Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
File:                     clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json)
Hash identifier:          nyUeMGgxXUTQdMoM5JAQQy34hRGNPZyFERbq9O5HUW0=
Subject key identifier:   82:3A:49:77:AA:A5:1B:BC:F0:89:E9:2B:97:34:6A:01:0C:1F:3E:CC
Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50
Certificate issuer:       /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
Certificate serial:       0313
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
Manifest number:          02FC
Signing time:             Fri 09 Oct 2026 01:22:49 +0000
Manifest this update:     Fri 09 Oct 2026 01:22:49 +0000
Manifest next update:     Fri 16 Oct 2026 01:22:49 +0000
Files and hashes:         1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: WMI4O0CwIcHh32BfbHqZG6rIPWfz90hPQ/ImVXlKwuc=)
                          2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: 3F76+/pywIgq4up6QdaE+4ZKESRRgIpgKoPHHB5UszA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl
                          rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 01:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50
        Validity
            Not Before: Oct  9 01:22:49 2026 GMT
            Not After : Oct 16 01:22:49 2026 GMT
        Subject: CN=6ac841e9-9bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:e2:f7:1c:1a:28:62:aa:be:34:83:b0:7b:
                    af:3e:f9:6e:66:b2:f0:68:36:3b:16:3b:5c:d9:d4:
                    e3:f1:c9:27:40:73:4c:dc:d3:16:31:1f:b3:c8:1a:
                    90:99:2e:c0:49:e1:7d:2f:ca:b1:d8:f5:07:bf:8a:
                    af:d6:bd:c4:0d:37:59:2a:95:86:af:d7:e1:93:f0:
                    ba:ff:2f:03:53:b8:cf:67:31:ba:eb:9e:8f:10:a3:
                    46:2e:ff:68:0e:76:08:a3:4c:db:b6:02:08:df:59:
                    72:28:89:5e:cb:b4:5f:79:20:aa:83:6d:79:3e:67:
                    12:86:1f:a7:70:fd:9d:6c:68:90:7f:56:bb:18:ac:
                    93:ad:b4:0c:53:ad:db:01:8f:7c:45:90:53:b7:0e:
                    71:1e:c8:72:99:03:c4:db:c6:c8:da:bc:f0:31:47:
                    52:94:f9:ca:fc:ba:df:86:73:b6:9f:b2:3a:1f:79:
                    5f:5e:05:51:cc:a9:4a:28:0c:84:ef:1b:d2:ff:7a:
                    a2:60:21:e2:1b:c7:56:02:24:4c:cd:a8:aa:3f:b4:
                    29:28:5b:55:42:99:76:24:14:18:e1:38:69:5c:db:
                    57:71:c9:c8:7d:00:2b:2a:c0:a4:99:d6:f6:50:d5:
                    c9:c0:56:e0:1d:09:e1:ef:77:3a:fa:01:b0:17:d0:
                    e2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3A:49:77:AA:A5:1B:BC:F0:89:E9:2B:97:34:6A:01:0C:1F:3E:CC
            X509v3 Authority Key Identifier:
                keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:80:6c:a9:cb:b5:cf:88:f3:58:a6:8e:e4:e8:0f:3e:c4:3b:
         b4:06:42:47:00:6c:4b:84:40:ab:20:fc:69:d2:38:b9:22:ec:
         f7:64:f5:38:10:71:ee:02:ee:c5:4a:0b:7f:6d:f9:26:06:9f:
         f7:91:2b:b5:d9:50:41:81:59:71:47:ea:d6:40:2b:d1:1a:f9:
         07:69:ea:c6:25:2e:cd:a3:3c:8f:bf:bb:20:33:3b:da:05:b0:
         6b:96:56:08:37:5f:28:6c:d4:be:6f:38:1e:67:83:e4:ad:68:
         d8:d4:3c:e8:0c:08:a4:b4:a4:8c:d3:4a:17:64:28:0c:2e:65:
         2e:36:9a:a7:45:3d:72:ed:13:fc:bd:67:a0:0c:33:9a:4c:ae:
         bb:22:45:28:8d:3b:aa:8a:e5:61:ad:4c:af:8d:30:07:91:95:
         4d:cb:25:83:8b:eb:34:e5:4c:a2:e8:40:8a:cd:ad:a3:df:f5:
         17:7b:a1:31:17:20:3b:85:11:aa:0c:89:0f:25:2b:59:be:46:
         01:c4:27:88:b1:74:db:5b:9e:91:48:63:e4:c5:c7:31:b8:f8:
         3d:c7:a4:8b:2d:16:7c:e6:06:86:93:03:70:82:d4:be:65:db:
         9e:f6:e0:1b:f7:43:6e:96:45:0f:9d:06:e0:59:da:6e:c3:d4:
         e3:de:3f:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx
NTNENTFGNTAwHhcNMjYxMDA5MDEyMjQ5WhcNMjYxMDE2MDEyMjQ5WjAYMRYwFAYD
VQQDEw02YWM4NDFlOS05YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqsLi9xwaKGKqvjSDsHuvPvluZrLwaDY7Fjtc2dTj8cknQHNM3NMWMR+zyBqQ
mS7ASeF9L8qx2PUHv4qv1r3EDTdZKpWGr9fhk/C6/y8DU7jPZzG6656PEKNGLv9o
DnYIo0zbtgII31lyKIley7RfeSCqg215PmcShh+ncP2dbGiQf1a7GKyTrbQMU63b
AY98RZBTtw5xHshymQPE28bI2rzwMUdSlPnK/LrfhnO2n7I6H3lfXgVRzKlKKAyE
7xvS/3qiYCHiG8dWAiRMzaiqP7QpKFtVQpl2JBQY4ThpXNtXccnIfQArKsCkmdb2
UNXJwFbgHQnh73c6+gGwF9DizwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFII6SXeq
pRu88InpK5c0agEMHz7MMB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD
ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODE2Ni8zRTYxMjI5NDRDODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9a
UlZROWgtanJCVzhWUFZIMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuYBsqcu1z4jzWKaO5OgPPsQ7tAZCRwBsS4RAqyD8adI4uSLs92T1OBBx7gLu
xUoLf235Jgaf95ErtdlQQYFZcUfq1kAr0Rr5B2nqxiUuzaM8j7+7IDM72gWwa5ZW
CDdfKGzUvm84HmeD5K1o2NQ86AwIpLSkjNNKF2QoDC5lLjaap0U9cu0T/L1noAwz
mkyuuyJFKI07qorlYa1Mr40wB5GVTcslg4vrNOVMouhAis2to9/1F3uhMRcgO4UR
qgyJDyUrWb5GAcQniLF021uekUhj5MXHMbj4Pcekiy0WfOYGhpMDcILUvmXbnvbg
G/dDbpZFD50G4FnabsPU494/Cg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 06:30:31 2026 by rpki-client