Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
File:                     MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json)
Hash identifier:          oKm/E5t2YraUq2MjQkZyK9pjRpFnSMfVLRfoPGU5pnw=
Subject key identifier:   12:2E:A8:F2:C9:7D:02:6D:70:C2:41:7E:A7:C7:22:31:AD:20:02:A2
Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
Certificate issuer:       /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
Manifest number:          C8
Signing time:             Tue 27 Oct 2026 06:45:15 +0000
Manifest this update:     Tue 27 Oct 2026 06:45:15 +0000
Manifest next update:     Tue 03 Nov 2026 06:45:15 +0000
Files and hashes:         1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: strtN8vhuHdSnM9F/tkE9ZsGebwLlYCkUEDS9Krh5pg=)
                          2: 9D1F5AC82F1211F1B693ACC09B833773.roa (hash: p36Ed7xsZwcv9rGoTKmCe4vZ8WUDfq/0PpZBbk95ipk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
                          rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 06:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
        Validity
            Not Before: Oct 27 06:45:15 2026 GMT
            Not After : Nov  3 06:45:15 2026 GMT
        Subject: CN=6ae0487b-36b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:84:e8:4d:94:e2:91:84:c4:33:d9:0c:3e:de:
                    dc:c3:f5:6b:8b:4f:52:38:cb:e1:a9:45:21:04:9d:
                    18:0c:dd:66:c2:40:53:85:5e:5f:02:81:21:3c:e7:
                    3a:d1:29:5f:5f:71:aa:be:9d:6f:ce:58:f3:b6:cf:
                    f2:9a:de:20:f6:92:a7:e4:3f:11:20:35:4b:56:fd:
                    2e:34:69:c3:d6:5e:45:cc:8e:57:f5:0d:61:69:ba:
                    f5:ce:48:7e:e9:45:1a:41:0d:67:5f:bb:67:f7:11:
                    a7:3b:4d:24:b0:4a:65:65:fb:5a:3d:31:ac:9e:29:
                    c0:6f:05:32:a0:36:2e:52:77:a3:cc:36:0c:f2:10:
                    58:75:34:01:26:f3:c9:87:8b:a2:e1:4b:84:63:70:
                    01:59:0c:5c:f4:82:fb:50:b0:4f:3b:f4:ad:8f:dd:
                    43:3c:fd:89:7c:33:54:c1:33:a9:5d:3b:f3:7d:e8:
                    be:d2:b5:e1:11:61:ae:12:8e:f7:86:88:e2:54:60:
                    c4:11:2b:8d:00:0f:22:cd:ca:a7:f5:f8:85:3f:46:
                    d2:da:4f:60:8c:37:73:d8:6d:e9:26:65:1e:07:bf:
                    1f:3a:a3:23:05:fa:fd:5a:20:97:5e:cf:92:0c:3b:
                    46:ea:cf:a4:11:b9:71:85:c1:29:ad:45:d3:7b:c5:
                    88:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2E:A8:F2:C9:7D:02:6D:70:C2:41:7E:A7:C7:22:31:AD:20:02:A2
            X509v3 Authority Key Identifier:
                keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:16:42:01:07:e1:94:2c:53:16:e7:34:c9:28:48:ae:46:
         c8:3f:6e:05:e6:8b:ce:2f:89:44:8e:b2:a6:e0:c3:3f:ee:fe:
         f0:3d:75:36:95:20:87:29:1d:ea:94:9c:da:a9:26:44:7f:e2:
         c4:e5:1c:01:8a:0f:e1:24:7c:79:c4:c8:1f:0f:68:91:9f:d7:
         3d:3a:cf:07:11:3e:e0:e1:eb:a1:92:12:7a:17:f2:71:80:35:
         75:35:de:11:df:6d:68:74:2b:1c:09:bb:fc:7e:63:ba:a9:7c:
         2a:4d:e8:d0:2e:93:9d:9d:ed:19:65:aa:77:25:5b:e4:d8:66:
         09:13:af:c8:8d:28:7c:f4:91:a3:ed:d5:60:73:8b:24:e1:cb:
         ea:98:27:fa:d6:34:48:62:ee:ad:f2:d6:82:a0:18:e0:03:18:
         86:bc:d8:aa:29:e0:16:a3:7f:28:f5:18:16:ec:6c:f8:5f:82:
         cb:be:a2:90:a6:4b:d7:34:75:d7:1c:c0:b9:71:f9:17:51:90:
         3e:96:f6:e1:1d:08:e8:b7:35:f6:b8:5f:0d:14:f6:b4:bf:9f:
         5a:c3:05:e4:07:ef:9c:30:0e:0a:66:26:7a:1f:a0:df:3b:bc:
         4a:88:cf:05:f0:38:79:06:70:e5:57:9e:e3:e8:dd:13:fb:e4:
         aa:84:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 01:46:39 2026 by rpki-client