Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
File:                     O2jmA9GPVutmXvcukmQF8MEL4-c.mft (raw, json)
Hash identifier:          NO8GYQmKm6cxVhXxccIxuP0dF6rOKKqi5qEM8drcmxk=
Subject key identifier:   63:E9:C3:C6:12:E7:E8:8B:24:49:E6:14:CA:9C:B3:D1:C4:A5:8D:80
Authority key identifier: 3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7
Certificate issuer:       /CN=A912D1D1/serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
Certificate serial:       098F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
Manifest number:          0985
Signing time:             Sat 24 Oct 2026 20:01:29 +0000
Manifest this update:     Sat 24 Oct 2026 20:01:28 +0000
Manifest next update:     Sat 31 Oct 2026 20:01:28 +0000
Files and hashes:         1: O2jmA9GPVutmXvcukmQF8MEL4-c.crl (hash: MgFIspLWqu1fluLpEXcHXBNjFCEV02C0s/ekk14yEzw=)
                          2: 30CB037EC18E11EA8BF4FB68C4F9AE02.roa (hash: V308MbABYbhANAE8Mchi4dMxL6SOJKFNEqZDDLPqhsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl
                          rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2447 (0x98f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D1D1, serialNumber=3B68E603D18F56EB665EF72E926405F0C10BE3E7
        Validity
            Not Before: Oct 24 20:01:28 2026 GMT
            Not After : Oct 31 20:01:28 2026 GMT
        Subject: CN=6add0e98-a55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:80:94:78:c1:0c:0f:1c:23:cb:c8:55:c5:b0:
                    bb:f5:7a:5d:1e:e9:53:da:f8:2b:5c:d2:6e:01:7d:
                    5a:e1:ee:4d:d8:84:19:f0:13:78:e2:f6:83:45:96:
                    91:d1:e4:ab:d2:87:58:3c:e8:d5:6b:f3:b4:87:38:
                    e4:2e:70:3c:e6:6b:c8:01:4e:8d:85:c4:98:72:f4:
                    a7:c6:f0:b3:ee:fe:cc:18:d7:21:64:4a:d3:72:73:
                    62:81:82:57:e8:56:6f:59:20:9e:1b:4b:0d:13:ef:
                    a7:d1:a9:ba:bf:fb:d3:33:f5:28:90:ea:7d:45:f7:
                    1c:48:8f:b5:2f:9c:3a:ae:45:0b:7a:cb:00:e7:90:
                    c2:f1:64:ab:fc:1b:05:73:ff:2e:d8:85:be:72:50:
                    80:3a:7a:d8:53:87:fc:15:10:63:ff:53:d3:9a:29:
                    25:13:78:4b:af:dd:b8:da:f7:48:3d:0c:79:6c:52:
                    2d:af:ce:31:15:2b:96:af:bd:3b:19:cf:5f:14:50:
                    f9:c2:6f:a4:95:4b:99:52:cd:90:53:cf:a0:a4:54:
                    27:de:79:b1:22:0c:fb:c4:ae:c2:e9:3c:23:d9:75:
                    49:c8:b6:3c:1f:cd:23:40:b6:88:2c:ee:a4:83:cb:
                    f5:fd:3e:e9:d5:21:fb:3f:ed:14:e7:6c:db:8a:e0:
                    c9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E9:C3:C6:12:E7:E8:8B:24:49:E6:14:CA:9C:B3:D1:C4:A5:8D:80
            X509v3 Authority Key Identifier:
