Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
File:                     pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json)
Hash identifier:          vKpZTNhJMDDCCrSCkDxP3fgXn6Ny6akwePe2ZzDmOig=
Subject key identifier:   4F:A3:78:C5:4C:52:F7:B8:07:FE:2D:DF:4D:DE:6F:20:65:6B:1A:8A
Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76
Certificate issuer:       /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
Certificate serial:       0419
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
Manifest number:          0411
Signing time:             Sat 03 Oct 2026 00:40:39 +0000
Manifest this update:     Sat 03 Oct 2026 00:40:38 +0000
Manifest next update:     Sat 10 Oct 2026 00:40:38 +0000
Files and hashes:         1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: NffwwZj41nEsRKj9SnL58+2gAHY5/MsnR8QhR5DzmwQ=)
                          2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: hAQl9H75BpKmN7Muu51VVyZ+oy7nwK9cCULcraz4/lY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76
        Validity
            Not Before: Oct  3 00:40:38 2026 GMT
            Not After : Oct 10 00:40:38 2026 GMT
        Subject: CN=6ac04f06-ee30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:d5:2c:cf:e1:d3:ee:16:90:f8:e1:0e:28:
                    ee:1d:64:5d:e8:e4:fc:e6:0e:42:90:c0:02:78:e7:
                    8f:f1:1d:5b:10:59:bb:5e:ae:20:24:ec:6b:81:75:
                    bb:ea:e3:00:2a:3e:fc:fc:fb:85:c3:ec:33:21:07:
                    b0:22:6c:3f:38:90:c5:0a:64:f1:74:6d:45:f4:f0:
                    7b:b8:f9:4f:84:b6:38:9f:ce:9f:d3:c5:e0:69:6e:
                    9c:c5:11:88:6a:bf:09:01:30:83:dc:f8:df:1c:b2:
                    d1:44:bc:2d:34:4f:4b:b0:15:8f:fc:4a:6c:a9:b5:
                    e9:6f:40:84:a9:e5:82:5d:34:a3:09:9f:79:d4:d6:
                    f2:41:15:c4:d7:7f:81:11:ad:ed:81:90:80:e7:d5:
                    c0:a4:f1:8e:d2:7a:a2:1b:86:43:cd:cb:91:6c:86:
                    c2:5d:eb:05:c1:f4:a4:41:ab:92:6b:b7:e4:97:9b:
                    73:b6:67:29:53:a2:f0:86:f2:14:8f:ff:5a:4d:5d:
                    eb:16:1d:c4:13:ad:44:73:b0:49:7f:a4:ec:40:22:
                    86:7a:6d:92:99:ee:44:6f:32:b7:c6:48:c2:5a:0c:
                    b3:58:f0:cf:75:30:c9:9a:9a:7b:6b:64:36:f4:d1:
                    27:df:d8:11:67:3b:b1:54:8a:4a:3b:bc:1e:d3:3f:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A3:78:C5:4C:52:F7:B8:07:FE:2D:DF:4D:DE:6F:20:65:6B:1A:8A
            X509v3 Authority Key Identifier:
                keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:78:07:70:88:6a:2f:69:0a:fe:93:ba:c4:4c:ec:18:b6:bf:
         9f:e5:1a:a4:1f:3a:6d:f6:27:ff:6b:09:28:92:84:80:8b:9d:
         a2:b6:7e:70:ec:62:f0:7e:c2:6d:f5:35:68:35:3c:3e:e1:03:
         50:86:b3:4a:e7:04:10:5b:ce:71:1c:84:40:9a:a3:03:7a:10:
         8a:0a:20:ed:b2:9f:e4:d8:11:e7:6e:5f:df:17:c8:18:fb:12:
         73:b3:aa:ab:b8:49:5d:26:d7:27:18:2c:29:a5:1a:1e:b1:84:
         39:37:f2:f8:77:f6:1e:bf:2c:cb:7c:d5:e9:3f:59:27:b2:ba:
         2c:01:77:fb:ab:9e:b5:3e:f5:86:54:b1:d2:3c:93:dc:79:48:
         1c:ce:b5:85:34:39:c8:2b:24:36:7a:15:35:74:6a:5a:03:82:
         ea:87:42:27:28:4d:99:16:54:9e:88:34:f5:7c:eb:0f:fa:bc:
         17:8d:8f:48:e9:2b:5c:96:4e:2a:15:ae:72:fe:8d:b0:fe:6b:
         c6:84:cc:7e:64:c3:79:de:62:97:96:c0:50:b5:c7:f1:0c:f3:
         f3:57:c9:10:c6:ae:3c:a0:27:5d:b4:19:2e:e8:93:5d:37:bf:
         eb:46:7a:18:62:91:ed:6d:6c:de:f3:86:85:62:5e:ce:5d:5c:
         4a:6a:01:27
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0
NEE3QThCNzYwHhcNMjYxMDAzMDA0MDM4WhcNMjYxMDEwMDA0MDM4WjAYMRYwFAYD
VQQDEw02YWMwNGYwNi1lZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnL3VLM/h0+4WkPjhDijuHWRd6OT85g5CkMACeOeP8R1bEFm7Xq4gJOxrgXW7
6uMAKj78/PuFw+wzIQewImw/OJDFCmTxdG1F9PB7uPlPhLY4n86f08XgaW6cxRGI
ar8JATCD3PjfHLLRRLwtNE9LsBWP/EpsqbXpb0CEqeWCXTSjCZ951NbyQRXE13+B
Ea3tgZCA59XApPGO0nqiG4ZDzcuRbIbCXesFwfSkQauSa7fkl5tztmcpU6LwhvIU
j/9aTV3rFh3EE61Ec7BJf6TsQCKGem2Sme5EbzK3xkjCWgyzWPDPdTDJmpp7a2Q2
9NEn39gRZzuxVIpKO7we0z9A7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+jeMVM
Uve4B/4t303ebyBlaxqKMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx
NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp
M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD
UlV4WC1EN3NQazlFcDZpM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlHgHcIhqL2kK/pO6xEzsGLa/n+UapB86bfYn/2sJKJKEgIudorZ+cOxi8H7C
bfU1aDU8PuEDUIazSucEEFvOcRyEQJqjA3oQigog7bKf5NgR525f3xfIGPsSc7Oq
q7hJXSbXJxgsKaUaHrGEOTfy+Hf2Hr8sy3zV6T9ZJ7K6LAF3+6uetT71hlSx0jyT
3HlIHM61hTQ5yCskNnoVNXRqWgOC6odCJyhNmRZUnog09XzrD/q8F42PSOkrXJZO
KhWucv6NsP5rxoTMfmTDed5il5bAULXH8Qzz81fJEMauPKAnXbQZLuiTXTe/60Z6
GGKR7W1s3vOGhWJezl1cSmoBJw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:56:32 2026 by rpki-client