Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
File:                     aFVDc0Du-d9CM6owWYMBIXsKHFU.mft (raw, json)
Hash identifier:          819DJeIoU28eDLXFqmOIONB1HWtDTsW1vE1gOu2UaE0=
Subject key identifier:   23:4F:31:99:1D:D9:96:1B:B2:97:B4:90:6F:95:F2:CA:B3:3D:C6:10
Authority key identifier: 68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55
Certificate issuer:       /CN=A9110C8B/serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
Manifest number:          8D
Signing time:             Mon 19 Oct 2026 08:15:26 +0000
Manifest this update:     Mon 19 Oct 2026 08:15:26 +0000
Manifest next update:     Mon 26 Oct 2026 08:15:26 +0000
Files and hashes:         1: aFVDc0Du-d9CM6owWYMBIXsKHFU.crl (hash: H0b4PrB3f9LVS7PG5CsMEajB6n/SOV11fCNzlz9JHDs=)
                          2: 069AADE4F66B11F0A47B438A6F6F56BC.roa (hash: TWzuzM5wtFo01MWyTRGBS+4PovirNG3yt3IyJZZ9w74=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl
                          rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C8B, serialNumber=6855437340EEF9DF4233AA30598301217B0A1C55
        Validity
            Not Before: Oct 19 08:15:26 2026 GMT
            Not After : Oct 26 08:15:26 2026 GMT
        Subject: CN=6ad5d19e-eca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:af:8e:fa:2a:15:4b:02:c7:23:d2:42:64:
                    cb:49:fe:78:63:b6:68:79:bf:8b:50:c5:64:20:be:
                    07:2e:62:05:43:c5:27:a8:8c:c4:8f:5a:1f:7c:c1:
                    a1:c4:05:92:79:6d:55:14:1a:9f:1a:1e:2d:08:e4:
                    29:19:7c:78:f5:af:ee:f4:b1:37:3d:03:76:6b:a2:
                    60:c4:68:88:2e:a8:83:35:de:63:14:9b:b4:67:ee:
                    ab:4c:41:74:fe:6f:c7:09:15:0c:c2:b6:b8:0b:e8:
                    4f:05:56:22:39:8d:65:da:10:bd:c8:38:90:99:76:
                    d4:18:48:d8:aa:1d:1a:c3:0b:ea:3e:92:be:dc:c6:
                    40:ce:78:96:77:c5:af:e1:12:41:e7:af:b2:3f:6c:
                    0d:98:ee:67:f0:c8:c9:97:ec:24:1f:e4:5f:b1:c1:
                    01:95:75:4e:2a:77:77:a9:da:db:22:90:3d:f4:14:
                    64:23:8b:17:88:c9:c0:6d:3b:7f:a9:0b:8c:8a:a0:
                    3f:b4:af:b8:1e:7b:83:4a:b8:01:64:bd:5e:db:19:
                    d6:6c:61:7f:61:f7:8b:37:f1:0f:3d:f4:7e:b2:04:
                    d2:32:49:2e:0b:5b:b6:2a:21:28:63:8d:ab:37:ae:
                    28:43:89:a5:ea:50:98:46:aa:99:a4:60:93:76:36:
                    be:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4F:31:99:1D:D9:96:1B:B2:97:B4:90:6F:95:F2:CA:B3:3D:C6:10
            X509v3 Authority Key Identifier:
                keyid:68:55:43:73:40:EE:F9:DF:42:33:AA:30:59:83:01:21:7B:0A:1C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aFVDc0Du-d9CM6owWYMBIXsKHFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C8B/9460274AF66A11F0A3FB90886F6F56BC/aFVDc0Du-d9CM6owWYMBIXsKHFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:62:46:96:24:4a:3a:e4:77:9e:d2:cf:13:cd:a8:3f:2c:
         fa:7c:f5:f1:22:52:68:1e:c4:47:4d:35:01:19:93:4c:7c:c2:
         b5:4a:2e:b2:d8:5d:ba:75:b2:6a:93:e4:d5:8d:a2:f8:e0:6b:
         64:cf:8d:4c:89:cc:e1:ff:b9:91:88:01:1b:f6:de:e9:88:46:
         a9:57:6f:0c:c9:b4:c8:31:02:5e:e2:b0:2a:34:e7:ca:64:d6:
         08:eb:be:35:c3:64:52:10:48:f3:f3:40:e9:e3:cc:c6:c5:20:
         1d:15:d0:6d:52:24:00:af:69:48:b0:ec:e1:7f:a4:a8:fd:b5:
         7a:bf:9b:89:e5:6a:29:81:63:85:95:a8:bf:61:5f:7f:e1:77:
         84:82:69:67:7f:d5:ce:29:bc:d8:a7:32:6b:41:70:60:23:cf:
         6b:8c:86:4a:95:e5:b6:95:5d:df:94:99:98:9d:23:a5:c6:0d:
         5c:e1:5e:c6:2f:57:bb:25:82:2f:26:6d:1d:72:5a:0d:e2:1b:
         8b:06:80:28:f1:c0:93:0a:05:e0:ef:1d:d9:63:28:41:ee:e0:
         8c:aa:8e:35:a2:30:9e:c6:fb:8a:83:e6:16:ea:f7:b8:d8:cb:
         93:43:24:01:c6:b9:9c:e5:04:2a:ad:c0:d9:36:db:02:27:80:
         df:5b:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:49:57 2026 by rpki-client