Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
File:                     8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json)
Hash identifier:          UCff2CuXxd+jvXHSQaeB2S4nSVRvMeACizRcXRc+JBU=
Subject key identifier:   5D:3D:09:08:A4:3E:6F:F6:6B:32:95:94:85:BA:49:17:30:69:0D:3C
Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82
Certificate issuer:       /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
Certificate serial:       021C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
Manifest number:          0216
Signing time:             Mon 19 Oct 2026 03:32:25 +0000
Manifest this update:     Mon 19 Oct 2026 03:32:24 +0000
Manifest next update:     Mon 26 Oct 2026 03:32:24 +0000
Files and hashes:         1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: QEj5uZRRZxd4AinqsAxz1nErRfBBpAZEDpGltxvbo6A=)
                          2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: PdTF8JZAzZqkYsv5aYjwZSB0/7MTqhPMOhGlyT03h9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl
                          rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 03:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540 (0x21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
        Validity
            Not Before: Oct 19 03:32:24 2026 GMT
            Not After : Oct 26 03:32:24 2026 GMT
        Subject: CN=6ad58f49-8fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:1a:8d:e7:ee:f6:20:0b:41:01:68:1c:96:
                    63:49:37:9e:df:66:14:c5:56:84:f4:60:41:d6:28:
                    11:7d:46:23:66:c9:e9:19:bc:09:8d:63:c2:e1:66:
                    72:80:6e:4f:b3:72:6b:4c:53:ea:2a:51:7d:db:97:
                    18:52:05:12:35:84:6e:0e:50:2d:46:39:8a:6d:7a:
                    ce:9e:f6:30:5d:8c:b5:3e:06:d4:ce:9c:f5:aa:ae:
                    3f:94:f1:30:39:d1:8c:a0:d9:15:90:20:18:0d:30:
                    e8:24:a4:24:1e:18:50:f0:c1:e5:f7:8b:83:42:0b:
                    39:34:e7:7e:6d:0e:00:4a:42:13:8d:52:0c:51:3c:
                    c4:55:90:f2:94:4c:7a:24:38:00:29:c8:01:9e:35:
                    4f:b5:43:9a:d9:0c:f0:8f:3f:fd:6a:0e:80:3a:3d:
                    0d:f9:35:4e:eb:eb:60:72:85:5b:4e:9f:f8:50:24:
                    b1:af:e5:fd:56:fe:26:98:f3:d5:8c:c1:1d:cb:52:
                    af:18:ba:37:63:ef:07:2b:c4:81:4e:eb:7f:de:05:
                    7d:c0:d3:a8:8e:a0:c4:81:8d:8c:d8:14:c5:86:ea:
                    40:9f:ab:ee:28:54:6a:e6:c8:f3:52:95:80:83:a4:
                    c9:70:11:4b:27:4d:a3:6c:e6:4a:50:16:55:12:e0:
                    80:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3D:09:08:A4:3E:6F:F6:6B:32:95:94:85:BA:49:17:30:69:0D:3C
            X509v3 Authority Key Identifier:
                keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:06:90:3d:b5:e7:0d:86:a6:b4:41:b1:1d:df:b7:23:ad:b6:
         9c:96:a8:75:d9:67:1d:cc:ea:87:5d:0d:7a:1f:af:43:a3:68:
         91:60:4a:37:02:62:f5:d0:1c:93:b3:11:77:90:3d:48:e3:81:
         1f:ba:b2:03:65:0a:1a:2d:f6:9b:41:f1:75:dc:03:ee:3d:31:
         be:0b:55:85:23:10:5a:89:73:9b:44:9a:75:a0:ad:4b:db:18:
         13:b7:c4:28:90:8c:23:1d:c4:4d:44:91:7f:5f:b5:0d:df:aa:
         5b:dc:5d:f0:1c:24:da:8d:f2:a3:f6:1d:fd:59:57:50:15:64:
         27:e2:c8:fe:bb:8b:9f:0e:02:46:ca:f1:bb:78:8c:c1:26:f2:
         f1:1b:d5:74:4f:2d:52:b2:63:6b:9f:ab:56:ac:35:da:df:a1:
         04:f7:3d:2e:22:72:f5:8e:ea:80:b3:08:bb:78:05:b5:4f:08:
         9b:63:c3:ab:49:74:05:a9:78:9c:b6:d1:73:bb:b5:b0:00:a3:
         74:5d:97:f2:ef:47:15:25:b6:dd:2e:fa:9d:9c:c6:e4:35:0f:
         4f:90:de:88:b9:56:c4:c6:c4:dc:4e:e0:64:14:cd:f4:4f:87:
         79:9b:71:79:48:9f:c3:12:a5:b6:e1:78:1d:c9:33:09:6a:67:
         42:ea:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:02:03 2026 by rpki-client