Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
File:                     DDegHLYzYjRPtzlnYP2U2cm5fHo.mft (raw, json)
Hash identifier:          2qQn6DQ2BpEZ0kNR3eJbhRu4o3ZduqYDVI7weg0s13Q=
Subject key identifier:   66:B7:9E:E7:59:46:45:94:9E:C2:DC:A4:72:6F:39:C0:11:9B:D9:FC
Authority key identifier: 0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A
Certificate issuer:       /CN=A912B64D/serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
Manifest number:          0248
Signing time:             Wed 07 Oct 2026 02:50:48 +0000
Manifest this update:     Wed 07 Oct 2026 02:50:47 +0000
Manifest next update:     Wed 14 Oct 2026 02:50:47 +0000
Files and hashes:         1: DDegHLYzYjRPtzlnYP2U2cm5fHo.crl (hash: z4ynPDMRqL2X9jEVVjNiDUxJXho+hL06zEfuJl/ohGE=)
                          2: 865B3F7C467C11EEBDE3D43CC4F9AE02.roa (hash: tuCN6O3U0PhqHjOU2y8CruvRTIpfP/U+Bw2TGt25+Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl
                          rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B64D, serialNumber=0C37A01CB63362344FB7396760FD94D9C9B97C7A
        Validity
            Not Before: Oct  7 02:50:47 2026 GMT
            Not After : Oct 14 02:50:47 2026 GMT
        Subject: CN=6ac5b388-6a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:65:85:0b:55:a1:e1:21:0a:7f:aa:d5:e2:
                    fd:be:05:02:40:38:bf:6d:f9:4c:1c:28:1a:e2:8b:
                    76:21:88:06:34:52:20:a0:23:7d:41:a9:4f:0d:0e:
                    eb:45:42:a7:89:33:c2:0e:d1:eb:fa:7a:de:58:43:
                    01:2c:89:ff:4e:0f:c8:6e:76:00:b0:e5:c4:42:18:
                    92:88:6b:ac:67:e9:ca:eb:bb:4a:47:cf:eb:10:c9:
                    87:32:a1:be:9f:7d:32:92:ff:d2:9a:7d:8f:7f:15:
                    59:b0:31:88:8f:51:01:a5:8c:e5:55:40:ca:1e:fd:
                    2f:8b:ab:45:2b:6a:fb:7b:c5:31:c3:cd:bc:48:53:
                    bb:e2:a6:d8:36:f3:1c:e2:ff:4b:f5:22:25:ee:5f:
                    13:f8:25:9c:77:12:25:af:9e:a8:c3:4a:fc:d9:fc:
                    f0:d4:e0:80:05:08:42:8e:e1:14:76:0f:1b:e1:dd:
                    46:30:b1:b2:da:8e:21:8f:e7:72:38:93:fe:a0:1e:
                    e3:a3:d1:85:94:cf:ba:cd:cd:fb:9a:7a:a5:3c:19:
                    56:19:8e:87:82:16:05:b2:04:aa:01:96:96:5f:6b:
                    6f:46:4c:38:7d:94:4f:ed:fd:79:aa:b6:1b:d1:4f:
                    43:5f:06:0a:0c:99:92:07:64:a0:f0:28:67:82:9a:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B7:9E:E7:59:46:45:94:9E:C2:DC:A4:72:6F:39:C0:11:9B:D9:FC
            X509v3 Authority Key Identifier:
