Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
File:                     AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json)
Hash identifier:          mHS/8JgmekaqtIMyzt2Ek/BmEOdGKuP39xQV2T89+CU=
Subject key identifier:   12:E0:B1:AA:08:43:7A:11:B7:12:6E:44:58:0B:9C:1A:F7:4C:63:BF
Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
Certificate issuer:       /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
Manifest number:          0192
Signing time:             Thu 15 Oct 2026 05:21:50 +0000
Manifest this update:     Thu 15 Oct 2026 05:21:49 +0000
Manifest next update:     Thu 22 Oct 2026 05:21:49 +0000
Files and hashes:         1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: mUCQm4Gn2zA8ir5s4p1hkEI5GmAe0/nU0CLL4vxi+UU=)
                          2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: Abzh5hO1STDCOE2dqwlQK0dttAq//NKbjnjx7Uzj2vo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
                          rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 05:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
        Validity
            Not Before: Oct 15 05:21:49 2026 GMT
            Not After : Oct 22 05:21:49 2026 GMT
        Subject: CN=6ad062ee-5c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:da:72:d8:2b:51:a9:cc:fd:e0:ce:26:42:
                    3b:a1:8e:22:73:bb:dc:ef:f6:3a:09:4e:ae:2b:3d:
                    b1:d2:60:1d:11:e1:d8:b8:4e:d5:eb:0e:25:b3:01:
                    c6:e1:f9:0b:75:86:20:c9:25:e0:2c:b2:02:86:af:
                    f6:25:d3:47:12:9b:24:3f:30:68:ed:ee:54:83:b5:
                    bb:a2:e8:1c:43:64:94:f6:bc:56:0e:37:29:90:7d:
                    6a:1c:57:0b:5b:40:36:a3:74:64:f3:5a:22:54:01:
                    da:32:7b:15:30:c5:de:18:35:e1:f5:b1:48:ff:6d:
                    45:d4:bc:c4:08:a7:a7:f7:80:88:70:73:58:3e:34:
                    5e:eb:74:a6:cf:e6:62:7c:ca:8f:6d:2b:46:6e:ed:
                    54:73:3d:80:fa:09:7f:7e:14:4a:60:62:4b:e2:8f:
                    80:c2:72:8f:75:f1:1c:71:96:19:90:86:63:b7:52:
                    ef:29:e5:7b:52:e1:9a:21:a5:02:ad:c6:9a:27:56:
                    e3:bc:33:fa:53:d7:1e:95:ac:88:92:c7:51:d1:91:
                    58:75:0b:28:57:da:cb:b9:39:16:e2:86:93:d9:d8:
                    11:08:22:26:f0:d1:00:3f:40:67:98:cd:cd:14:95:
                    49:fc:a7:07:8a:fd:12:48:3d:0d:f4:bb:79:fc:a5:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E0:B1:AA:08:43:7A:11:B7:12:6E:44:58:0B:9C:1A:F7:4C:63:BF
            X509v3 Authority Key Identifier:
                keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1b:73:84:74:4c:f1:65:5c:53:13:39:64:e6:ab:a4:e6:06:
         0e:1d:78:92:19:b1:bd:35:41:ec:94:8d:f0:19:17:02:00:58:
         b1:41:5e:63:20:08:75:c0:d2:bb:4e:b5:30:d0:f8:f0:36:3e:
         ad:bb:8e:86:49:e8:1f:50:cf:78:cd:35:f5:5f:ac:9b:32:4e:
         b3:b0:15:60:d2:5b:60:76:be:5b:a7:ef:81:02:38:be:a1:b9:
         6a:0d:ee:99:d1:93:7b:b3:38:0f:79:03:71:eb:d4:31:b1:9a:
         ee:7f:75:51:15:de:d6:f0:07:79:e2:30:77:8b:33:ec:a2:9c:
         0c:80:33:7d:ca:2f:51:33:90:a2:99:0f:00:e5:cb:d2:07:6d:
         bb:b3:27:9b:61:4d:02:0d:ca:b0:ba:32:d6:2f:27:e6:86:7f:
         ad:2e:2f:1f:fb:a0:81:c6:6e:03:7b:a3:4e:05:e2:c5:ff:d4:
         a7:a7:c7:22:6f:68:f2:6d:c6:53:4a:f0:8a:30:9b:0a:3a:70:
         56:b7:46:40:c2:f6:9e:3a:1c:d3:47:09:aa:2b:2c:42:56:a4:
         05:16:3b:42:1e:a6:b1:c4:b6:16:8f:c4:86:8e:ae:f5:ed:4e:
         e5:c5:47:51:4a:e5:4d:0d:dd:aa:a3:20:1a:94:f1:5e:fd:44:
         e2:37:8d:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERCN0UxMTAvBgNVBAUTKDAyREExMzI3RjUyQzQwMjNBMzgyMUFDODc4NTBDOTE3
RDhFODM1MjcwHhcNMjYxMDE1MDUyMTQ5WhcNMjYxMDIyMDUyMTQ5WjAYMRYwFAYD
VQQDEw02YWQwNjJlZS01YzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvUTactgrUanM/eDOJkI7oY4ic7vc7/Y6CU6uKz2x0mAdEeHYuE7V6w4lswHG
4fkLdYYgySXgLLIChq/2JdNHEpskPzBo7e5Ug7W7ougcQ2SU9rxWDjcpkH1qHFcL
W0A2o3Rk81oiVAHaMnsVMMXeGDXh9bFI/21F1LzECKen94CIcHNYPjRe63Smz+Zi
fMqPbStGbu1Ucz2A+gl/fhRKYGJL4o+AwnKPdfEccZYZkIZjt1LvKeV7UuGaIaUC
rcaaJ1bjvDP6U9celayIksdR0ZFYdQsoV9rLuTkW4oaT2dgRCCIm8NEAP0BnmM3N
FJVJ/KcHiv0SSD0N9Lt5/KWM2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBLgsaoI
Q3oRtxJuRFgLnBr3TGO/MB8GA1UdIwQYMBaAFALaEyf1LEAjo4IayHhQyRfY6DUn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI3RS85QzNGRUNEQzY0
REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FDT2pnaHJJZUZESkY5am9O
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0F0b1RKX1VzUUNPamdockllRkRKRjlqb05TYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REI3RS85QzNGRUNEQzY0REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FD
T2pnaHJJZUZESkY5am9OU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAsRtzhHRM8WVcUxM5ZOarpOYGDh14khmxvTVB7JSN8BkXAgBYsUFeYyAIdcDS
u061MND48DY+rbuOhknoH1DPeM019V+smzJOs7AVYNJbYHa+W6fvgQI4vqG5ag3u
mdGTe7M4D3kDcevUMbGa7n91URXe1vAHeeIwd4sz7KKcDIAzfcovUTOQopkPAOXL
0gdtu7Mnm2FNAg3KsLoy1i8n5oZ/rS4vH/uggcZuA3ujTgXixf/Up6fHIm9o8m3G
U0rwijCbCjpwVrdGQML2njoc00cJqissQlakBRY7Qh6mscS2Fo/Eho6u9e1O5cVH
UUrlTQ3dqqMgGpTxXv1E4jeNPw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:24 2026 by rpki-client