Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
File:                     kTeon0YQ2uLIjGlNyVLOWDVScHk.mft (raw, json)
Hash identifier:          cQF6Rj7DgX/R5NTtEbAh2lBzkyjFYEg6yGp2Wprs1A8=
Subject key identifier:   36:64:DE:60:78:EA:FD:51:98:23:42:42:C6:3E:9A:08:4B:FD:D2:C2
Authority key identifier: 91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79
Certificate issuer:       /CN=A913F8BC/serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
Certificate serial:       10EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
Manifest number:          10DC
Signing time:             Sun 04 Oct 2026 17:21:34 +0000
Manifest this update:     Sun 04 Oct 2026 17:21:34 +0000
Manifest next update:     Sun 11 Oct 2026 17:21:34 +0000
Files and hashes:         1: kTeon0YQ2uLIjGlNyVLOWDVScHk.crl (hash: SxCoaYM07bB8QN+QtsNUxwzb6da+DW/zcFGEZMqW11I=)
                          2: E9056E5A520611E9ABE43055C4F9AE02.roa (hash: RzwYZuvd4XyjCOm9BluFD+cQ9dlkUBoYuq3X1xwqlGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl
                          rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 17:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4332 (0x10ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F8BC, serialNumber=9137A89F4610DAE2C88C694DC952CE5835527079
        Validity
            Not Before: Oct  4 17:21:34 2026 GMT
            Not After : Oct 11 17:21:34 2026 GMT
        Subject: CN=6ac28b1e-cb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:bb:09:21:db:32:28:8b:b1:e9:fc:36:2e:
                    da:51:52:95:c4:ca:00:5f:91:7c:9c:38:63:d3:b9:
                    57:e2:15:a9:c5:4f:ce:90:42:60:6e:2e:fb:84:e7:
                    02:61:4e:3b:3e:b0:d7:98:23:e9:d5:18:11:90:ac:
                    dd:8d:bb:2f:21:4e:22:6c:33:65:1a:5e:84:89:95:
                    f5:56:df:67:f4:9f:88:95:f7:51:a4:46:b2:14:7e:
                    c5:ee:89:4e:21:56:cf:96:64:21:29:bc:97:05:a4:
                    17:cc:eb:86:e1:6c:13:2b:0e:a6:b5:20:2a:f1:07:
                    7d:06:f0:a1:91:0c:17:3f:ca:80:f6:95:56:fa:71:
                    f8:cd:21:57:73:7d:e7:f6:24:36:4a:2f:d5:cf:30:
                    7f:da:69:28:e9:21:26:9d:a2:5d:8d:1e:ab:d7:50:
                    8a:73:f8:0f:6a:21:4e:47:d7:7f:1d:5e:ca:54:eb:
                    ea:94:1a:8b:e0:b6:82:cd:ed:a8:ff:17:9c:3b:7c:
                    c7:03:3e:37:a5:01:3c:cf:c0:bb:1b:ea:fc:da:3d:
                    81:10:50:7c:f6:da:65:0a:3d:f4:f0:8a:a3:6a:93:
                    37:ae:dc:c4:ec:3e:c8:6c:c9:b7:8c:0d:81:f0:a0:
                    e5:3f:97:5a:a2:a8:31:58:7f:3b:af:67:5e:23:3b:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:64:DE:60:78:EA:FD:51:98:23:42:42:C6:3E:9A:08:4B:FD:D2:C2
            X509v3 Authority Key Identifier:
