Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
File:                     YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft (raw, json)
Hash identifier:          GE8B2zZURPic0nm8VpKLq1OQdz/JYLIEikXNMRfgLX4=
Subject key identifier:   A2:46:9C:A0:A4:A4:72:75:E2:4F:45:21:A8:86:E4:3F:27:3E:5F:13
Authority key identifier: 61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7
Certificate issuer:       /CN=A918E3C0/serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
Manifest number:          8A
Signing time:             Fri 23 Oct 2026 08:13:16 +0000
Manifest this update:     Fri 23 Oct 2026 08:13:15 +0000
Manifest next update:     Fri 30 Oct 2026 08:13:15 +0000
Files and hashes:         1: YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl (hash: mqtcSXJruhw11fptIatkQQkyZtHDLA/62IYIQh+aKXQ=)
                          2: 3F6F4A1A01B211F19B62C4E66C6F56BC.roa (hash: tMHj5+/ILv6Qo4xWUT+IoiNMESbwl2vJsPhAT7WrKns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl
                          rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E3C0, serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
        Validity
            Not Before: Oct 23 08:13:15 2026 GMT
            Not After : Oct 30 08:13:15 2026 GMT
        Subject: CN=6adb171c-7489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:7b:aa:cc:2e:1d:90:83:01:4c:c1:9e:9f:
                    cb:05:73:dc:1a:c4:8e:2d:13:4f:05:1c:db:c2:ed:
                    e9:8a:8a:ba:a3:32:40:22:b8:be:85:73:bc:f8:18:
                    9e:e1:34:73:a5:4f:fa:86:54:51:0a:de:fb:12:69:
                    6b:f6:b4:73:a7:ef:68:20:8f:15:a0:bb:21:b9:bc:
                    cd:61:52:95:ba:9f:fc:70:74:ee:42:04:6e:7b:5d:
                    df:ad:4c:a0:58:17:b9:2f:82:c2:dd:34:a5:85:9b:
                    ff:1a:f5:01:27:ee:77:56:ce:cd:40:58:5e:33:38:
                    ca:ff:69:53:f0:91:28:f0:57:d2:f1:f6:2a:fd:f3:
                    3a:cd:24:78:68:4e:a9:c8:61:5f:6e:0a:67:ed:0e:
                    63:cb:fa:93:ad:0c:e4:a7:bc:97:60:5c:76:6e:03:
                    37:64:4c:c4:a2:0b:c4:89:e1:f6:f0:b5:db:95:2c:
                    c9:ac:f4:47:ca:4e:f2:3c:4e:d1:8b:a2:4d:e2:53:
                    57:10:d7:58:c2:36:4e:bc:d0:fc:51:f7:e9:15:33:
                    38:9c:26:71:89:9e:2e:ad:52:52:a2:9f:85:71:cf:
                    cb:7a:79:28:91:d7:3d:40:6a:22:57:0e:a9:ab:1a:
                    cc:73:4e:ca:a2:8a:5b:ff:11:64:f0:46:04:e4:94:
                    46:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:46:9C:A0:A4:A4:72:75:E2:4F:45:21:A8:86:E4:3F:27:3E:5F:13
            X509v3 Authority Key Identifier:
                keyid:61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:b8:b5:92:cc:86:ea:8d:dc:c0:09:03:cf:08:86:98:d2:
         92:8e:89:14:4c:19:c6:84:2b:46:70:4a:92:5d:f0:1f:3a:a8:
         1b:44:21:a3:78:a7:07:2c:39:3d:69:6d:f3:e6:a1:68:e3:dc:
         e6:86:4c:33:3f:a8:6f:bf:7f:93:eb:10:c8:c1:3a:46:2c:64:
         59:30:43:24:e9:1d:e9:28:5b:59:e3:a3:3c:5b:ef:b4:76:95:
         fa:bf:e3:29:a0:3c:e9:f0:bb:0f:1b:36:71:b6:30:0b:86:1b:
         9d:83:9e:0d:f2:8f:35:82:51:26:6e:ab:f4:13:5f:b3:8d:bb:
         0b:b5:62:09:f5:49:79:83:7e:80:18:b1:54:f5:74:a4:15:bd:
         61:4c:26:e5:17:dd:82:86:8d:30:5d:43:31:d9:42:4b:a6:eb:
         e8:30:4e:73:85:b9:f8:43:24:cc:02:20:1c:16:2c:d0:39:96:
         92:cf:4a:90:48:1a:b3:cf:b7:6e:ad:75:55:b7:19:fe:39:22:
         38:84:cd:28:c6:03:88:e7:c1:b7:e3:f6:47:29:de:69:70:d5:
         0a:e6:5a:cc:2f:19:21:42:c2:c9:95:67:54:02:91:00:16:bb:
         48:e3:6e:19:e6:84:1e:3e:f6:45:77:6e:e8:83:d5:a2:aa:aa:
         c0:9f:ff:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUzQzAxMTAvBgNVBAUTKDYxRkE3MDg2ODExQ0IwM0ZDQjk0QzMxNkNGRUVBRDg4
OUE4NTI3RjcwHhcNMjYxMDIzMDgxMzE1WhcNMjYxMDMwMDgxMzE1WjAYMRYwFAYD
VQQDEw02YWRiMTcxYy03NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMt7qswuHZCDAUzBnp/LBXPcGsSOLRNPBRzbwu3pioq6ozJAIri+hXO8+Bie
4TRzpU/6hlRRCt77Emlr9rRzp+9oII8VoLshubzNYVKVup/8cHTuQgRue13frUyg
WBe5L4LC3TSlhZv/GvUBJ+53Vs7NQFheMzjK/2lT8JEo8FfS8fYq/fM6zSR4aE6p
yGFfbgpn7Q5jy/qTrQzkp7yXYFx2bgM3ZEzEogvEieH28LXblSzJrPRHyk7yPE7R
i6JN4lNXENdYwjZOvND8UffpFTM4nCZxiZ4urVJSop+Fcc/Lenkokdc9QGoiVw6p
qxrMc07Koopb/xFk8EYE5JRGvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJGnKCk
pHJ14k9FIaiG5D8nPl8TMB8GA1UdIwQYMBaAFGH6cIaBHLA/y5TDFs/urYiahSf3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTNDMC9CNTczQjRFMDAx
QjExMUYxOUMxRTQyQzE2QjZGNTZCQy9ZZnB3aG9FY3NEX0xsTU1Xei02dGlKcUZK
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1lmcHdob0Vjc0RfTGxNTVd6LTZ0aUpxRkpfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTNDMC9CNTczQjRFMDAxQjExMUYxOUMxRTQyQzE2QjZGNTZCQy9ZZnB3aG9FY3NE
X0xsTU1Xei02dGlKcUZKX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeyS4tZLMhuqN3MAJA88IhpjSko6JFEwZxoQrRnBKkl3wHzqoG0Qho3inByw5
PWlt8+ahaOPc5oZMMz+ob79/k+sQyME6RixkWTBDJOkd6ShbWeOjPFvvtHaV+r/j
KaA86fC7Dxs2cbYwC4YbnYOeDfKPNYJRJm6r9BNfs427C7ViCfVJeYN+gBixVPV0
pBW9YUwm5RfdgoaNMF1DMdlCS6br6DBOc4W5+EMkzAIgHBYs0DmWks9KkEgas8+3
bq11VbcZ/jkiOITNKMYDiOfBt+P2RyneaXDVCuZazC8ZIULCyZVnVAKRABa7SONu
GeaEHj72RXdu6IPVoqqqwJ//tw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:30:22 2026 by rpki-client