Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/8W1SLofLHiws345X8t4ouNvTHpg.mft
File:                     8W1SLofLHiws345X8t4ouNvTHpg.mft (raw, json)
Hash identifier:          vXs4tzsebBNGHHmICYLhNeBUQ41Ah81136rDqXfIPi0=
Subject key identifier:   FD:0F:B6:10:D1:8B:4E:67:2C:DF:89:EE:B8:D6:3E:D4:33:5E:32:AA
Authority key identifier: F1:6D:52:2E:87:CB:1E:2C:2C:DF:8E:57:F2:DE:28:B8:DB:D3:1E:98
Certificate issuer:       /CN=A919A8DA/serialNumber=F16D522E87CB1E2C2CDF8E57F2DE28B8DBD31E98
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W1SLofLHiws345X8t4ouNvTHpg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/8W1SLofLHiws345X8t4ouNvTHpg.mft
Manifest number:          04
Signing time:             Mon 05 Oct 2026 09:46:48 +0000
Manifest this update:     Mon 05 Oct 2026 09:46:47 +0000
Manifest next update:     Mon 12 Oct 2026 09:46:47 +0000
Files and hashes:         1: 8W1SLofLHiws345X8t4ouNvTHpg.crl (hash: 5ezgX5fxBYPHV+vRfZO0TQwInMxUH8WRpgLnYXiH168=)
                          2: EC375FE2BDFC11F19D1840375011F970.roa (hash: ojIde5t9f+XU6bADI4ErDKUmz7DbHGtcIB4yBy5KvV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/8W1SLofLHiws345X8t4ouNvTHpg.crl
                          rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/8W1SLofLHiws345X8t4ouNvTHpg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W1SLofLHiws345X8t4ouNvTHpg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A8DA, serialNumber=F16D522E87CB1E2C2CDF8E57F2DE28B8DBD31E98
        Validity
            Not Before: Oct  5 09:46:47 2026 GMT
            Not After : Oct 12 09:46:47 2026 GMT
        Subject: CN=6ac37208-d46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b6:1c:9b:e9:d7:14:b6:d2:d0:a3:77:6d:7f:
                    6b:98:6f:8a:98:43:56:28:12:bc:29:e8:3d:36:a4:
                    2c:2e:a6:50:73:4f:82:24:74:de:a7:11:5f:96:92:
                    69:06:f1:61:20:b9:f2:17:4a:b0:e7:ed:f0:2d:d9:
                    94:9b:6e:08:99:34:65:56:d3:75:07:21:05:e0:76:
                    35:19:3d:4d:21:bd:ed:a0:93:c4:03:5d:57:88:37:
                    af:20:1a:24:f8:04:10:c1:e0:84:b4:9a:22:dd:59:
                    9b:38:c8:52:a7:83:fb:99:f7:ac:bb:d5:c8:ac:fe:
                    16:f3:84:72:d7:b3:58:ad:28:e5:8f:8d:cd:26:bf:
                    12:d6:35:74:1f:18:43:7f:14:bd:65:8f:9c:35:47:
                    60:28:33:a2:41:0a:9c:b8:96:c1:eb:24:c0:b8:43:
                    54:29:9b:6b:a2:3d:41:1b:a7:9b:d6:bc:57:9d:e5:
                    4b:97:41:76:46:c7:82:bc:e3:b9:2b:26:35:bd:51:
                    bf:9d:57:f7:16:f7:b9:f8:fc:a2:9f:33:22:d5:f6:
                    cb:c0:a2:f6:ca:ac:ce:0d:b6:1d:ce:51:ea:9b:71:
                    37:84:f0:ae:01:dc:25:7b:5f:07:17:70:70:52:49:
                    f8:c9:9e:1e:84:96:67:53:06:c6:a4:f2:26:d8:ad:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0F:B6:10:D1:8B:4E:67:2C:DF:89:EE:B8:D6:3E:D4:33:5E:32:AA
            X509v3 Authority Key Identifier:
                keyid:F1:6D:52:2E:87:CB:1E:2C:2C:DF:8E:57:F2:DE:28:B8:DB:D3:1E:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/8W1SLofLHiws345X8t4ouNvTHpg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W1SLofLHiws345X8t4ouNvTHpg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/8W1SLofLHiws345X8t4ouNvTHpg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:6f:cc:d1:66:f2:4f:d9:39:34:76:d8:2f:ea:ec:a2:89:88:
         c5:7a:3d:07:cf:b8:c3:c7:7f:ea:21:cc:46:39:cd:96:d3:7f:
         c0:16:04:05:bf:b3:00:9a:e6:a5:e9:cf:00:4b:85:56:14:09:
         79:89:3a:2d:68:d8:51:dd:e1:d4:fe:d9:77:23:ad:ef:d0:3c:
         20:1f:7a:5f:cc:b9:4f:d8:b8:1b:0f:59:91:57:8f:b1:69:79:
         05:fa:00:62:0a:f4:c8:0b:ab:75:86:68:a4:71:76:88:95:3a:
         86:55:f2:4c:85:b7:0b:31:6d:30:c2:ec:b0:2f:63:ca:5f:92:
         90:11:4d:11:6f:e8:73:14:0f:42:6f:0f:e3:0e:19:65:1c:23:
         93:ae:df:2c:ff:ad:26:05:57:d1:40:6b:0c:f4:0c:2e:03:52:
         18:36:c9:b1:a2:72:40:ae:9d:de:f5:77:bc:c5:5d:fd:62:b8:
         fa:1e:0a:62:cb:54:4c:41:27:86:3f:96:2b:7a:2a:13:cb:b1:
         aa:c7:58:58:eb:f1:e1:1e:29:90:06:23:77:a8:dd:11:c3:39:
         5e:21:74:9a:30:65:bf:5a:9e:b9:1d:39:41:4c:3f:6c:aa:97:
         2d:a1:42:4b:36:04:25:cc:8d:25:87:05:f4:d1:f1:36:0e:05:
         95:c0:50:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:43:44 2026 by rpki-client