Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
File:                     JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json)
Hash identifier:          01ulwKaj9Q1CQqRZ8JkrbOnQrp2bJFZBv9xGVmxGNL4=
Subject key identifier:   9B:5E:76:6D:5B:91:F3:1A:6A:B2:A9:AF:D2:C8:A9:4B:5C:47:18:1B
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Certificate issuer:       /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
Manifest number:          0166
Signing time:             Fri 23 Oct 2026 05:33:50 +0000
Manifest this update:     Fri 23 Oct 2026 05:33:49 +0000
Manifest next update:     Fri 30 Oct 2026 05:33:49 +0000
Files and hashes:         1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: o8f9FSJAYqZ+bzgCTKONwRjO0aMInXnsNGUonVBx1JU=)
                          2: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: G5O36SvC9VS8QmGgtVxcSVr/0IErmRE6s7oSkFzNs38=)
                          3: C38216B8396E11F1992DA1BA96833773.roa (hash: /iOQsyc6F1r8WmEZPqbUXMRcjfmcWlpbEB4138jOfIk=)
                          4: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: aDcnlxap4XDDt9ANdIB0EdEbEwHi3xK45nvSfh/8fvE=)
                          5: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: VQA6pjuu/o8U/g10GJhyRj7RgcZTt+KPBg7nxgVDWd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 05:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
        Validity
            Not Before: Oct 23 05:33:49 2026 GMT
            Not After : Oct 30 05:33:49 2026 GMT
        Subject: CN=6adaf1be-1cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:f9:09:ae:97:f8:b5:6f:57:d1:07:e4:45:
                    29:af:cf:0b:26:72:f3:45:19:40:70:21:cf:9e:82:
                    10:36:28:cd:7f:99:12:f3:28:ed:c1:11:cc:1a:81:
                    75:ae:ee:6f:a5:ed:b3:b8:57:dd:b2:69:ad:da:56:
                    76:f0:0e:a4:c6:6c:8c:a0:41:c9:15:88:f5:20:d8:
                    7e:94:72:c6:56:7e:8d:ae:51:92:82:30:61:0b:04:
                    3f:f1:e8:55:9d:db:4b:ee:7b:fe:44:d7:d8:35:68:
                    fa:8b:f4:4e:cd:0f:35:f7:30:42:68:89:a9:e3:9e:
                    10:cb:2c:5b:6a:33:bf:ab:53:ae:6a:73:cf:91:88:
                    ee:67:81:76:3f:8c:db:fe:41:71:7b:03:c2:fb:60:
                    a9:9e:a1:67:ad:a8:6a:ef:4c:97:e4:13:ab:75:8f:
                    2f:15:fc:20:07:e3:d5:64:5e:75:5b:e0:ac:3d:b8:
                    d9:ef:a6:79:f3:20:b3:7b:86:01:73:af:84:f7:ae:
                    48:d6:32:56:08:7e:7e:ac:93:19:03:d5:6d:2d:3d:
                    75:92:37:f4:a0:7e:19:e6:f5:98:26:ce:75:0d:8a:
                    34:53:be:88:0f:cc:7e:5b:dd:89:04:c4:ac:e4:62:
                    de:b0:4e:65:55:57:ed:9d:51:c5:99:64:01:67:ea:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5E:76:6D:5B:91:F3:1A:6A:B2:A9:AF:D2:C8:A9:4B:5C:47:18:1B
