Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
File:                     8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json)
Hash identifier:          bwzvwC02odSUif136hmiauDefTW/oEeQSDAlytVuN7c=
Subject key identifier:   85:6A:76:08:A6:07:DD:37:22:FF:40:73:A1:5D:8C:CC:79:82:7C:45
Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
Certificate issuer:       /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Certificate serial:       0DC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
Manifest number:          0DB6
Signing time:             Sat 31 Oct 2026 18:06:13 +0000
Manifest this update:     Sat 31 Oct 2026 18:06:12 +0000
Manifest next update:     Sat 07 Nov 2026 18:06:12 +0000
Files and hashes:         1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: nK+g60j/AK9BsTem4UJ3akcerHGMiisRODu7Q/28Cc8=)
                          2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: UDW+dsOCznAjSoGbOEEbQ9JmE9TBtIe+eSGscHflZ+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl
                          rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 18:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3520 (0xdc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379
        Validity
            Not Before: Oct 31 18:06:12 2026 GMT
            Not After : Nov  7 18:06:12 2026 GMT
        Subject: CN=6ae62e14-0361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e7:ee:d5:2e:f3:9a:2f:ae:c9:63:f5:85:a2:
                    c9:23:ea:02:88:9f:d9:cc:0e:72:be:45:d5:7e:1c:
                    21:d0:12:77:5a:49:b0:8d:69:3b:06:09:15:f7:9f:
                    38:20:4a:e5:c2:e3:2a:05:20:a0:b2:59:d8:0f:c6:
                    31:37:aa:8c:89:18:7b:e0:4d:31:b4:ff:37:d5:ed:
                    c3:dc:b7:f8:05:5d:9e:2f:c1:9c:f6:11:4c:5d:60:
                    f3:76:84:b2:2d:f4:30:59:8d:44:f8:e7:a8:5b:5d:
                    ca:b8:0d:e4:7d:28:d9:e8:00:d5:95:e9:71:4e:95:
                    a7:e0:32:d6:17:e9:c8:61:be:69:92:c8:da:7c:b5:
                    eb:f7:7e:52:e5:a6:67:60:52:2e:5d:70:7f:b4:d7:
                    f5:bd:8a:64:c8:64:0f:6a:aa:35:5a:6f:67:b5:80:
                    e4:82:6b:d6:51:06:0a:b8:04:a9:47:5c:71:83:62:
                    ee:ee:ea:6a:26:ba:38:4c:41:b6:59:4d:68:af:ba:
                    ab:fb:43:7f:26:f3:91:79:77:d9:01:b9:da:dd:b0:
                    95:a1:e2:14:b4:af:e2:a6:72:bb:b4:cf:ab:bb:9c:
                    b2:00:bb:4e:1d:db:2d:71:83:c9:88:91:8d:6e:2e:
                    b6:a5:ec:f4:26:65:a5:d5:e2:49:1a:d8:68:e9:0e:
                    e9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6A:76:08:A6:07:DD:37:22:FF:40:73:A1:5D:8C:CC:79:82:7C:45
            X509v3 Authority Key Identifier:
                keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:eb:2d:16:7c:78:b7:05:80:f9:66:df:ff:1a:c5:24:48:
         9c:00:f0:0d:67:90:13:4e:ea:5a:7a:35:f9:11:83:64:23:a7:
         75:9c:f1:d3:ea:21:bc:ef:c1:16:e3:bc:2c:30:a5:81:4a:36:
         1e:4b:01:e2:d3:a2:67:85:f2:e4:dc:d1:7e:06:ac:b9:a3:63:
         b7:21:2d:28:20:41:3b:ed:96:ff:bf:e2:27:fb:c1:ce:78:e5:
         d4:03:7b:80:b6:b1:d5:43:19:0d:23:bc:60:3a:a7:0a:7d:76:
         90:0b:65:74:f9:19:89:a1:49:12:5c:2c:2c:42:dc:df:02:87:
         3f:29:85:a7:08:aa:0b:4c:12:b7:38:2a:b1:d4:bb:36:be:21:
         c4:d6:c5:2e:92:8e:5c:5c:bf:dc:ba:e1:4c:1a:ae:88:95:5c:
         87:cf:f3:bd:c9:84:e3:6c:8e:5a:96:86:ed:20:5b:be:8f:26:
         b6:db:1c:74:37:70:2b:7a:04:93:89:8e:2a:ac:9e:87:69:fd:
         1b:a5:ab:d6:4b:fe:3c:66:17:75:fd:e6:db:03:d2:15:6a:b0:
         2c:ab:5a:d5:e7:63:2f:62:03:ca:37:c1:69:f6:e5:7d:48:a7:
         17:a8:bf:97:b5:04:de:8d:d7:b6:58:46:16:dd:af:8e:ab:f4:
         4c:d3:5c:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD
Mjk1QzczNzkwHhcNMjYxMDMxMTgwNjEyWhcNMjYxMTA3MTgwNjEyWjAYMRYwFAYD
VQQDEw02YWU2MmUxNC0wMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4+fu1S7zmi+uyWP1haLJI+oCiJ/ZzA5yvkXVfhwh0BJ3WkmwjWk7BgkV9584
IErlwuMqBSCgslnYD8YxN6qMiRh74E0xtP831e3D3Lf4BV2eL8Gc9hFMXWDzdoSy
LfQwWY1E+OeoW13KuA3kfSjZ6ADVlelxTpWn4DLWF+nIYb5pksjafLXr935S5aZn
YFIuXXB/tNf1vYpkyGQPaqo1Wm9ntYDkgmvWUQYKuASpR1xxg2Lu7upqJro4TEG2
WU1or7qr+0N/JvOReXfZAbna3bCVoeIUtK/ipnK7tM+ru5yyALtOHdstcYPJiJGN
bi62pez0JmWl1eJJGtho6Q7pPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIVqdgim
B903Iv9Ac6FdjMx5gnxFMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx
OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj
M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI
ajJBcmN4SUFVVkhDbGNjM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAErjrLRZ8eLcFgPlm3/8axSRInADwDWeQE07qWno1+RGDZCOndZzx0+ohvO/B
FuO8LDClgUo2HksB4tOiZ4Xy5NzRfgasuaNjtyEtKCBBO+2W/7/iJ/vBznjl1AN7
gLax1UMZDSO8YDqnCn12kAtldPkZiaFJElwsLELc3wKHPymFpwiqC0wStzgqsdS7
Nr4hxNbFLpKOXFy/3LrhTBquiJVch8/zvcmE42yOWpaG7SBbvo8mttscdDdwK3oE
k4mOKqyeh2n9G6Wr1kv+PGYXdf3m2wPSFWqwLKta1edjL2IDyjfBafblfUinF6i/
l7UE3o3XtlhGFt2vjqv0TNNcMQ==
-----END CERTIFICATE-----
Generated at Mon Nov 2 05:24:44 2026 by rpki-client