Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
File:                     h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json)
Hash identifier:          TsHDv49RLgHOssAT0CCgoqKRrXp3KahniRYoKFLEeT0=
Subject key identifier:   08:AE:E3:53:85:43:23:A6:3F:C9:26:59:94:96:F2:1D:B2:78:51:50
Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
Certificate issuer:       /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Certificate serial:       022A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
Manifest number:          0223
Signing time:             Mon 05 Oct 2026 03:09:06 +0000
Manifest this update:     Mon 05 Oct 2026 03:09:05 +0000
Manifest next update:     Mon 12 Oct 2026 03:09:05 +0000
Files and hashes:         1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: LcxV+2OpCP7Ofoov9CkjUo8P7eslhdKHwdrTZ+ozuus=)
                          2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: GZUw3zYmkPD1oIQsIFHheUysQrlXgVMcApDvpUWdnAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
                          rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
        Validity
            Not Before: Oct  5 03:09:05 2026 GMT
            Not After : Oct 12 03:09:05 2026 GMT
        Subject: CN=6ac314d2-cf86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:3a:38:70:bf:cf:06:5f:81:75:f1:66:ec:
                    7b:4e:df:85:07:bc:a5:8f:45:bb:11:0d:4f:10:93:
                    75:ab:72:b6:07:8e:93:df:60:2c:0d:45:8f:82:eb:
                    d0:25:ba:59:0f:58:a5:53:1c:50:9e:dd:1d:49:b9:
                    48:a7:ce:dc:83:fb:df:7e:d4:fd:ae:89:44:e1:8d:
                    60:74:0a:1e:b7:a2:17:a2:49:1e:12:9e:71:84:1c:
                    5f:d2:42:19:73:63:f9:79:90:0c:ea:f2:d5:29:8f:
                    1b:2f:37:d5:de:da:37:5e:a2:cc:10:da:bc:18:c9:
                    28:fa:d4:5d:9c:92:16:9d:40:3e:4a:e4:b2:0f:66:
                    83:9c:a5:cb:72:56:22:4b:9b:e5:9a:88:58:c3:c5:
                    35:c7:b7:e1:2c:c1:8c:f3:06:94:54:ba:a4:35:e8:
                    7f:0f:88:9f:c9:10:c9:42:91:49:b9:41:9f:95:aa:
                    70:eb:f9:71:85:4a:af:a7:f4:39:b8:12:ba:2c:a7:
                    db:31:ff:e2:5c:eb:96:1c:90:96:8e:f1:35:14:f1:
                    bf:35:58:23:67:9b:d3:ff:98:bd:ab:c5:9f:86:cd:
                    17:cd:4a:79:94:e6:ff:ad:c1:9d:95:f0:5e:d5:53:
                    20:0e:02:47:85:d0:d2:ed:d4:df:bb:60:55:b7:0b:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AE:E3:53:85:43:23:A6:3F:C9:26:59:94:96:F2:1D:B2:78:51:50
            X509v3 Authority Key Identifier:
                keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:29:83:d6:b3:37:96:85:e0:b7:25:fe:e5:29:62:29:6e:
         2f:96:9e:b5:bb:80:50:10:57:07:05:57:7c:61:77:2b:c5:7a:
         88:c0:94:99:d8:f4:db:be:56:61:de:f2:42:4b:bb:17:5c:a1:
         30:ca:4f:7c:0f:c0:c5:a8:20:88:c5:ae:73:9e:53:4f:73:d6:
         af:67:4c:1f:a7:63:78:f0:2a:d2:18:a7:5b:3a:4a:48:8e:c9:
         0f:67:24:c2:2c:58:dc:60:91:7f:67:7b:6f:e0:ac:78:70:eb:
         9a:6c:37:71:c7:c6:ff:dd:01:fa:07:17:78:06:7f:81:2b:0d:
         40:26:19:24:ec:80:e8:48:ad:0d:92:a1:2b:b7:37:94:6a:28:
         8b:99:6d:ad:fb:d4:79:9e:f7:a0:bd:8c:a9:fc:23:80:cb:81:
         9a:aa:41:6c:ac:2f:11:f6:8a:4c:22:c9:40:19:1a:51:d5:02:
         d5:55:4e:53:50:63:47:01:00:ce:4e:f2:2b:ec:b6:78:dc:02:
         d1:b2:fa:b3:f2:e6:da:77:ae:13:7d:9e:bc:8e:96:df:04:db:
         e8:bc:69:25:93:63:88:78:5f:24:85:74:58:22:e4:ef:d3:82:
         49:bb:8e:49:ac:1e:0f:9d:6e:bb:c9:d2:0e:a4:d3:e3:23:c2:
         88:96:fa:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwMkYxMTAvBgNVBAUTKDg3RjMxQjIwMUJERDE4NzU4MTU0MEM1QjhCODY0NDM4
QzI5OTkwQjkwHhcNMjYxMDA1MDMwOTA1WhcNMjYxMDEyMDMwOTA1WjAYMRYwFAYD
VQQDEw02YWMzMTRkMi1jZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqk06OHC/zwZfgXXxZux7Tt+FB7ylj0W7EQ1PEJN1q3K2B46T32AsDUWPguvQ
JbpZD1ilUxxQnt0dSblIp87cg/vfftT9rolE4Y1gdAoet6IXokkeEp5xhBxf0kIZ
c2P5eZAM6vLVKY8bLzfV3to3XqLMENq8GMko+tRdnJIWnUA+SuSyD2aDnKXLclYi
S5vlmohYw8U1x7fhLMGM8waUVLqkNeh/D4ifyRDJQpFJuUGflapw6/lxhUqvp/Q5
uBK6LKfbMf/iXOuWHJCWjvE1FPG/NVgjZ5vT/5i9q8Wfhs0XzUp5lOb/rcGdlfBe
1VMgDgJHhdDS7dTfu2BVtwvFxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiu41OF
QyOmP8kmWZSW8h2yeFFQMB8GA1UdIwQYMBaAFIfzGyAb3Rh1gVQMW4uGRDjCmZC5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjAyRi9EN0MzM0FCODdG
QkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdIV0JWQXhiaTRaRU9NS1pr
TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtMay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjAyRi9EN0MzM0FCODdGQkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdI
V0JWQXhiaTRaRU9NS1prTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGYwpg9azN5aF4Lcl/uUpYiluL5aetbuAUBBXBwVXfGF3K8V6iMCUmdj0275W
Yd7yQku7F1yhMMpPfA/AxaggiMWuc55TT3PWr2dMH6djePAq0hinWzpKSI7JD2ck
wixY3GCRf2d7b+CseHDrmmw3ccfG/90B+gcXeAZ/gSsNQCYZJOyA6EitDZKhK7c3
lGooi5ltrfvUeZ73oL2MqfwjgMuBmqpBbKwvEfaKTCLJQBkaUdUC1VVOU1BjRwEA
zk7yK+y2eNwC0bL6s/Lm2neuE32evI6W3wTb6LxpJZNjiHhfJIV0WCLk79OCSbuO
SaweD51uu8nSDqTT4yPCiJb6ig==
-----END CERTIFICATE-----
Generated at Mon Oct 5 07:00:15 2026 by rpki-client