Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
File:                     7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json)
Hash identifier:          5r2vQfSu9W5Blcpij3AVhkawe7x/fvTWkzi5iRQ7IKE=
Subject key identifier:   6B:A1:28:F9:72:88:08:09:85:14:2A:E8:B4:BD:70:17:1E:54:36:68
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Certificate issuer:       /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial:       01DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
Manifest number:          01D2
Signing time:             Tue 27 Oct 2026 03:57:09 +0000
Manifest this update:     Tue 27 Oct 2026 03:57:08 +0000
Manifest next update:     Tue 03 Nov 2026 03:57:08 +0000
Files and hashes:         1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: Uah9i7+VAYxJZuYoieBnLepsoZTWiuh41djeEXuyqmI=)
                          2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: yK/WcBJQdA4buA3EZ+0KrWMfv9XG+NNlOPVNviCvGZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
                          rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 03:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
        Validity
            Not Before: Oct 27 03:57:08 2026 GMT
            Not After : Nov  3 03:57:08 2026 GMT
        Subject: CN=6ae02115-8860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:52:19:f1:18:3c:f4:32:60:fa:9b:91:bc:
                    5b:92:94:56:af:f8:b8:ef:78:6e:90:9a:66:da:58:
                    44:39:fb:64:99:99:fa:5a:ae:4a:ae:63:85:52:1e:
                    3d:43:47:20:a8:40:2b:c9:52:d0:fb:fc:24:19:94:
                    5c:6f:a6:ef:07:8b:26:0f:76:11:6c:65:de:cb:89:
                    2d:7a:fe:ae:24:30:14:95:c3:16:e4:aa:43:34:a8:
                    7d:9b:3b:83:19:85:25:52:cf:c2:22:8f:19:66:5d:
                    1e:0f:05:53:57:6d:ee:56:c5:8e:ab:b2:b3:7e:1f:
                    f4:70:95:ae:2c:53:5f:c4:5e:ad:c8:cb:52:55:db:
                    ba:55:d9:85:d1:5e:b4:5f:6d:33:a6:3e:53:e7:39:
                    03:64:2c:ad:20:67:13:bc:28:c3:75:72:2e:3d:bc:
                    6d:ea:72:15:58:0a:97:ae:2d:06:1a:69:06:41:7d:
                    9c:91:81:c9:52:cd:dd:20:a1:c7:c3:f7:60:4d:a6:
                    4d:a9:09:fe:e4:08:ab:bb:d1:78:72:96:a2:88:6e:
                    72:3a:7d:e7:d9:6d:c1:d2:44:79:5b:73:04:1a:37:
                    85:bd:d7:c0:60:3b:40:d6:42:90:7a:8c:07:cb:78:
                    52:98:35:ac:ca:c1:33:73:50:69:ef:82:63:b4:08:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:28:F9:72:88:08:09:85:14:2A:E8:B4:BD:70:17:1E:54:36:68
            X509v3 Authority Key Identifier:
                keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2b:d2:d0:a0:53:af:3d:04:f6:c9:b6:7f:44:fa:d9:f2:80:
         dc:ac:a9:61:c2:4e:0c:13:b7:96:42:62:55:4f:4d:b9:cf:c3:
         94:d8:75:e9:36:fb:d7:a4:89:53:4c:fc:3b:18:78:3a:7d:a2:
         1a:30:aa:09:c9:1d:9d:e1:29:e9:4c:d9:94:84:13:db:00:cd:
         09:91:de:6f:ec:20:51:9f:05:0d:d1:91:55:36:34:19:6c:27:
         05:9d:a5:b3:43:89:d2:3a:1a:c1:91:aa:a9:2f:b5:32:a2:fd:
         e4:b6:1b:07:2e:a5:de:6a:f1:15:8d:11:1e:6d:59:61:f6:1e:
         64:f5:d9:88:61:87:93:f5:da:54:6a:3c:66:5d:7d:de:fe:5e:
         ad:43:dc:6f:88:71:f9:cd:49:d7:a3:92:ff:0a:10:52:19:5f:
         6a:46:7a:a7:6f:9f:c2:88:b0:f0:fd:b4:bf:22:07:39:3b:6c:
         6d:d1:ea:14:7d:36:0f:42:97:b9:25:ae:bc:8f:92:60:7e:19:
         b3:db:6e:7b:05:4e:a7:d8:c6:bd:64:89:4f:7d:a3:81:c0:d1:
         cf:da:55:cb:77:92:bb:99:e4:03:74:54:2c:35:84:fc:92:9c:
         09:c2:14:44:5a:2c:e4:c4:dd:08:23:fa:3d:f0:93:9f:f5:fa:
         42:29:20:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx
ODdEOTdGMzMwHhcNMjYxMDI3MDM1NzA4WhcNMjYxMTAzMDM1NzA4WjAYMRYwFAYD
VQQDEw02YWUwMjExNS04ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpFSGfEYPPQyYPqbkbxbkpRWr/i473hukJpm2lhEOftkmZn6Wq5KrmOFUh49
Q0cgqEAryVLQ+/wkGZRcb6bvB4smD3YRbGXey4ktev6uJDAUlcMW5KpDNKh9mzuD
GYUlUs/CIo8ZZl0eDwVTV23uVsWOq7Kzfh/0cJWuLFNfxF6tyMtSVdu6VdmF0V60
X20zpj5T5zkDZCytIGcTvCjDdXIuPbxt6nIVWAqXri0GGmkGQX2ckYHJUs3dIKHH
w/dgTaZNqQn+5Airu9F4cpaiiG5yOn3n2W3B0kR5W3MEGjeFvdfAYDtA1kKQeowH
y3hSmDWsysEzc1Bp74JjtAgZKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuhKPly
iAgJhRQq6LS9cBceVDZoMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy
OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha
U05rcG40cFBrcHdZZlpmek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZSvS0KBTrz0E9sm2f0T62fKA3KypYcJODBO3lkJiVU9Nuc/DlNh16Tb716SJ
U0z8Oxh4On2iGjCqCckdneEp6UzZlIQT2wDNCZHeb+wgUZ8FDdGRVTY0GWwnBZ2l
s0OJ0joawZGqqS+1MqL95LYbBy6l3mrxFY0RHm1ZYfYeZPXZiGGHk/XaVGo8Zl19
3v5erUPcb4hx+c1J16OS/woQUhlfakZ6p2+fwoiw8P20vyIHOTtsbdHqFH02D0KX
uSWuvI+SYH4Zs9tuewVOp9jGvWSJT32jgcDRz9pVy3eSu5nkA3RULDWE/JKcCcIU
RFos5MTdCCP6PfCTn/X6Qikg+A==
-----END CERTIFICATE-----
Generated at Tue Oct 27 19:35:01 2026 by rpki-client