Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
File:                     MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json)
Hash identifier:          /zH19ljzS0hCV9M65rZEioA5LekBOj4H4mb8qodcJf4=
Subject key identifier:   42:EB:F1:61:C7:B7:3D:07:3E:68:A9:9F:AC:AD:66:06:D5:DA:93:E0
Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
Certificate issuer:       /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
Manifest number:          0163
Signing time:             Tue 27 Oct 2026 05:33:24 +0000
Manifest this update:     Tue 27 Oct 2026 05:33:24 +0000
Manifest next update:     Tue 03 Nov 2026 05:33:24 +0000
Files and hashes:         1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: cCQR3tKbs6JwUynYkzS9AUU0xIuoQASmI2qP0BDjg+4=)
                          2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: fQPbW7wsOJSJ6PTH0yNZlYvKmkqgNxI41AFvHxJhKtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
                          rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
        Validity
            Not Before: Oct 27 05:33:24 2026 GMT
            Not After : Nov  3 05:33:24 2026 GMT
        Subject: CN=6ae037a4-c777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:33:8a:a8:b7:70:a6:64:0c:be:86:4f:a3:7b:
                    9b:72:3c:ae:8e:d6:0a:9c:95:e0:40:0b:a0:4f:31:
                    1b:ba:58:02:cc:53:15:16:64:72:ca:a8:01:9f:64:
                    ed:7e:36:fb:33:b6:b8:fc:19:e2:f5:25:e5:5b:7b:
                    b4:88:8b:81:c9:26:1c:41:6a:71:bf:04:b1:20:05:
                    25:2e:0d:68:21:35:43:40:a9:43:93:91:c5:0c:b8:
                    df:d2:3e:fb:50:e1:51:af:13:24:8a:eb:e4:f7:e9:
                    d7:4f:e9:de:b0:66:0b:06:1f:8a:a3:a3:33:f0:c3:
                    ac:9d:3b:2e:35:5a:d6:47:09:1a:1c:cd:6b:1d:51:
                    97:8d:47:4b:1d:5e:54:ca:44:56:ae:47:ff:3c:85:
                    4c:ff:48:05:93:29:e3:13:76:0b:89:fb:28:3f:59:
                    85:2f:32:00:56:50:6b:89:3d:37:6a:11:e1:1e:01:
                    c0:d7:00:8b:e0:28:d7:d8:59:e6:4d:2c:7b:b5:cb:
                    f3:ff:da:b4:fc:f2:71:19:4b:01:48:fa:fa:6e:42:
                    2c:96:ee:a1:4f:06:af:0f:c3:8e:d3:d0:28:f6:29:
                    4a:70:f3:eb:92:ff:4b:7c:9a:4e:67:69:eb:3d:34:
                    8f:5e:9f:a5:93:5c:5d:b7:39:4f:ae:74:11:90:91:
                    05:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EB:F1:61:C7:B7:3D:07:3E:68:A9:9F:AC:AD:66:06:D5:DA:93:E0
            X509v3 Authority Key Identifier:
                keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:da:af:9f:f2:1b:3c:be:1f:42:38:db:fa:23:55:6c:e2:2b:
         06:5a:77:27:0a:30:19:fc:77:8f:63:1e:54:d7:9e:22:af:6c:
         59:06:02:c1:f5:03:a3:f9:cd:f0:1d:46:f0:a5:b9:e3:d7:04:
         b5:ea:b3:16:fe:c8:f7:39:dd:5e:c2:b4:d7:08:be:70:90:05:
         57:85:22:38:47:79:49:53:74:51:9e:51:29:50:51:d3:ff:53:
         b8:4d:e3:9a:99:a8:bf:67:6c:39:38:cc:d9:f4:a7:29:61:5d:
         9f:28:13:ee:10:33:b7:c7:f0:6a:3e:64:cc:f9:0b:3b:d2:58:
         11:87:6a:74:53:07:8a:7c:1d:a8:68:9f:21:d5:e8:4d:ce:d1:
         0e:be:96:08:09:51:32:c6:6b:86:3b:7e:dc:05:3f:14:09:f4:
         1e:61:eb:a5:a1:f8:fa:9b:69:ce:85:53:b1:28:6b:95:0e:07:
         09:f9:dc:8f:5a:7d:2a:51:d6:4a:58:af:bf:de:30:3a:39:59:
         e3:a7:e9:85:e5:08:3e:42:69:06:2a:5d:66:ed:cd:f5:a8:e4:
         c5:bb:c2:31:f1:38:51:aa:be:26:ef:67:80:61:83:9a:95:17:
         ac:78:3b:36:e1:27:5f:a9:9b:f9:1e:1e:8d:7c:84:21:71:92:
         fd:ea:75:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRBQjgxMTAvBgNVBAUTKDMxODhGOUI5RjVFOTBBRkIwREIwREU2NTY1RjAyQzkw
QkVFQTQ4RDAwHhcNMjYxMDI3MDUzMzI0WhcNMjYxMTAzMDUzMzI0WjAYMRYwFAYD
VQQDEw02YWUwMzdhNC1jNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3TOKqLdwpmQMvoZPo3ubcjyujtYKnJXgQAugTzEbulgCzFMVFmRyyqgBn2Tt
fjb7M7a4/Bni9SXlW3u0iIuBySYcQWpxvwSxIAUlLg1oITVDQKlDk5HFDLjf0j77
UOFRrxMkiuvk9+nXT+nesGYLBh+Ko6Mz8MOsnTsuNVrWRwkaHM1rHVGXjUdLHV5U
ykRWrkf/PIVM/0gFkynjE3YLifsoP1mFLzIAVlBriT03ahHhHgHA1wCL4CjX2Fnm
TSx7tcvz/9q0/PJxGUsBSPr6bkIslu6hTwavD8OO09Ao9ilKcPPrkv9LfJpOZ2nr
PTSPXp+lk1xdtzlPrnQRkJEFiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFELr8WHH
tz0HPmipn6ytZgbV2pPgMB8GA1UdIwQYMBaAFDGI+bn16Qr7DbDeZWXwLJC+6kjQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zQjBBOUM2NEQx
QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2c05zTjVsWmZBc2tMN3FT
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01ZajV1ZlhwQ3ZzTnNONWxaZkFza0w3cVNOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEFCOC8zQjBBOUM2NEQxQjAxMUVGOEMyMEREMzJDNEY5QUUwMi9NWWo1dWZYcEN2
c05zTjVsWmZBc2tMN3FTTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABNqvn/IbPL4fQjjb+iNVbOIrBlp3JwowGfx3j2MeVNeeIq9sWQYCwfUDo/nN
8B1G8KW549cEteqzFv7I9zndXsK01wi+cJAFV4UiOEd5SVN0UZ5RKVBR0/9TuE3j
mpmov2dsOTjM2fSnKWFdnygT7hAzt8fwaj5kzPkLO9JYEYdqdFMHinwdqGifIdXo
Tc7RDr6WCAlRMsZrhjt+3AU/FAn0HmHrpaH4+ptpzoVTsShrlQ4HCfncj1p9KlHW
Slivv94wOjlZ46fpheUIPkJpBipdZu3N9ajkxbvCMfE4Uaq+Ju9ngGGDmpUXrHg7
NuEnX6mb+R4ejXyEIXGS/ep1pA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:45 2026 by rpki-client