Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
File:                     o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json)
Hash identifier:          qKKLa7n/CALVfBr0MjhC1fGzRto8Z2mQYrgkGCa7yVQ=
Subject key identifier:   9E:87:85:D4:2A:BD:95:00:11:1F:C7:F0:A7:21:71:57:27:13:AA:12
Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
Certificate issuer:       /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
Manifest number:          0205
Signing time:             Mon 19 Oct 2026 03:44:32 +0000
Manifest this update:     Mon 19 Oct 2026 03:44:32 +0000
Manifest next update:     Mon 26 Oct 2026 03:44:32 +0000
Files and hashes:         1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: ifVP03Ov7jsMj8uu5+3AxpYX6ggxWcKNSuYXCv9ICe0=)
                          2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: vF01duODiwTYz9/MMIZAj5OF+2YRcDoyyVIZ0SFGCBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
                          rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 03:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
        Validity
            Not Before: Oct 19 03:44:32 2026 GMT
            Not After : Oct 26 03:44:32 2026 GMT
        Subject: CN=6ad59220-de77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:4a:f1:47:79:71:c0:1e:95:39:12:4c:59:
                    2f:04:0c:49:d1:30:65:39:23:50:8e:e9:32:02:4e:
                    bd:fe:73:6a:fa:e0:a4:e3:98:7c:1b:df:0f:48:d4:
                    d8:65:42:85:0a:9a:61:3b:ee:b4:d7:db:e0:a2:c2:
                    72:f3:2b:5f:8a:d5:34:77:b3:9d:b8:c2:d9:11:26:
                    49:86:69:60:83:92:f6:08:0e:67:89:ce:11:28:08:
                    53:8d:da:2d:9e:a1:4f:c9:28:7c:23:0b:fb:1c:d8:
                    0a:9f:50:75:0a:88:e2:66:3a:49:34:9d:2e:2e:7a:
                    73:62:30:31:f3:5b:9d:c9:dd:56:68:ea:f1:e6:d0:
                    d1:3a:c2:31:f4:fb:ee:48:d5:23:92:14:56:78:e8:
                    e8:aa:38:46:76:b4:17:26:24:18:dc:7f:80:62:a8:
                    a1:15:46:42:de:d1:c4:9f:68:c8:2f:36:f1:a2:36:
                    44:dd:dd:07:19:00:6c:ad:44:7b:38:91:16:27:49:
                    1f:b9:35:b5:1d:29:75:be:8a:08:ee:40:dc:11:81:
                    57:d0:e0:5c:c9:33:0a:a8:c1:6d:a8:d4:19:5c:71:
                    6c:9e:de:95:4a:f7:71:f9:ec:84:14:9a:04:0b:69:
                    44:2c:64:71:c2:61:20:3b:79:c2:c9:f9:aa:23:35:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:87:85:D4:2A:BD:95:00:11:1F:C7:F0:A7:21:71:57:27:13:AA:12
            X509v3 Authority Key Identifier:
                keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0d:14:d7:a7:11:8d:b2:9d:c0:ae:7d:57:96:30:81:d4:b2:
         80:2d:42:fa:d7:c7:0f:75:96:4f:69:c5:b6:71:03:65:9c:8f:
         7e:7c:01:4e:50:13:a5:40:46:1b:76:8e:32:20:d5:aa:c0:a2:
         a3:c9:13:f9:26:61:d4:71:b9:56:54:e6:43:ce:83:4d:ba:30:
         f4:b1:1d:30:28:c4:99:1c:fe:04:54:a4:c9:84:e3:2d:ef:4a:
         ef:3a:cf:b9:80:8e:b7:95:36:ee:44:46:73:d2:10:8c:f0:05:
         f6:70:0f:d6:96:76:96:16:23:7f:af:08:05:11:6f:1f:05:6d:
         ab:af:b1:1d:b7:d9:2b:42:6e:b6:74:ba:1d:8f:46:d0:53:fb:
         55:84:12:d3:7c:b2:bd:d4:96:e6:9d:c0:1c:66:65:d2:14:ba:
         23:30:73:ab:2c:94:aa:d2:58:6f:ef:e4:58:1b:a8:c4:7a:30:
         dd:a2:13:14:d4:4b:2c:1b:78:48:b8:38:33:97:0d:4d:42:ca:
         71:d3:93:d2:99:f1:7e:c2:e6:04:6e:a3:e0:8c:0f:71:60:29:
         55:9d:39:e1:6e:c3:ed:45:45:3a:8c:bc:1f:8a:c4:13:b0:56:
         a1:87:3c:5f:22:97:fb:c6:2d:81:0a:3d:69:ed:4c:b6:16:82:
         0a:ff:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:19:39 2026 by rpki-client