Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
File:                     yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json)
Hash identifier:          pNNdybp2+Sdm+tcHq9Odxqd7Ka7b/CyM9EW0yQedewk=
Subject key identifier:   2B:AC:78:B1:98:34:95:97:5A:21:59:CF:44:21:57:59:79:07:E0:73
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Certificate issuer:       /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial:       088A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
Manifest number:          0870
Signing time:             Fri 30 Oct 2026 21:02:19 +0000
Manifest this update:     Fri 30 Oct 2026 21:02:19 +0000
Manifest next update:     Fri 06 Nov 2026 21:02:18 +0000
Files and hashes:         1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: jjh+uCjbB1wcNGBptGfKiZbmb5x/pO1l9VKwp30xhJI=)
                          2: A08D36808D9511F18CE7BA083F11F970.roa (hash: y0Dvh0/VOEW6Vmpl7IJY53LBbE9h/rKg1gCLV+jDFR0=)
                          3: D44CB1088D9511F18884790F3F11F970.roa (hash: wV1zl2AYz6koE/d18QPJJFKohfdA8vraKL1i7qfQDbc=)
                          4: 7EB2A9627B6811F1B2F9CBDA5FA30FBC.roa (hash: y02tkPqWkRUuFzYRyDSp8BRV329jb14C5pvIrtHdumk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
                          rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 21:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
        Validity
            Not Before: Oct 30 21:02:19 2026 GMT
            Not After : Nov  6 21:02:18 2026 GMT
        Subject: CN=6ae505db-d093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:d1:e9:4b:1f:a8:bf:3e:32:1a:7c:71:e2:
                    90:d9:09:d1:52:31:9e:e1:20:f2:d2:5b:c7:58:a5:
                    69:6d:1e:ce:3a:94:1b:b6:c2:ce:12:f0:7d:b4:0f:
                    89:39:9c:26:51:b7:54:32:04:c0:91:9b:94:3f:41:
                    df:07:76:9d:01:12:e5:26:73:4b:7e:06:7c:a6:4e:
                    eb:24:fc:3e:1c:da:d2:cc:88:7b:21:13:28:4b:55:
                    91:73:20:45:74:e8:8e:fc:a1:47:78:7d:62:ac:05:
                    3b:d5:d6:85:39:c1:da:e3:26:14:c4:3b:32:89:b0:
                    fa:a2:e2:52:73:48:ad:bf:c3:84:b0:5c:5f:b8:1a:
                    5e:90:9f:62:80:15:a1:d3:0f:e6:b3:81:62:3c:23:
                    50:a3:b4:4c:c1:cf:c6:d8:12:6c:0f:14:b9:1c:9c:
                    f3:3e:32:ef:aa:7b:3f:49:b4:0a:e9:a0:a2:e2:1e:
                    8c:50:aa:48:18:6f:b5:71:16:c1:9b:21:49:2b:6d:
                    20:0f:e8:fb:b3:94:ec:1d:64:d6:ad:c9:79:6c:4b:
                    99:79:ff:ae:6f:3a:9c:f3:d9:86:c5:eb:be:fd:09:
                    d1:5b:16:49:0b:f5:3d:51:a0:f1:fb:d0:74:7b:5d:
                    f1:89:47:0a:b1:4b:42:7f:73:c7:3c:28:25:72:85:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AC:78:B1:98:34:95:97:5A:21:59:CF:44:21:57:59:79:07:E0:73
            X509v3 Authority Key Identifier:
                keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:84:81:1a:b4:bb:ee:ea:43:b0:b5:06:d6:42:12:46:58:f1:
         ed:49:87:76:ad:65:c7:6f:70:5c:6e:3b:c6:9a:ac:2b:a3:ad:
         81:01:60:c8:0b:5e:16:8d:a8:d2:fd:1b:b0:b1:29:af:20:72:
         2b:db:38:b2:b7:2e:e4:ee:85:4f:25:27:96:a4:33:76:78:68:
         b5:b3:fb:bc:fc:15:12:be:e4:86:b5:1a:14:bd:03:d5:83:2e:
         e8:10:af:84:2b:78:90:cf:72:98:92:ed:7c:aa:3f:ef:a6:6d:
         24:35:94:b0:c8:b0:8c:6f:5b:6d:81:c2:cd:14:78:7f:fb:fe:
         7e:20:32:da:b5:bb:04:df:65:e9:2e:5d:7b:70:dd:23:91:fe:
         51:55:7c:bf:7e:12:2d:ee:48:1e:2e:24:dd:f3:15:f1:76:c7:
         fd:c4:9d:8d:75:fc:25:be:63:4a:3d:89:94:8d:9b:f2:bd:8c:
         87:48:20:06:75:d0:07:57:7f:43:14:03:7f:20:77:1f:86:89:
         d2:7e:62:49:fd:20:e6:b6:df:a8:fa:6c:90:75:09:0e:fa:b3:
         c3:b3:de:a9:66:15:d3:1a:a4:d4:62:ac:ed:e7:01:6e:32:be:
         27:9c:2b:4c:78:7e:eb:8d:75:bf:a8:40:61:c3:c1:ff:e3:f3:
         9c:30:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:26 2026 by rpki-client