Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
File:                     B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json)
Hash identifier:          xZ/c8rNEhEola6FP5DpKaifwmXvDlsdDKytA4TLwLp8=
Subject key identifier:   28:48:8F:8D:26:A5:AA:2D:1F:82:C4:DB:52:62:BD:F3:37:BC:E6:67
Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18
Certificate issuer:       /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
Manifest number:          0170
Signing time:             Sat 03 Oct 2026 05:28:28 +0000
Manifest this update:     Sat 03 Oct 2026 05:28:28 +0000
Manifest next update:     Sat 10 Oct 2026 05:28:28 +0000
Files and hashes:         1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: vuXFEJrMxdFnx9rhnbPK5CNyhQ1hdOqkacdEV1IF5J0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
        Validity
            Not Before: Oct  3 05:28:28 2026 GMT
            Not After : Oct 10 05:28:28 2026 GMT
        Subject: CN=6ac0927c-7acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:89:c5:a4:3b:c8:bf:79:85:f3:c8:f3:49:
                    8d:99:41:2e:21:63:5c:f1:78:82:bf:c0:ec:3f:68:
                    d3:df:a7:2f:0b:5c:a0:6b:5c:46:88:34:90:d7:17:
                    6e:d7:12:55:07:9d:b1:39:cd:ef:8c:f8:17:11:a5:
                    f1:14:62:57:19:3b:0f:5d:81:34:24:cc:fe:40:96:
                    42:54:d5:bf:18:73:77:2a:b1:c9:6b:4a:7f:1e:6e:
                    0b:87:c9:44:f9:4d:32:ef:65:b0:1f:c9:81:cc:4d:
                    8e:63:21:0a:46:90:51:9b:7f:b9:78:98:fe:ef:df:
                    5d:d9:54:e1:36:56:3b:50:f6:18:aa:8d:42:6e:7b:
                    fb:ab:d6:fe:61:2c:0e:b7:7b:13:35:88:c4:ca:d0:
                    bc:7d:05:08:36:27:bf:75:26:61:11:fa:fc:47:36:
                    fe:25:05:ac:80:4e:b1:1d:fa:3e:1c:f9:91:fa:a8:
                    0f:04:a5:9d:95:21:d3:3e:55:00:fa:a3:c9:1b:42:
                    c9:3b:1a:c7:6c:e7:b2:f6:81:32:46:3f:2b:a8:97:
                    b8:d0:d5:32:4c:13:1f:73:73:4f:d8:bd:57:3d:bd:
                    f1:7f:7b:56:97:03:f0:20:39:ee:79:af:dc:64:7e:
                    4d:2e:82:30:cd:f5:b7:20:90:ce:96:19:71:de:7e:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:48:8F:8D:26:A5:AA:2D:1F:82:C4:DB:52:62:BD:F3:37:BC:E6:67
            X509v3 Authority Key Identifier:
                keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1c:14:4b:33:56:b5:f5:26:9a:dc:fc:01:35:b1:75:57:47:
         a0:c2:7b:72:95:d2:1f:47:f4:6f:fc:cf:69:ca:f6:e3:9e:4e:
         1d:be:ff:47:c5:78:3a:af:4d:d8:94:ad:58:1b:79:cf:52:12:
         de:0d:1e:27:ef:4d:f3:4f:53:38:07:fd:54:d6:35:4a:48:b5:
         3f:9b:ef:89:81:ad:74:e8:0f:81:af:1e:ae:78:d7:a1:94:83:
         0a:b8:cc:78:7a:90:38:66:5b:5d:01:3d:d4:2f:3d:01:a3:c5:
         86:4e:09:0d:51:0c:4e:31:7b:b2:83:3a:3a:43:21:c2:63:b8:
         a3:0f:6e:97:35:ca:03:9b:20:52:50:63:a0:55:57:62:54:81:
         13:91:61:5c:de:b9:60:6c:d4:4c:95:80:76:24:41:60:0e:5f:
         6c:f9:bc:69:81:88:67:93:36:d8:1f:a5:3f:fd:2a:fc:15:17:
         75:fd:cf:9a:f7:ef:83:b4:61:b5:6b:57:bd:7b:c2:dd:15:33:
         92:eb:01:63:0f:57:2d:9a:6b:5f:a5:db:7d:21:46:1b:b2:a0:
         5e:30:cd:20:47:5b:8d:1f:e6:40:55:36:91:02:30:a0:b9:8a:
         31:2f:c4:7f:51:d5:2a:e4:b1:66:70:0b:40:be:7f:ea:db:f6:
         9b:3a:e4:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNCMDUxMTAvBgNVBAUTKDA3QjI1RjdFNjVDQjYyNzEwOEIwRDk0QzE4RjdGNTc5
RDMzNDc4MTgwHhcNMjYxMDAzMDUyODI4WhcNMjYxMDEwMDUyODI4WjAYMRYwFAYD
VQQDEw02YWMwOTI3Yy03YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoCuJxaQ7yL95hfPI80mNmUEuIWNc8XiCv8DsP2jT36cvC1yga1xGiDSQ1xdu
1xJVB52xOc3vjPgXEaXxFGJXGTsPXYE0JMz+QJZCVNW/GHN3KrHJa0p/Hm4Lh8lE
+U0y72WwH8mBzE2OYyEKRpBRm3+5eJj+799d2VThNlY7UPYYqo1Cbnv7q9b+YSwO
t3sTNYjEytC8fQUINie/dSZhEfr8Rzb+JQWsgE6xHfo+HPmR+qgPBKWdlSHTPlUA
+qPJG0LJOxrHbOey9oEyRj8rqJe40NUyTBMfc3NP2L1XPb3xf3tWlwPwIDnuea/c
ZH5NLoIwzfW3IJDOlhlx3n4uIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFChIj40m
paotH4LE21JivfM3vOZnMB8GA1UdIwQYMBaAFAeyX35ly2JxCLDZTBj39XnTNHgY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GQTUyREVDMjhB
OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFluRUlzTmxNR1BmMWVkTTBl
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I3SmZmbVhMWW5FSXNObE1HUGYxZWRNMGVCZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0IwNS9GQTUyREVDMjhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFlu
RUlzTmxNR1BmMWVkTTBlQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANRwUSzNWtfUmmtz8ATWxdVdHoMJ7cpXSH0f0b/zPacr2455OHb7/R8V4Oq9N
2JStWBt5z1IS3g0eJ+9N809TOAf9VNY1Ski1P5vviYGtdOgPga8ernjXoZSDCrjM
eHqQOGZbXQE91C89AaPFhk4JDVEMTjF7soM6OkMhwmO4ow9ulzXKA5sgUlBjoFVX
YlSBE5FhXN65YGzUTJWAdiRBYA5fbPm8aYGIZ5M22B+lP/0q/BUXdf3Pmvfvg7Rh
tWtXvXvC3RUzkusBYw9XLZprX6XbfSFGG7KgXjDNIEdbjR/mQFU2kQIwoLmKMS/E
f1HVKuSxZnALQL5/6tv2mzrkSQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 11:43:25 2026 by rpki-client