                keyid:3B:68:E6:03:D1:8F:56:EB:66:5E:F7:2E:92:64:05:F0:C1:0B:E3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O2jmA9GPVutmXvcukmQF8MEL4-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D1/C16006FCC18C11EA8F364166C4F9AE02/O2jmA9GPVutmXvcukmQF8MEL4-c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a2:9d:b7:93:b3:24:8b:b6:64:7c:8d:11:54:70:3e:16:56:
         6b:cd:0c:86:c3:06:22:a0:f8:7f:a8:38:6a:33:84:b8:0f:5d:
         12:47:c8:ce:2b:bb:19:cd:2b:99:95:d9:27:0a:3f:ce:7d:53:
         f4:89:f7:aa:fb:4b:63:3d:20:48:a8:0a:68:39:3f:aa:b8:6b:
         f1:2a:93:97:6c:dc:55:7a:20:cb:c0:dc:7b:e7:47:de:15:78:
         2b:65:b1:79:c6:99:6d:72:a2:b4:21:a7:b5:de:3c:92:8d:f1:
         b4:88:78:ef:79:c3:36:8a:2e:72:f0:ce:8b:87:72:d6:39:ce:
         e1:fb:4d:ab:ab:36:e2:11:28:c6:25:c8:95:1c:ac:56:57:84:
         88:4e:cb:39:85:47:4e:3a:1d:14:3d:00:ed:cb:71:69:e0:08:
         f3:94:90:66:25:ef:f3:be:e8:32:97:eb:18:30:ea:eb:d1:30:
         22:52:05:df:b1:b9:95:82:81:ad:bc:8f:5e:3d:94:77:61:36:
         c7:16:97:69:64:5f:2c:fa:a8:6c:98:b4:d4:2c:74:e4:b0:c7:
         4c:de:39:36:cb:0e:ce:ff:ee:e9:b1:3c:96:f1:26:ee:6e:3a:
         b8:df:c6:37:26:1b:e9:33:01:3f:f7:43:cb:56:03:be:7f:85:
         2a:04:da:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxRDExMTAvBgNVBAUTKDNCNjhFNjAzRDE4RjU2RUI2NjVFRjcyRTkyNjQwNUYw
QzEwQkUzRTcwHhcNMjYxMDI0MjAwMTI4WhcNMjYxMDMxMjAwMTI4WjAYMRYwFAYD
VQQDEw02YWRkMGU5OC1hNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyICUeMEMDxwjy8hVxbC79XpdHulT2vgrXNJuAX1a4e5N2IQZ8BN44vaDRZaR
0eSr0odYPOjVa/O0hzjkLnA85mvIAU6NhcSYcvSnxvCz7v7MGNchZErTcnNigYJX
6FZvWSCeG0sNE++n0am6v/vTM/UokOp9RfccSI+1L5w6rkULessA55DC8WSr/BsF
c/8u2IW+clCAOnrYU4f8FRBj/1PTmiklE3hLr9242vdIPQx5bFItr84xFSuWr707
Gc9fFFD5wm+klUuZUs2QU8+gpFQn3nmxIgz7xK7C6Twj2XVJyLY8H80jQLaILO6k
g8v1/T7p1SH7P+0U52zbiuDJhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPpw8YS
5+iLJEnmFMqcs9HEpY2AMB8GA1UdIwQYMBaAFDto5gPRj1brZl73LpJkBfDBC+Pn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDFEMS9DMTYwMDZGQ0Mx
OEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1dG1YdmN1a21RRjhNRUw0
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL08yam1BOUdQVnV0bVh2Y3VrbVFGOE1FTDQtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDFEMS9DMTYwMDZGQ0MxOEMxMUVBOEYzNjQxNjZDNEY5QUUwMi9PMmptQTlHUFZ1
dG1YdmN1a21RRjhNRUw0LWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY6Kdt5OzJIu2ZHyNEVRwPhZWa80MhsMGIqD4f6g4ajOEuA9dEkfIziu7Gc0r
mZXZJwo/zn1T9In3qvtLYz0gSKgKaDk/qrhr8SqTl2zcVXogy8Dce+dH3hV4K2Wx
ecaZbXKitCGntd48ko3xtIh473nDNooucvDOi4dy1jnO4ftNq6s24hEoxiXIlRys
VleEiE7LOYVHTjodFD0A7ctxaeAI85SQZiXv877oMpfrGDDq69EwIlIF37G5lYKB
rbyPXj2Ud2E2xxaXaWRfLPqobJi01Cx05LDHTN45NssOzv/u6bE8lvEm7m46uN/G
NyYb6TMBP/dDy1YDvn+FKgTadQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:58:38 2026 by rpki-client