Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
File:                     hXUH8dizkVyVENUEcA7OiQsGaF8.mft (raw, json)
Hash identifier:          yvDn65n04i4eYR4B7hfIMphjr0u+pt5qne5F8K7soIA=
Subject key identifier:   88:B2:A4:5D:0C:A9:39:20:47:53:0F:D3:C0:EA:62:9F:EA:59:B7:6C
Authority key identifier: 85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F
Certificate issuer:       /CN=A916B7FC/serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
Manifest number:          012A
Signing time:             Sun 11 Oct 2026 06:21:20 +0000
Manifest this update:     Sun 11 Oct 2026 06:21:20 +0000
Manifest next update:     Sun 18 Oct 2026 06:21:20 +0000
Files and hashes:         1: hXUH8dizkVyVENUEcA7OiQsGaF8.crl (hash: jrkRNt4khTwbDFIqPRjFz3fkC7sufZOT/ikhpmrXiD4=)
                          2: B49957AA134B11F0AE18CB2BC4F9AE02.roa (hash: JXFvADq4YTaqaen/tnBh56vOg+t9TdkXrX7ZuGzAnPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl
                          rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B7FC, serialNumber=857507F1D8B3915C9510D504700ECE890B06685F
        Validity
            Not Before: Oct 11 06:21:20 2026 GMT
            Not After : Oct 18 06:21:20 2026 GMT
        Subject: CN=6acb2ae0-8b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:15:b9:62:ee:3b:9d:48:7b:8b:4b:f9:1c:
                    45:cb:f9:31:fb:da:26:bc:ef:e4:c1:2d:35:d6:9a:
                    6c:d5:cb:47:6b:f4:57:a4:34:bb:cc:ac:a4:0b:e0:
                    a5:3d:10:59:82:aa:2d:6b:cd:0d:5b:6e:1a:02:b4:
                    3f:d8:98:f5:64:7d:d5:b4:00:6a:0b:3c:ef:7e:a2:
                    cf:88:2c:40:aa:4c:ce:7e:f7:d3:49:64:1f:91:72:
                    0d:4f:d3:5c:77:40:a6:57:21:a0:2b:b1:1f:97:cb:
                    18:37:6a:8d:b2:c9:1e:85:20:26:8f:db:73:60:d7:
                    ff:a6:29:70:32:4b:df:b3:46:43:a4:e4:35:a6:ec:
                    31:cb:dc:25:54:0b:ce:c9:8d:68:b4:fa:d4:42:32:
                    6f:da:76:ce:f4:12:7d:ab:86:e5:33:8d:81:bf:3f:
                    ab:54:66:f6:bf:05:e9:e2:ed:08:7c:69:d0:8b:90:
                    5a:ad:3e:fe:ce:d4:67:97:76:9a:8f:fe:f3:a8:3b:
                    5b:08:56:98:9f:26:e2:76:ff:c4:cf:8d:18:59:0a:
                    b4:2a:f6:9b:0d:d9:37:3c:d8:d3:98:c3:5f:ce:8d:
                    65:b0:3b:89:f7:1f:e4:c2:8b:83:87:70:c1:0c:74:
                    9b:61:fc:ac:31:54:b8:54:3f:35:b9:ba:4a:e5:c7:
                    76:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B2:A4:5D:0C:A9:39:20:47:53:0F:D3:C0:EA:62:9F:EA:59:B7:6C
            X509v3 Authority Key Identifier:
