Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
File:                     8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json)
Hash identifier:          pDB78n2b/UbPyBzPL5j1Lxssp5ei3WO/hA2gj9XMLsM=
Subject key identifier:   1D:C3:EC:1A:A1:D3:BE:F6:C4:DC:64:32:8A:E4:D3:D3:86:F3:70:B3
Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F
Certificate issuer:       /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
Manifest number:          B0
Signing time:             Mon 19 Oct 2026 07:47:48 +0000
Manifest this update:     Mon 19 Oct 2026 07:47:47 +0000
Manifest next update:     Mon 26 Oct 2026 07:47:47 +0000
Files and hashes:         1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: TqQbIE9M9L+qehFWRiVR0GASkiaGvdrUEHF8ZtvObWI=)
                          2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 07:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
        Validity
            Not Before: Oct 19 07:47:47 2026 GMT
            Not After : Oct 26 07:47:47 2026 GMT
        Subject: CN=6ad5cb24-7614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:f3:74:cd:d5:6f:f2:4a:ff:f1:ed:30:39:
                    b4:42:a2:c0:06:d8:8d:2c:9a:7b:75:eb:76:1d:fb:
                    d5:d5:27:4c:4b:3c:2a:ae:6a:62:7d:bc:f9:32:41:
                    34:1b:37:10:b7:6a:76:c5:8e:3f:71:cf:73:74:08:
                    8c:f7:30:8d:9e:f7:90:01:ce:51:27:34:7d:b9:51:
                    bf:f0:31:43:de:78:8c:37:b0:71:90:0a:44:64:96:
                    62:9f:41:8d:18:e5:98:83:5a:1d:5c:ed:b1:30:ee:
                    59:15:8b:67:90:ff:0e:e1:77:82:46:3d:b1:7d:53:
                    57:0b:59:1a:0a:01:95:f7:8c:04:d7:91:00:9a:9a:
                    04:23:13:eb:3e:84:52:02:86:6c:94:19:d6:72:30:
                    fa:40:0c:a7:3e:2e:0e:14:a0:48:1b:53:b3:a1:04:
                    f5:d1:93:a2:e0:ce:87:06:2c:8f:b1:5b:71:b0:8a:
                    85:64:97:08:10:9d:d5:7b:c2:5e:3d:07:aa:63:5e:
                    bb:51:1e:e5:1c:b8:c8:c5:ed:ba:53:3e:e6:de:0b:
                    31:39:58:6d:c1:df:0a:d1:92:4d:ff:8d:74:8c:49:
                    e4:ae:a3:c3:7e:e4:11:db:a0:5a:a6:f8:83:e3:72:
                    46:5b:4b:61:db:ee:da:2c:fc:98:99:81:6f:3e:d4:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C3:EC:1A:A1:D3:BE:F6:C4:DC:64:32:8A:E4:D3:D3:86:F3:70:B3
            X509v3 Authority Key Identifier:
                keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:ad:ed:5f:87:4a:7c:17:6b:c5:34:2b:93:22:f3:04:cc:
         b5:c8:4c:ed:58:c3:fc:ad:cf:c0:4e:56:e5:76:1c:c9:cc:0b:
         35:d1:c4:3d:e8:c8:8e:f1:b2:2a:b2:a2:6c:c2:0f:8d:6f:2c:
         e7:81:90:19:87:5b:23:bd:59:36:ae:61:b4:93:08:4f:d4:20:
         78:ce:0e:14:41:16:d9:3f:25:61:e0:6a:d2:bf:83:cb:d4:52:
         ab:32:27:e1:d8:2b:77:7c:cd:c1:ea:84:7c:71:d9:a1:c9:95:
         c1:66:45:62:30:05:25:52:ea:74:a3:16:10:fc:cc:5b:c7:eb:
         b4:6d:8c:fa:6c:d8:99:a6:a6:1a:2b:dc:27:b0:30:88:53:67:
         5d:10:d7:13:f8:e4:b7:93:bd:89:ea:c8:d0:b6:d1:79:d8:38:
         de:bc:cd:85:52:ae:7f:4f:51:6e:8e:aa:1e:37:55:16:03:e0:
         59:c1:3a:e6:4a:20:2c:46:9f:ef:5a:ad:96:8d:90:92:7b:07:
         aa:a2:7b:23:c9:e9:d9:19:2b:0e:fe:29:32:b8:82:3f:d4:fd:
         9d:e6:e4:11:43:34:2e:40:64:7b:62:e4:20:d0:fc:41:dd:12:
         b6:c0:07:80:5e:42:6c:40:6b:f5:f1:94:0a:28:de:16:75:17:
         4e:04:77:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:50:03 2026 by rpki-client