Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
File:                     8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json)
Hash identifier:          CCJrgPykeaI5FBKku24678af/MTzjywi+tAWO3sh0Fg=
Subject key identifier:   6D:02:EC:65:02:06:14:72:C0:CB:00:07:D1:A5:C7:64:06:83:90:64
Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD
Certificate issuer:       /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
Manifest number:          0192
Signing time:             Sun 18 Oct 2026 14:23:38 +0000
Manifest this update:     Sun 18 Oct 2026 14:23:37 +0000
Manifest next update:     Sun 25 Oct 2026 14:23:37 +0000
Files and hashes:         1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: fqS1BF3n+BBZTQUBTZleSdu0kA6EdJSoS0uCy9hF3HM=)
                          2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: zGks7qHpLfdO3p16sWS5WDnYQ5Sg97quDi3f+bACE6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl
                          rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 14:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD
        Validity
            Not Before: Oct 18 14:23:37 2026 GMT
            Not After : Oct 25 14:23:37 2026 GMT
        Subject: CN=6ad4d66a-a015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bb:55:40:89:8e:68:8b:c0:c4:ec:e8:25:9c:
                    f2:c0:c7:03:bd:18:85:df:f2:2a:41:02:68:3b:58:
                    9a:42:a1:05:5d:3f:74:cb:03:4b:11:b7:29:66:0e:
                    cd:0a:4c:1d:42:8b:7c:bc:9e:40:eb:9a:41:15:9e:
                    96:a9:f5:d0:61:57:06:2c:da:86:4f:45:44:2d:71:
                    ca:ea:8b:77:6b:00:05:cb:a2:b1:09:49:25:b8:57:
                    ad:5a:b7:fd:9a:5f:0d:68:23:0c:64:1b:7a:4f:65:
                    62:87:bc:75:17:24:47:a5:32:fe:8c:24:9b:d9:c7:
                    ae:a0:5b:69:05:fd:bd:0d:c0:72:c4:91:38:02:26:
                    8b:6e:4f:79:24:ad:99:ad:0d:e7:12:67:53:38:df:
                    be:a4:dc:ed:1a:9b:80:29:13:4b:01:2d:0b:de:ed:
                    29:98:ce:ce:26:66:3b:90:98:a6:d9:af:c8:a4:99:
                    85:c0:ef:1e:a4:db:13:3f:a7:65:33:53:53:db:69:
                    79:97:6f:4a:4c:a9:22:7b:3a:67:47:1e:f4:78:6e:
                    55:1b:87:78:51:e8:40:8a:35:5d:76:d2:3b:cb:b4:
                    ec:10:af:06:f3:ed:ff:10:bd:ef:93:00:9c:dc:88:
                    9b:ae:92:cd:f9:67:24:48:d7:89:cd:05:1b:89:b6:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:EC:65:02:06:14:72:C0:CB:00:07:D1:A5:C7:64:06:83:90:64
            X509v3 Authority Key Identifier:
                keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:36:e5:59:9c:77:f1:40:81:55:8d:06:12:71:0c:92:c8:73:
         81:e7:36:1e:ef:c5:3c:b1:ac:2c:07:c6:39:b0:51:97:6d:35:
         fe:5c:72:40:89:36:3e:a8:9a:9b:40:2d:bc:ff:46:d8:5f:e2:
         17:aa:31:70:9c:06:aa:31:74:90:c7:9a:bf:92:8b:b3:dc:46:
         1e:b9:e6:50:24:41:83:f4:fa:97:37:e1:1f:79:ff:be:a8:09:
         52:f6:f3:60:cf:26:d6:67:6f:fe:f8:44:97:da:90:39:0e:43:
         89:fd:6d:e2:12:a8:cd:82:bc:f4:ea:62:15:3a:6b:85:d1:eb:
         71:ac:50:34:4d:ca:2b:a2:99:18:81:78:91:10:82:9e:97:eb:
         f9:57:91:ab:8a:8a:6a:b5:28:b9:60:4e:e1:7f:87:0e:8b:29:
         e5:d6:43:e5:40:1f:5f:d9:ba:70:7b:09:ff:d9:76:14:1f:ac:
         dc:44:76:58:90:e9:0c:c4:0c:21:2f:99:b5:3b:d4:25:ba:32:
         2a:bc:35:0b:be:5e:46:91:3f:5c:70:ae:63:a4:f1:65:c5:a7:
         26:e4:e9:ad:98:87:96:17:15:e3:04:9f:3d:80:cb:32:9e:28:
         04:39:bc:df:0c:40:93:05:5f:86:9e:b2:b9:c0:9f:c0:27:91:
         11:ef:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:02:29 2026 by rpki-client