Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
File:                     fJsp8fVuh-6usb90B2lNtO3a1Ts.mft (raw, json)
Hash identifier:          2fMGXnDZFcgxDu66tWFYydzBS5XSljVeWaQUGhfA+FY=
Subject key identifier:   9A:9E:AA:E1:99:70:11:F6:47:B1:20:03:73:6F:BA:81:BC:85:F1:E7
Authority key identifier: 7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B
Certificate issuer:       /CN=A9171845/serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
Certificate serial:       05EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
Manifest number:          05E0
Signing time:             Mon 26 Oct 2026 22:53:15 +0000
Manifest this update:     Mon 26 Oct 2026 22:53:14 +0000
Manifest next update:     Mon 02 Nov 2026 22:53:14 +0000
Files and hashes:         1: fJsp8fVuh-6usb90B2lNtO3a1Ts.crl (hash: bLqS7AFK2B6V1VV072pda63r8nUNkToPOJD89H2Wrzk=)
                          2: FE5E15E2216911EC82319078C4F9AE02.roa (hash: 3PYImVuhd2a+7WVhTnmUqdkpZJCLvtAkYhkCLH97AYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 22:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171845, serialNumber=7C9B29F1F56E87EEAEB1BF7407694DB4EDDAD53B
        Validity
            Not Before: Oct 26 22:53:14 2026 GMT
            Not After : Nov  2 22:53:14 2026 GMT
        Subject: CN=6adfd9da-f14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:10:b0:af:bf:49:32:fb:fd:b2:c6:bc:7d:
                    c2:32:e3:31:68:89:66:7a:b4:0e:8c:bf:d6:c1:c0:
                    a5:c6:f4:d6:bf:f4:58:ce:dc:3c:1f:ca:0a:0c:c0:
                    3c:dc:62:5e:c5:9e:08:ce:72:25:c8:d7:ed:b0:2d:
                    7f:77:42:b8:76:9a:73:d8:37:69:53:c1:d9:76:bc:
                    d6:51:51:76:85:20:16:01:01:20:17:b7:71:1f:1e:
                    fb:97:52:aa:54:22:2a:5d:bb:0f:d6:bb:9d:4f:f8:
                    ff:a9:6f:09:90:a3:0a:34:ad:fc:a9:22:0d:da:23:
                    46:e5:57:17:81:07:84:86:d1:46:ed:77:e6:ca:32:
                    2b:a6:37:5e:18:28:56:5e:6b:15:85:ce:a2:08:80:
                    d3:2d:30:86:a2:1c:e1:b7:49:c7:0c:bc:ac:19:b8:
                    eb:91:34:01:3f:76:08:60:dc:ee:6f:e9:6b:18:79:
                    e9:05:dc:a3:40:42:f3:f2:87:04:75:e8:b0:62:5f:
                    44:42:cb:46:3d:36:6e:02:ca:9a:a1:fa:47:4f:30:
                    8e:ec:cc:6e:44:f3:55:1d:29:56:d8:29:52:48:b5:
                    13:7f:47:18:22:1e:14:75:64:64:7f:62:ad:66:44:
                    16:2b:71:76:06:6b:9d:59:f9:f1:1b:19:6a:a8:0b:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9E:AA:E1:99:70:11:F6:47:B1:20:03:73:6F:BA:81:BC:85:F1:E7
            X509v3 Authority Key Identifier:
                keyid:7C:9B:29:F1:F5:6E:87:EE:AE:B1:BF:74:07:69:4D:B4:ED:DA:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJsp8fVuh-6usb90B2lNtO3a1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/8675BE8020CA11ECB66C1452C4F9AE02/fJsp8fVuh-6usb90B2lNtO3a1Ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e6:57:88:47:e1:41:e1:ca:da:f9:46:36:bc:ac:76:d1:8c:
         9e:24:8f:de:8d:ed:3e:f1:82:2f:2b:70:fa:ed:18:79:8a:4b:
         bc:20:29:4f:57:db:6e:9d:27:e0:84:0f:d2:5c:ca:49:7d:33:
         61:10:72:99:35:4c:bd:47:1e:7f:5e:9d:14:d4:cd:e8:c7:41:
         c1:f2:dd:75:3d:e0:dd:bb:9b:a6:68:39:68:0c:c3:81:81:4c:
         e5:99:af:20:9a:6f:55:1c:8f:50:bb:c1:dd:79:94:2d:43:5c:
         da:3f:67:09:c0:eb:de:ec:81:87:e9:50:ed:c4:8f:8c:f0:67:
         9c:d9:31:b7:53:3d:46:1e:d6:0c:7f:90:41:54:c1:27:d8:2f:
         ec:cf:68:27:6d:f9:09:9b:af:a9:c0:fd:d2:14:15:c2:77:65:
         8e:8a:00:62:9b:88:00:f2:5c:55:45:8e:ef:76:0f:92:b0:95:
         4a:3c:98:32:cf:96:92:33:b3:fb:9e:cd:4d:8d:c8:46:3f:50:
         b7:59:c6:b6:45:70:4b:dc:0d:91:1e:f8:55:00:28:43:40:76:
         23:85:7a:67:d0:96:33:84:18:5f:5a:05:ba:9f:bb:f1:74:48:
         54:ff:8e:43:6d:d6:55:b3:44:eb:85:3d:01:41:7e:ea:2a:73:
         cd:1d:d6:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE4NDUxMTAvBgNVBAUTKDdDOUIyOUYxRjU2RTg3RUVBRUIxQkY3NDA3Njk0REI0
RUREQUQ1M0IwHhcNMjYxMDI2MjI1MzE0WhcNMjYxMTAyMjI1MzE0WjAYMRYwFAYD
VQQDEw02YWRmZDlkYS1mMTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1wcQsK+/STL7/bLGvH3CMuMxaIlmerQOjL/WwcClxvTWv/RYztw8H8oKDMA8
3GJexZ4IznIlyNftsC1/d0K4dppz2DdpU8HZdrzWUVF2hSAWAQEgF7dxHx77l1Kq
VCIqXbsP1rudT/j/qW8JkKMKNK38qSIN2iNG5VcXgQeEhtFG7XfmyjIrpjdeGChW
XmsVhc6iCIDTLTCGohzht0nHDLysGbjrkTQBP3YIYNzub+lrGHnpBdyjQELz8ocE
deiwYl9EQstGPTZuAsqaofpHTzCO7MxuRPNVHSlW2ClSSLUTf0cYIh4UdWRkf2Kt
ZkQWK3F2BmudWfnxGxlqqAv/bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqequGZ
cBH2R7EgA3NvuoG8hfHnMB8GA1UdIwQYMBaAFHybKfH1bofurrG/dAdpTbTt2tU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg0NS84Njc1QkU4MDIw
Q0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgtNnVzYjkwQjJsTnRPM2Ex
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZKc3A4ZlZ1aC02dXNiOTBCMmxOdE8zYTFUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTg0NS84Njc1QkU4MDIwQ0ExMUVDQjY2QzE0NTJDNEY5QUUwMi9mSnNwOGZWdWgt
NnVzYjkwQjJsTnRPM2ExVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARuZXiEfhQeHK2vlGNrysdtGMniSP3o3tPvGCLytw+u0YeYpLvCApT1fbbp0n
4IQP0lzKSX0zYRBymTVMvUcef16dFNTN6MdBwfLddT3g3bubpmg5aAzDgYFM5Zmv
IJpvVRyPULvB3XmULUNc2j9nCcDr3uyBh+lQ7cSPjPBnnNkxt1M9Rh7WDH+QQVTB
J9gv7M9oJ235CZuvqcD90hQVwndljooAYpuIAPJcVUWO73YPkrCVSjyYMs+WkjOz
+57NTY3IRj9Qt1nGtkVwS9wNkR74VQAoQ0B2I4V6Z9CWM4QYX1oFup+78XRIVP+O
Q23WVbNE64U9AUF+6ipzzR3W6g==
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:31 2026 by rpki-client