Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
File:                     dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft (raw, json)
Hash identifier:          Ip86f2Jo9KBHLaKObnvaMqMTCXM05NFeA7ZO96JeeGU=
Subject key identifier:   AD:5D:C6:2D:07:EE:1C:F8:61:D4:D3:F8:6C:AF:4A:B6:1A:FA:4E:6B
Authority key identifier: 75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33
Certificate issuer:       /CN=A913270F/serialNumber=750D6AD849977279569525E3DAFC972FCB782233
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
Manifest number:          95
Signing time:             Wed 21 Oct 2026 08:02:52 +0000
Manifest this update:     Wed 21 Oct 2026 08:02:52 +0000
Manifest next update:     Wed 28 Oct 2026 08:02:52 +0000
Files and hashes:         1: dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl (hash: gOrs+U/16jQrfJQBu4qH1r/9EFUU7y2peQaJjjcjOco=)
                          2: CDCAE45AEFA011F0A40A3DE8696F56BC.roa (hash: iKMOZndSspUWn/Q2dD9wJzioM8CavlEGjQksPJ9SKPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl
                          rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913270F, serialNumber=750D6AD849977279569525E3DAFC972FCB782233
        Validity
            Not Before: Oct 21 08:02:52 2026 GMT
            Not After : Oct 28 08:02:52 2026 GMT
        Subject: CN=6ad871ac-ec17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:52:1a:47:40:c2:33:35:d4:f1:15:df:62:5c:
                    92:e3:36:cd:fb:1e:85:95:95:04:7e:70:11:a5:96:
                    f7:09:5a:d7:d2:ed:a5:a9:2d:13:ff:23:a0:99:97:
                    ab:b5:44:cc:c0:a3:fd:66:c4:aa:1e:b5:e8:34:c9:
                    2f:e4:50:78:3e:53:b2:da:82:01:55:2f:57:f9:d7:
                    ba:34:36:f4:27:2e:26:ad:02:cd:34:d1:f8:74:1b:
                    aa:db:b9:e4:66:ea:e4:e2:e6:28:fd:5f:d6:de:cf:
                    da:11:16:0a:1e:2a:c1:d1:fe:b3:49:47:54:15:75:
                    33:2a:da:6f:19:5f:8c:46:13:2c:34:82:0d:c1:12:
                    64:1b:af:48:34:86:15:8f:09:4d:1d:e2:ef:59:ab:
                    eb:9c:7d:fb:5f:67:c4:2c:c7:f5:64:e5:3a:e4:3a:
                    6a:09:6e:7c:ff:c1:55:14:b6:0a:1d:93:8d:b0:2c:
                    8d:41:6e:ac:01:51:f6:70:d0:56:a4:fa:9d:c3:bd:
                    25:7f:80:a3:65:2b:57:6f:25:d8:b0:9e:2d:58:d2:
                    3a:f1:05:64:1e:cd:ec:55:8b:64:f9:83:18:d8:2e:
                    1b:15:fb:c5:3c:79:b0:e0:62:4c:5c:e8:9e:57:37:
                    50:8f:da:14:21:12:34:63:67:35:d5:7b:40:40:a8:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5D:C6:2D:07:EE:1C:F8:61:D4:D3:F8:6C:AF:4A:B6:1A:FA:4E:6B
            X509v3 Authority Key Identifier:
