Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File:                     R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier:          26rR2t9V0ZjmjbsyVe50ns9ORib54Zcpff1lVPESMK0=
Subject key identifier:   AF:B4:5A:59:31:82:8C:F4:81:A5:81:0A:5A:C8:20:B3:0B:C1:CA:09
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer:       /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial:       08F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number:          08C4
Signing time:             Wed 28 Oct 2026 20:42:20 +0000
Manifest this update:     Wed 28 Oct 2026 20:42:19 +0000
Manifest next update:     Wed 04 Nov 2026 20:42:19 +0000
Files and hashes:         1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: PseoYA21SOxcxNpbgXVWn7ZnA4nUELHfYThEf+0SjMA=)
                          2: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: z22E7dLzpIruDkQB+N/0aUB6GvsuEGXDnC7UVCgM3nw=)
                          3: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: H6B6O0MUDuGmdlVs1fFKTz2DyB+jNWGXxwAsMamv3Hw=)
                          4: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: wPApGnIDUUIw+paWqOTD+NVz9Wuy48NMTWVunCo6jtA=)
                          5: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: lpsGHCNcTcLvjZGF/M6+ByXSzOOFNd8vDnjaWT5K+gY=)
                          6: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: Acfjh2qFNcCgn8tMchhSuNAP12/oL2zE+3PNVDe8WiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
                          rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 20:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2292 (0x8f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
        Validity
            Not Before: Oct 28 20:42:19 2026 GMT
            Not After : Nov  4 20:42:19 2026 GMT
        Subject: CN=6ae25e2c-bd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:67:18:a6:5a:3b:1b:45:78:4e:70:54:06:
                    2d:95:9b:b6:d4:42:14:e9:48:47:25:27:ef:67:6a:
                    b0:1d:82:ef:f0:e9:74:e8:53:1a:da:e1:dd:4b:ad:
                    b2:fe:5e:eb:ec:10:31:a6:92:8d:1e:56:fa:7d:90:
                    61:23:b7:f8:a0:a5:d8:3e:2f:f5:46:80:6f:e5:29:
                    a9:cf:54:c9:19:65:af:3f:d4:00:6c:3f:5e:39:34:
                    9d:80:c4:46:e2:c1:89:c0:5c:70:45:74:bd:6b:96:
                    eb:72:ab:04:1a:9b:10:f7:8b:87:d2:c4:7e:3f:d6:
                    88:7d:0e:14:09:41:74:3b:4a:04:db:37:1a:ec:21:
                    4c:c5:7f:d6:04:77:3f:3d:35:64:a4:cb:34:a3:e5:
                    30:39:da:39:ac:5e:60:64:cc:8b:3d:19:4b:27:bf:
                    dc:e0:d5:0a:71:65:ca:ae:35:e5:a9:4a:f7:05:22:
                    a0:bb:14:1b:60:57:4c:f9:bc:e8:2f:97:05:f9:ec:
                    cb:96:4d:d0:62:fc:b2:fe:6f:ad:f8:9d:f7:03:14:
                    db:28:ef:fe:87:ba:b0:cf:b0:97:c2:df:1d:19:bc:
                    81:9d:9f:e7:32:ef:41:d8:21:85:a9:b1:c4:36:7a:
                    31:53:34:01:bd:6e:8f:86:92:38:1b:14:52:5e:71:
                    5b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B4:5A:59:31:82:8C:F4:81:A5:81:0A:5A:C8:20:B3:0B:C1:CA:09
            X509v3 Authority Key Identifier:
                keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:86:8b:55:c8:ed:68:50:73:11:f2:09:64:89:cf:6b:e3:01:
         bf:47:0c:2d:f8:07:65:a0:0c:8b:df:a2:5d:68:c2:a6:e4:48:
         6d:0d:67:5a:eb:9e:48:7a:50:b5:58:84:bc:e2:49:93:64:98:
         d0:ff:24:38:39:85:5f:5c:b7:2e:10:02:ee:61:62:d4:e0:aa:
         43:2a:52:f7:48:ad:ad:22:2f:f1:1a:ca:6b:f0:27:e2:55:3a:
         30:d6:9b:aa:b3:4e:2b:a7:e3:c6:04:b9:6e:bf:e7:ec:61:46:
         70:e5:c9:16:41:bf:92:87:3d:90:51:13:a0:83:d3:79:2c:bd:
         b6:c3:d6:08:20:b1:de:47:70:f5:79:a0:a7:f6:75:df:43:62:
         41:6e:55:7f:7f:c2:dc:3b:43:4b:fd:29:20:ed:9a:e9:82:42:
         8b:73:63:8e:55:6e:bb:f9:7e:2a:a9:ef:7c:32:9c:01:61:08:
         9d:01:4e:d6:b2:05:49:cc:7d:ad:34:50:e2:25:93:9e:33:3d:
         86:af:a8:02:9a:b9:26:1c:e7:b9:ba:b8:d9:ae:c5:ce:1e:38:
         d7:7d:a9:25:96:1c:64:c2:58:ef:35:4b:2a:2b:74:01:8d:0d:
         73:bb:eb:9c:48:2c:db:05:fd:a8:26:c9:11:b2:a0:be:79:77:
         d2:57:de:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG
MTAwQzk4RjgwHhcNMjYxMDI4MjA0MjE5WhcNMjYxMTA0MjA0MjE5WjAYMRYwFAYD
VQQDEw02YWUyNWUyYy1iZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt99nGKZaOxtFeE5wVAYtlZu21EIU6UhHJSfvZ2qwHYLv8Ol06FMa2uHdS62y
/l7r7BAxppKNHlb6fZBhI7f4oKXYPi/1RoBv5Smpz1TJGWWvP9QAbD9eOTSdgMRG
4sGJwFxwRXS9a5brcqsEGpsQ94uH0sR+P9aIfQ4UCUF0O0oE2zca7CFMxX/WBHc/
PTVkpMs0o+UwOdo5rF5gZMyLPRlLJ7/c4NUKcWXKrjXlqUr3BSKguxQbYFdM+bzo
L5cF+ezLlk3QYvyy/m+t+J33AxTbKO/+h7qwz7CXwt8dGbyBnZ/nMu9B2CGFqbHE
NnoxUzQBvW6PhpI4GxRSXnFbZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK+0Wlkx
goz0gaWBClrIILMLwcoJMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC
RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr
bHdXOEphcVBESjd4QU1tUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk4aLVcjtaFBzEfIJZInPa+MBv0cMLfgHZaAMi9+iXWjCpuRIbQ1nWuueSHpQ
tViEvOJJk2SY0P8kODmFX1y3LhAC7mFi1OCqQypS90itrSIv8RrKa/An4lU6MNab
qrNOK6fjxgS5br/n7GFGcOXJFkG/koc9kFEToIPTeSy9tsPWCCCx3kdw9Xmgp/Z1
30NiQW5Vf3/C3DtDS/0pIO2a6YJCi3NjjlVuu/l+KqnvfDKcAWEInQFO1rIFScx9
rTRQ4iWTnjM9hq+oApq5Jhznubq42a7Fzh44132pJZYcZMJY7zVLKit0AY0Nc7vr
nEgs2wX9qCbJEbKgvnl30lfehA==
-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:47 2026 by rpki-client