Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
File:                     8FIaW22wTXVvopUqDymjkSEsWLI.mft (raw, json)
Hash identifier:          SyiMTxFx7zXdt747On+rlx7BUlmbqICXHfYobsMWn4c=
Subject key identifier:   EE:8C:AB:F2:A0:17:D2:01:7F:1D:A9:79:A8:CF:32:65:B2:BD:82:E6
Authority key identifier: F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2
Certificate issuer:       /CN=A919AE6A/serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
Manifest number:          BB
Signing time:             Sun 25 Oct 2026 07:22:28 +0000
Manifest this update:     Sun 25 Oct 2026 07:22:28 +0000
Manifest next update:     Sun 01 Nov 2026 07:22:28 +0000
Files and hashes:         1: 8FIaW22wTXVvopUqDymjkSEsWLI.crl (hash: Qw2q5DR1d/aLPvCeGJYeB4/p6yZXlguokGXkj/ave9A=)
                          2: avcnNk0Svr4rdAVCP0aGwo0YLS0.asa (hash: m28mvr458ObPdJVayhq8d1ucBWQhP+gI69eSt6MlFKI=)
                          3: F8309360B31411F1836BA7DEA8EE528E.roa (hash: q2AuTnFNg9kXhKe7dFa23qHrCyJOuC7F1p8DiBKw7Gw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl
                          rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 07:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AE6A, serialNumber=F0521A5B6DB04D756FA2952A0F29A391212C58B2
        Validity
            Not Before: Oct 25 07:22:28 2026 GMT
            Not After : Nov  1 07:22:28 2026 GMT
        Subject: CN=6addae34-5190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:db:ca:8c:8e:f3:11:92:29:61:e5:40:45:
                    b1:3b:dd:92:d3:8a:b2:66:63:1a:d9:31:95:47:42:
                    48:88:2b:e5:1b:36:06:16:88:95:3a:45:a1:d7:9d:
                    81:93:13:52:9d:4f:17:8a:8c:e7:e8:c9:ce:dc:f0:
                    d1:69:03:2d:3e:f5:e8:2f:16:59:c2:a2:8b:f2:19:
                    88:f8:18:18:b4:2b:f7:da:97:6e:11:f7:41:c5:d2:
                    5c:02:92:d6:25:78:94:9e:a4:94:09:07:5b:73:9e:
                    61:2e:eb:32:a7:33:a3:fe:ed:00:7c:00:5a:5c:9a:
                    22:55:2b:0e:77:a1:69:45:84:1e:8b:47:82:a0:20:
                    e8:df:c5:eb:b0:a8:55:7f:b7:12:d4:2a:9a:a2:cb:
                    11:bc:a8:c0:fd:6d:c8:55:7e:b0:72:7a:bf:b5:2a:
                    02:79:cc:98:9c:9b:ca:66:3c:07:fd:80:d0:b6:60:
                    7d:9e:31:bc:13:7d:22:ee:69:51:cb:ee:fb:d4:ff:
                    1b:02:ef:9b:1f:44:55:58:97:cf:d6:a8:15:8f:a7:
                    74:1e:82:bb:44:fa:0b:ab:91:47:be:65:6f:53:d7:
                    5e:c0:95:ec:53:52:24:95:c7:32:ba:c1:1b:cf:94:
                    4c:89:3b:d5:bb:86:2c:3b:f7:da:e9:80:c1:68:de:
                    20:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8C:AB:F2:A0:17:D2:01:7F:1D:A9:79:A8:CF:32:65:B2:BD:82:E6
            X509v3 Authority Key Identifier:
                keyid:F0:52:1A:5B:6D:B0:4D:75:6F:A2:95:2A:0F:29:A3:91:21:2C:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8FIaW22wTXVvopUqDymjkSEsWLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AE6A/219D7D8ABC1211F0855FD87AC4F9AE02/8FIaW22wTXVvopUqDymjkSEsWLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:55:bf:92:d5:86:f6:ab:71:74:e7:61:e1:55:40:d1:44:
         5d:db:f5:a9:93:5d:3d:78:06:8f:2a:2a:d5:1d:f9:a5:7a:4a:
         a6:04:99:04:61:06:64:2b:80:eb:74:36:4a:a9:60:a2:9a:c5:
         16:b1:1a:b3:38:27:18:b0:57:35:32:ab:4f:55:de:49:51:d6:
         79:df:ea:c7:52:06:b0:a5:5d:ee:d3:96:c0:fa:4a:c4:0b:0b:
         85:f2:52:27:3b:87:f1:43:45:21:d3:6b:49:40:02:33:04:04:
         b4:5a:ba:0d:33:9c:c5:df:e2:d0:d8:b8:7e:d3:b5:92:f1:39:
         77:f4:22:92:20:44:5d:7a:98:e5:a7:b8:b2:b6:8f:53:21:34:
         17:af:2b:94:c3:90:83:1e:77:36:91:96:4d:16:bf:40:65:27:
         4c:ad:8f:d2:a3:ea:dd:24:05:98:f7:24:e4:b9:9b:da:2c:16:
         02:12:0d:b7:cc:19:5c:a9:79:e1:b1:68:a4:1d:73:fb:05:5e:
         a9:0a:1d:6a:0e:40:9f:a3:5a:0d:88:69:5d:d6:58:18:db:9d:
         72:1f:69:b0:14:9d:20:24:23:45:09:15:a0:fa:d6:a0:66:82:
         53:76:d4:2e:1f:c3:8b:0a:73:a4:da:5f:a4:63:a8:59:d2:97:
         9e:59:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:50:58 2026 by rpki-client