Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
File:                     8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json)
Hash identifier:          ohRKD+ruaW7Xyx/vF2XCHhSMyhX40u+rs/6vnfnEM3E=
Subject key identifier:   89:D2:5E:EF:B4:48:CC:17:69:40:D3:70:86:56:62:C0:98:C6:92:7B
Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11
Certificate issuer:       /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
Manifest number:          014B
Signing time:             Mon 05 Oct 2026 05:42:29 +0000
Manifest this update:     Mon 05 Oct 2026 05:42:29 +0000
Manifest next update:     Mon 12 Oct 2026 05:42:29 +0000
Files and hashes:         1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: QDbWgsubFR/BQ71v5Kfx7wdBQhJLv9Muf1LQgRmM+Hc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl
                          rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611
        Validity
            Not Before: Oct  5 05:42:29 2026 GMT
            Not After : Oct 12 05:42:29 2026 GMT
        Subject: CN=6ac338c5-8c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:29:d7:7e:13:b2:40:a1:88:13:f9:38:06:
                    d6:a1:88:c7:83:ec:7b:4d:de:c4:7d:ca:29:04:31:
                    33:2c:7c:ac:f6:1a:ce:eb:2f:bd:87:c7:5d:00:71:
                    27:4d:c4:ac:21:97:a3:b8:1d:a8:4f:05:6a:8e:62:
                    56:2c:d7:e0:26:09:7c:51:d4:67:e5:86:79:49:26:
                    b3:93:c2:48:e2:07:45:da:ac:35:9b:6a:52:e9:c7:
                    eb:6b:06:7e:ba:c2:49:82:e0:ac:48:cb:87:c4:a1:
                    e1:12:ac:8b:98:9f:ee:5d:6d:73:42:91:93:f8:b3:
                    da:6a:61:57:7c:fa:d1:84:a3:4b:48:40:84:8e:d4:
                    4c:af:5d:1c:b7:02:d0:71:41:5a:e6:84:9f:05:0d:
                    2e:f3:af:3f:3b:80:03:23:1a:ef:bd:76:58:86:95:
                    46:73:6c:02:f7:37:9b:96:f0:af:ec:9b:ec:a5:22:
                    f1:da:d3:7e:a6:91:c3:2e:a0:ec:f5:4c:86:5d:69:
                    52:0f:80:bf:91:11:29:5d:5a:08:13:ea:a7:dd:c6:
                    55:6c:3d:9e:e5:4b:2a:3a:d0:ce:56:f9:39:51:0a:
                    12:bb:b8:c0:26:25:26:75:21:5a:f5:32:8d:0f:14:
                    a7:12:be:cd:51:d3:16:d7:41:5a:19:b9:26:7e:d7:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D2:5E:EF:B4:48:CC:17:69:40:D3:70:86:56:62:C0:98:C6:92:7B
            X509v3 Authority Key Identifier:
                keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a9:12:01:51:e4:a4:3f:be:bc:51:a4:07:ac:e3:7f:89:18:
         4b:f3:fe:48:22:68:d3:77:a4:50:39:9f:34:bb:9a:b7:c0:3d:
         e7:81:58:8d:a6:21:b2:d8:f6:cb:84:e6:f9:d3:9c:4a:a1:80:
         66:cf:26:6c:c2:ca:31:21:39:b7:83:84:df:85:1b:c1:83:b5:
         73:bf:3c:6d:86:d1:19:2a:14:f5:76:ad:24:e3:db:03:ac:f1:
         30:36:15:ce:41:de:3e:91:06:9a:ab:18:0d:20:1a:87:c4:7b:
         fb:37:b8:d5:cf:7a:92:4a:84:29:fc:fd:a8:2e:24:67:49:c2:
         17:08:5a:5d:de:59:91:f1:b0:90:2e:d7:e1:c1:78:cf:2c:74:
         8b:4c:b2:35:93:aa:15:31:b6:58:10:7f:20:75:06:99:79:e0:
         8d:5b:96:44:63:00:09:79:a5:4f:08:f8:6a:31:0e:1d:c6:97:
         1f:93:f0:3a:b0:ca:c9:6c:e9:bd:41:fb:8c:9a:6c:99:53:c5:
         1a:82:5d:b3:59:5c:09:1c:a4:9e:da:da:68:51:e4:12:69:3a:
         ac:9d:3d:74:c1:c9:33:99:ae:69:71:b0:74:0e:aa:0d:25:bc:
         3c:5f:c1:c6:44:a2:63:37:84:c2:1a:42:2f:4f:5d:3e:00:34:
         3b:6b:9e:18
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E1QUYxMTAvBgNVBAUTKEYzRUJCRkI0QTkzODBGRTA5QTU2MUZDNkFGQTJBMUND
MjE0ODg2MTEwHhcNMjYxMDA1MDU0MjI5WhcNMjYxMDEyMDU0MjI5WjAYMRYwFAYD
VQQDEw02YWMzMzhjNS04YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo7cp134TskChiBP5OAbWoYjHg+x7Td7EfcopBDEzLHys9hrO6y+9h8ddAHEn
TcSsIZejuB2oTwVqjmJWLNfgJgl8UdRn5YZ5SSazk8JI4gdF2qw1m2pS6cfrawZ+
usJJguCsSMuHxKHhEqyLmJ/uXW1zQpGT+LPaamFXfPrRhKNLSECEjtRMr10ctwLQ
cUFa5oSfBQ0u868/O4ADIxrvvXZYhpVGc2wC9zeblvCv7JvspSLx2tN+ppHDLqDs
9UyGXWlSD4C/kREpXVoIE+qn3cZVbD2e5UsqOtDOVvk5UQoSu7jAJiUmdSFa9TKN
DxSnEr7NUdMW10FaGbkmftdQcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInSXu+0
SMwXaUDTcIZWYsCYxpJ7MB8GA1UdIwQYMBaAFPPrv7SpOA/gmlYfxq+iocwhSIYR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVBRi84OERCQTk4MkNC
QzExMUVGOUNEMTlENDRDNEY5QUUwMi84LXVfdEtrNEQtQ2FWaF9HcjZLaHpDRklo
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgtdV90S2s0RC1DYVZoX0dyNktoekNGSWhoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTVBRi84OERCQTk4MkNCQzExMUVGOUNEMTlENDRDNEY5QUUwMi84LXVfdEtrNEQt
Q2FWaF9HcjZLaHpDRkloaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfakSAVHkpD++vFGkB6zjf4kYS/P+SCJo03ekUDmfNLuat8A954FYjaYhstj2
y4Tm+dOcSqGAZs8mbMLKMSE5t4OE34UbwYO1c788bYbRGSoU9XatJOPbA6zxMDYV
zkHePpEGmqsYDSAah8R7+ze41c96kkqEKfz9qC4kZ0nCFwhaXd5ZkfGwkC7X4cF4
zyx0i0yyNZOqFTG2WBB/IHUGmXngjVuWRGMACXmlTwj4ajEOHcaXH5PwOrDKyWzp
vUH7jJpsmVPFGoJds1lcCRykntraaFHkEmk6rJ09dMHJM5muaXGwdA6qDSW8PF/B
xkSiYzeEwhpCL09dPgA0O2ueGA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 21:33:08 2026 by rpki-client