Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
File:                     IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft (raw, json)
Hash identifier:          XjaFtdHIudEx1IpdY6mFv9+OqTifVkIBkKDSw319zGs=
Subject key identifier:   8B:1D:E1:C6:EB:4F:C1:30:F8:24:97:CA:0F:78:AF:BB:86:CA:04:34
Authority key identifier: 21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12
Certificate issuer:       /CN=A914022F/serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
Certificate serial:       0798
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
Manifest number:          078A
Signing time:             Tue 06 Oct 2026 21:43:06 +0000
Manifest this update:     Tue 06 Oct 2026 21:43:05 +0000
Manifest next update:     Tue 13 Oct 2026 21:43:05 +0000
Files and hashes:         1: IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl (hash: y4z7FWpZBN113F8ZeLTBf6rXhzZB24FCo2ZjacGdQEY=)
                          2: 24F33D7877AF11EB8E972C66C4F9AE02.roa (hash: D2FjPCyvd3vF7ujAfeb6jLxxPTiHs4WNZiKP3+PGtgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl
                          rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914022F, serialNumber=214B2FCF42BB2B98905845D733D945D95C2DCA12
        Validity
            Not Before: Oct  6 21:43:05 2026 GMT
            Not After : Oct 13 21:43:05 2026 GMT
        Subject: CN=6ac56b6a-9d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:0a:cd:85:3e:ef:18:83:3f:b1:77:06:ea:
                    66:d8:25:55:2b:ad:43:5b:b5:1b:7f:b3:e1:68:1c:
                    64:3a:7e:5d:1d:30:32:eb:c5:1a:a8:53:2b:ab:d6:
                    e8:1f:28:56:97:c8:b5:36:93:09:16:8a:e4:30:e4:
                    16:e4:2c:bb:8a:42:76:0d:67:dd:c1:1e:04:e2:20:
                    1f:c2:3c:2d:56:79:ec:2b:8b:90:fd:4d:1b:46:07:
                    45:27:b9:24:c6:9c:7f:b1:f6:48:e5:84:06:0a:85:
                    22:be:22:0d:e2:f9:04:6b:97:7d:51:67:6e:ba:83:
                    05:1b:38:48:a7:2f:95:22:55:a4:50:3b:87:28:a1:
                    a1:51:b1:f0:74:f4:1d:49:67:b1:19:9f:33:03:64:
                    ac:49:a2:d9:69:54:e0:4f:fd:fd:99:aa:10:28:f8:
                    bf:3e:3d:49:7b:2f:28:75:ab:6f:17:26:c2:39:a1:
                    b2:c8:05:b5:e4:48:5d:83:dd:65:7a:bc:9e:30:17:
                    29:da:16:23:98:ed:53:4b:89:cc:51:75:34:28:4c:
                    34:90:30:08:d7:e9:16:4d:25:26:31:8b:f0:c7:fb:
                    ab:fc:c5:12:ca:e9:d6:e9:f5:7c:c5:10:2f:8a:25:
                    9e:63:31:a0:04:bd:e7:da:43:1f:ea:90:17:08:d2:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:E1:C6:EB:4F:C1:30:F8:24:97:CA:0F:78:AF:BB:86:CA:04:34
            X509v3 Authority Key Identifier:
