Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File:                     exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier:          le9VBz+7zO+IjAz1Uc+OFC2EUDPWQXlyruQDaTgu+Ls=
Subject key identifier:   5B:71:E2:3A:7D:1B:08:1D:9A:CA:05:29:E7:1E:42:9F:03:D2:00:BD
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer:       /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial:       0301
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number:          02F2
Signing time:             Wed 21 Oct 2026 01:19:51 +0000
Manifest this update:     Wed 21 Oct 2026 01:19:51 +0000
Manifest next update:     Wed 28 Oct 2026 01:19:51 +0000
Files and hashes:         1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: vIQTpVedQiIHgbBRjQ/jKJc4v+lm7TXwuajCqmnv5sg=)
                          2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: IFkaWh9fbeVGFx4gBGqLo0JFk5b3JVnnCbAa8CPV/kc=)
                          3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: pWzkuCt8a+9azhiGDPeDWp5ecjb9VtC3wFHM3M7CwD0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
                          rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 01:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
        Validity
            Not Before: Oct 21 01:19:51 2026 GMT
            Not After : Oct 28 01:19:51 2026 GMT
        Subject: CN=6ad81337-5cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:97:70:e3:0f:6f:3e:1d:ca:da:5d:23:17:
                    ac:0b:2d:0f:06:f1:d5:01:d7:51:96:87:d1:75:e2:
                    2f:f8:3c:1f:21:61:f3:91:10:c0:26:d2:1d:7f:d2:
                    f7:3d:f2:76:1e:52:cc:55:8f:94:29:38:f4:90:f0:
                    60:9d:83:ea:6f:f0:5c:2a:4d:9d:ef:90:2b:28:00:
                    09:4b:71:d5:96:d6:7e:70:64:de:64:d1:9a:2d:9d:
                    97:68:ab:b3:2b:b6:2a:97:ac:b3:8a:1e:6d:5b:e0:
                    c3:7a:28:d6:6a:a3:81:31:0c:bc:54:24:fe:9d:5f:
                    46:da:a3:88:a7:c4:2f:2f:d3:eb:44:8e:c7:cf:e9:
                    41:44:79:c2:c8:02:5b:3f:df:90:59:a7:80:4f:b9:
                    f9:1f:40:40:06:f4:d8:19:ef:bb:5d:33:bb:7e:09:
                    fd:4c:2d:ec:f6:2d:57:ad:55:a8:95:d2:54:05:bc:
                    c0:e0:54:47:a8:ab:01:db:1c:c1:0b:81:cd:f7:67:
                    1e:a1:bf:70:f6:21:29:07:46:c3:bb:f3:0a:d5:c3:
                    54:a0:e5:d5:44:15:9a:85:b7:81:a3:aa:b2:61:a8:
                    f3:0c:a8:ab:21:5c:b8:fe:b3:dd:16:33:3e:93:d3:
                    f8:ec:87:ee:32:d5:ea:c4:10:9d:b0:0e:54:4d:5e:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:71:E2:3A:7D:1B:08:1D:9A:CA:05:29:E7:1E:42:9F:03:D2:00:BD
            X509v3 Authority Key Identifier:
                keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ae:46:f2:a4:7e:4d:bf:4a:20:01:ae:fb:30:98:7f:26:8c:
         d7:a6:c0:bb:f6:54:3d:93:50:60:44:9d:e6:a3:13:32:08:9a:
         0d:14:55:65:8e:49:fc:0d:1f:e3:16:28:8a:bc:38:f5:39:9b:
         a2:c1:6b:fe:28:ea:e3:3b:ed:2e:5d:0b:96:17:ef:10:ea:62:
         5f:84:6e:a8:8f:24:7f:16:0c:84:95:4d:40:64:18:71:1f:42:
         ad:ee:34:71:e8:27:61:35:63:20:c7:98:bc:2e:a0:50:ad:cb:
         8b:71:42:b2:4c:87:fd:a9:9d:29:24:01:f5:c4:19:37:39:10:
         24:7c:c0:25:7d:0f:58:ea:91:cc:6e:e7:ee:5e:f1:23:ce:9f:
         d9:1b:93:b6:b4:6b:20:ef:84:86:73:c7:4e:17:4b:34:46:a9:
         ac:8f:3e:c5:85:aa:3b:5d:c7:75:c3:b5:23:94:fb:6d:98:eb:
         83:dc:f7:b8:f3:dc:82:49:12:b1:3a:7e:88:5a:d7:d3:8b:e2:
         6b:9b:68:b8:ae:57:af:35:06:70:ed:40:ca:25:07:72:11:5d:
         06:42:64:21:c9:2e:c9:5f:d1:50:2e:84:ba:37:6d:d2:06:86:
         eb:b2:25:77:28:ed:87:1f:e1:af:f8:46:ed:48:2c:14:65:c6:
         28:a0:54:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3
MEVGMkIxNEMwHhcNMjYxMDIxMDExOTUxWhcNMjYxMDI4MDExOTUxWjAYMRYwFAYD
VQQDEw02YWQ4MTMzNy01Y2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjq6XcOMPbz4dytpdIxesCy0PBvHVAddRlofRdeIv+DwfIWHzkRDAJtIdf9L3
PfJ2HlLMVY+UKTj0kPBgnYPqb/BcKk2d75ArKAAJS3HVltZ+cGTeZNGaLZ2XaKuz
K7Yql6yzih5tW+DDeijWaqOBMQy8VCT+nV9G2qOIp8QvL9PrRI7Hz+lBRHnCyAJb
P9+QWaeAT7n5H0BABvTYGe+7XTO7fgn9TC3s9i1XrVWoldJUBbzA4FRHqKsB2xzB
C4HN92ceob9w9iEpB0bDu/MK1cNUoOXVRBWahbeBo6qyYajzDKirIVy4/rPdFjM+
k9P47IfuMtXqxBCdsA5UTV7EJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtx4jp9
GwgdmsoFKeceQp8D0gC9MB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE
RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR
M2Uta21VQW9EQzF3N3lzVXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfK5G8qR+Tb9KIAGu+zCYfyaM16bAu/ZUPZNQYESd5qMTMgiaDRRVZY5J/A0f
4xYoirw49TmbosFr/ijq4zvtLl0LlhfvEOpiX4RuqI8kfxYMhJVNQGQYcR9Cre40
cegnYTVjIMeYvC6gUK3Li3FCskyH/amdKSQB9cQZNzkQJHzAJX0PWOqRzG7n7l7x
I86f2RuTtrRrIO+EhnPHThdLNEaprI8+xYWqO13HdcO1I5T7bZjrg9z3uPPcgkkS
sTp+iFrX04via5touK5XrzUGcO1AyiUHchFdBkJkIckuyV/RUC6Eujdt0gaG67Il
dyjthx/hr/hG7UgsFGXGKKBUVg==
-----END CERTIFICATE-----
Generated at Wed Oct 21 03:37:36 2026 by rpki-client