                keyid:75:0D:6A:D8:49:97:72:79:56:95:25:E3:DA:FC:97:2F:CB:78:22:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/EC2F86E0EF9F11F0B8D5B3EF686F56BC/dQ1q2EmXcnlWlSXj2vyXL8t4IjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ec:91:80:a6:1b:34:f9:53:d5:4e:8f:f3:86:04:d2:53:52:
         80:36:1e:bf:87:92:fe:36:b5:61:3e:1f:a6:75:42:ee:f0:de:
         cd:d4:eb:c6:16:0c:7d:08:15:61:52:75:a0:57:23:6f:31:35:
         fc:b1:6e:21:a7:4f:7c:e7:48:63:bc:69:4e:0a:ae:b7:5d:f0:
         96:1b:11:c6:09:2d:e7:f2:60:85:3e:86:e6:20:9b:55:42:40:
         35:a2:c3:5b:4a:d8:67:6d:f6:c0:25:cc:45:62:a7:44:ae:1e:
         43:67:bd:7b:51:de:14:71:d2:7a:9f:d7:9b:ad:6e:e0:45:29:
         83:5f:41:a5:4f:99:49:03:dc:7c:31:45:c1:04:76:38:08:12:
         91:4f:79:2e:06:49:00:41:b3:a6:aa:f8:37:1e:97:fa:34:97:
         e1:5f:dd:08:82:de:72:b3:b8:fe:cc:c1:0e:bb:93:d0:8b:77:
         8b:1a:f5:9e:32:67:02:ad:37:17:78:4d:ed:b1:97:f1:7a:d3:
         66:95:b5:0d:db:36:3b:ce:ed:ad:cb:78:ff:cc:1f:78:98:44:
         35:7b:b0:84:5e:42:66:6a:6f:34:32:0a:0b:39:c9:3d:df:9f:
         9e:f4:a1:a2:0f:af:d3:5f:59:eb:41:90:68:aa:3f:ba:67:2f:
         e0:f7:30:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI3MEYxMTAvBgNVBAUTKDc1MEQ2QUQ4NDk5NzcyNzk1Njk1MjVFM0RBRkM5NzJG
Q0I3ODIyMzMwHhcNMjYxMDIxMDgwMjUyWhcNMjYxMDI4MDgwMjUyWjAYMRYwFAYD
VQQDEw02YWQ4NzFhYy1lYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6lIaR0DCMzXU8RXfYlyS4zbN+x6FlZUEfnARpZb3CVrX0u2lqS0T/yOgmZer
tUTMwKP9ZsSqHrXoNMkv5FB4PlOy2oIBVS9X+de6NDb0Jy4mrQLNNNH4dBuq27nk
Zurk4uYo/V/W3s/aERYKHirB0f6zSUdUFXUzKtpvGV+MRhMsNIINwRJkG69INIYV
jwlNHeLvWavrnH37X2fELMf1ZOU65DpqCW58/8FVFLYKHZONsCyNQW6sAVH2cNBW
pPqdw70lf4CjZStXbyXYsJ4tWNI68QVkHs3sVYtk+YMY2C4bFfvFPHmw4GJMXOie
VzdQj9oUIRI0Y2c11XtAQKhcfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1dxi0H
7hz4YdTT+GyvSrYa+k5rMB8GA1UdIwQYMBaAFHUNathJl3J5VpUl49r8ly/LeCIz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjcwRi9FQzJGODZFMEVG
OUYxMUYwQjhENUIzRUY2ODZGNTZCQy9kUTFxMkVtWGNubFdsU1hqMnZ5WEw4dDRJ
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RRMXEyRW1YY25sV2xTWGoydnlYTDh0NElqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjcwRi9FQzJGODZFMEVGOUYxMUYwQjhENUIzRUY2ODZGNTZCQy9kUTFxMkVtWGNu
bFdsU1hqMnZ5WEw4dDRJak0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaeyRgKYbNPlT1U6P84YE0lNSgDYev4eS/ja1YT4fpnVC7vDezdTrxhYMfQgV
YVJ1oFcjbzE1/LFuIadPfOdIY7xpTgqut13wlhsRxgkt5/JghT6G5iCbVUJANaLD
W0rYZ232wCXMRWKnRK4eQ2e9e1HeFHHSep/Xm61u4EUpg19BpU+ZSQPcfDFFwQR2
OAgSkU95LgZJAEGzpqr4Nx6X+jSX4V/dCILecrO4/szBDruT0It3ixr1njJnAq03
F3hN7bGX8XrTZpW1Dds2O87trct4/8wfeJhENXuwhF5CZmpvNDIKCznJPd+fnvSh
og+v019Z60GQaKo/umcv4PcwcQ==
-----END CERTIFICATE-----
Generated at Thu Oct 22 10:34:05 2026 by rpki-client