                keyid:21:4B:2F:CF:42:BB:2B:98:90:58:45:D7:33:D9:45:D9:5C:2D:CA:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUsvz0K7K5iQWEXXM9lF2VwtyhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914022F/7C644426776411EBB1C4F545C4F9AE02/IUsvz0K7K5iQWEXXM9lF2VwtyhI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8c:4d:87:52:96:e3:eb:e7:1b:2c:7a:e1:af:9d:c5:a8:62:
         63:ee:e2:10:04:c2:32:d2:66:2f:be:45:65:d6:66:6d:8b:fe:
         fc:09:1f:9d:91:92:52:d4:c2:d8:03:a2:fd:53:d3:54:d5:d7:
         a1:85:84:c2:dc:56:98:79:79:08:ca:15:8f:3f:7f:25:42:31:
         04:c1:55:09:00:c5:13:5d:eb:3d:47:d7:b5:57:00:a9:0e:e3:
         05:f1:44:a3:60:9b:68:5a:77:44:71:ab:15:50:22:62:e7:99:
         49:27:35:5b:bc:f5:76:60:45:12:c5:79:d0:0e:d3:23:09:33:
         1e:ed:79:90:24:c9:4f:b0:56:88:21:50:a0:4a:a2:2c:f0:85:
         d1:1e:d5:94:ee:4d:6b:f7:ca:c7:23:79:80:f6:c0:ca:36:96:
         d3:e0:e1:86:88:28:e7:37:0f:3c:f9:07:66:4d:81:0a:58:ba:
         ac:ab:48:4a:01:ef:4c:16:3b:ee:66:31:49:c7:41:d4:30:0b:
         92:f7:2f:46:13:e1:17:7d:d4:41:21:fb:39:8f:45:89:80:eb:
         5b:c9:c7:4a:c9:89:e7:0c:7a:ce:83:5f:d9:cc:fd:b1:58:0a:
         4f:82:00:1f:36:e0:f9:97:f9:2a:94:f2:6b:03:f9:cd:b6:26:
         dc:01:f9:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAyMkYxMTAvBgNVBAUTKDIxNEIyRkNGNDJCQjJCOTg5MDU4NDVENzMzRDk0NUQ5
NUMyRENBMTIwHhcNMjYxMDA2MjE0MzA1WhcNMjYxMDEzMjE0MzA1WjAYMRYwFAYD
VQQDEw02YWM1NmI2YS05ZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs04KzYU+7xiDP7F3Bupm2CVVK61DW7Ubf7PhaBxkOn5dHTAy68UaqFMrq9bo
HyhWl8i1NpMJForkMOQW5Cy7ikJ2DWfdwR4E4iAfwjwtVnnsK4uQ/U0bRgdFJ7kk
xpx/sfZI5YQGCoUiviIN4vkEa5d9UWduuoMFGzhIpy+VIlWkUDuHKKGhUbHwdPQd
SWexGZ8zA2SsSaLZaVTgT/39maoQKPi/Pj1Jey8odatvFybCOaGyyAW15Ehdg91l
eryeMBcp2hYjmO1TS4nMUXU0KEw0kDAI1+kWTSUmMYvwx/ur/MUSyunW6fV8xRAv
iiWeYzGgBL3n2kMf6pAXCNJzqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsd4cbr
T8Ew+CSXyg94r7uGygQ0MB8GA1UdIwQYMBaAFCFLL89CuyuYkFhF1zPZRdlcLcoS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDIyRi83QzY0NDQyNjc3
NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1aVFXRVhYTTlsRjJWd3R5
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lVc3Z6MEs3SzVpUVdFWFhNOWxGMlZ3dHloSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDIyRi83QzY0NDQyNjc3NjQxMUVCQjFDNEY1NDVDNEY5QUUwMi9JVXN2ejBLN0s1
aVFXRVhYTTlsRjJWd3R5aEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaIxNh1KW4+vnGyx64a+dxahiY+7iEATCMtJmL75FZdZmbYv+/AkfnZGSUtTC
2AOi/VPTVNXXoYWEwtxWmHl5CMoVjz9/JUIxBMFVCQDFE13rPUfXtVcAqQ7jBfFE
o2CbaFp3RHGrFVAiYueZSSc1W7z1dmBFEsV50A7TIwkzHu15kCTJT7BWiCFQoEqi
LPCF0R7VlO5Na/fKxyN5gPbAyjaW0+Dhhogo5zcPPPkHZk2BCli6rKtISgHvTBY7
7mYxScdB1DALkvcvRhPhF33UQSH7OY9FiYDrW8nHSsmJ5wx6zoNf2cz9sVgKT4IA
Hzbg+Zf5KpTyawP5zbYm3AH5fQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:57:12 2026 by rpki-client