Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
File:                     tB02AK8mCZMOgvCWAMevmPLdbJ8.mft (raw, json)
Hash identifier:          mqr3Pgq5kaCeznvfcrNizf3QC73gtc937eIlR1mkllU=
Subject key identifier:   1D:C0:BD:D1:9D:5F:F6:F7:43:BD:F6:1E:15:9F:07:C3:BE:CD:64:EC
Authority key identifier: B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F
Certificate issuer:       /CN=A9193F42/serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
Manifest number:          C0
Signing time:             Wed 07 Oct 2026 07:24:26 +0000
Manifest this update:     Wed 07 Oct 2026 07:24:25 +0000
Manifest next update:     Wed 14 Oct 2026 07:24:25 +0000
Files and hashes:         1: tB02AK8mCZMOgvCWAMevmPLdbJ8.crl (hash: iJX5++i69hyFPtmkbvEgxBkDA9+QnWBYMyL4WgyJzsI=)
                          2: E8D991EAA2B311F09C429E36C4F9AE02.roa (hash: 7Nz08dDyFaiyXyaRG47k8xQgh89h8nQMPXHHiTOBsIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl
                          rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193F42, serialNumber=B41D3600AF2609930E82F09600C7AF98F2DD6C9F
        Validity
            Not Before: Oct  7 07:24:25 2026 GMT
            Not After : Oct 14 07:24:25 2026 GMT
        Subject: CN=6ac5f3aa-101e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:c8:bb:f7:2c:32:51:ae:ec:62:dc:af:37:
                    bc:9b:d1:be:69:e0:2e:3a:80:0b:77:e9:51:63:f0:
                    38:98:9c:3a:6c:e7:01:b1:37:af:75:84:5b:54:fb:
                    05:ca:0b:5b:d6:d3:d0:ba:dd:03:ac:2d:00:b1:65:
                    b9:8e:8e:2a:4f:84:60:4d:f3:f6:f3:33:93:b8:c2:
                    01:c3:ec:d7:bf:c3:3c:ee:dc:07:99:04:cb:a0:67:
                    ec:f9:78:0e:6a:31:c4:c5:df:cd:0c:39:5b:53:c7:
                    56:81:7c:37:95:1d:d0:63:57:71:7c:f4:3e:8b:83:
                    57:19:2d:ae:51:30:cf:0a:13:04:1b:c4:4a:a3:76:
                    21:62:2f:b3:4f:cf:05:d0:7b:8a:5f:56:5e:4f:64:
                    2b:b5:2d:f6:7c:a7:0d:74:97:f8:bd:d3:aa:68:78:
                    d5:47:2a:2f:0d:0a:45:19:f1:30:7e:08:cd:ad:50:
                    2f:9d:6c:4d:6d:1e:af:0f:49:7f:e1:65:16:f5:52:
                    76:a6:0f:4a:26:d0:33:99:9b:48:e4:bb:a8:a0:29:
                    79:f7:88:cc:3b:95:9b:f3:40:a5:c4:e4:32:5d:2a:
                    50:e8:32:7a:ad:60:7f:37:45:aa:ce:45:4c:bb:b4:
                    08:dd:4a:40:f6:a0:94:74:7f:9d:5f:6a:1c:31:1d:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C0:BD:D1:9D:5F:F6:F7:43:BD:F6:1E:15:9F:07:C3:BE:CD:64:EC
            X509v3 Authority Key Identifier:
