Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File:                     4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier:          iHBwmQidTbSU3lCQ2DMCRQDi6g+jDnM5GwdYHUMPK/s=
Subject key identifier:   A9:6E:A0:0C:64:58:B4:7C:AE:C1:B0:EC:AC:7E:8A:A2:31:98:C7:82
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer:       /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial:       0196
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number:          018D
Signing time:             Tue 27 Oct 2026 04:45:21 +0000
Manifest this update:     Tue 27 Oct 2026 04:45:20 +0000
Manifest next update:     Tue 03 Nov 2026 04:45:20 +0000
Files and hashes:         1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: 2fysRjTElmrkoZUYwIywyVEgGdjBI+Leo3sZsGYbkZE=)
                          2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: oemFiSu7xvtYlYRUpCkXZaggbkGyG52ArxoSenXNp0o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
                          rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 04:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
        Validity
            Not Before: Oct 27 04:45:20 2026 GMT
            Not After : Nov  3 04:45:20 2026 GMT
        Subject: CN=6ae02c60-5c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:b9:9c:45:78:31:08:3a:c4:de:c0:ad:26:
                    22:05:8a:1a:83:9e:12:d3:29:85:69:6a:98:29:3d:
                    4e:47:7c:de:9f:56:99:03:8e:8b:4e:d0:0b:a3:37:
                    24:95:5e:75:33:54:12:0e:d6:2c:04:38:75:36:1f:
                    2b:a9:b4:1a:bf:21:3c:b1:2d:76:87:af:db:7d:e2:
                    31:2d:9f:6a:01:7e:83:52:89:6b:91:ad:0c:d1:e6:
                    fc:ed:fd:91:13:a5:b0:35:89:d0:8c:df:04:5f:38:
                    34:34:f1:00:1f:6b:76:a1:26:5c:80:55:b5:21:be:
                    7a:76:78:5a:a7:a8:bb:b7:a5:55:e4:c0:5d:9d:68:
                    8c:02:ff:58:a2:78:7f:2c:5e:4e:de:ab:4c:02:19:
                    6e:53:f0:95:0f:f0:49:c8:34:04:84:1c:4c:3c:f6:
                    c4:3c:95:8f:d0:dd:fe:8d:6e:7b:ee:a3:d5:30:68:
                    d6:75:d2:7a:a6:d2:3e:0f:de:d8:9e:19:1e:35:c0:
                    d7:7f:05:25:f7:68:b1:3b:2d:20:b9:0e:34:08:68:
                    0a:98:08:71:4b:9a:2c:24:4e:fe:ad:2d:fb:bd:6e:
                    61:81:d8:b0:5d:18:3f:45:9c:76:71:66:4f:ec:7c:
                    cd:41:3c:8e:e8:b6:4b:63:f5:1e:45:3a:24:83:62:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6E:A0:0C:64:58:B4:7C:AE:C1:B0:EC:AC:7E:8A:A2:31:98:C7:82
            X509v3 Authority Key Identifier:
                keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:19:28:1b:14:23:48:8a:33:1d:25:b2:94:10:80:5b:67:c0:
         a5:41:e9:77:d9:08:77:c1:9e:78:57:ff:c6:d1:49:ff:ed:e8:
         2e:6d:a8:bf:21:82:e4:23:53:61:35:2f:fd:f4:93:c1:d0:f2:
         70:72:98:ac:36:5a:af:f5:a0:42:be:25:13:7c:88:12:5b:e2:
         61:60:79:c6:d6:c3:38:27:09:50:5b:fb:f7:2c:25:90:29:1d:
         4c:54:db:58:ab:83:f2:8c:93:a6:10:6f:f6:01:2d:ee:04:06:
         da:b2:c0:3a:3b:8f:e4:41:d9:05:4a:17:46:95:c7:b0:79:e0:
         d7:39:b1:a8:d3:36:b1:60:6f:14:0f:8a:72:d7:80:ac:65:e3:
         59:07:d5:28:75:50:77:a5:22:0f:ef:9c:23:6d:f5:5d:30:bc:
         d4:3b:40:9f:62:1f:95:0b:a3:61:f3:d5:f3:65:1c:a8:f6:f6:
         f4:2c:b2:14:22:52:94:d6:79:87:13:c3:54:7d:59:e9:53:2b:
         03:d4:78:33:a5:af:88:02:20:6f:ac:ec:b7:c6:4c:2f:93:63:
         e5:8f:21:c9:ec:99:62:af:bf:57:eb:83:80:8d:bc:c2:92:3c:
         37:19:ca:b5:b0:87:8e:34:2f:48:3f:10:67:75:7f:16:da:27:
         9d:44:a1:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU2MDAxMTAvBgNVBAUTKEUwQjk0NThGNjk4MjVGRjgyOTM4N0IxMzlFODhGRDNC
RDY3NDAwODcwHhcNMjYxMDI3MDQ0NTIwWhcNMjYxMTAzMDQ0NTIwWjAYMRYwFAYD
VQQDEw02YWUwMmM2MC01Yzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzRK5nEV4MQg6xN7ArSYiBYoag54S0ymFaWqYKT1OR3zen1aZA46LTtALozck
lV51M1QSDtYsBDh1Nh8rqbQavyE8sS12h6/bfeIxLZ9qAX6DUolrka0M0eb87f2R
E6WwNYnQjN8EXzg0NPEAH2t2oSZcgFW1Ib56dnhap6i7t6VV5MBdnWiMAv9Yonh/
LF5O3qtMAhluU/CVD/BJyDQEhBxMPPbEPJWP0N3+jW577qPVMGjWddJ6ptI+D97Y
nhkeNcDXfwUl92ixOy0guQ40CGgKmAhxS5osJE7+rS37vW5hgdiwXRg/RZx2cWZP
7HzNQTyO6LZLY/UeRTokg2JpowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKluoAxk
WLR8rsGw7Kx+iqIxmMeCMB8GA1UdIwQYMBaAFOC5RY9pgl/4KTh7E56I/TvWdACH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTYwMC8yMjFCQUVCRTc3
RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hfZ3BPSHNUbm9qOU85WjBB
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzRMbEZqMm1DWF9ncE9Ic1Rub2o5TzlaMEFJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTYwMC8yMjFCQUVCRTc3RjExMUVGQUMxMTI5NDJDNEY5QUUwMi80TGxGajJtQ1hf
Z3BPSHNUbm9qOU85WjBBSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgBkoGxQjSIozHSWylBCAW2fApUHpd9kId8GeeFf/xtFJ/+3oLm2ovyGC5CNT
YTUv/fSTwdDycHKYrDZar/WgQr4lE3yIElviYWB5xtbDOCcJUFv79ywlkCkdTFTb
WKuD8oyTphBv9gEt7gQG2rLAOjuP5EHZBUoXRpXHsHng1zmxqNM2sWBvFA+KcteA
rGXjWQfVKHVQd6UiD++cI231XTC81DtAn2IflQujYfPV82UcqPb29CyyFCJSlNZ5
hxPDVH1Z6VMrA9R4M6WviAIgb6zst8ZML5Nj5Y8hyeyZYq+/V+uDgI28wpI8NxnK
tbCHjjQvSD8QZ3V/FtonnUShOg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:50:55 2026 by rpki-client