                keyid:85:75:07:F1:D8:B3:91:5C:95:10:D5:04:70:0E:CE:89:0B:06:68:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hXUH8dizkVyVENUEcA7OiQsGaF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/C73BA16403A711F0A7FF9C87C4F9AE02/hXUH8dizkVyVENUEcA7OiQsGaF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:b5:b4:69:5d:2b:7d:86:36:01:cd:78:98:b9:00:12:ae:
         61:62:ba:99:14:1e:0b:8f:70:d4:5d:8f:84:4e:dc:8b:39:0c:
         b5:27:ed:6d:0c:58:15:72:c2:36:87:e8:14:0e:3d:24:c5:11:
         43:80:3b:82:14:7c:ee:6a:6a:99:72:c1:5d:cb:f3:87:e8:2c:
         06:72:c4:10:e8:a8:9a:0d:21:af:ff:7e:4f:13:b2:23:60:de:
         b9:10:eb:0f:e8:96:d6:37:44:0d:26:c4:bc:83:4c:59:7c:aa:
         ce:be:f1:e7:e6:e2:87:b3:84:c7:08:67:4a:6d:db:33:46:a2:
         3a:2c:0c:db:6b:9c:e6:ab:d1:79:38:b2:d2:65:81:1e:51:b6:
         1d:83:ba:88:81:0f:25:e9:d7:c5:e3:9f:1b:d1:85:9e:09:2c:
         66:d4:55:9e:3a:59:5b:13:b0:fb:0f:9e:5b:88:fa:8c:0e:7a:
         ad:da:50:88:c6:15:08:bd:a0:66:f2:d0:8f:00:fc:41:86:53:
         ce:44:f0:45:f2:b5:3e:37:80:7b:e5:7a:e0:7a:f8:4c:a2:d5:
         da:d7:d7:49:32:6a:5f:fa:ba:00:f3:54:f6:7b:de:f7:b7:a4:
         03:a9:f8:58:b9:62:ed:5a:ea:2a:98:d5:57:5f:3a:08:d5:3c:
         cb:55:10:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI3RkMxMTAvBgNVBAUTKDg1NzUwN0YxRDhCMzkxNUM5NTEwRDUwNDcwMEVDRTg5
MEIwNjY4NUYwHhcNMjYxMDExMDYyMTIwWhcNMjYxMDE4MDYyMTIwWjAYMRYwFAYD
VQQDEw02YWNiMmFlMC04YjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2iQVuWLuO51Ie4tL+RxFy/kx+9omvO/kwS011pps1ctHa/RXpDS7zKykC+Cl
PRBZgqota80NW24aArQ/2Jj1ZH3VtABqCzzvfqLPiCxAqkzOfvfTSWQfkXINT9Nc
d0CmVyGgK7Efl8sYN2qNsskehSAmj9tzYNf/pilwMkvfs0ZDpOQ1puwxy9wlVAvO
yY1otPrUQjJv2nbO9BJ9q4blM42Bvz+rVGb2vwXp4u0IfGnQi5BarT7+ztRnl3aa
j/7zqDtbCFaYnybidv/Ez40YWQq0KvabDdk3PNjTmMNfzo1lsDuJ9x/kwouDh3DB
DHSbYfysMVS4VD81ubpK5cd2cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiypF0M
qTkgR1MP08DqYp/qWbdsMB8GA1UdIwQYMBaAFIV1B/HYs5FclRDVBHAOzokLBmhf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdGQy9DNzNCQTE2NDAz
QTcxMUYwQTdGRjlDODdDNEY5QUUwMi9oWFVIOGRpemtWeVZFTlVFY0E3T2lRc0dh
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hYVUg4ZGl6a1Z5VkVOVUVjQTdPaVFzR2FGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjdGQy9DNzNCQTE2NDAzQTcxMUYwQTdGRjlDODdDNEY5QUUwMi9oWFVIOGRpemtW
eVZFTlVFY0E3T2lRc0dhRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARQ21tGldK32GNgHNeJi5ABKuYWK6mRQeC49w1F2PhE7cizkMtSftbQxYFXLC
NofoFA49JMURQ4A7ghR87mpqmXLBXcvzh+gsBnLEEOiomg0hr/9+TxOyI2DeuRDr
D+iW1jdEDSbEvINMWXyqzr7x5+bih7OExwhnSm3bM0aiOiwM22uc5qvReTiy0mWB
HlG2HYO6iIEPJenXxeOfG9GFngksZtRVnjpZWxOw+w+eW4j6jA56rdpQiMYVCL2g
ZvLQjwD8QYZTzkTwRfK1PjeAe+V64Hr4TKLV2tfXSTJqX/q6APNU9nve97ekA6n4
WLli7VrqKpjVV186CNU8y1UQYQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:42:52 2026 by rpki-client