                keyid:91:37:A8:9F:46:10:DA:E2:C8:8C:69:4D:C9:52:CE:58:35:52:70:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTeon0YQ2uLIjGlNyVLOWDVScHk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F8BC/4E13F40C520611E98EFC3A54C4F9AE02/kTeon0YQ2uLIjGlNyVLOWDVScHk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7c:8c:ac:bd:a1:51:1d:63:52:b4:3a:08:2f:57:30:c4:a3:
         73:e1:43:fb:32:30:8e:6f:ad:54:c7:14:d7:02:1a:46:26:0c:
         cf:7b:41:ae:00:67:06:a1:f3:75:3b:fc:38:6c:62:16:bb:60:
         b9:33:d6:5f:53:78:91:ee:21:33:32:9a:36:91:c0:1f:1a:b3:
         f6:40:02:12:36:32:d1:90:f9:05:7a:52:fb:5b:b8:02:49:c7:
         6b:27:13:68:1c:ec:28:c0:79:3e:2c:5c:e6:79:95:17:65:2b:
         95:09:df:13:0a:91:77:dc:ca:52:ca:d5:38:aa:69:58:e9:b1:
         c3:26:04:12:62:fb:06:3f:af:dc:75:56:71:bd:85:2e:9b:27:
         2a:d4:55:d6:7f:49:0a:de:73:a2:31:16:42:9c:44:f2:89:90:
         31:2c:bf:94:58:8b:f7:cf:1b:39:b6:09:f1:73:f5:e6:b7:b2:
         d2:0f:e2:a0:b4:00:76:e9:fe:d3:ee:12:3e:1f:4c:8b:e9:6a:
         16:c9:be:c0:9c:4a:9b:ab:12:71:cf:53:7c:2d:54:bf:45:28:
         7a:98:ee:ea:f3:62:fd:09:c7:af:70:79:fa:63:51:45:09:a2:
         66:7a:4b:35:7e:ab:d9:dc:a8:d9:ec:e8:be:e0:94:3b:4e:8b:
         65:28:ef:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y4QkMxMTAvBgNVBAUTKDkxMzdBODlGNDYxMERBRTJDODhDNjk0REM5NTJDRTU4
MzU1MjcwNzkwHhcNMjYxMDA0MTcyMTM0WhcNMjYxMDExMTcyMTM0WjAYMRYwFAYD
VQQDEw02YWMyOGIxZS1jYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+a7CSHbMiiLsen8Ni7aUVKVxMoAX5F8nDhj07lX4hWpxU/OkEJgbi77hOcC
YU47PrDXmCPp1RgRkKzdjbsvIU4ibDNlGl6EiZX1Vt9n9J+IlfdRpEayFH7F7olO
IVbPlmQhKbyXBaQXzOuG4WwTKw6mtSAq8Qd9BvChkQwXP8qA9pVW+nH4zSFXc33n
9iQ2Si/VzzB/2mko6SEmnaJdjR6r11CKc/gPaiFOR9d/HV7KVOvqlBqL4LaCze2o
/xecO3zHAz43pQE8z8C7G+r82j2BEFB89tplCj308IqjapM3rtzE7D7IbMm3jA2B
8KDlP5daoqgxWH87r2deIzvujQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZk3mB4
6v1RmCNCQsY+mghL/dLCMB8GA1UdIwQYMBaAFJE3qJ9GENriyIxpTclSzlg1UnB5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjhCQy80RTEzRjQwQzUy
MDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1TElqR2xOeVZMT1dEVlNj
SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tUZW9uMFlRMnVMSWpHbE55VkxPV0RWU2NIay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjhCQy80RTEzRjQwQzUyMDYxMUU5OEVGQzNBNTRDNEY5QUUwMi9rVGVvbjBZUTJ1
TElqR2xOeVZMT1dEVlNjSGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAr3yMrL2hUR1jUrQ6CC9XMMSjc+FD+zIwjm+tVMcU1wIaRiYMz3tBrgBnBqHz
dTv8OGxiFrtguTPWX1N4ke4hMzKaNpHAHxqz9kACEjYy0ZD5BXpS+1u4AknHaycT
aBzsKMB5Pixc5nmVF2UrlQnfEwqRd9zKUsrVOKppWOmxwyYEEmL7Bj+v3HVWcb2F
LpsnKtRV1n9JCt5zojEWQpxE8omQMSy/lFiL988bObYJ8XP15rey0g/ioLQAdun+
0+4SPh9Mi+lqFsm+wJxKm6sScc9TfC1Uv0Uoepju6vNi/QnHr3B5+mNRRQmiZnpL
NX6r2dyo2ezovuCUO06LZSjvcw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 15:49:38 2026 by rpki-client