Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
File:                     F11CAiv1C9bCDzCxxa2MlOCFvE4.mft (raw, json)
Hash identifier:          NZhm21eOpDzJKqL7PK5DWk9hNWZaY3cj3BZ/2vxA6x4=
Subject key identifier:   49:A0:1C:C6:83:3D:3D:5C:6C:20:8E:5B:09:21:1D:CD:B1:A8:C9:D0
Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
Certificate issuer:       /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
Manifest number:          018D
Signing time:             Fri 09 Oct 2026 05:10:19 +0000
Manifest this update:     Fri 09 Oct 2026 05:10:18 +0000
Manifest next update:     Fri 16 Oct 2026 05:10:18 +0000
Files and hashes:         1: F11CAiv1C9bCDzCxxa2MlOCFvE4.crl (hash: k4lRp5yXRIDKHIvrOvtYvGqLOJQ+77cIxQLKCMFb2xM=)
                          2: A18C777C6F5F11EFAF849B28C4F9AE02.roa (hash: CxBnP1Bhuzv2L8lPanx//qf8e43DGUku1GVxqwR+LTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
                          rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 05:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
        Validity
            Not Before: Oct  9 05:10:18 2026 GMT
            Not After : Oct 16 05:10:18 2026 GMT
        Subject: CN=6ac8773b-7b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:78:45:a7:9a:93:27:99:3e:04:e2:6b:92:
                    91:2d:4f:7d:03:dd:9b:f4:cd:40:90:36:01:f3:e0:
                    f2:e1:bf:d0:c3:e2:2d:fc:d2:c3:bd:87:0b:b9:68:
                    71:d2:4e:a7:8a:f9:68:69:e8:59:0f:09:79:aa:be:
                    9b:ea:ce:77:76:cc:05:f7:46:b0:ee:26:13:f6:85:
                    b7:64:25:15:60:44:bd:af:dd:dc:90:79:71:34:fd:
                    da:cd:9e:5a:4f:f4:80:b9:49:d2:2d:3f:9a:d7:a3:
                    9e:30:c5:ca:13:92:03:10:63:38:21:66:44:2c:99:
                    66:b7:f1:46:22:e9:f2:cc:6c:74:72:cc:a7:4c:bc:
                    e3:fc:d1:ff:e7:67:03:ba:d9:0c:60:3b:84:3c:01:
                    f0:07:bd:15:c1:8a:04:f9:b7:2e:1f:72:1c:6e:b1:
                    46:83:4c:ea:37:3c:33:eb:67:0c:3f:fc:44:c0:49:
                    0a:6e:20:37:cd:a5:08:a4:b3:5f:6b:13:81:14:15:
                    1d:27:ec:86:24:e4:e3:db:69:6d:cd:0c:2e:5f:5d:
                    9c:0b:2f:ca:57:9d:04:a9:e3:96:87:bb:40:fb:8e:
                    03:8a:aa:b1:14:b4:12:5c:05:96:0e:ed:a4:f7:6d:
                    90:4f:c7:c1:3d:67:f3:86:df:6e:a7:c3:ca:f6:25:
                    c0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A0:1C:C6:83:3D:3D:5C:6C:20:8E:5B:09:21:1D:CD:B1:A8:C9:D0
            X509v3 Authority Key Identifier:
                keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:04:d9:64:f5:2f:cb:94:9f:79:56:92:f3:0c:a3:56:20:4d:
         9b:2a:65:02:59:17:39:4c:f3:c7:13:46:84:51:0f:5d:10:c1:
         11:a5:fe:c5:84:b5:88:17:fe:8c:14:08:0f:2e:af:c6:9f:b6:
         6e:1e:5a:49:f8:48:9f:59:da:f4:0c:81:f7:32:c8:cd:46:6f:
         1f:21:1d:82:95:19:7f:15:5c:7a:75:17:c9:e3:64:7d:07:01:
         39:b1:91:eb:e6:02:65:15:6b:9e:7c:53:00:12:9d:a1:08:fe:
         15:f7:c1:fa:ef:80:f5:79:91:3a:47:05:42:8d:ce:fa:e7:df:
         93:96:aa:7e:91:49:89:31:c2:69:a0:90:0d:9c:6e:5c:ba:11:
         ca:65:f4:3d:9e:62:d0:a9:6b:49:1e:4e:13:ff:40:3a:0d:9f:
         0b:bf:e6:ac:dc:8f:1d:93:be:55:51:e8:c6:7d:a6:e5:a9:23:
         ca:6e:00:77:66:ec:4a:18:b8:96:63:0f:5e:79:47:f1:2b:bc:
         3e:2f:ce:86:e8:9d:01:3a:43:9b:f4:38:ec:14:3a:66:b8:48:
         35:b6:4f:19:90:2c:32:1a:6c:66:09:e9:53:4a:80:83:6b:f9:
         ed:e9:89:49:35:c7:8d:02:4d:81:8c:6a:f0:ce:75:b0:75:e3:
         61:33:2f:ee
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5RDkxMTAvBgNVBAUTKDE3NUQ0MjAyMkJGNTBCRDZDMjBGMzBCMUM1QUQ4Qzk0
RTA4NUJDNEUwHhcNMjYxMDA5MDUxMDE4WhcNMjYxMDE2MDUxMDE4WjAYMRYwFAYD
VQQDEw02YWM4NzczYi03YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApQ54RaeakyeZPgTia5KRLU99A92b9M1AkDYB8+Dy4b/Qw+It/NLDvYcLuWhx
0k6nivloaehZDwl5qr6b6s53dswF90aw7iYT9oW3ZCUVYES9r93ckHlxNP3azZ5a
T/SAuUnSLT+a16OeMMXKE5IDEGM4IWZELJlmt/FGIunyzGx0csynTLzj/NH/52cD
utkMYDuEPAHwB70VwYoE+bcuH3IcbrFGg0zqNzwz62cMP/xEwEkKbiA3zaUIpLNf
axOBFBUdJ+yGJOTj22ltzQwuX12cCy/KV50EqeOWh7tA+44DiqqxFLQSXAWWDu2k
922QT8fBPWfzht9up8PK9iXAJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmgHMaD
PT1cbCCOWwkhHc2xqMnQMB8GA1UdIwQYMBaAFBddQgIr9QvWwg8wscWtjJTghbxO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlEOS9FQUJGRUJGMjZG
NUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5YkNEekN4eGEyTWxPQ0Z2
RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0YxMUNBaXYxQzliQ0R6Q3h4YTJNbE9DRnZFNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODlEOS9FQUJGRUJGMjZGNUMxMUVGODM1QTdCNjZDNEY5QUUwMi9GMTFDQWl2MUM5
YkNEekN4eGEyTWxPQ0Z2RTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhgTZZPUvy5SfeVaS8wyjViBNmyplAlkXOUzzxxNGhFEPXRDBEaX+xYS1iBf+
jBQIDy6vxp+2bh5aSfhIn1na9AyB9zLIzUZvHyEdgpUZfxVcenUXyeNkfQcBObGR
6+YCZRVrnnxTABKdoQj+FffB+u+A9XmROkcFQo3O+uffk5aqfpFJiTHCaaCQDZxu
XLoRymX0PZ5i0KlrSR5OE/9AOg2fC7/mrNyPHZO+VVHoxn2m5akjym4Ad2bsShi4
lmMPXnlH8Su8Pi/OhuidATpDm/Q47BQ6ZrhINbZPGZAsMhpsZgnpU0qAg2v57emJ
STXHjQJNgYxq8M51sHXjYTMv7g==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:36 2026 by rpki-client