Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File:                     sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier:          bEG0UWJ0sn3CEoZ82u+9nNzIqUjKS4usdiGM5kAHkFA=
Subject key identifier:   86:BB:74:26:CD:09:C4:04:E4:BF:54:50:2E:E7:90:3E:2B:62:94:85
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer:       /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial:       081F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number:          0BA6
Signing time:             Mon 26 Oct 2026 19:04:54 +0000
Manifest this update:     Mon 26 Oct 2026 19:04:53 +0000
Manifest next update:     Mon 02 Nov 2026 19:04:53 +0000
Files and hashes:         1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: RQU+VgzDpQdPqptPC9ZFkgOExvchXMoMfXUlLliDfBg=)
                          2: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: +q1Hzxn4Bkv23nWCZgVmh7vcZuLYlqRRNFA8T1wc+f8=)
                          3: 13B5A626CEB811F09E67F582C4F9AE02.roa (hash: mO8S1AIuP5D0jmzeJHd4aSV8W/Nhasm8k/Q5HQJUWxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
                          rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 19:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079 (0x81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
        Validity
            Not Before: Oct 26 19:04:53 2026 GMT
            Not After : Nov  2 19:04:53 2026 GMT
        Subject: CN=6adfa456-54bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:92:b5:1e:bc:a0:0f:4b:5f:29:2e:a7:f9:
                    7f:a4:c3:35:ea:00:a8:3d:b7:93:c0:85:22:6b:41:
                    2c:5e:0a:86:28:45:ca:d1:4a:60:12:e4:35:a9:58:
                    f8:5c:8c:75:c0:c5:b8:66:da:e5:62:4b:6c:82:34:
                    ad:6d:e9:36:b1:a6:d0:47:33:e1:2d:5c:a6:54:bf:
                    03:da:38:83:eb:3f:02:06:23:b0:52:22:78:52:25:
                    1a:06:12:06:8c:71:d8:53:68:ed:b1:32:62:61:b1:
                    71:fd:3f:2b:16:ec:9b:92:bd:69:45:4a:76:c5:aa:
                    27:39:94:00:96:f6:76:db:b4:f4:5b:fd:25:d6:64:
                    da:67:1e:ae:da:a3:d8:fa:4c:9f:89:c9:6a:48:7c:
                    0d:9b:ee:15:45:a6:9a:3d:14:30:1f:fe:cb:32:54:
                    7b:96:e0:13:0c:d8:7b:c7:55:2d:86:3e:ea:57:a3:
                    19:b5:3d:ca:10:01:ac:77:4e:9a:3e:d6:05:e1:12:
                    d8:0b:8f:0b:23:21:31:9f:b5:05:9e:f0:f6:0e:49:
                    55:77:a7:11:2a:04:5d:05:25:c5:b9:c6:78:80:93:
                    bb:7d:b0:8a:69:d2:01:65:fe:6d:31:1b:29:d7:c6:
                    a1:69:5a:b2:6c:b7:30:f0:54:d3:e7:57:31:e7:a5:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BB:74:26:CD:09:C4:04:E4:BF:54:50:2E:E7:90:3E:2B:62:94:85
            X509v3 Authority Key Identifier:
                keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c2:33:1a:e5:c4:31:d9:b8:68:13:45:12:f2:cf:72:e6:ac:
         da:12:e9:7e:ed:33:01:39:68:63:2e:d3:9c:1f:73:e2:29:84:
         4e:43:35:27:d9:15:cb:dc:5a:1d:4f:f6:66:18:81:38:d6:da:
         31:18:c7:a8:c3:b0:e2:13:09:55:55:f2:75:8d:8d:2a:01:59:
         c8:e6:08:cf:78:f8:10:08:c0:7c:b0:d8:d1:78:3b:f8:92:e5:
         5c:3d:8a:3d:89:b9:6d:5b:b0:49:8f:35:85:10:b4:7d:3e:b7:
         c9:37:5c:8e:2a:cc:84:3c:68:41:27:7e:5d:0b:f2:fe:33:9d:
         12:61:66:96:f6:73:99:c3:32:1e:b9:a3:91:0b:f4:8a:4a:fb:
         c4:fc:75:1c:c9:dc:01:32:de:2c:c6:cc:88:b7:7a:5c:64:b6:
         a6:03:a4:83:fb:95:53:5e:4a:12:c2:7c:db:81:79:0c:81:b4:
         0b:c3:df:cf:0d:25:59:be:af:58:16:2e:56:81:65:1e:b6:a6:
         19:cf:34:50:6e:0d:0d:aa:60:52:e3:7e:d3:09:bc:e2:1b:e2:
         0f:97:fc:f5:5a:41:e3:68:56:1a:7e:61:3a:32:20:d2:4b:5e:
         d2:13:8d:56:8d:01:22:d0:36:08:9e:b0:af:7e:54:9f:b9:d0:
         ce:d5:c1:e5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VFNzcxMTAvBgNVBAUTKEIxOEVBNEI0ODY4NEE2N0RFQTAxMzhCQUJBMjMzMDZE
MDAwM0NEQ0MwHhcNMjYxMDI2MTkwNDUzWhcNMjYxMTAyMTkwNDUzWjAYMRYwFAYD
VQQDEw02YWRmYTQ1Ni01NGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquqStR68oA9LXykup/l/pMM16gCoPbeTwIUia0EsXgqGKEXK0UpgEuQ1qVj4
XIx1wMW4ZtrlYktsgjStbek2sabQRzPhLVymVL8D2jiD6z8CBiOwUiJ4UiUaBhIG
jHHYU2jtsTJiYbFx/T8rFuybkr1pRUp2xaonOZQAlvZ227T0W/0l1mTaZx6u2qPY
+kyficlqSHwNm+4VRaaaPRQwH/7LMlR7luATDNh7x1Uthj7qV6MZtT3KEAGsd06a
PtYF4RLYC48LIyExn7UFnvD2DklVd6cRKgRdBSXFucZ4gJO7fbCKadIBZf5tMRsp
18ahaVqybLcw8FTT51cx56UYSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIa7dCbN
CcQE5L9UUC7nkD4rYpSFMB8GA1UdIwQYMBaAFLGOpLSGhKZ96gE4urojMG0AA83M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU3Ny9DNDAwQkI1QzU2
RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBuM3FBVGk2dWlNd2JRQUR6
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NZNmt0SWFFcG4zcUFUaTZ1aU13YlFBRHpjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUU3Ny9DNDAwQkI1QzU2RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBu
M3FBVGk2dWlNd2JRQUR6Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhMIzGuXEMdm4aBNFEvLPcuas2hLpfu0zATloYy7TnB9z4imETkM1J9kVy9xa
HU/2ZhiBONbaMRjHqMOw4hMJVVXydY2NKgFZyOYIz3j4EAjAfLDY0Xg7+JLlXD2K
PYm5bVuwSY81hRC0fT63yTdcjirMhDxoQSd+XQvy/jOdEmFmlvZzmcMyHrmjkQv0
ikr7xPx1HMncATLeLMbMiLd6XGS2pgOkg/uVU15KEsJ824F5DIG0C8Pfzw0lWb6v
WBYuVoFlHramGc80UG4NDapgUuN+0wm84hviD5f89VpB42hWGn5hOjIg0kte0hON
Vo0BItA2CJ6wr35Un7nQztXB5Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:19:56 2026 by rpki-client