Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
File:                     s-lBocVdFIOrV5HZSYdQ492t7cw.mft (raw, json)
Hash identifier:          R6sV/oeQ/OnyUhZUEHFp3wK59/4lNUsT7m60J6ICU/4=
Subject key identifier:   5D:DA:35:DA:DD:D1:BC:31:78:40:02:BE:CF:10:73:FE:A5:F9:21:47
Authority key identifier: B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC
Certificate issuer:       /CN=A913B018/serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
Manifest number:          01FB
Signing time:             Sat 17 Oct 2026 03:52:15 +0000
Manifest this update:     Sat 17 Oct 2026 03:52:14 +0000
Manifest next update:     Sat 24 Oct 2026 03:52:14 +0000
Files and hashes:         1: s-lBocVdFIOrV5HZSYdQ492t7cw.crl (hash: /rl+qrDOEFv9cWoQopjcpUPLnbaJB34KmSxAjsV+v8Q=)
                          2: 8B097276C5F911EE8D0FDF82C4F9AE02.roa (hash: O+F2f0VhvNnWnKbzy9esY0C22BqTbjq93BfHVqmsqRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl
                          rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 03:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B018, serialNumber=B3E941A1C55D1483AB5791D9498750E3DDADEDCC
        Validity
            Not Before: Oct 17 03:52:14 2026 GMT
            Not After : Oct 24 03:52:14 2026 GMT
        Subject: CN=6ad2f0ef-82fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:2e:f1:d6:f2:80:34:a0:d2:3d:f2:51:43:
                    9c:10:fc:8e:0c:9c:35:ca:51:90:44:b5:c1:5e:a6:
                    50:00:cf:b5:ed:51:88:fd:2a:f1:c1:69:c9:7f:76:
                    b5:8e:12:b5:4c:49:ef:fc:40:93:38:9a:c5:32:a6:
                    ba:fc:d1:02:e3:f9:5b:5b:ee:25:5a:17:40:ea:06:
                    ef:30:7f:1a:ba:3c:01:e2:a4:a9:8e:5d:d5:92:b3:
                    71:c3:1f:87:14:30:d4:de:41:a4:c1:ec:02:27:52:
                    13:e7:09:c6:23:19:be:29:ed:62:12:4d:e1:ac:f0:
                    9b:f9:4b:f9:40:33:ab:01:7a:7e:ae:57:af:39:07:
                    63:43:6b:b6:63:10:19:ee:fe:80:ee:40:bb:5a:41:
                    40:74:11:8f:69:49:06:f6:5d:05:50:7f:c6:1e:6d:
                    69:a6:fb:83:9f:a8:05:0d:e6:f5:be:dc:a3:27:86:
                    35:64:d0:b7:1d:4c:18:0f:50:8e:be:7e:46:17:3c:
                    c9:62:ea:b2:96:bb:e1:6b:af:c7:93:e4:c8:80:19:
                    49:0c:79:17:10:99:9b:76:8a:bd:ca:d7:eb:9c:70:
                    7b:fb:26:2f:5d:c8:74:26:79:f1:43:3e:bc:aa:04:
                    66:4b:53:ca:3d:27:eb:31:8f:62:d6:76:dd:46:af:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DA:35:DA:DD:D1:BC:31:78:40:02:BE:CF:10:73:FE:A5:F9:21:47
            X509v3 Authority Key Identifier:
                keyid:B3:E9:41:A1:C5:5D:14:83:AB:57:91:D9:49:87:50:E3:DD:AD:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s-lBocVdFIOrV5HZSYdQ492t7cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/3079D812C5F611EEBE0B7960C4F9AE02/s-lBocVdFIOrV5HZSYdQ492t7cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:44:5a:e8:1d:6c:40:ad:09:52:2f:54:19:8d:2f:3c:29:ec:
         81:42:1b:00:3d:1a:24:4e:5a:7e:6c:98:35:9c:de:52:2c:b2:
         53:d4:46:4c:ae:a2:05:45:60:10:e1:87:6c:e5:15:53:bd:28:
         61:3c:98:d4:e4:99:41:3b:d3:f3:a1:a6:6f:92:ba:45:ca:06:
         61:04:3d:ab:3c:2f:99:b9:4c:d6:dd:6f:2b:9a:1b:9e:b2:45:
         ec:f0:1d:05:2e:15:d7:2b:5a:9d:ef:51:c9:70:a9:9b:3c:fb:
         b4:d7:47:83:a0:01:93:01:42:c5:f7:47:de:70:f9:86:59:ce:
         a8:de:b2:23:4f:a9:d8:17:30:6e:ba:cf:a1:a2:42:15:7d:b4:
         7c:0c:ae:77:cb:7b:ef:68:4d:df:87:ff:ca:ff:12:54:00:13:
         e4:62:58:8e:9b:76:e3:58:3c:38:de:b7:c4:51:8a:4c:5f:96:
         93:3f:84:5e:1f:d4:1b:cf:3e:90:8a:83:61:bb:46:0a:3e:74:
         b0:03:20:d9:31:0d:39:5f:bf:bd:04:be:50:67:76:bb:b3:92:
         b1:92:96:30:86:48:36:95:8f:39:0a:d9:41:ee:d3:55:9d:d0:
         21:a1:5f:01:13:0c:a9:27:65:48:54:0a:f9:1b:c5:d5:44:84:
         dc:5a:15:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IwMTgxMTAvBgNVBAUTKEIzRTk0MUExQzU1RDE0ODNBQjU3OTFEOTQ5ODc1MEUz
RERBREVEQ0MwHhcNMjYxMDE3MDM1MjE0WhcNMjYxMDI0MDM1MjE0WjAYMRYwFAYD
VQQDEw02YWQyZjBlZi04MmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hAu8dbygDSg0j3yUUOcEPyODJw1ylGQRLXBXqZQAM+17VGI/SrxwWnJf3a1
jhK1TEnv/ECTOJrFMqa6/NEC4/lbW+4lWhdA6gbvMH8aujwB4qSpjl3VkrNxwx+H
FDDU3kGkwewCJ1IT5wnGIxm+Ke1iEk3hrPCb+Uv5QDOrAXp+rlevOQdjQ2u2YxAZ
7v6A7kC7WkFAdBGPaUkG9l0FUH/GHm1ppvuDn6gFDeb1vtyjJ4Y1ZNC3HUwYD1CO
vn5GFzzJYuqylrvha6/Hk+TIgBlJDHkXEJmbdoq9ytfrnHB7+yYvXch0JnnxQz68
qgRmS1PKPSfrMY9i1nbdRq8atQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF3aNdrd
0bwxeEACvs8Qc/6l+SFHMB8GA1UdIwQYMBaAFLPpQaHFXRSDq1eR2UmHUOPdre3M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zMDc5RDgxMkM1
RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi9zLWxCb2NWZEZJT3JWNUhaU1lkUTQ5MnQ3
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3MtbEJvY1ZkRklPclY1SFpTWWRRNDkydDdjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjAxOC8zMDc5RDgxMkM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi9zLWxCb2NWZEZJ
T3JWNUhaU1lkUTQ5MnQ3Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS0Ra6B1sQK0JUi9UGY0vPCnsgUIbAD0aJE5afmyYNZzeUiyyU9RGTK6iBUVg
EOGHbOUVU70oYTyY1OSZQTvT86Gmb5K6RcoGYQQ9qzwvmblM1t1vK5obnrJF7PAd
BS4V1ytane9RyXCpmzz7tNdHg6ABkwFCxfdH3nD5hlnOqN6yI0+p2BcwbrrPoaJC
FX20fAyud8t772hN34f/yv8SVAAT5GJYjpt241g8ON63xFGKTF+Wkz+EXh/UG88+
kIqDYbtGCj50sAMg2TENOV+/vQS+UGd2u7OSsZKWMIZINpWPOQrZQe7TVZ3QIaFf
ARMMqSdlSFQK+RvF1USE3FoVwQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:13:23 2026 by rpki-client