Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
File:                     parvp2FTU0y7DrZLaMQp9dx_ngo.mft (raw, json)
Hash identifier:          YsaaQdgzuMUC2yl2skoBB4BhWTZQvisrhgfef05D+C8=
Subject key identifier:   BA:68:7B:37:92:1B:6C:45:54:9C:4E:F9:83:68:63:5A:E1:C1:76:2E
Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A
Certificate issuer:       /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
Manifest number:          E8
Signing time:             Tue 13 Oct 2026 07:11:09 +0000
Manifest this update:     Tue 13 Oct 2026 07:11:08 +0000
Manifest next update:     Tue 20 Oct 2026 07:11:08 +0000
Files and hashes:         1: parvp2FTU0y7DrZLaMQp9dx_ngo.crl (hash: N6IusFxPGA0Cgc4+LPHp86CnvooulXslacwbF4uxmgw=)
                          2: B1291960691911F08409AD61C4F9AE02.roa (hash: xWeJUoZ8psX4j3Tsu87cK5nfSj2RIamnnHwKNIQT+YE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl
                          rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A
        Validity
            Not Before: Oct 13 07:11:08 2026 GMT
            Not After : Oct 20 07:11:08 2026 GMT
        Subject: CN=6acdd98d-765c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:b1:f0:77:d6:05:b5:9e:30:b6:69:c8:b6:
                    a6:63:48:23:0a:87:e9:8e:b2:2e:2c:ef:08:db:eb:
                    4d:4a:d9:eb:94:3f:82:21:43:a6:4b:05:dd:30:81:
                    cb:89:57:23:49:58:e7:e3:70:02:e8:a2:05:2a:f5:
                    0e:24:30:08:69:cd:7f:2c:b5:e5:97:ee:e5:05:70:
                    06:97:f0:47:28:61:37:d4:ee:4e:bb:31:64:f3:35:
                    14:b8:a7:6c:16:cf:ac:0e:a1:84:6b:75:e8:77:ae:
                    51:a7:e4:a8:f7:4b:f1:d9:62:8c:9d:a7:85:6f:c2:
                    82:f9:bd:0e:59:ee:f1:77:04:da:d8:53:76:03:38:
                    c7:ad:3c:e7:77:2b:e0:bf:8a:98:28:94:43:8c:62:
                    53:b9:71:8f:65:e1:51:5f:73:81:09:fc:b6:64:ea:
                    74:3b:37:3c:ff:ac:62:09:78:57:4e:15:de:70:51:
                    ab:9c:1b:7d:ca:21:55:14:38:af:ac:51:54:4f:bb:
                    6c:9c:42:44:3f:59:17:25:eb:7e:83:b9:8d:eb:3d:
                    d6:61:f3:5c:bf:ee:67:6f:ce:c2:9e:7c:aa:04:1f:
                    00:3b:32:15:24:4d:c6:85:17:c3:95:ae:20:b9:01:
                    54:c2:37:ba:c4:70:0f:41:1e:34:59:3e:7e:20:22:
                    18:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:68:7B:37:92:1B:6C:45:54:9C:4E:F9:83:68:63:5A:E1:C1:76:2E
            X509v3 Authority Key Identifier:
                keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:f0:9e:63:24:ae:ef:fa:18:70:1e:5c:c1:48:e4:af:dd:
         63:04:cf:70:00:13:2b:96:30:7d:6f:4d:1d:a0:74:b4:7c:23:
         b9:30:dc:e1:0c:5f:1f:a0:4e:df:4e:f7:a0:a2:97:0c:63:05:
         01:b3:5e:27:df:71:8b:3d:f7:20:f8:b9:8a:05:1c:3c:85:e6:
         26:11:c1:37:b5:14:5a:22:6b:ed:9c:28:da:43:3b:01:35:e4:
         0f:95:4c:2a:d5:25:77:bd:41:45:82:ed:5e:ca:d1:a7:43:28:
         46:40:f2:4d:d7:99:c1:ce:11:bb:13:5f:27:c9:ea:78:20:aa:
         90:4e:3b:da:1c:dc:50:99:a8:fa:de:1a:cb:2d:e5:b7:9a:0b:
         3e:ed:ff:05:17:32:c1:5b:e6:a8:16:04:2d:ef:21:6e:86:44:
         c9:fd:8e:92:9a:8b:d5:72:08:b4:bb:75:47:2e:ee:cc:c8:a6:
         a2:d5:d8:70:4c:45:f9:75:7b:5c:9a:99:aa:9d:5a:83:1e:be:
         ca:72:69:e2:ec:6a:a5:35:77:52:f4:03:f3:ef:49:53:b5:26:
         5f:98:36:69:de:d0:57:39:79:a4:52:4f:ee:86:f3:ab:cf:53:
         e3:73:d0:d9:22:43:6d:14:fb:48:b3:9a:87:da:fc:8e:78:be:
         17:67:3c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:46:07 2026 by rpki-client