Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
File:                     7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json)
Hash identifier:          qoqiIZv6zE1YIchs4ttuRJHY5DsU5yk0pNkuzOKodU8=
Subject key identifier:   2A:22:8E:75:53:02:82:8C:BE:28:87:5B:82:79:5B:58:DC:1D:6C:B8
Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B
Certificate issuer:       /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
Certificate serial:       023C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
Manifest number:          023C
Signing time:             Sat 17 Oct 2026 03:07:07 +0000
Manifest this update:     Sat 17 Oct 2026 03:07:06 +0000
Manifest next update:     Sat 24 Oct 2026 03:07:06 +0000
Files and hashes:         1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: YfRudIlKOJPzmDS1bzAFy9V29nrIckW7C+9Z4BXfSFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl
                          rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 03:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B
        Validity
            Not Before: Oct 17 03:07:06 2026 GMT
            Not After : Oct 24 03:07:06 2026 GMT
        Subject: CN=6ad2e65b-7c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3d:ba:7f:e1:41:f2:5a:b0:e8:e9:61:7f:e4:
                    c3:34:39:ee:e5:43:c5:03:0a:b1:da:84:9f:7e:b3:
                    76:4f:6b:e4:7e:f2:45:e3:0a:9e:f7:84:4f:13:65:
                    bf:aa:7e:af:27:5b:43:70:5f:dc:1d:c5:21:c9:4f:
                    65:5f:26:61:dd:b3:a1:fb:f3:dd:5d:31:37:e3:31:
                    05:cc:17:5e:76:cd:28:bb:16:c6:d1:8b:af:21:78:
                    bf:a7:34:10:1a:aa:00:0f:60:a3:bd:1a:37:7c:8a:
                    c2:4b:5a:20:62:90:d2:e0:12:bb:f3:bc:6f:8d:51:
                    ea:f1:59:c9:65:a9:a9:8c:ba:54:70:09:0f:12:04:
                    61:ff:86:a1:74:61:6c:09:26:99:84:c7:ad:9b:a8:
                    11:ce:91:9e:d7:49:86:89:a9:1b:ae:4d:01:c0:a3:
                    fd:5d:02:05:a2:4a:11:31:0b:a8:e2:1d:27:12:55:
                    ef:53:c6:4b:eb:39:88:70:67:68:ee:0a:96:d9:8c:
                    56:af:69:f6:33:76:6b:55:b9:92:3c:e7:11:be:f3:
                    b3:fd:86:76:0d:98:66:fb:63:b1:f6:db:f6:e9:c7:
                    04:86:77:bf:f3:20:d2:10:f2:ca:a9:6b:4a:a8:9c:
                    f2:58:93:f6:79:e9:c6:dd:ec:da:39:33:fc:9c:23:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:22:8E:75:53:02:82:8C:BE:28:87:5B:82:79:5B:58:DC:1D:6C:B8
            X509v3 Authority Key Identifier:
                keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c4:de:07:87:4a:5d:1a:18:ae:2b:12:22:16:b6:d9:c9:11:
         8e:de:d8:b2:12:c7:fa:ab:9f:b9:a2:68:52:70:f1:c8:c6:f7:
         e6:92:5c:93:a9:4f:f2:9c:71:24:1a:b0:a5:39:19:0f:fd:e9:
         91:61:62:f0:5e:ac:9d:dc:b4:c4:f2:5a:d8:05:94:0a:9f:fe:
         9a:32:1c:2e:0c:eb:53:f7:11:78:00:cf:c7:f8:70:45:c5:71:
         4f:2f:8d:93:dd:ae:7a:79:6a:59:6b:f2:d8:32:1f:af:81:32:
         e8:a9:b3:13:19:39:35:4e:bc:32:f9:62:cd:6e:70:8a:a0:36:
         59:e8:76:3a:9c:97:6a:2e:e0:b4:87:e5:1b:0e:e9:71:0a:d3:
         06:52:43:30:5c:ca:01:87:22:eb:0e:03:f3:42:0f:78:04:5c:
         2b:2f:1b:40:c5:8a:32:32:74:ee:98:81:6d:e1:99:45:a1:18:
         ba:96:13:1c:0b:98:13:a9:c3:66:cd:79:aa:68:d9:23:c1:ea:
         60:c2:20:3f:82:9b:73:8f:e2:6b:68:3f:d9:79:5a:0b:84:d1:
         c5:c1:6c:2b:05:c0:a2:0a:d9:b3:f3:cb:2a:5e:b8:8f:bc:4b:
         cc:4f:27:cd:d2:69:0f:aa:a8:1d:71:a3:75:e7:62:eb:00:26:
         82:b3:5b:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB
MEVCRDdENEIwHhcNMjYxMDE3MDMwNzA2WhcNMjYxMDI0MDMwNzA2WjAYMRYwFAYD
VQQDEw02YWQyZTY1Yi03YzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6D26f+FB8lqw6Olhf+TDNDnu5UPFAwqx2oSffrN2T2vkfvJF4wqe94RPE2W/
qn6vJ1tDcF/cHcUhyU9lXyZh3bOh+/PdXTE34zEFzBdeds0ouxbG0YuvIXi/pzQQ
GqoAD2CjvRo3fIrCS1ogYpDS4BK787xvjVHq8VnJZampjLpUcAkPEgRh/4ahdGFs
CSaZhMetm6gRzpGe10mGiakbrk0BwKP9XQIFokoRMQuo4h0nElXvU8ZL6zmIcGdo
7gqW2YxWr2n2M3ZrVbmSPOcRvvOz/YZ2DZhm+2Ox9tv26ccEhne/8yDSEPLKqWtK
qJzyWJP2eenG3ezaOTP8nCMN/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCoijnVT
AoKMviiHW4J5W1jcHWy4MB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD
NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ
VU44Tnl5MG5hV3VnNjlmVXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAH8TeB4dKXRoYrisSIha22ckRjt7YshLH+qufuaJoUnDxyMb35pJck6lP8pxx
JBqwpTkZD/3pkWFi8F6sndy0xPJa2AWUCp/+mjIcLgzrU/cReADPx/hwRcVxTy+N
k92uenlqWWvy2DIfr4Ey6KmzExk5NU68MvlizW5wiqA2Weh2OpyXai7gtIflGw7p
cQrTBlJDMFzKAYci6w4D80IPeARcKy8bQMWKMjJ07piBbeGZRaEYupYTHAuYE6nD
Zs15qmjZI8HqYMIgP4Kbc4/ia2g/2XlaC4TRxcFsKwXAogrZs/PLKl64j7xLzE8n
zdJpD6qoHXGjdedi6wAmgrNbQA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:33:55 2026 by rpki-client