Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
File:                     tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json)
Hash identifier:          kl5qSjtbOpkMnw6WD4Ty9GXjm4bug7sCMsYqAKT2yVs=
Subject key identifier:   9E:6B:43:D8:43:6F:A8:D4:3A:4B:D6:D3:47:57:AC:C1:B9:36:05:C0
Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30
Certificate issuer:       /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
Certificate serial:       0F13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
Manifest number:          0EF7
Signing time:             Tue 06 Oct 2026 17:45:57 +0000
Manifest this update:     Tue 06 Oct 2026 17:45:56 +0000
Manifest next update:     Tue 13 Oct 2026 17:45:56 +0000
Files and hashes:         1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: NR0bsXO6vJKz71BSwPsFVBDJYBtgOkFym8KFBW3Qqlw=)
                          2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: vvgoFlOLUvNpwk59Pxo0XUWthaxoz+rQXYsEb/78o8o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl
                          rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3859 (0xf13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530
        Validity
            Not Before: Oct  6 17:45:56 2026 GMT
            Not After : Oct 13 17:45:56 2026 GMT
        Subject: CN=6ac533d5-0548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3f:02:83:ef:41:aa:ce:04:67:d7:94:47:5c:
                    75:4f:6a:de:11:90:42:bd:fb:77:04:b7:b2:77:24:
                    20:47:46:dd:ab:3c:ea:7c:64:ad:a6:cb:e9:8b:fd:
                    5f:9e:63:18:16:97:1a:83:cb:8b:19:17:df:7c:5e:
                    8a:6e:9f:af:fe:1e:c3:8f:e0:f2:73:fc:81:0e:d5:
                    b4:62:89:d0:fc:41:a4:53:ee:98:04:53:71:ad:c0:
                    0d:dd:cf:ea:c8:38:3b:88:f9:3e:d6:2a:54:36:8d:
                    d9:c8:0e:e4:1c:d9:7a:d1:f0:28:d6:8c:ab:34:a5:
                    84:4f:c4:c7:56:71:8b:0c:61:68:f2:01:88:c0:35:
                    f7:86:91:95:f5:74:9a:15:2a:05:1a:72:6f:26:6b:
                    2a:ac:99:8f:ce:5f:46:d5:85:1c:7a:6a:25:a1:5c:
                    00:0e:99:d3:c7:25:59:0f:cb:76:ea:e3:a5:0d:27:
                    97:25:6c:1d:a4:c5:79:c5:51:44:7b:68:2f:07:0e:
                    d4:98:91:f1:1f:86:92:94:b2:a6:6c:29:dd:5c:59:
                    b2:55:11:69:8b:c9:79:1d:84:66:63:9a:9e:a8:46:
                    06:eb:b2:8a:5e:84:63:0d:8c:b8:f3:c9:73:92:97:
                    01:e2:99:a7:88:1a:dd:b7:3e:ba:39:a5:77:94:81:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6B:43:D8:43:6F:A8:D4:3A:4B:D6:D3:47:57:AC:C1:B9:36:05:C0
            X509v3 Authority Key Identifier:
                keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:30:26:d5:56:4b:5f:36:e8:e6:ec:37:11:73:15:21:02:93:
         2f:33:fe:8a:c6:ea:8d:16:67:a8:1d:4d:90:e9:e3:03:f5:ed:
         9f:f6:81:47:99:60:f5:82:da:d7:f6:98:d5:c2:ff:10:71:5e:
         e0:fb:29:6d:8b:df:a0:b0:1f:61:1b:d3:40:22:58:da:ea:e7:
         f2:be:7f:a0:aa:e6:8a:d9:db:e3:93:36:4f:2d:24:ee:36:60:
         a4:4c:9f:7a:ff:86:f4:fd:88:3d:0e:55:15:6e:98:48:5b:19:
         dc:f0:2a:d9:52:d6:a1:c8:e3:b2:f4:e7:a8:df:23:ec:51:16:
         75:cc:b2:90:36:45:ac:a1:ee:c6:2a:86:fc:f8:ab:7b:43:c3:
         58:23:79:ef:ec:84:8e:7d:d5:35:f6:06:80:ea:3a:33:69:10:
         10:7c:d1:eb:c5:f9:d5:e9:c8:18:fe:f5:46:29:ae:e4:ec:f3:
         7c:cc:a6:93:1a:e7:c0:22:11:da:d1:f1:d3:99:55:43:cb:61:
         2d:cc:4d:ef:bb:33:69:bb:50:46:9b:76:4d:1c:42:9f:c1:19:
         8e:0c:bb:6e:ae:65:8f:48:e5:45:37:96:c7:1e:8a:e1:bf:69:
         68:c3:28:5e:f2:97:94:b8:72:f7:99:ba:37:d7:01:73:98:ae:
         de:4a:3b:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF
MEY0MDU1MzAwHhcNMjYxMDA2MTc0NTU2WhcNMjYxMDEzMTc0NTU2WjAYMRYwFAYD
VQQDEw02YWM1MzNkNS0wNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4D8Cg+9Bqs4EZ9eUR1x1T2reEZBCvft3BLeydyQgR0bdqzzqfGStpsvpi/1f
nmMYFpcag8uLGRfffF6Kbp+v/h7Dj+Dyc/yBDtW0YonQ/EGkU+6YBFNxrcAN3c/q
yDg7iPk+1ipUNo3ZyA7kHNl60fAo1oyrNKWET8THVnGLDGFo8gGIwDX3hpGV9XSa
FSoFGnJvJmsqrJmPzl9G1YUcemoloVwADpnTxyVZD8t26uOlDSeXJWwdpMV5xVFE
e2gvBw7UmJHxH4aSlLKmbCndXFmyVRFpi8l5HYRmY5qeqEYG67KKXoRjDYy488lz
kpcB4pmniBrdtz66OaV3lIHThQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5rQ9hD
b6jUOkvW00dXrMG5NgXAMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1
ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW
VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt
OVBqWTZFTzkxb3pnOUFWVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJDAm1VZLXzbo5uw3EXMVIQKTLzP+isbqjRZnqB1NkOnjA/Xtn/aBR5lg9YLa
1/aY1cL/EHFe4PspbYvfoLAfYRvTQCJY2urn8r5/oKrmitnb45M2Ty0k7jZgpEyf
ev+G9P2IPQ5VFW6YSFsZ3PAq2VLWocjjsvTnqN8j7FEWdcyykDZFrKHuxiqG/Pir
e0PDWCN57+yEjn3VNfYGgOo6M2kQEHzR68X51enIGP71Rimu5OzzfMymkxrnwCIR
2tHx05lVQ8thLcxN77szabtQRpt2TRxCn8EZjgy7bq5lj0jlRTeWxx6K4b9paMMo
XvKXlLhy95m6N9cBc5iu3ko7NQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:59:38 2026 by rpki-client