Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
File:                     8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json)
Hash identifier:          HjU5Cz0qX7P5SOy/Hd3dSdlFhGzsERbXvPjC+vn5AR0=
Subject key identifier:   CE:5B:D9:ED:C2:30:B5:96:D8:23:A8:8F:06:10:97:2B:2F:68:F8:4C
Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E
Certificate issuer:       /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
Manifest number:          010D
Signing time:             Thu 29 Oct 2026 06:51:00 +0000
Manifest this update:     Thu 29 Oct 2026 06:51:00 +0000
Manifest next update:     Thu 05 Nov 2026 06:51:00 +0000
Files and hashes:         1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: 7jwZb2wLsyrENOTnsv0T5IrYF9EwxuU5NBNc1lsrZ/g=)
                          2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: hSLC4NqqDun1gK6ZwRrsmJ/xEHmnvf+dUfJIiSua4bA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 06:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E
        Validity
            Not Before: Oct 29 06:51:00 2026 GMT
            Not After : Nov  5 06:51:00 2026 GMT
        Subject: CN=6ae2ecd4-8873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:4b:d3:d2:7b:5a:a4:12:23:68:44:a5:8f:
                    7a:56:61:b4:1f:30:91:e8:a5:44:76:8e:b2:ca:47:
                    0a:b0:ad:4d:19:53:f2:a0:dc:c8:fd:ae:16:30:15:
                    57:9c:aa:e3:d5:3c:3f:f8:0b:c2:56:3c:84:35:b2:
                    f0:d3:2c:40:27:13:d0:3f:30:fe:bb:44:c6:b2:4a:
                    69:a4:09:17:9a:0f:9d:ae:13:c7:27:4a:1b:e1:c0:
                    b7:d8:b6:5f:2c:4a:8e:e5:33:3a:72:dc:fb:ca:97:
                    c2:f6:18:cb:6d:54:42:e7:28:6c:b4:db:33:c1:06:
                    f2:a4:a4:f9:2f:73:f6:b7:22:0e:dd:64:f4:30:52:
                    9e:3b:73:f7:7f:f1:88:07:31:81:db:09:8d:64:f4:
                    e1:00:76:43:da:e8:60:ab:0d:ea:96:5a:c6:08:21:
                    0b:be:16:93:20:6d:5f:fa:b6:e4:76:cf:a3:a9:29:
                    3e:52:6a:3b:85:11:97:5d:ad:4d:47:f6:a8:29:f5:
                    51:09:81:8b:72:12:e5:fc:ab:b0:d7:7c:92:c8:fd:
                    c3:8b:dd:0f:c1:b6:ca:ee:06:00:36:12:08:b7:bf:
                    5a:ef:f3:21:8b:d2:1f:7b:47:ce:2c:49:9e:7f:78:
                    79:5c:7c:c1:8a:a9:a8:4e:2a:d3:1c:1d:63:53:9e:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:D9:ED:C2:30:B5:96:D8:23:A8:8F:06:10:97:2B:2F:68:F8:4C
            X509v3 Authority Key Identifier:
                keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:6f:f2:ad:d6:b8:48:51:c8:c6:4d:4f:9c:f7:8b:28:3a:
         a0:8a:f7:de:96:17:d3:5a:c9:37:e3:ed:e3:51:72:0b:21:ef:
         35:4c:ec:94:51:83:d7:04:31:3f:bb:0a:ea:78:ca:e4:af:87:
         a1:39:ee:a5:1b:c5:83:54:5c:98:64:8a:89:dd:e9:31:41:ce:
         2b:e2:04:62:8d:1f:f6:07:ef:6a:0c:2e:03:03:e3:10:ee:3a:
         fc:d3:fe:74:b1:3b:1b:5a:97:f7:2f:15:28:75:e0:1c:57:1c:
         25:3d:25:39:7b:92:9d:94:ef:c1:b8:bb:6d:ae:ee:51:2b:00:
         00:4e:09:37:1d:49:5a:af:14:6f:c8:91:4f:a3:70:0e:19:2a:
         cf:9f:ab:68:ac:bd:e8:92:b1:36:33:a0:c5:cb:db:29:9a:21:
         5a:85:14:47:13:dc:aa:f0:56:39:5b:b1:bd:50:42:14:d4:1b:
         96:31:c6:73:c0:be:06:56:e8:3f:7e:e8:22:6b:1a:b9:3d:95:
         8a:1f:e2:12:6c:db:75:fc:19:88:67:b8:3a:04:06:f4:8c:9d:
         39:d6:a3:9a:58:e5:7c:d2:06:4c:46:6c:eb:1c:9a:4a:79:e1:
         ca:e9:bc:54:3b:eb:dc:cd:59:a7:7f:fc:e7:69:0f:93:aa:04:
         37:02:02:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:55 2026 by rpki-client