Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
File:                     tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft (raw, json)
Hash identifier:          +awmFkj+n5iL9XeYR2RaAZkAjtLza+fgydnDGochheo=
Subject key identifier:   51:BD:99:48:6E:90:FD:72:F8:E7:5E:03:0E:79:0F:41:D5:EE:55:56
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       02BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
Manifest number:          0293
Signing time:             Sun 25 Oct 2026 02:18:13 +0000
Manifest this update:     Sun 25 Oct 2026 02:18:12 +0000
Manifest next update:     Sun 01 Nov 2026 02:18:12 +0000
Files and hashes:         1: tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl (hash: qnhfZLLBs3Vcc5ZAAYcb9qjxrebOirSUdbmsfM6FNeQ=)
                          2: C94C5FD4163911F1B9B26C9A3C3D8C67.roa (hash: MYDqaVFwRJB1jmhIu+ie4ItmCnxfdWtMitAnA5vk2cU=)
                          3: 2D450BA8B58211F094C92178C4F9AE02.roa (hash: 8RovJ5HrPwKr7ltpxn4WzuCgory3ey/kpplqDXgEB7s=)
                          4: 221A3064480411F0A14D5A83C4F9AE02.roa (hash: 2t2Wq1XOsxAK8xIPHJCFe3jwKEwQMUnGPVMPG/cdN/Y=)
                          5: 873859B668B611F1BCF0B20C8047A888.roa (hash: xerdXCtgfdD81kACTYlmhobJVdQsaQnlYFPryqqERd4=)
                          6: 6F4F0F4230AA11F0AD39210DC4F9AE02.roa (hash: 8l1Wjg/gDk9CaJhrRm6w9SVvYUtM+TgdHiZO59WdB4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Oct 25 02:18:12 2026 GMT
            Not After : Nov  1 02:18:12 2026 GMT
        Subject: CN=6add66e4-95ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:64:78:9f:d6:f0:6e:45:b9:fe:c1:8b:7f:
                    19:99:77:00:3a:45:7a:17:d0:65:47:aa:81:de:b3:
                    80:b6:3c:be:fb:d9:24:2d:9e:16:03:f7:1e:9f:31:
                    da:b6:e1:67:70:0c:4c:7f:5a:4b:98:d6:5c:16:3b:
                    92:e3:91:83:7a:bf:b0:a6:3a:45:97:8d:67:23:e1:
                    d4:3b:6c:6c:42:e2:da:a3:07:f7:02:55:19:9f:b3:
                    0d:37:fc:bb:1f:9a:7d:ef:40:aa:8c:1e:de:f2:10:
                    27:15:b8:71:11:83:01:72:33:c5:96:0b:1b:2c:18:
                    de:06:2f:b7:4f:18:ce:28:a4:27:11:09:3b:65:d9:
                    dc:23:d4:f0:2b:e2:d3:09:a6:46:02:ec:fb:7c:fa:
                    a6:72:f5:61:9f:8f:e1:e7:1d:7c:a7:6f:8e:41:90:
                    00:e4:c7:21:67:88:ae:bc:80:f8:c3:e5:3f:13:d0:
                    fd:f7:03:7c:86:e0:e5:2c:27:50:68:96:84:25:ea:
                    60:60:49:10:fb:6d:c0:e6:6f:d0:7e:1d:26:95:db:
                    8f:c9:4e:85:bc:37:45:e5:89:cd:1d:c8:17:c7:04:
                    36:e8:0c:2b:dc:57:32:20:2e:93:8a:18:91:fc:f7:
                    ff:a6:a7:74:5e:b2:a5:d6:92:10:8c:38:2a:ea:47:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BD:99:48:6E:90:FD:72:F8:E7:5E:03:0E:79:0F:41:D5:EE:55:56
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:86:b2:92:1e:1a:2e:5c:ea:8e:bb:66:f1:58:f7:e6:59:
         e1:25:d5:1c:3c:f7:43:b9:dd:12:97:73:6f:27:3b:c5:c2:9c:
         43:de:87:e7:8d:ca:2e:24:94:52:01:95:50:05:82:b4:c6:ce:
         38:a8:68:f7:12:ab:ce:75:5e:99:0d:fc:29:0b:66:b4:78:b3:
         a4:27:46:70:86:6f:e9:b8:91:b8:a9:7e:0d:9e:67:13:d6:a1:
         19:53:99:a0:cc:ad:98:a8:91:0d:9f:3e:19:6d:ae:cc:8b:d2:
         26:a8:78:3a:f2:c4:4f:57:75:e3:51:ec:07:13:26:fb:39:43:
         1a:1f:de:31:98:4b:9f:70:ab:9b:bc:2b:05:d7:8b:8f:bf:38:
         76:6d:94:34:5f:e2:49:ff:93:aa:5b:d4:82:63:c6:0d:cf:21:
         e2:5c:59:69:de:40:9b:2a:18:12:34:10:b5:f3:c0:d2:2e:3c:
         3e:ba:31:5d:cc:6b:39:84:e8:d3:b1:5c:fd:e8:07:da:5c:f0:
         46:ce:25:59:d4:a6:cd:d0:07:ba:83:6c:5a:c9:ee:fd:dc:51:
         8f:a5:82:e4:a9:59:dd:30:e4:54:ed:8c:ef:8f:6d:1f:be:c0:
         69:b3:1d:01:2e:4b:7f:1a:81:2c:d0:54:10:fd:5b:fd:ef:14:
         2d:ba:49:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFFNEQxMTAvBgNVBAUTKEI0NTlCOTE1RDY3QjcyRDgzMzUzODQyMDJEQkZCQjM5
NTY1Qzk0RDgwHhcNMjYxMDI1MDIxODEyWhcNMjYxMTAxMDIxODEyWjAYMRYwFAYD
VQQDEw02YWRkNjZlNC05NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqTtkeJ/W8G5Fuf7Bi38ZmXcAOkV6F9BlR6qB3rOAtjy++9kkLZ4WA/cenzHa
tuFncAxMf1pLmNZcFjuS45GDer+wpjpFl41nI+HUO2xsQuLaowf3AlUZn7MNN/y7
H5p970CqjB7e8hAnFbhxEYMBcjPFlgsbLBjeBi+3TxjOKKQnEQk7ZdncI9TwK+LT
CaZGAuz7fPqmcvVhn4/h5x18p2+OQZAA5MchZ4iuvID4w+U/E9D99wN8huDlLCdQ
aJaEJepgYEkQ+23A5m/Qfh0mlduPyU6FvDdF5YnNHcgXxwQ26Awr3FcyIC6TihiR
/Pf/pqd0XrKl1pIQjDgq6kffMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFG9mUhu
kP1y+OdeAw55D0HV7lVWMB8GA1UdIwQYMBaAFLRZuRXWe3LYM1OEIC2/uzlWXJTY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0RC81N0MzN0UzODBB
NTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0Z3pVNFFnTGItN09WWmNs
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RGbTVGZFo3Y3RnelU0UWdMYi03T1ZaY2xOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUU0RC81N0MzN0UzODBBNTcxMUVFOEM2MzVBNDZDNEY5QUUwMi90Rm01RmRaN2N0
Z3pVNFFnTGItN09WWmNsTmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjO2GspIeGi5c6o67ZvFY9+ZZ4SXVHDz3Q7ndEpdzbyc7xcKcQ96H543KLiSU
UgGVUAWCtMbOOKho9xKrznVemQ38KQtmtHizpCdGcIZv6biRuKl+DZ5nE9ahGVOZ
oMytmKiRDZ8+GW2uzIvSJqh4OvLET1d141HsBxMm+zlDGh/eMZhLn3Crm7wrBdeL
j784dm2UNF/iSf+TqlvUgmPGDc8h4lxZad5AmyoYEjQQtfPA0i48ProxXcxrOYTo
07Fc/egH2lzwRs4lWdSmzdAHuoNsWsnu/dxRj6WC5KlZ3TDkVO2M749tH77AabMd
AS5LfxqBLNBUEP1b/e8ULbpJ8w==
-----END CERTIFICATE-----
Generated at Sun Oct 25 05:14:53 2026 by rpki-client