                keyid:0C:37:A0:1C:B6:33:62:34:4F:B7:39:67:60:FD:94:D9:C9:B9:7C:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDegHLYzYjRPtzlnYP2U2cm5fHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B64D/2BBE4014467C11EE92D6463CC4F9AE02/DDegHLYzYjRPtzlnYP2U2cm5fHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:14:7d:fc:25:cd:23:86:58:34:7b:af:8e:44:81:7e:46:95:
         a6:76:0e:0f:50:55:2e:47:fa:89:b9:e4:d5:e6:03:77:a0:44:
         04:6b:77:4e:be:99:3f:3f:79:93:f4:7d:65:c6:77:15:00:36:
         d4:04:8e:c8:97:a1:cb:04:de:d2:9b:55:6f:ef:e4:8d:f3:04:
         16:83:61:5d:70:c0:d1:a5:2b:fa:ac:98:18:25:5b:69:95:a6:
         f0:06:03:21:5d:6e:58:1c:3e:99:68:3f:28:5b:04:ca:b9:8e:
         21:5c:d0:06:88:07:e0:9c:f6:07:e8:40:1f:37:05:5e:5e:0e:
         b8:22:6c:ef:20:57:4a:73:4a:ce:3d:1a:52:c1:2e:d1:2a:ec:
         00:ee:b3:72:71:1b:24:69:69:4d:b0:7c:93:4c:38:6b:56:49:
         fb:6d:d8:19:d8:22:46:86:48:10:82:6b:03:01:7e:2b:c3:45:
         f0:be:74:96:c7:76:ea:bc:61:3e:96:09:2b:89:ba:69:77:d0:
         80:90:9c:d2:8b:dc:93:c1:04:e9:5a:89:aa:1b:7a:9c:39:e1:
         b2:39:c2:9a:0b:98:cf:5f:cf:d0:dc:0d:80:fa:f6:02:89:b7:
         61:9a:e3:1a:fe:cb:1b:bb:b0:7b:46:78:54:4d:b4:9f:d3:e4:
         cf:75:df:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI2NEQxMTAvBgNVBAUTKDBDMzdBMDFDQjYzMzYyMzQ0RkI3Mzk2NzYwRkQ5NEQ5
QzlCOTdDN0EwHhcNMjYxMDA3MDI1MDQ3WhcNMjYxMDE0MDI1MDQ3WjAYMRYwFAYD
VQQDEw02YWM1YjM4OC02YTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArtllhQtVoeEhCn+q1eL9vgUCQDi/bflMHCga4ot2IYgGNFIgoCN9QalPDQ7r
RUKniTPCDtHr+nreWEMBLIn/Tg/IbnYAsOXEQhiSiGusZ+nK67tKR8/rEMmHMqG+
n30ykv/Smn2PfxVZsDGIj1EBpYzlVUDKHv0vi6tFK2r7e8Uxw828SFO74qbYNvMc
4v9L9SIl7l8T+CWcdxIlr56ow0r82fzw1OCABQhCjuEUdg8b4d1GMLGy2o4hj+dy
OJP+oB7jo9GFlM+6zc37mnqlPBlWGY6HghYFsgSqAZaWX2tvRkw4fZRP7f15qrYb
0U9DXwYKDJmSB2Sg8ChngpprzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGa3nudZ
RkWUnsLcpHJvOcARm9n8MB8GA1UdIwQYMBaAFAw3oBy2M2I0T7c5Z2D9lNnJuXx6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjY0RC8yQkJFNDAxNDQ2
N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellqUlB0emxuWVAyVTJjbTVm
SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0REZWdITFl6WWpSUHR6bG5ZUDJVMmNtNWZIby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjY0RC8yQkJFNDAxNDQ2N0MxMUVFOTJENjQ2M0NDNEY5QUUwMi9ERGVnSExZellq
UlB0emxuWVAyVTJjbTVmSG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAchR9/CXNI4ZYNHuvjkSBfkaVpnYOD1BVLkf6ibnk1eYDd6BEBGt3Tr6ZPz95
k/R9ZcZ3FQA21ASOyJehywTe0ptVb+/kjfMEFoNhXXDA0aUr+qyYGCVbaZWm8AYD
IV1uWBw+mWg/KFsEyrmOIVzQBogH4Jz2B+hAHzcFXl4OuCJs7yBXSnNKzj0aUsEu
0SrsAO6zcnEbJGlpTbB8k0w4a1ZJ+23YGdgiRoZIEIJrAwF+K8NF8L50lsd26rxh
PpYJK4m6aXfQgJCc0ovck8EE6VqJqht6nDnhsjnCmguYz1/P0NwNgPr2Aom3YZrj
Gv7LG7uwe0Z4VE20n9Pkz3Xftw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:57:47 2026 by rpki-client