                keyid:B4:1D:36:00:AF:26:09:93:0E:82:F0:96:00:C7:AF:98:F2:DD:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tB02AK8mCZMOgvCWAMevmPLdbJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F42/800ED9CCA2B311F09466E235C4F9AE02/tB02AK8mCZMOgvCWAMevmPLdbJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7e:89:e0:82:b5:92:23:4c:dd:0b:ec:ed:45:56:87:d0:a9:
         56:4c:ef:43:19:fd:be:e3:60:d1:c9:45:ce:05:d3:6f:ce:a0:
         0a:2b:bd:27:d4:07:28:38:7d:a7:ca:a9:ca:6e:9b:48:2e:c4:
         17:60:a6:ca:70:e1:6e:6e:ad:58:e6:3c:b0:24:62:61:ce:34:
         f7:0e:56:4c:c2:46:6b:3c:81:c5:95:16:55:13:d6:7d:af:08:
         bc:50:11:e4:e9:3f:7c:3d:c6:fd:f3:66:6f:98:a9:a8:9e:9c:
         8f:af:be:74:86:7f:29:f6:80:c6:81:36:fb:a4:5b:54:5a:d5:
         6a:56:0b:41:cb:28:3e:21:00:d4:2f:7d:f8:65:b2:77:0d:ea:
         8f:dd:20:00:95:6c:78:c9:a6:48:89:98:2a:23:79:44:50:84:
         a3:fd:97:ff:53:2a:54:10:40:13:7f:98:70:74:c1:67:6d:3d:
         e0:61:07:a4:bb:76:f6:76:8a:e7:f6:1e:c5:e8:27:a1:f8:a8:
         c6:35:e5:60:eb:67:9c:bd:63:ed:f2:de:be:f4:f5:ee:8d:b3:
         05:bb:da:fe:25:2d:c9:47:ad:28:f2:82:d0:3a:78:f1:bc:cb:
         04:88:b1:10:9a:df:80:04:35:b8:fb:04:d5:58:fa:8d:57:e2:
         6e:57:ca:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNGNDIxMTAvBgNVBAUTKEI0MUQzNjAwQUYyNjA5OTMwRTgyRjA5NjAwQzdBRjk4
RjJERDZDOUYwHhcNMjYxMDA3MDcyNDI1WhcNMjYxMDE0MDcyNDI1WjAYMRYwFAYD
VQQDEw02YWM1ZjNhYS0xMDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2OfIu/csMlGu7GLcrze8m9G+aeAuOoALd+lRY/A4mJw6bOcBsTevdYRbVPsF
ygtb1tPQut0DrC0AsWW5jo4qT4RgTfP28zOTuMIBw+zXv8M87twHmQTLoGfs+XgO
ajHExd/NDDlbU8dWgXw3lR3QY1dxfPQ+i4NXGS2uUTDPChMEG8RKo3YhYi+zT88F
0HuKX1ZeT2QrtS32fKcNdJf4vdOqaHjVRyovDQpFGfEwfgjNrVAvnWxNbR6vD0l/
4WUW9VJ2pg9KJtAzmZtI5LuooCl594jMO5Wb80ClxOQyXSpQ6DJ6rWB/N0WqzkVM
u7QI3UpA9qCUdH+dX2ocMR01AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3AvdGd
X/b3Q732HhWfB8O+zWTsMB8GA1UdIwQYMBaAFLQdNgCvJgmTDoLwlgDHr5jy3Wyf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y0Mi84MDBFRDlDQ0Ey
QjMxMUYwOTQ2NkUyMzVDNEY5QUUwMi90QjAyQUs4bUNaTU9ndkNXQU1ldm1QTGRi
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCMDJBSzhtQ1pNT2d2Q1dBTWV2bVBMZGJKOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0Y0Mi84MDBFRDlDQ0EyQjMxMUYwOTQ2NkUyMzVDNEY5QUUwMi90QjAyQUs4bUNa
TU9ndkNXQU1ldm1QTGRiSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGn6J4IK1kiNM3Qvs7UVWh9CpVkzvQxn9vuNg0clFzgXTb86gCiu9J9QHKDh9
p8qpym6bSC7EF2CmynDhbm6tWOY8sCRiYc409w5WTMJGazyBxZUWVRPWfa8IvFAR
5Ok/fD3G/fNmb5ipqJ6cj6++dIZ/KfaAxoE2+6RbVFrValYLQcsoPiEA1C99+GWy
dw3qj90gAJVseMmmSImYKiN5RFCEo/2X/1MqVBBAE3+YcHTBZ2094GEHpLt29naK
5/YexegnofioxjXlYOtnnL1j7fLevvT17o2zBbva/iUtyUetKPKC0Dp48bzLBIix
EJrfgAQ1uPsE1Vj6jVfiblfKjg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:55:58 2026 by rpki-client