Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
File:                     AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json)
Hash identifier:          WxpwYBVHBU2snJxT69ftKRvJroIA8rfwD/J3Qm0ECZw=
Subject key identifier:   7E:29:47:41:04:99:13:D2:B2:F6:F6:6E:8F:D1:D1:21:4C:06:0D:57
Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D
Certificate issuer:       /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
Manifest number:          01D1
Signing time:             Wed 07 Oct 2026 04:09:05 +0000
Manifest this update:     Wed 07 Oct 2026 04:09:04 +0000
Manifest next update:     Wed 14 Oct 2026 04:09:04 +0000
Files and hashes:         1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: QZS1UlA0PBXGUvzTlJX5BXd8nVejyHv4FpeAET/icVU=)
                          2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: gRN+gspECqlTI6rrjpufXp2pLa9m/o4m0OMYkN6xBgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl
                          rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:09:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B0D8, serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D
        Validity
            Not Before: Oct  7 04:09:04 2026 GMT
            Not After : Oct 14 04:09:04 2026 GMT
        Subject: CN=6ac5c5e1-84a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:ab:c6:fe:b7:ad:9b:44:bd:02:25:f8:b8:
                    14:74:6c:bb:f3:d8:19:d0:e0:ff:4e:c2:1d:5d:bb:
                    dc:8f:f8:86:c6:cc:9c:d0:f8:51:ea:4c:3a:b3:61:
                    6b:61:84:b5:5d:08:79:d1:c0:ad:14:86:3f:7b:67:
                    f2:3b:a2:03:34:6b:d8:7a:fb:09:ce:f7:cd:f3:ff:
                    7d:a2:b7:27:35:ef:22:08:e1:78:10:58:c0:21:86:
                    c1:3e:aa:32:74:ac:ec:2a:e3:7d:2e:23:32:23:85:
                    f8:42:24:cf:ae:e9:87:ee:d1:15:8b:fc:af:8f:a3:
                    5d:98:db:d0:3d:d8:02:56:4d:f9:80:a8:a8:75:90:
                    59:a4:3f:9c:6a:08:39:09:6a:a9:13:de:6a:6e:68:
                    d6:39:7f:3d:62:3e:f2:56:02:22:5f:0c:78:2d:63:
                    a1:96:be:39:72:f6:3d:3e:46:f6:d4:3a:9d:61:bc:
                    64:db:cf:15:66:0a:53:5d:b9:7b:da:31:81:5d:f6:
                    9a:eb:ee:54:e2:aa:78:94:cf:64:ef:6c:84:fa:70:
                    40:00:83:dc:30:5a:b5:2a:04:c2:21:83:e6:77:53:
                    42:f8:44:23:8a:e4:7e:ab:36:f4:43:bc:f3:ba:18:
                    49:c2:cf:bd:68:26:5f:c7:16:6a:4d:a6:9d:6a:22:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:29:47:41:04:99:13:D2:B2:F6:F6:6E:8F:D1:D1:21:4C:06:0D:57
            X509v3 Authority Key Identifier:
                keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:32:a1:de:10:fd:cb:df:c6:c3:85:f6:05:3a:18:8a:80:
         97:01:1e:d0:bc:4c:97:e5:d4:9c:1e:91:67:bc:f6:80:3f:2c:
         18:12:25:e1:e0:1d:d8:53:64:b7:7e:50:d9:87:16:77:e2:fb:
         43:3f:f2:3e:dd:31:0d:47:99:4d:1d:02:2a:83:ce:db:91:0f:
         9e:7f:e8:e8:bd:b4:ee:d3:fc:97:26:0b:d2:96:19:ec:94:17:
         f3:19:fa:e9:59:c5:10:17:67:49:33:91:a0:12:59:e6:12:be:
         4f:7a:b8:31:58:42:6a:a9:93:1a:37:de:fc:51:23:be:56:2f:
         40:17:fd:d7:ad:ca:1d:23:84:07:db:b4:1c:a8:9f:a7:e9:3b:
         a1:dd:5d:3a:14:02:c5:ef:98:d4:31:0d:43:66:7f:ec:cd:10:
         1e:b2:70:90:9b:6b:0a:c8:29:1d:42:e9:7b:1c:01:ad:94:46:
         d3:b5:14:8e:ce:b4:4d:c8:75:10:cd:01:5d:cd:54:6b:26:54:
         73:fa:da:b5:ed:e7:b7:01:97:f2:70:3b:56:fb:49:2a:44:18:
         22:a9:d9:6e:dc:53:8d:65:65:53:c1:ce:76:1b:20:df:c9:d6:
         1b:b5:74:20:1e:25:b8:12:7e:98:6c:65:98:45:ca:1f:35:5c:
         1b:56:f7:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEIwRDgxMTAvBgNVBAUTKDAwOEIyMzUxQkU5RkQ2NkQzOEIxMTA1MDY3OTczNEY0
NEZBNUQ5N0QwHhcNMjYxMDA3MDQwOTA0WhcNMjYxMDE0MDQwOTA0WjAYMRYwFAYD
VQQDEw02YWM1YzVlMS04NGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhGrxv63rZtEvQIl+LgUdGy789gZ0OD/TsIdXbvcj/iGxsyc0PhR6kw6s2Fr
YYS1XQh50cCtFIY/e2fyO6IDNGvYevsJzvfN8/99orcnNe8iCOF4EFjAIYbBPqoy
dKzsKuN9LiMyI4X4QiTPrumH7tEVi/yvj6NdmNvQPdgCVk35gKiodZBZpD+cagg5
CWqpE95qbmjWOX89Yj7yVgIiXwx4LWOhlr45cvY9Pkb21DqdYbxk288VZgpTXbl7
2jGBXfaa6+5U4qp4lM9k72yE+nBAAIPcMFq1KgTCIYPmd1NC+EQjiuR+qzb0Q7zz
uhhJws+9aCZfxxZqTaadaiLT4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH4pR0EE
mRPSsvb2bo/R0SFMBg1XMB8GA1UdIwQYMBaAFACLI1G+n9ZtOLEQUGeXNPRPpdl9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBEOC8wN0FBQkNEQUZC
MTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFtMDRzUkJRWjVjMDlFLWwy
WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FJc2pVYjZmMW0wNHNSQlFaNWMwOUUtbDJYMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjBEOC8wN0FBQkNEQUZCMTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFt
MDRzUkJRWjVjMDlFLWwyWDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKlAyod4Q/cvfxsOF9gU6GIqAlwEe0LxMl+XUnB6RZ7z2gD8sGBIl4eAd2FNk
t35Q2YcWd+L7Qz/yPt0xDUeZTR0CKoPO25EPnn/o6L207tP8lyYL0pYZ7JQX8xn6
6VnFEBdnSTORoBJZ5hK+T3q4MVhCaqmTGjfe/FEjvlYvQBf9163KHSOEB9u0HKif
p+k7od1dOhQCxe+Y1DENQ2Z/7M0QHrJwkJtrCsgpHULpexwBrZRG07UUjs60Tch1
EM0BXc1UayZUc/rate3ntwGX8nA7VvtJKkQYIqnZbtxTjWVlU8HOdhsg38nWG7V0
IB4luBJ+mGxlmEXKHzVcG1b3kg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:22:59 2026 by rpki-client