Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
File:                     C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json)
Hash identifier:          yqXBCBOP/Pwi5hrgJXJbo9NcNAFhLMJz2WtcJTfeWc0=
Subject key identifier:   99:19:D6:AA:A7:F1:C4:D7:4B:B3:86:37:89:80:8C:E1:A3:6B:66:63
Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61
Certificate issuer:       /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
Certificate serial:       02C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
Manifest number:          02AC
Signing time:             Sun 25 Oct 2026 02:06:35 +0000
Manifest this update:     Sun 25 Oct 2026 02:06:34 +0000
Manifest next update:     Sun 01 Nov 2026 02:06:34 +0000
Files and hashes:         1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: boDtslGf4v6NMXmHTtZRa7heJLao+pgB3YStvABXFts=)
                          2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: EM/KOkF5SIj09EIDJvtomVdUlaIY1tXE0xhdTGi6p4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl
                          rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61
        Validity
            Not Before: Oct 25 02:06:34 2026 GMT
            Not After : Nov  1 02:06:34 2026 GMT
        Subject: CN=6add642b-9ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:24:55:24:09:d5:fe:2c:52:37:88:2a:b8:39:
                    cd:28:7c:08:bf:0c:7b:f3:f7:26:17:59:a5:14:88:
                    47:e0:35:85:ce:1c:b6:3e:dd:73:c8:be:29:b8:d3:
                    01:21:5a:1d:31:9d:fb:e5:e3:22:64:f3:3c:60:b6:
                    1f:79:fe:d6:91:5c:85:c5:76:19:95:ea:f4:3f:01:
                    50:03:c0:4b:2a:71:41:da:03:89:9c:76:c5:b3:85:
                    ce:b5:ae:e7:0b:7d:66:1a:c3:07:b4:4b:c6:d1:38:
                    36:dd:bc:14:8c:50:a8:15:a7:73:1d:37:1c:f9:67:
                    8f:47:25:17:79:e1:70:33:bd:14:69:04:b3:a1:59:
                    e4:e1:c0:fc:a5:4b:63:b9:2a:5f:4f:a0:20:b2:0e:
                    47:c6:eb:9e:5e:06:23:e2:d5:f6:4e:24:75:c1:ed:
                    b7:40:ff:69:a9:9f:b6:02:91:19:0f:b7:cd:10:79:
                    05:89:5a:1f:ae:a0:32:18:86:2a:36:df:71:1d:b3:
                    58:49:81:9f:6c:8c:3e:fa:88:62:85:39:16:3b:9d:
                    c3:24:0a:1c:e4:fd:52:55:15:5b:29:43:f3:df:a0:
                    4e:22:a9:37:81:18:b1:d0:69:2b:6b:db:73:b2:de:
                    97:4d:6f:50:cf:59:a3:36:9b:b3:6a:cc:ec:bd:ef:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:19:D6:AA:A7:F1:C4:D7:4B:B3:86:37:89:80:8C:E1:A3:6B:66:63
            X509v3 Authority Key Identifier:
                keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ab:c0:39:c8:85:0c:35:8c:38:cd:b3:be:80:47:82:a9:88:
         46:ea:83:e7:4c:4d:5a:41:a4:ae:e7:41:db:00:05:17:5b:5c:
         75:e9:52:e9:06:07:70:4e:a7:c6:0d:68:d8:cb:64:b2:cd:76:
         b2:40:5d:fe:66:a4:95:87:1d:5a:5e:36:1e:97:5c:29:ba:f8:
         2f:12:dd:97:f5:72:82:5e:39:ec:e5:aa:6d:a8:5a:a4:6e:4e:
         46:af:00:67:5d:d0:c3:c9:8d:c3:71:11:3d:9c:0f:fc:c7:d0:
         10:bb:7c:61:ec:f6:f7:7e:20:28:39:5a:ca:55:0c:09:3a:d2:
         8a:b5:85:ac:24:8d:d0:6a:fe:1b:c4:cb:dc:62:53:ee:de:89:
         77:82:43:9a:fd:dc:39:7e:27:78:cd:52:e6:91:50:1a:33:d5:
         45:9e:e4:7c:fb:c9:16:84:33:2e:4b:52:26:73:d5:1f:aa:5c:
         0f:d2:a7:95:d1:75:e0:b9:5b:a4:c9:60:e3:c1:22:4b:d0:df:
         4d:d2:10:d4:e6:50:d7:9b:93:69:b9:02:51:0d:f1:6f:d0:09:
         ee:80:9c:ba:89:54:f7:f0:06:9a:f9:db:99:24:8c:87:36:9d:
         13:e6:7e:be:51:08:0a:60:b1:0b:4e:8f:0d:78:90:87:9a:63:
         b0:6f:0a:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw
RDU5MjNCNjEwHhcNMjYxMDI1MDIwNjM0WhcNMjYxMTAxMDIwNjM0WjAYMRYwFAYD
VQQDEw02YWRkNjQyYi05YmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlyRVJAnV/ixSN4gquDnNKHwIvwx78/cmF1mlFIhH4DWFzhy2Pt1zyL4puNMB
IVodMZ375eMiZPM8YLYfef7WkVyFxXYZler0PwFQA8BLKnFB2gOJnHbFs4XOta7n
C31mGsMHtEvG0Tg23bwUjFCoFadzHTcc+WePRyUXeeFwM70UaQSzoVnk4cD8pUtj
uSpfT6Agsg5HxuueXgYj4tX2TiR1we23QP9pqZ+2ApEZD7fNEHkFiVofrqAyGIYq
Nt9xHbNYSYGfbIw++ohihTkWO53DJAoc5P1SVRVbKUPz36BOIqk3gRix0Gkra9tz
st6XTW9Qz1mjNpuzaszsve+vVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkZ1qqn
8cTXS7OGN4mAjOGja2ZjMB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF
MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF
X0lQSWlDb0NWNTBOV1NPMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAd6vAOciFDDWMOM2zvoBHgqmIRuqD50xNWkGkrudB2wAFF1tcdelS6QYHcE6n
xg1o2Mtkss12skBd/maklYcdWl42HpdcKbr4LxLdl/Vygl457OWqbahapG5ORq8A
Z13Qw8mNw3ERPZwP/MfQELt8Yez2934gKDlaylUMCTrSirWFrCSN0Gr+G8TL3GJT
7t6Jd4JDmv3cOX4neM1S5pFQGjPVRZ7kfPvJFoQzLktSJnPVH6pcD9KnldF14Llb
pMlg48EiS9DfTdIQ1OZQ15uTabkCUQ3xb9AJ7oCcuolU9/AGmvnbmSSMhzadE+Z+
vlEICmCxC06PDXiQh5pjsG8Kkg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 05:45:59 2026 by rpki-client