 2026 14:40:30 +0000
Manifest next update:     Fri 11 Sep 2026 14:40:30 +0000
Files and hashes:         1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: jshssihgk8pTCY3hppDpOyTAQZZ9i+vN1hluMOqvxuI=)
                          2: F8A618E05E3511F0ACCE4C26C4F9AE02.roa (hash: YNlGAXVG6Otxz1oTc91JGnEKWMVhDfGSlJsoaRX0wMo=)
                          3: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: mOn42WnRE+/Mos3ahI73htZV2BdO/yRo2Jrd4NQohQc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl
                          rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13857 (0x3621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
        Validity
            Not Before: Sep  4 14:40:30 2026 GMT
            Not After : Sep 11 14:40:30 2026 GMT
        Subject: CN=6a9ad85e-9ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:82:d1:4d:59:79:33:e6:52:bd:92:00:74:
                    53:da:e8:38:5c:aa:65:ac:03:42:ee:00:84:22:4f:
                    66:15:94:ae:30:2f:a2:c7:0d:8e:e3:48:af:94:49:
                    f8:3d:f5:65:0f:26:88:fc:91:14:a9:36:2f:b4:5b:
                    98:10:03:a8:c5:7d:bd:bc:da:83:56:ac:bb:a5:e3:
                    0b:9b:2d:fe:fe:6f:cb:df:94:5c:81:a1:d9:5e:4d:
                    14:bd:54:8c:8d:ba:07:de:2b:3b:33:f2:fe:6d:eb:
                    c9:62:e8:9f:b6:7b:64:ff:34:f5:37:02:4d:2b:83:
                    20:ee:f7:1a:a4:8a:12:ed:23:3c:6d:0f:04:d6:aa:
                    47:96:2f:e2:e2:3e:c4:5b:1c:c7:20:f6:aa:ff:20:
                    bc:77:97:75:a8:44:d2:86:74:07:d1:67:c0:fb:c0:
                    9e:f8:c8:13:01:ff:78:ae:40:90:29:35:31:c6:6d:
                    de:fc:db:07:8b:36:6d:15:a2:78:9d:0f:a9:21:cc:
                    8b:30:cc:ad:e9:8b:e5:ed:0d:44:41:15:32:b5:9d:
                    7b:92:28:90:a7:ee:cf:0e:4e:5e:3e:f6:53:d8:51:
                    d2:a0:ec:b4:72:25:34:63:28:e5:93:e7:18:95:47:
                    71:39:f8:29:3e:1e:2b:73:9c:82:3f:eb:24:e2:7e:
                    cd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E7:E2:62:5D:9B:36:45:DD:1B:6A:47:46:29:25:1C:0F:16:AD:25
            X509v3 Authority Key Identifier:
                keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:94:c7:08:f6:c3:14:96:48:d7:a1:1f:93:ab:74:b0:ad:2e:
         52:1d:46:0d:38:c9:a7:0c:53:40:ba:9e:f2:54:86:85:a2:38:
         13:48:29:54:fe:4c:93:4d:e3:78:08:8a:79:4d:2a:b1:11:13:
         6a:69:3a:a2:62:66:28:fe:14:ea:fa:9d:91:f5:be:06:53:ce:
         0d:4f:40:f7:b8:3e:be:b9:48:ad:ba:3b:4a:e3:24:86:c2:88:
         2a:4e:d4:ef:64:56:a8:ff:e5:77:ad:f9:6c:15:7a:5c:e4:92:
         57:b6:35:73:d9:12:14:26:4d:c5:df:81:91:10:e8:dd:eb:39:
         75:43:35:6b:d6:4c:42:c5:9a:23:4b:7d:1e:eb:60:7d:a2:69:
         b8:5e:17:74:7f:4b:f4:72:5e:98:7d:06:77:f6:0e:2b:0f:e5:
         2c:73:6a:2a:6e:37:d1:7c:fa:ff:d4:d7:1b:47:e9:26:18:a2:
         59:24:3d:76:c6:7c:9c:c2:7e:f4:c0:68:39:04:87:fc:d0:06:
         2d:1e:e6:35:65:b3:f4:e9:51:59:02:df:87:54:16:95:24:aa:
         d1:34:f7:f5:74:fa:86:00:3b:d1:43:b6:36:cb:8f:b3:e4:97:
         e4:d4:a5:99:bf:fc:9c:b5:c2:91:08:58:77:57:dd:cf:de:4f:
         58:f2:44:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTFBMDkxMTAvBgNVBAUTKEFDRjJDOEQwRENGQkE3NDUxNkIzM0NFQkUyNkFFMTRG
OEIwNjdDODAwHhcNMjYwOTA0MTQ0MDMwWhcNMjYwOTExMTQ0MDMwWjAYMRYwFAYD
VQQDEw02YTlhZDg1ZS05ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWOC0U1ZeTPmUr2SAHRT2ug4XKplrANC7gCEIk9mFZSuMC+ixw2O40ivlEn4
PfVlDyaI/JEUqTYvtFuYEAOoxX29vNqDVqy7peMLmy3+/m/L35RcgaHZXk0UvVSM
jboH3is7M/L+bevJYuiftntk/zT1NwJNK4Mg7vcapIoS7SM8bQ8E1qpHli/i4j7E
WxzHIPaq/yC8d5d1qETShnQH0WfA+8Ce+MgTAf94rkCQKTUxxm3e/NsHizZtFaJ4
nQ+pIcyLMMyt6Yvl7Q1EQRUytZ17kiiQp+7PDk5ePvZT2FHSoOy0ciU0Yyjlk+cY
lUdxOfgpPh4rc5yCP+sk4n7NjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfn4mJd
mzZF3RtqR0YpJRwPFq0lMB8GA1UdIwQYMBaAFKzyyNDc+6dFFrM86+Jq4U+LBnyA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS80QUNGRjM2MDFE
OTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3AwVVdzenpyNG1yaFQ0c0dm
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JQTEkwTno3cDBVV3N6enI0bXJoVDRzR2ZJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MUEwOS80QUNGRjM2MDFEOTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3Aw
VVdzenpyNG1yaFQ0c0dmSUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASJTHCPbDFJZI16Efk6t0sK0uUh1GDTjJpwxTQLqe8lSGhaI4E0gpVP5Mk03j
eAiKeU0qsRETamk6omJmKP4U6vqdkfW+BlPODU9A97g+vrlIrbo7SuMkhsKIKk7U
72RWqP/ld635bBV6XOSSV7Y1c9kSFCZNxd+BkRDo3es5dUM1a9ZMQsWaI0t9Hutg
faJpuF4XdH9L9HJemH0Gd/YOKw/lLHNqKm430Xz6/9TXG0fpJhiiWSQ9dsZ8nMJ+
9MBoOQSH/NAGLR7mNWWz9OlRWQLfh1QWlSSq0TT39XT6hgA70UO2NsuPs+SX5NSl
mb/8nLXCkQhYd1fdz95PWPJENA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:29 2026 by rpki-client