Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
File:                     P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft (raw, json)
Hash identifier:          9b9O3FFV9WptTowYl5mhuaQAJfi9gFTW1ya5CKVJILo=
Subject key identifier:   21:D9:A4:F7:48:E9:7E:7E:0D:56:F6:3E:63:0B:2F:E5:45:A4:A9:F7
Authority key identifier: 3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18
Certificate issuer:       /CN=A917357E/serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
Certificate serial:       0542
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
Manifest number:          0848
Signing time:             Tue 06 Oct 2026 23:38:24 +0000
Manifest this update:     Tue 06 Oct 2026 23:38:24 +0000
Manifest next update:     Tue 13 Oct 2026 23:38:24 +0000
Files and hashes:         1: P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl (hash: izygvobRAWDRFhyG0bJgcwV6DmtbAm86VFa/PFf6IlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl
                          rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 23:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917357E, serialNumber=3FC170E8DF5ADBFA1B6370B7450F28FAE0B35A18
        Validity
            Not Before: Oct  6 23:38:24 2026 GMT
            Not After : Oct 13 23:38:24 2026 GMT
        Subject: CN=6ac58670-b2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:a9:57:f0:59:8e:2c:c2:b1:c3:05:8c:fc:
                    e6:84:de:1b:8c:1f:3f:23:e5:51:34:1b:b5:91:c7:
                    a2:95:d5:cf:5d:d7:16:b0:a1:24:f1:56:cf:b8:d9:
                    f9:14:69:7e:83:74:d3:e9:88:0c:10:52:55:cb:c4:
                    49:9f:c4:db:7e:69:fb:33:96:30:19:2f:d8:5d:ab:
                    c7:ce:b5:9f:f0:5c:de:82:85:71:8b:1a:5e:ee:a7:
                    5c:ff:2a:eb:17:5c:f7:19:5f:08:df:68:3f:4b:9b:
                    a4:09:ce:9b:6e:0f:bc:69:d3:34:ce:93:71:d1:70:
                    9d:e0:44:f0:b8:91:6e:ee:1b:58:89:5f:9a:37:90:
                    9f:95:28:26:e2:d9:9f:2e:92:8c:b5:88:dd:0f:55:
                    b2:65:69:d1:fd:c6:5d:8c:bb:46:e8:ca:50:ec:28:
                    db:95:02:5e:33:38:b9:39:29:27:1c:a0:72:f5:5b:
                    66:51:d0:54:97:48:ce:6b:d9:c8:7a:50:46:79:9e:
                    72:8b:aa:28:c6:d9:ef:6e:8a:a2:e2:6c:60:97:15:
                    8f:79:57:31:2e:27:09:5d:93:93:7e:ff:00:46:c7:
                    5e:d3:ff:7e:37:c4:92:e2:42:96:81:16:a9:36:55:
                    d3:11:18:57:7d:4f:b6:25:e6:bb:54:1f:42:4a:0a:
                    fb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D9:A4:F7:48:E9:7E:7E:0D:56:F6:3E:63:0B:2F:E5:45:A4:A9:F7
            X509v3 Authority Key Identifier:
                keyid:3F:C1:70:E8:DF:5A:DB:FA:1B:63:70:B7:45:0F:28:FA:E0:B3:5A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/P8Fw6N9a2_obY3C3RQ8o-uCzWhg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:00:15:d8:76:ce:b6:0d:60:31:1d:9a:d3:47:e5:a6:13:
         52:9a:29:e1:3a:ab:81:ad:b3:47:31:89:c0:d6:85:8a:44:04:
         f5:a5:14:a3:4f:e6:74:87:9f:97:94:9a:97:73:34:aa:a9:84:
         8d:a1:0c:64:b3:7a:51:36:bd:5a:d5:1b:36:64:b7:22:60:46:
         3c:84:a9:d6:8a:bd:18:e9:cc:48:e9:46:d1:2d:3b:70:7c:d5:
         2f:2c:6f:e8:b7:ac:69:05:e5:6e:88:ec:c3:f5:fc:0f:bd:7e:
         5e:7d:f8:ef:7c:cf:53:ca:fe:79:e0:73:94:28:9a:58:3e:fa:
         0e:61:a3:4d:67:4e:ed:4c:44:54:f8:e9:08:d7:c7:9f:1b:e8:
         48:36:83:48:36:5a:8c:77:e5:aa:89:32:70:d1:b8:06:b1:8d:
         ea:27:64:7e:6c:5c:51:ff:2a:84:f2:ea:b5:bb:fe:f7:5b:a2:
         f9:a6:f5:ce:c2:79:25:96:51:df:09:91:16:94:54:65:04:4f:
         d5:2b:39:4a:3a:2e:a0:a4:9a:ae:a5:1c:b6:27:e1:03:dd:a2:
         0e:48:08:e2:4d:90:6f:b0:76:94:f1:1e:5f:92:fa:a0:f6:a0:
         ec:0c:55:9f:cc:42:61:fb:da:f4:42:87:cd:a1:92:ee:15:f2:
         72:37:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:33:30 2026 by rpki-client