Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File:                     7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier:          S4zX55pj/EyHFkgx3vwFRY7tXbOBgclsDiuRedQV5e0=
Subject key identifier:   F1:E5:6F:8D:E0:97:05:C6:19:69:67:34:65:BE:07:6D:C4:06:20:F0
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer:       /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial:       0175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number:          0168
Signing time:             Tue 27 Oct 2026 05:14:36 +0000
Manifest this update:     Tue 27 Oct 2026 05:14:35 +0000
Manifest next update:     Tue 03 Nov 2026 05:14:35 +0000
Files and hashes:         1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: 7hfO6q9al6I/wJ4noDid2Ulw5HoUQjTaXwIXkuRZpds=)
                          2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU=)
                          3: C41B6A98396E11F1992DA1BA96833773.roa (hash: BPXuBuSemYn/E+9Uo6D+b9G7/Ig6Oc1u1YHeb89/AEQ=)
                          4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: WDWRrI/KRtPcAbR2bWOuMpgztLrYoQZ12yzCIYDgRAs=)
                          5: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: hENFINj2b9wOIFxjK3nr2DrkTGbz4MTQ9pqxVPQHBxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
        Validity
            Not Before: Oct 27 05:14:35 2026 GMT
            Not After : Nov  3 05:14:35 2026 GMT
        Subject: CN=6ae0333c-1b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:93:90:fd:36:2a:b8:13:14:01:c4:9d:b6:
                    f3:6c:17:b5:16:17:bd:0d:c8:a8:88:db:46:aa:ef:
                    18:56:e6:df:c3:65:45:4e:3a:4c:95:9c:4c:3a:07:
                    eb:83:25:27:a6:87:12:6b:51:34:3c:9b:49:1c:f3:
                    56:80:0a:7b:65:a2:76:b3:bc:e9:f6:8e:12:4e:47:
                    ca:5d:37:6c:b9:8e:2f:68:b1:38:37:e3:fe:d7:93:
                    55:1a:33:e8:e6:9b:54:73:14:f6:0e:e9:21:8d:56:
                    03:40:e1:3d:0d:fc:19:94:a6:39:a7:4b:db:20:2d:
                    26:a3:9e:2f:e3:0b:13:1f:3a:b5:8b:3a:21:31:40:
                    71:cb:71:8e:be:80:f0:ba:ec:60:21:24:8e:83:8a:
                    d2:7c:e8:70:ae:ae:a4:4a:4b:9b:33:a0:76:c9:df:
                    43:2a:a2:3d:32:a3:65:10:02:1d:6c:df:56:67:6e:
                    06:79:52:40:33:6c:6b:3e:b7:b2:0b:82:12:7e:2c:
                    6c:e4:c6:7b:61:6f:b0:e8:9d:fb:99:8d:ca:37:0d:
                    20:55:fb:be:f9:53:6b:f5:e3:7c:4c:64:ac:40:2a:
                    6a:ac:ef:6b:1c:a2:3f:e6:1a:c6:20:81:79:6a:67:
                    6b:02:bd:1e:33:49:e2:77:e3:7d:bb:f3:5b:06:c0:
                    1d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:6F:8D:E0:97:05:C6:19:69:67:34:65:BE:07:6D:C4:06:20:F0
            X509v3 Authority Key Identifier:
                keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:cc:6e:cd:84:56:7b:e1:7f:c1:43:20:7d:a6:7e:62:20:07:
         33:e9:99:bd:39:d0:ea:9a:2d:3c:6f:ae:b4:b2:9f:a2:cc:18:
         e9:9a:6a:1a:dc:f5:af:b2:18:6e:9e:2b:40:d4:da:07:df:2d:
         34:cf:e5:9f:9d:4e:ee:5e:26:51:f0:44:16:0c:da:b1:36:48:
         8d:d6:60:11:c8:de:98:18:52:40:a9:32:41:ea:e0:be:f6:fa:
         72:03:69:42:f0:e0:3b:46:66:fd:b8:7c:19:92:c5:3f:e7:fb:
         87:8b:e7:7c:52:9b:53:d0:e3:7a:de:a0:d3:35:65:5a:a7:ae:
         3b:c4:0f:cd:c2:43:ba:0e:58:b6:4b:9a:b0:a1:3e:bb:04:a9:
         ab:53:85:0a:01:58:f7:69:46:51:2d:72:41:20:c1:d3:c9:31:
         d0:e2:5e:ea:c9:64:60:ae:26:b9:80:04:cf:11:13:37:f0:52:
         5e:b9:0f:ad:ed:ec:b7:37:19:87:95:bb:c2:95:65:7c:aa:63:
         c7:4f:03:ca:23:c9:d4:32:7b:b4:f2:49:b4:38:ea:ca:fc:ea:
         f1:f1:44:9c:f0:7f:6f:cc:b6:74:65:02:24:32:38:6f:ab:01:
         96:50:c7:b0:ad:c8:c2:7f:2b:5c:b6:39:fb:ab:cb:ed:85:91:
         2b:24:da:8f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RCNzJBN0Q0OTEw
NjM0MDJERjEwHhcNMjYxMDI3MDUxNDM1WhcNMjYxMTAzMDUxNDM1WjAYMRYwFAYD
VQQDEw02YWUwMzMzYy0xYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl5qTkP02KrgTFAHEnbbzbBe1Fhe9DcioiNtGqu8YVubfw2VFTjpMlZxMOgfr
gyUnpocSa1E0PJtJHPNWgAp7ZaJ2s7zp9o4STkfKXTdsuY4vaLE4N+P+15NVGjPo
5ptUcxT2DukhjVYDQOE9DfwZlKY5p0vbIC0mo54v4wsTHzq1izohMUBxy3GOvoDw
uuxgISSOg4rSfOhwrq6kSkubM6B2yd9DKqI9MqNlEAIdbN9WZ24GeVJAM2xrPrey
C4ISfixs5MZ7YW+w6J37mY3KNw0gVfu++VNr9eN8TGSsQCpqrO9rHKI/5hrGIIF5
amdrAr0eM0nid+N9u/NbBsAdNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHlb43g
lwXGGWlnNGW+B23EBiDwMB8GA1UdIwQYMBaAFOz/MkQMTuHSeUPNtyp9SRBjQC3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9COUQ0Q0Y0MkFF
M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRkSjVRODIzS24xSkVHTkFM
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjEyQS9COUQ0Q0Y0MkFFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRk
SjVRODIzS24xSkVHTkFMZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMMxuzYRWe+F/wUMgfaZ+YiAHM+mZvTnQ6potPG+utLKfoswY6ZpqGtz1r7IY
bp4rQNTaB98tNM/ln51O7l4mUfBEFgzasTZIjdZgEcjemBhSQKkyQergvvb6cgNp
QvDgO0Zm/bh8GZLFP+f7h4vnfFKbU9Djet6g0zVlWqeuO8QPzcJDug5YtkuasKE+
uwSpq1OFCgFY92lGUS1yQSDB08kx0OJe6slkYK4muYAEzxETN/BSXrkPre3stzcZ
h5W7wpVlfKpjx08DyiPJ1DJ7tPJJtDjqyvzq8fFEnPB/b8y2dGUCJDI4b6sBllDH
sK3Iwn8rXLY5+6vL7YWRKyTajw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:51:14 2026 by rpki-client