Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
File:                     2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json)
Hash identifier:          UQKNaG9mCZLlGlt36vyVlLHL19oOG6wRicelVjTZc2g=
Subject key identifier:   D4:27:61:BF:BE:7E:C4:BB:31:9C:F6:6F:1A:78:17:1A:C7:B3:57:AB
Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A
Certificate issuer:       /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
Certificate serial:       0787
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
Manifest number:          08B2
Signing time:             Thu 22 Oct 2026 20:26:26 +0000
Manifest this update:     Thu 22 Oct 2026 20:26:26 +0000
Manifest next update:     Thu 29 Oct 2026 20:26:26 +0000
Files and hashes:         1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: a+sR1anrUlA7wX/wEZG26yvNbgFZeVEypJoV3qfk6tg=)
                          2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: uPVVKDs8FXCGXCVQqQJZYdG3JPqyWcieyoiy4+qFczg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl
                          rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 20:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A
        Validity
            Not Before: Oct 22 20:26:26 2026 GMT
            Not After : Oct 29 20:26:26 2026 GMT
        Subject: CN=6ada7172-f8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:99:1d:0f:74:71:9c:ac:cb:71:90:20:33:
                    6a:e6:87:96:83:f0:57:50:ed:03:20:fe:b4:29:d0:
                    99:83:62:02:7f:29:68:f5:7e:3c:0d:28:ec:b1:38:
                    a7:e5:ed:16:05:1f:b7:97:1e:62:b4:8f:0c:31:5d:
                    3f:c1:bf:c5:f1:5c:18:a0:58:74:86:0b:a8:26:12:
                    76:da:7e:d1:bc:54:54:da:34:ee:bc:f4:2e:f1:d4:
                    86:39:2d:00:44:18:66:54:b3:83:ce:8e:25:6d:41:
                    02:ef:71:09:43:c8:e1:8e:e6:26:38:60:1c:83:66:
                    3d:d5:72:24:fc:43:f2:3f:d9:03:a1:b9:13:6a:f2:
                    c9:65:2b:94:c5:68:bb:4d:4f:96:23:c9:55:97:ff:
                    70:d8:d3:9d:be:19:84:2f:b4:1c:cc:42:b8:8e:0b:
                    5f:56:c5:80:1c:2b:80:cc:ab:b7:45:fd:a6:58:61:
                    55:6b:e9:83:fb:cf:cd:6f:84:cb:b7:3b:13:69:ca:
                    9c:8f:3e:bf:df:1b:1b:66:09:0f:bf:ed:a3:4f:c9:
                    cd:43:75:3d:f6:8f:1b:cc:fd:77:96:86:1a:7d:92:
                    b5:4a:ac:f2:fc:e2:90:83:54:12:85:a3:31:ed:82:
                    bd:72:2c:fb:d3:b2:96:a2:91:50:d7:55:e2:75:86:
                    11:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:27:61:BF:BE:7E:C4:BB:31:9C:F6:6F:1A:78:17:1A:C7:B3:57:AB
            X509v3 Authority Key Identifier:
                keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:de:5c:52:49:97:73:e9:66:0e:61:3b:7f:dd:9b:85:f9:fe:
         4e:7d:29:9e:b3:7e:3a:73:19:8c:f3:60:a3:08:80:41:d3:7e:
         b6:55:1a:e2:18:3c:4b:8e:d6:5c:7c:25:f8:e8:a8:b6:c3:f9:
         f9:fb:11:7d:e3:6a:99:4c:70:3c:a3:2e:31:18:bc:08:b2:4f:
         8f:49:f5:6d:3e:3f:d9:4f:83:e2:e0:4b:e3:72:89:41:e3:7a:
         ec:5e:79:55:1c:bd:33:c7:9a:27:42:f9:25:7f:02:8b:e9:ab:
         b1:99:a7:42:f3:0e:15:cf:4c:57:da:49:63:58:46:f2:41:f3:
         ed:3a:ff:7a:3e:a3:4d:44:4e:50:84:58:8f:ee:ad:78:fd:b2:
         ae:0e:a7:b1:f5:1e:38:38:d8:37:c3:c0:2b:c3:f5:db:03:37:
         c8:ea:34:5b:ce:88:25:88:78:b3:1e:09:91:d6:ad:a0:bf:8d:
         d5:c8:17:5a:c4:af:12:42:3e:46:f4:7f:f9:64:04:93:5f:a7:
         f4:a8:6d:38:31:0b:9e:f2:06:71:79:23:20:e3:0e:81:25:68:
         e3:07:b5:6d:38:a3:af:8d:0c:62:41:28:3b:85:51:5e:21:c2:
         e4:3b:d3:5a:5e:f5:81:5f:a6:46:3f:4b:7f:46:d3:2c:df:e9:
         64:7f:1a:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF
NTIyMzdFOEEwHhcNMjYxMDIyMjAyNjI2WhcNMjYxMDI5MjAyNjI2WjAYMRYwFAYD
VQQDEw02YWRhNzE3Mi1mOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCaZHQ90cZysy3GQIDNq5oeWg/BXUO0DIP60KdCZg2ICfylo9X48DSjssTin
5e0WBR+3lx5itI8MMV0/wb/F8VwYoFh0hguoJhJ22n7RvFRU2jTuvPQu8dSGOS0A
RBhmVLODzo4lbUEC73EJQ8jhjuYmOGAcg2Y91XIk/EPyP9kDobkTavLJZSuUxWi7
TU+WI8lVl/9w2NOdvhmEL7QczEK4jgtfVsWAHCuAzKu3Rf2mWGFVa+mD+8/Nb4TL
tzsTacqcjz6/3xsbZgkPv+2jT8nNQ3U99o8bzP13loYafZK1Sqzy/OKQg1QShaMx
7YK9ciz707KWopFQ11XidYYRdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQnYb++
fsS7MZz2bxp4FxrHs1erMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4
NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx
NDFvaFd3NGhWRXJsSWpmb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEd5cUkmXc+lmDmE7f92bhfn+Tn0pnrN+OnMZjPNgowiAQdN+tlUa4hg8S47W
XHwl+OiotsP5+fsRfeNqmUxwPKMuMRi8CLJPj0n1bT4/2U+D4uBL43KJQeN67F55
VRy9M8eaJ0L5JX8Ci+mrsZmnQvMOFc9MV9pJY1hG8kHz7Tr/ej6jTUROUIRYj+6t
eP2yrg6nsfUeODjYN8PAK8P12wM3yOo0W86IJYh4sx4JkdatoL+N1cgXWsSvEkI+
RvR/+WQEk1+n9KhtODELnvIGcXkjIOMOgSVo4we1bTijr40MYkEoO4VRXiHC5DvT
Wl71gV+mRj9Lf0bTLN/pZH8a9Q==
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:47:27 2026 by rpki-client