Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft
File:                     sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft (raw, json)
Hash identifier:          m6XCBqXCvxn0+nTalxUQe6DiEM5G+Cay17OaGXHP4DM=
Subject key identifier:   C4:8C:FF:9A:F8:9F:5B:7E:D0:E4:17:E9:9A:73:45:CD:B2:D5:60:6A
Authority key identifier: B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50
Certificate issuer:       /CN=A911C53A/serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft
Manifest number:          FE
Signing time:             Wed 07 Oct 2026 06:44:48 +0000
Manifest this update:     Wed 07 Oct 2026 06:44:48 +0000
Manifest next update:     Wed 14 Oct 2026 06:44:48 +0000
Files and hashes:         1: sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl (hash: 2TQvtBh38cwS+9F8XFX1B/7aS2/Pb3OfFq4CtT64WYk=)
                          2: BDF659C4445111F0945A7E49C4F9AE02.roa (hash: AZnF8Wc4jOxGnuV3Sz1XdCo8uTaFnnB3otigZpMaNyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl
                          rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C53A, serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550
        Validity
            Not Before: Oct  7 06:44:48 2026 GMT
            Not After : Oct 14 06:44:48 2026 GMT
        Subject: CN=6ac5ea60-3ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:66:09:4d:2c:07:87:5d:fc:47:b0:df:85:
                    66:38:46:d8:43:19:78:b5:81:fd:a9:b5:dd:4b:97:
                    89:ef:18:d6:96:17:10:b4:3a:a6:f8:b2:23:7d:b8:
                    46:14:f9:49:22:e6:90:1e:cc:38:2f:b0:ef:7f:e0:
                    c3:06:a4:d0:a3:c6:ec:bb:80:64:9b:86:0c:55:56:
                    13:03:6e:be:f5:15:76:64:6d:a3:53:cd:20:5d:89:
                    39:65:b4:4a:9e:9b:f3:c3:7a:13:57:5d:db:06:ac:
                    b3:26:ed:ba:b7:89:5c:c4:06:e0:c5:7e:39:1f:8e:
                    e9:1f:58:db:e4:ca:25:95:9d:13:a7:66:22:8e:8a:
                    5b:da:ce:3d:0b:05:de:3c:55:95:b0:0e:6d:aa:87:
                    0f:af:9a:1c:91:b1:cf:16:58:f3:8a:ab:68:fb:b4:
                    66:62:74:01:0c:90:88:7c:af:6f:40:40:ca:28:21:
                    e7:11:71:83:f4:78:9c:58:56:e6:0c:1a:d1:2f:d4:
                    0f:cb:80:fe:11:dd:cf:aa:c8:03:8b:d3:de:b6:00:
                    22:80:c1:ec:5e:ff:5b:c2:f5:14:a4:02:54:37:39:
                    f6:dc:96:53:79:b2:ae:cf:5b:dd:fe:bd:2e:8c:20:
                    8f:2c:f3:ee:04:c0:4d:f4:6d:b0:73:59:64:4b:52:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:FF:9A:F8:9F:5B:7E:D0:E4:17:E9:9A:73:45:CD:B2:D5:60:6A
            X509v3 Authority Key Identifier:
                keyid:B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c4:e1:3e:38:d7:60:18:3f:b8:f1:b8:93:eb:4d:6e:c2:2f:
         2b:30:b7:39:ec:f0:ff:5b:6d:0c:45:59:07:f3:75:bc:5f:48:
         b0:c0:17:d9:df:04:fc:1d:fc:a3:db:6f:65:72:5a:f2:04:d0:
         f4:12:6d:ec:7d:46:b3:e7:5d:91:cb:f6:2b:a7:b9:8e:08:89:
         0d:af:14:af:33:6e:91:c4:2f:08:1f:88:96:55:8a:5c:b7:73:
         48:9b:c5:ca:dd:9c:88:f2:48:25:6b:a0:dc:8d:e0:13:a8:4b:
         87:63:b7:31:2a:e8:26:4a:ca:1c:1e:b1:39:5f:5f:a5:01:c9:
         a0:e7:a3:ac:e7:37:97:4c:30:02:8a:37:05:ea:64:fb:a5:95:
         9d:e7:5c:07:d4:51:2a:13:03:c8:78:f7:50:bc:f9:37:ef:c1:
         eb:3a:9d:6b:50:b1:1b:98:be:1d:60:59:53:b1:c7:6d:53:97:
         92:72:cd:c3:94:1b:95:92:fa:2d:ea:e9:e3:da:9b:f4:13:90:
         c9:e6:7a:36:de:16:ea:fa:98:e4:62:0b:e8:ea:28:47:ff:43:
         5e:02:23:e1:6f:58:79:0a:16:60:97:5f:42:c9:4a:ed:98:01:
         d1:44:24:6b:80:e9:a5:af:78:92:8b:76:78:fd:62:ad:b9:6e:
         78:dd:ff:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1M0ExMTAvBgNVBAUTKEIwOEI1OUU1RDEwNzA1QzVDQjJEM0NEQjg1NjVCMzI4
RDUwMkY1NTAwHhcNMjYxMDA3MDY0NDQ4WhcNMjYxMDE0MDY0NDQ4WjAYMRYwFAYD
VQQDEw02YWM1ZWE2MC0zY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjx5mCU0sB4dd/Eew34VmOEbYQxl4tYH9qbXdS5eJ7xjWlhcQtDqm+LIjfbhG
FPlJIuaQHsw4L7Dvf+DDBqTQo8bsu4Bkm4YMVVYTA26+9RV2ZG2jU80gXYk5ZbRK
npvzw3oTV13bBqyzJu26t4lcxAbgxX45H47pH1jb5MollZ0Tp2Yijopb2s49CwXe
PFWVsA5tqocPr5ockbHPFljziqto+7RmYnQBDJCIfK9vQEDKKCHnEXGD9HicWFbm
DBrRL9QPy4D+Ed3PqsgDi9PetgAigMHsXv9bwvUUpAJUNzn23JZTebKuz1vd/r0u
jCCPLPPuBMBN9G2wc1lkS1KISQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSM/5r4
n1t+0OQX6ZpzRc2y1WBqMB8GA1UdIwQYMBaAFLCLWeXRBwXFyy0824VlsyjVAvVQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzQS80NzQ1MDU2RTQ0
NTExMUYwQTA5RThBMjRDNEY5QUUwMi9zSXRaNWRFSEJjWExMVHpiaFdXektOVUM5
VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NJdFo1ZEVIQmNYTExUemJoV1d6S05VQzlWQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzUzQS80NzQ1MDU2RTQ0NTExMUYwQTA5RThBMjRDNEY5QUUwMi9zSXRaNWRFSEJj
WExMVHpiaFdXektOVUM5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhsThPjjXYBg/uPG4k+tNbsIvKzC3Oezw/1ttDEVZB/N1vF9IsMAX2d8E/B38
o9tvZXJa8gTQ9BJt7H1Gs+ddkcv2K6e5jgiJDa8UrzNukcQvCB+IllWKXLdzSJvF
yt2ciPJIJWug3I3gE6hLh2O3MSroJkrKHB6xOV9fpQHJoOejrOc3l0wwAoo3Bepk
+6WVnedcB9RRKhMDyHj3ULz5N+/B6zqda1CxG5i+HWBZU7HHbVOXknLNw5QblZL6
Lerp49qb9BOQyeZ6Nt4W6vqY5GIL6OooR/9DXgIj4W9YeQoWYJdfQslK7ZgB0UQk
a4Dppa94kot2eP1irblueN3/pA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 01:09:07 2026 by rpki-client