Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          kRP7lMeauzNFqexcJaV9l9g8b9QqG24c9TuHw6zfslU=
Subject key identifier:   0E:88:68:F2:89:68:C2:2C:62:3C:EB:87:67:AB:D7:41:B6:B2:3F:85
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          0235
Signing time:             Fri 23 Oct 2026 03:09:36 +0000
Manifest this update:     Fri 23 Oct 2026 03:09:36 +0000
Manifest next update:     Fri 30 Oct 2026 03:09:36 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: oC/Mc4QfVTRviYoYVhqeOHYaSeaFcv8UtD/2vPGCI5M=)
                          2: E5502F78772411EE8659D21FC4F9AE02.roa (hash: 55QHoYjeQW2YY84IgZmrw7Bp3j4BU5OniNwUyuBN8Es=)
                          3: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: bdS7OvbOuaz6iTgPtqEV9vUYbciEKGiVTIJ8MXVQT+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 03:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
        Validity
            Not Before: Oct 23 03:09:36 2026 GMT
            Not After : Oct 30 03:09:36 2026 GMT
        Subject: CN=6adacff0-e0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:58:d5:e2:49:5e:74:9d:24:3a:95:a6:59:
                    ba:08:53:e4:20:7e:67:d9:5d:10:57:b2:2f:90:63:
                    59:f7:d6:9d:05:6a:8b:a0:ea:7b:98:b4:71:c8:bc:
                    ce:9d:ba:ed:cf:b4:f5:f8:03:4b:37:20:8b:ce:29:
                    d2:95:4c:65:b5:28:2d:30:13:58:82:ee:46:d3:50:
                    bf:bf:5a:1d:83:62:7d:1d:94:0a:7d:9a:11:f4:7a:
                    27:b0:d7:7e:76:2a:01:85:05:89:c4:73:ae:74:11:
                    61:2f:3f:d9:e7:0e:a5:97:6b:59:74:bf:52:2c:3d:
                    c5:22:04:78:ed:f3:11:62:f2:de:a1:0d:54:61:e7:
                    f6:58:63:10:07:6d:b7:41:29:36:45:d6:2f:5c:1d:
                    4b:33:db:24:08:c0:73:17:50:bf:e1:07:2c:ce:3d:
                    ec:70:f2:94:01:17:64:1a:84:d6:76:0a:62:aa:8f:
                    9a:b3:60:f9:2c:12:2e:64:71:5d:fa:5d:f7:ae:f7:
                    42:10:26:cf:57:a1:53:82:2a:f7:ac:be:b1:0c:f7:
                    57:11:06:86:f3:fb:05:b0:23:27:1c:8a:29:84:ef:
                    0d:6e:73:c1:35:6b:c7:53:1b:6c:0c:33:f8:94:28:
                    5f:bd:18:17:74:71:03:15:d7:5e:fd:f0:8d:65:80:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:88:68:F2:89:68:C2:2C:62:3C:EB:87:67:AB:D7:41:B6:B2:3F:85
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e1:fa:a1:37:a6:39:8b:69:8d:1d:40:72:ba:19:12:f5:84:
         4c:cc:7c:80:61:77:b7:db:f9:54:d3:b9:5e:f0:b0:07:b5:0d:
         51:9e:31:fe:37:45:b8:87:5d:ab:f2:ae:0e:e0:47:c7:b2:36:
         8f:30:61:1b:3d:94:8e:35:86:02:30:01:16:45:cf:96:6a:82:
         5a:68:3a:3f:63:c6:c9:b0:91:a4:db:be:50:e8:fe:62:47:b7:
         5f:4d:43:22:f6:0a:6e:15:1d:8d:c8:7b:dd:a8:a6:99:e6:a7:
         5e:ef:2d:54:dc:c1:61:97:48:31:b6:b9:49:98:41:12:ce:f0:
         f5:60:6c:5a:20:be:9a:19:7f:51:a7:fc:65:89:f1:0f:9e:d6:
         ea:06:ae:d2:94:2c:da:9a:40:4d:46:0f:b3:15:86:36:54:a7:
         fe:0f:36:fa:1e:78:76:04:d7:59:90:ec:52:92:79:45:94:97:
         3c:d5:78:4d:9c:85:a3:1b:d5:6a:ff:58:2b:42:0c:c1:51:ca:
         17:13:0c:5f:4b:76:c6:f8:6a:66:5b:af:36:85:22:a0:09:32:
         0e:10:40:24:45:95:f4:aa:b3:4c:83:ae:1a:1a:b5:ee:9b:ab:
         58:db:82:c1:db:8d:d2:df:64:eb:36:5b:51:32:97:99:12:4a:
         95:a6:60:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC
QjZGMUVCRjEwHhcNMjYxMDIzMDMwOTM2WhcNMjYxMDMwMDMwOTM2WjAYMRYwFAYD
VQQDEw02YWRhY2ZmMC1lMGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uFY1eJJXnSdJDqVplm6CFPkIH5n2V0QV7IvkGNZ99adBWqLoOp7mLRxyLzO
nbrtz7T1+ANLNyCLzinSlUxltSgtMBNYgu5G01C/v1odg2J9HZQKfZoR9HonsNd+
dioBhQWJxHOudBFhLz/Z5w6ll2tZdL9SLD3FIgR47fMRYvLeoQ1UYef2WGMQB223
QSk2RdYvXB1LM9skCMBzF1C/4Qcszj3scPKUARdkGoTWdgpiqo+as2D5LBIuZHFd
+l33rvdCECbPV6FTgir3rL6xDPdXEQaG8/sFsCMnHIophO8NbnPBNWvHUxtsDDP4
lChfvRgXdHEDFdde/fCNZYDNGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA6IaPKJ
aMIsYjzrh2er10G2sj+FMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3
MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m
UzltRG1oVEk0X3U3Yng2X0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAI+H6oTemOYtpjR1AcroZEvWETMx8gGF3t9v5VNO5XvCwB7UNUZ4x/jdFuIdd
q/KuDuBHx7I2jzBhGz2UjjWGAjABFkXPlmqCWmg6P2PGybCRpNu+UOj+Yke3X01D
IvYKbhUdjch73aimmeanXu8tVNzBYZdIMba5SZhBEs7w9WBsWiC+mhl/Uaf8ZYnx
D57W6gau0pQs2ppATUYPsxWGNlSn/g82+h54dgTXWZDsUpJ5RZSXPNV4TZyFoxvV
av9YK0IMwVHKFxMMX0t2xvhqZluvNoUioAkyDhBAJEWV9KqzTIOuGhq17purWNuC
wduN0t9k6zZbUTKXmRJKlaZgKw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 07:00:36 2026 by rpki-client