Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File:                     asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier:          NL5HOJfLAjlnN6/wy/VHIpW6WKpbNuMYafV1xFdyuNw=
Subject key identifier:   0E:2D:F9:47:C3:F0:0C:00:21:9E:10:34:D7:A7:34:5A:03:31:16:40
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer:       /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial:       0CD0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number:          0CC2
Signing time:             Mon 26 Oct 2026 18:34:28 +0000
Manifest this update:     Mon 26 Oct 2026 18:34:27 +0000
Manifest next update:     Mon 02 Nov 2026 18:34:27 +0000
Files and hashes:         1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: VsYZmzrRWlXEbFtoCI5i9o/iYL6nj4Z81UxSO8U77B0=)
                          2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: 9BPurM+bulBYlNNGJgaGdzigQeRd9Aok8jx7Ea5CeBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
                          rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 18:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3280 (0xcd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
        Validity
            Not Before: Oct 26 18:34:27 2026 GMT
            Not After : Nov  2 18:34:27 2026 GMT
        Subject: CN=6adf9d33-a85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4b:a8:8f:35:a4:82:05:c7:82:dc:e9:d2:86:
                    c0:0a:ac:81:54:7a:b5:20:63:d7:a2:70:9c:f7:fc:
                    79:23:e8:a2:2d:9b:72:cd:30:c1:05:bc:66:11:7d:
                    70:df:76:93:d9:2a:98:4c:bb:b0:a2:96:fe:ad:66:
                    92:03:13:d6:47:85:c1:83:49:de:a6:50:53:17:16:
                    9e:2b:e9:04:33:a7:ba:c8:f9:4c:87:7f:e3:9c:c1:
                    d7:d2:90:43:da:b6:fe:e8:4b:d6:3c:1a:da:e2:1a:
                    45:6e:57:c7:54:54:3a:88:c1:1c:d8:6b:47:86:62:
                    c1:7b:b7:bf:19:93:d7:8c:d9:ac:57:0d:00:be:c1:
                    98:32:cf:02:77:22:14:70:64:0d:dd:fc:dd:ef:93:
                    b1:ca:f2:d1:df:8b:72:26:ac:ee:08:04:02:be:9c:
                    08:a0:4c:82:09:de:e9:bd:d7:7b:46:ae:71:31:4b:
                    1d:68:a8:42:8b:85:53:f3:de:85:85:c3:29:8a:8e:
                    a1:05:c4:b0:bf:43:17:ea:c8:6f:ee:5d:9d:d3:44:
                    db:31:9d:61:21:98:a8:18:dc:e3:ca:6b:56:da:4a:
                    85:45:38:03:82:40:ea:d9:c2:31:e2:b3:ce:4f:c5:
                    7a:7e:c3:14:da:40:78:4c:04:3d:7e:b6:6b:b0:6b:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:F9:47:C3:F0:0C:00:21:9E:10:34:D7:A7:34:5A:03:31:16:40
            X509v3 Authority Key Identifier:
                keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:78:a9:36:6e:20:57:5e:78:e1:83:6d:2a:7e:87:e4:40:
         82:6d:e3:ca:8f:e3:5c:98:13:13:69:a8:27:c9:25:0c:81:3f:
         c8:ca:73:4d:33:83:46:89:b2:d6:73:b2:aa:89:d1:ff:f5:46:
         16:e9:c1:7a:95:c4:bc:27:76:72:a8:ca:a1:14:db:96:a3:1f:
         ca:d8:f8:76:f2:79:3c:65:da:71:ec:0c:cb:f0:a6:cf:47:3e:
         b8:05:6a:f9:91:d6:14:f9:70:7d:a5:53:aa:04:a1:b0:6f:f5:
         c0:7d:4a:7a:b9:c1:54:7c:fe:a8:85:a0:31:95:3b:69:34:5f:
         00:a1:ed:5c:51:26:69:3f:92:01:ff:a1:dd:4c:a2:da:8b:c1:
         8f:88:16:ea:8a:65:94:39:de:6d:13:74:bb:4d:c6:9e:5f:bd:
         0b:ce:1c:bc:f6:b6:36:f2:6c:7c:9b:91:0e:62:c5:c9:53:d5:
         fd:8f:73:ce:35:d4:51:4d:4d:f5:d4:f4:fd:16:ee:2f:ca:7e:
         24:bf:74:38:54:34:ac:25:22:29:db:a1:e4:4b:a3:d7:a6:2d:
         04:e0:be:76:bd:8c:e1:24:2f:1e:9f:70:2c:f3:9d:39:23:a6:
         89:a9:41:d8:88:1d:a9:9a:57:a9:a5:99:ad:d5:5b:b3:dd:2a:
         30:ac:f2:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx
OENENjhFMzEwHhcNMjYxMDI2MTgzNDI3WhcNMjYxMTAyMTgzNDI3WjAYMRYwFAYD
VQQDEw02YWRmOWQzMy1hODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh0uojzWkggXHgtzp0obACqyBVHq1IGPXonCc9/x5I+iiLZtyzTDBBbxmEX1w
33aT2SqYTLuwopb+rWaSAxPWR4XBg0neplBTFxaeK+kEM6e6yPlMh3/jnMHX0pBD
2rb+6EvWPBra4hpFblfHVFQ6iMEc2GtHhmLBe7e/GZPXjNmsVw0AvsGYMs8CdyIU
cGQN3fzd75OxyvLR34tyJqzuCAQCvpwIoEyCCd7pvdd7Rq5xMUsdaKhCi4VT896F
hcMpio6hBcSwv0MX6shv7l2d00TbMZ1hIZioGNzjymtW2kqFRTgDgkDq2cIx4rPO
T8V6fsMU2kB4TAQ9frZrsGtdIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA4t+UfD
8AwAIZ4QNNenNFoDMRZAMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx
ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq
akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI
QnFfVC1GSTh3TXdZeldqakUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF6h4qTZuIFdeeOGDbSp+h+RAgm3jyo/jXJgTE2moJ8klDIE/yMpzTTODRomy
1nOyqonR//VGFunBepXEvCd2cqjKoRTblqMfytj4dvJ5PGXacewMy/Cmz0c+uAVq
+ZHWFPlwfaVTqgShsG/1wH1KernBVHz+qIWgMZU7aTRfAKHtXFEmaT+SAf+h3Uyi
2ovBj4gW6opllDnebRN0u03Gnl+9C84cvPa2NvJsfJuRDmLFyVPV/Y9zzjXUUU1N
9dT0/RbuL8p+JL90OFQ0rCUiKduh5Euj16YtBOC+dr2M4SQvHp9wLPOdOSOmialB
2IgdqZpXqaWZrdVbs90qMKzyiA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:18:29 2026 by rpki-client