            X509v3 Authority Key Identifier:
                keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b3:8f:d8:e2:de:87:0e:cb:36:43:a4:42:52:39:da:c8:ba:
         7d:6a:75:3f:01:03:04:71:3e:1f:67:6e:a2:0a:da:60:b1:99:
         69:a6:9c:51:18:5e:e9:1e:32:49:ef:7a:33:23:66:2a:e5:54:
         7e:93:9a:df:52:16:b9:d0:3d:78:de:3a:19:62:f8:84:ef:6f:
         97:0d:50:72:70:d7:13:44:c1:8f:c2:ef:3a:70:ee:a0:7e:79:
         f1:d0:5c:e2:4f:08:54:e7:a2:58:ca:ef:0a:d8:03:50:7b:37:
         f9:d4:09:bc:8c:a6:9f:a0:00:7a:1a:e3:93:a9:4f:9e:81:83:
         ca:f9:6e:b6:ee:3d:44:cd:6d:bc:74:a7:08:59:ab:13:e0:9c:
         0c:ce:ea:4e:72:08:7b:a0:a4:09:81:ac:dd:f5:2a:82:43:a1:
         95:77:cf:7f:fd:81:b6:f9:b1:68:63:4e:2a:34:fa:5d:37:97:
         f8:b7:29:9f:ca:87:ff:59:7f:c1:7e:39:fe:2b:a5:f4:8f:c4:
         53:e2:d9:a9:1c:07:36:87:de:a1:63:71:d0:d7:f5:85:1a:76:
         66:c9:69:0d:1e:a6:97:d8:10:77:29:a8:15:bb:b8:91:32:bb:
         a6:3c:6c:7f:9a:97:53:bb:aa:67:5c:d3:31:01:51:fd:f6:5f:
         09:35:01:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIxMkExMTAvBgNVBAUTKDI3MjJDNUFCQkVFNjNCNzZCOURBOTY2Qzc4RDczQTY2
NTdEMjQ0RUIwHhcNMjYxMDIzMDUzMzQ5WhcNMjYxMDMwMDUzMzQ5WjAYMRYwFAYD
VQQDEw02YWRhZjFiZS0xY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ar5Ca6X+LVvV9EH5EUpr88LJnLzRRlAcCHPnoIQNijNf5kS8yjtwRHMGoF1
ru5vpe2zuFfdsmmt2lZ28A6kxmyMoEHJFYj1INh+lHLGVn6NrlGSgjBhCwQ/8ehV
ndtL7nv+RNfYNWj6i/ROzQ819zBCaImp454QyyxbajO/q1OuanPPkYjuZ4F2P4zb
/kFxewPC+2CpnqFnrahq70yX5BOrdY8vFfwgB+PVZF51W+CsPbjZ76Z58yCze4YB
c6+E965I1jJWCH5+rJMZA9VtLT11kjf0oH4Z5vWYJs51DYo0U76ID8x+W92JBMSs
5GLesE5lVVftnVHFmWQBZ+o87wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJtedm1b
kfMaarKpr9LIqUtcRxgbMB8GA1UdIwQYMBaAFCcixau+5jt2udqWbHjXOmZX0kTr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9CMUQ0QTU5Q0FF
M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi9KeUxGcTc3bU8zYTUycFpzZU5jNlpsZlNS
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0p5TEZxNzdtTzNhNTJwWnNlTmM2WmxmU1JPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjEyQS9CMUQ0QTU5Q0FFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi9KeUxGcTc3bU8z
YTUycFpzZU5jNlpsZlNST3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvbOP2OLehw7LNkOkQlI52si6fWp1PwEDBHE+H2duograYLGZaaacURhe6R4y
Se96MyNmKuVUfpOa31IWudA9eN46GWL4hO9vlw1QcnDXE0TBj8LvOnDuoH558dBc
4k8IVOeiWMrvCtgDUHs3+dQJvIymn6AAehrjk6lPnoGDyvlutu49RM1tvHSnCFmr
E+CcDM7qTnIIe6CkCYGs3fUqgkOhlXfPf/2BtvmxaGNOKjT6XTeX+Lcpn8qH/1l/
wX45/iul9I/EU+LZqRwHNofeoWNx0Nf1hRp2ZslpDR6ml9gQdymoFbu4kTK7pjxs
f5qXU7uqZ1zTMQFR/fZfCTUBlw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 13:49:43 2026 by rpki-client