Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
File:                     Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft (raw, json)
Hash identifier:          eb6/yyWUm4OFfFc9RV8YGNgcqU7vw3VkPbf67WZ8bVU=
Subject key identifier:   7B:30:47:42:16:94:46:DD:DA:E5:C0:BF:0B:27:33:F5:8F:FF:15:CA
Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
Certificate issuer:       /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
Manifest number:          F8
Signing time:             Mon 05 Oct 2026 06:44:01 +0000
Manifest this update:     Mon 05 Oct 2026 06:44:01 +0000
Manifest next update:     Mon 12 Oct 2026 06:44:01 +0000
Files and hashes:         1: Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl (hash: TYSNWIagW5kLYBnGTBtPluK/l8aV7iFJqfN6iHMWqxE=)
                          2: 850105504F3D11F0A0960F7CC4F9AE02.roa (hash: qNWHgfJsoNs5L5U5kNXNpJEP/6NUawEmBu4riDVc1MI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
                          rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
        Validity
            Not Before: Oct  5 06:44:01 2026 GMT
            Not After : Oct 12 06:44:01 2026 GMT
        Subject: CN=6ac34731-7b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:6e:9a:da:18:c0:c7:00:9b:5b:07:40:e4:
                    7d:1a:14:07:1b:d9:00:5e:25:cd:ad:78:a0:1f:04:
                    36:10:6a:66:03:d3:df:b0:1c:c2:39:ab:10:56:de:
                    21:f6:79:1d:75:f0:06:4c:e0:a6:fc:39:a3:12:8a:
                    e8:cf:54:56:f6:02:66:e3:d5:85:95:a3:93:5b:8c:
                    07:48:bc:b3:e9:d7:8e:d9:e7:3b:60:93:c9:d0:54:
                    6b:f9:52:37:b4:53:91:50:37:35:48:56:6d:2b:15:
                    8f:bd:19:d3:cc:29:d4:76:cf:60:08:f1:69:cf:8a:
                    ee:f4:f2:83:fa:4f:e8:30:3a:2a:70:9b:e7:30:f0:
                    5b:e5:5e:20:dc:4f:53:bb:c5:80:ca:73:f8:52:cb:
                    74:42:24:ea:bd:3b:3b:c5:db:08:14:41:45:14:25:
                    9c:3e:9c:26:41:ab:3d:c0:2d:ce:25:86:87:1e:96:
                    8c:65:7f:ea:81:5d:24:b5:18:6a:88:08:30:07:38:
                    b5:91:5c:60:43:88:28:52:d4:3d:e0:19:7c:cb:b9:
                    16:50:51:03:7f:f0:51:73:3b:04:d8:5f:d9:5e:57:
                    00:34:b3:6d:fa:fb:40:65:89:b5:69:75:db:bb:df:
                    35:76:9c:de:52:a7:f2:7d:50:df:b0:c1:fd:51:da:
                    d2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:30:47:42:16:94:46:DD:DA:E5:C0:BF:0B:27:33:F5:8F:FF:15:CA
            X509v3 Authority Key Identifier:
                keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:14:00:61:d9:1c:f6:1c:bb:03:c4:96:ce:0e:82:26:af:a2:
         7e:24:5e:46:ec:8e:90:19:4c:af:cc:15:b5:55:27:97:d2:e2:
         c3:24:3a:ad:06:f6:85:45:83:83:14:7e:59:44:4d:fe:c8:b5:
         45:54:26:56:59:3e:1a:d0:4e:53:30:05:06:eb:7a:57:58:4d:
         c4:bd:14:e4:c7:f3:01:06:c8:4c:a3:25:cb:a3:e2:ea:94:0a:
         b3:e3:2c:8e:17:bd:cf:a0:66:96:57:bb:04:6b:e9:30:a4:fd:
         dd:2c:fb:00:68:ab:3d:14:f7:fb:7e:47:d6:74:02:f0:2c:42:
         c0:93:1e:08:25:6f:54:91:f6:f3:a5:1a:7f:f2:4f:69:73:a6:
         78:52:23:77:c8:08:d4:88:65:46:65:1c:e0:0f:96:6d:2c:bb:
         a3:b9:5b:ea:b0:f1:e1:88:82:57:40:c9:f8:e5:20:59:42:43:
         f5:4f:8e:b9:0d:95:05:52:60:4e:2b:7f:44:a7:01:24:3a:cd:
         17:e1:5c:2c:dd:b4:fb:6a:93:e6:c9:f3:3e:0d:5b:60:78:b9:
         07:eb:d2:1b:e3:7b:df:7f:c9:58:6f:c9:4a:cb:43:99:f6:c7:
         d4:ad:7e:30:fe:22:a1:3c:cc:4b:97:e3:ab:e6:51:32:7c:d2:
         f9:61:11:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE1NkQxMTAvBgNVBAUTKDQ5REREMUU0QzVBOUZDNzY2NjI2RDJGQTNCNjYzN0RB
ODBFQTJGRDIwHhcNMjYxMDA1MDY0NDAxWhcNMjYxMDEyMDY0NDAxWjAYMRYwFAYD
VQQDEw02YWMzNDczMS03Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy4BumtoYwMcAm1sHQOR9GhQHG9kAXiXNrXigHwQ2EGpmA9PfsBzCOasQVt4h
9nkddfAGTOCm/DmjEoroz1RW9gJm49WFlaOTW4wHSLyz6deO2ec7YJPJ0FRr+VI3
tFORUDc1SFZtKxWPvRnTzCnUds9gCPFpz4ru9PKD+k/oMDoqcJvnMPBb5V4g3E9T
u8WAynP4Ust0QiTqvTs7xdsIFEFFFCWcPpwmQas9wC3OJYaHHpaMZX/qgV0ktRhq
iAgwBzi1kVxgQ4goUtQ94Bl8y7kWUFEDf/BRczsE2F/ZXlcANLNt+vtAZYm1aXXb
u981dpzeUqfyfVDfsMH9UdrSkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHswR0IW
lEbd2uXAvwsnM/WP/xXKMB8GA1UdIwQYMBaAFEnd0eTFqfx2ZibS+jtmN9qA6i/S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTU2RC83Q0QzREVBQzRF
ODkxMUYwQTgxQzY3MTZDNEY5QUUwMi9TZDNSNU1XcF9IWm1KdEw2TzJZMzJvRHFM
OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NkM1I1TVdwX0habUp0TDZPMlkzMm9EcUw5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTU2RC83Q0QzREVBQzRFODkxMUYwQTgxQzY3MTZDNEY5QUUwMi9TZDNSNU1XcF9I
Wm1KdEw2TzJZMzJvRHFMOUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnhQAYdkc9hy7A8SWzg6CJq+ifiReRuyOkBlMr8wVtVUnl9LiwyQ6rQb2hUWD
gxR+WURN/si1RVQmVlk+GtBOUzAFBut6V1hNxL0U5MfzAQbITKMly6Pi6pQKs+Ms
jhe9z6Bmlle7BGvpMKT93Sz7AGirPRT3+35H1nQC8CxCwJMeCCVvVJH286Uaf/JP
aXOmeFIjd8gI1IhlRmUc4A+WbSy7o7lb6rDx4YiCV0DJ+OUgWUJD9U+OuQ2VBVJg
Tit/RKcBJDrNF+FcLN20+2qT5snzPg1bYHi5B+vSG+N733/JWG/JSstDmfbH1K1+
MP4ioTzMS5fjq+ZRMnzS+WERTA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:51:24 2026 by rpki-client