Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
File:                     8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json)
Hash identifier:          /gCgKdK5N4m1PtI5Ako0JbBB0xp2XD42TX8CymsC72Y=
Subject key identifier:   26:40:76:75:84:32:02:98:F7:BE:A9:AF:8A:55:57:5A:39:A1:53:67
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Certificate issuer:       /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial:       088C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
Manifest number:          0878
Signing time:             Sat 10 Oct 2026 20:55:02 +0000
Manifest this update:     Sat 10 Oct 2026 20:55:01 +0000
Manifest next update:     Sat 17 Oct 2026 20:55:01 +0000
Files and hashes:         1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: VFMTvECZ9bh7bAW+dT7+O9tv86q6eNXgRhDkY0Etszs=)
                          2: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=)
                          3: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=)
                          4: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
                          rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 20:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
        Validity
            Not Before: Oct 10 20:55:01 2026 GMT
            Not After : Oct 17 20:55:01 2026 GMT
        Subject: CN=6acaa626-084f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:b7:7c:c3:5b:6b:ab:6b:ba:75:91:9a:19:
                    d1:59:22:6e:65:37:25:c1:38:c4:82:64:02:77:02:
                    18:9b:9f:7e:d9:c3:be:12:ad:5f:fd:ae:72:7b:8a:
                    e5:80:19:9e:bd:bd:61:3c:77:52:21:f6:2f:ce:12:
                    32:c2:0e:a2:47:85:e6:73:af:29:59:06:12:23:41:
                    25:0b:16:5d:8e:9f:2b:29:74:62:2a:e5:0a:24:21:
                    8c:53:a0:13:2f:b3:0f:bd:bc:a1:e4:c4:9a:2a:66:
                    39:17:ef:a1:c0:0a:81:17:5b:15:6a:60:bf:ab:2a:
                    0a:ec:d8:75:6d:93:b7:17:83:9e:b8:e4:be:0d:b5:
                    4e:ad:82:62:35:70:8d:26:bb:23:94:5b:4e:4d:73:
                    4e:ca:09:32:6c:c0:cb:aa:09:e9:2c:4a:f8:5a:15:
                    59:ac:28:25:7f:0e:96:26:e0:4f:3e:04:d0:ed:1f:
                    cf:47:49:cc:96:0d:45:f1:9b:c1:c0:44:93:65:75:
                    41:2c:6b:ae:14:d3:23:9f:8c:79:ad:a1:7c:9b:20:
                    25:11:28:3a:44:a1:84:64:a9:1d:b2:e0:87:80:b8:
                    bc:3a:a1:d8:6d:6f:7f:a2:dd:cf:8a:18:2e:33:92:
                    b2:33:46:d3:77:aa:f0:25:7c:fe:87:10:8c:14:5a:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:40:76:75:84:32:02:98:F7:BE:A9:AF:8A:55:57:5A:39:A1:53:67
            X509v3 Authority Key Identifier:
                keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:82:37:64:4b:80:a5:f6:74:d6:82:72:ab:31:16:a7:7b:29:
         7a:38:9f:bd:0d:63:9c:9d:ee:9d:9d:97:1d:f9:b0:24:d6:36:
         8d:3a:2b:e9:5f:17:2b:d8:e8:35:fd:1e:70:f4:fd:eb:71:e9:
         12:eb:98:18:57:5a:dd:77:a7:06:ff:2c:81:3d:aa:c3:60:09:
         4d:f6:22:cd:e3:d9:88:c0:97:20:9f:3f:48:87:35:1d:47:db:
         1a:ff:f1:ae:09:a4:8a:3c:d9:fd:3f:d1:e7:c4:f0:ea:51:e6:
         d4:89:d6:ab:e5:44:37:20:e0:43:00:1b:23:24:c7:6a:82:9e:
         24:a9:04:03:80:a1:62:9e:15:f9:68:53:c5:a9:3d:44:01:24:
         f2:3c:26:cb:9e:6b:b8:d4:5b:3d:49:a9:d5:22:5d:48:34:8d:
         60:9d:b7:1f:cd:c2:d8:09:e1:69:97:a7:2b:93:ef:f1:cc:8f:
         93:be:b2:db:21:ca:cf:bf:41:7a:22:d0:49:dd:5e:13:23:35:
         ff:b1:8b:6c:ce:87:3f:31:3a:a0:64:a4:4f:9e:3f:cb:75:64:
         ff:1b:e8:2e:43:89:a0:e1:c0:36:4f:85:c0:c5:ec:8a:28:a4:
         cf:af:71:2e:0b:1e:a2:65:86:ff:8c:ac:aa:03:1c:33:43:83:
         5d:4c:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:34:38 2026 by rpki-client