Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
File:                     0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json)
Hash identifier:          YGN0pcgWFS94PIRh0hU4xPUKRRg9Bq5SvU5YOH4lZZ8=
Subject key identifier:   DB:67:CE:26:A4:C4:D0:C2:02:B5:24:3C:04:7C:40:27:25:D9:F6:0C
Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08
Certificate issuer:       /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
Manifest number:          02CA
Signing time:             Mon 19 Oct 2026 01:48:55 +0000
Manifest this update:     Mon 19 Oct 2026 01:48:54 +0000
Manifest next update:     Mon 26 Oct 2026 01:48:54 +0000
Files and hashes:         1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: ehyyhz4LPW71ljenyG1jnf9NomY1tQ/2MJhyUMyY06g=)
                          2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: kbZVkD6jRKFqNBUgIZMNtq7Y+KDfzPzcA1djWWgpFT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl
                          rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 01:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908
        Validity
            Not Before: Oct 19 01:48:54 2026 GMT
            Not After : Oct 26 01:48:54 2026 GMT
        Subject: CN=6ad57706-0d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:16:21:bf:9f:52:ce:dd:4a:21:06:55:37:
                    23:3b:67:ad:2a:53:26:d4:76:0e:4f:b8:57:04:ae:
                    f2:6b:75:a1:a7:ed:a9:37:3c:ca:9c:04:bc:70:fa:
                    b6:33:eb:ee:08:36:0c:bd:17:32:40:df:63:6e:63:
                    a5:e5:3e:b1:64:ac:a7:85:fd:d0:9e:df:d0:53:7a:
                    96:fd:d4:7e:06:82:54:cc:f0:a4:81:40:17:59:72:
                    11:5e:79:08:9f:4d:e0:5f:4c:cf:c2:39:0d:b9:56:
                    f6:e6:df:f6:60:0d:3f:c3:c3:a9:a7:52:d3:ff:c9:
                    c4:7a:5f:aa:11:65:6c:79:1a:36:5c:2e:6b:32:c8:
                    3c:bc:03:82:2d:3e:18:26:02:23:fc:68:25:30:07:
                    71:c9:3a:f1:7b:c1:e3:32:b2:27:2c:9f:a8:86:11:
                    7e:56:89:cd:b3:b4:58:b5:99:0f:dd:02:d9:0a:2f:
                    f5:00:35:10:ef:c6:99:f0:89:40:bd:3f:12:37:03:
                    79:a2:42:bd:92:0d:8e:e0:9b:5d:a1:a9:16:c7:a3:
                    fc:e5:1f:c1:57:37:15:5a:c0:80:7c:4a:ef:3a:ab:
                    1d:e3:f5:87:72:b2:45:9a:7a:8b:ee:79:d9:28:78:
                    c6:7f:6e:51:a1:ca:57:ba:47:76:8a:6e:e9:89:6d:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:67:CE:26:A4:C4:D0:C2:02:B5:24:3C:04:7C:40:27:25:D9:F6:0C
            X509v3 Authority Key Identifier:
                keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e3:95:04:ac:d0:8e:ad:14:27:68:c3:48:e8:fd:a6:95:2f:
         41:d0:93:29:8f:f3:fd:50:6f:5b:62:df:fd:d9:b6:5b:c1:a4:
         c9:97:bb:a1:47:b7:68:79:23:cb:7e:e0:a7:49:ad:ea:45:b4:
         c4:59:0f:ba:b1:04:ff:53:be:71:6e:3a:13:17:5d:4d:e0:91:
         ce:b9:de:1a:80:21:e5:65:e7:71:a6:1a:ea:ca:8a:a3:8f:8c:
         0b:a8:fc:2e:f6:53:d9:ba:c8:f9:6d:36:ac:2f:02:95:dd:19:
         b7:1e:7a:f4:35:cc:1f:ee:65:ca:e9:2d:30:3e:94:2c:ad:3d:
         e0:78:61:dd:87:b1:c7:36:b0:0a:a1:67:e9:a2:b4:92:60:93:
         e8:d7:28:d1:e9:3b:09:33:1f:f2:1e:e2:6e:08:30:24:b0:0f:
         1e:58:2a:48:cf:38:4a:db:b4:61:17:7f:98:1c:c1:4e:42:17:
         d8:2a:9d:1e:99:84:e8:b5:f5:12:3f:ca:d2:bb:1f:69:3b:b4:
         68:d7:4a:57:4e:ea:28:f4:41:58:a7:78:65:db:a1:7b:7f:18:
         04:c3:5c:d8:01:b7:87:31:30:d0:a8:42:6c:17:7a:22:8a:81:
         c3:f0:9b:b0:c4:67:59:89:0f:4d:77:b8:d3:c3:3d:a1:bd:a2:
         32:b3:3c:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3
RjA5N0M5MDgwHhcNMjYxMDE5MDE0ODU0WhcNMjYxMDI2MDE0ODU0WjAYMRYwFAYD
VQQDEw02YWQ1NzcwNi0wZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqswWIb+fUs7dSiEGVTcjO2etKlMm1HYOT7hXBK7ya3Whp+2pNzzKnAS8cPq2
M+vuCDYMvRcyQN9jbmOl5T6xZKynhf3Qnt/QU3qW/dR+BoJUzPCkgUAXWXIRXnkI
n03gX0zPwjkNuVb25t/2YA0/w8Opp1LT/8nEel+qEWVseRo2XC5rMsg8vAOCLT4Y
JgIj/GglMAdxyTrxe8HjMrInLJ+ohhF+VonNs7RYtZkP3QLZCi/1ADUQ78aZ8IlA
vT8SNwN5okK9kg2O4JtdoakWx6P85R/BVzcVWsCAfErvOqsd4/WHcrJFmnqL7nnZ
KHjGf25RocpXukd2im7piW2M+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNtnziak
xNDCArUkPAR8QCcl2fYMMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx
RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5
UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv
OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+OVBKzQjq0UJ2jDSOj9ppUvQdCTKY/z/VBvW2Lf/dm2W8GkyZe7oUe3aHkj
y37gp0mt6kW0xFkPurEE/1O+cW46ExddTeCRzrneGoAh5WXncaYa6sqKo4+MC6j8
LvZT2brI+W02rC8Cld0Ztx569DXMH+5lyuktMD6ULK094Hhh3YexxzawCqFn6aK0
kmCT6Nco0ek7CTMf8h7ibggwJLAPHlgqSM84Stu0YRd/mBzBTkIX2CqdHpmE6LX1
Ej/K0rsfaTu0aNdKV07qKPRBWKd4Zduhe38YBMNc2AG3hzEw0KhCbBd6IoqBw/Cb
sMRnWYkPTXe408M9ob2iMrM8BQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:04:52 2026 by rpki-client