Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
File:                     rYQ8jfSRtv8A6PnztRksOZYqSM8.mft (raw, json)
Hash identifier:          h+kRrJYb7RVuNXtAS3/3oX5lCKVrMTywr2wPQVevRlU=
Subject key identifier:   85:1B:FF:38:7A:32:22:0A:9E:F2:85:84:57:5C:E1:CC:C3:5E:77:1F
Authority key identifier: AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF
Certificate issuer:       /CN=A911583F/serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
Manifest number:          25
Signing time:             Sun 11 Oct 2026 09:29:55 +0000
Manifest this update:     Sun 11 Oct 2026 09:29:54 +0000
Manifest next update:     Sun 18 Oct 2026 09:29:54 +0000
Files and hashes:         1: rYQ8jfSRtv8A6PnztRksOZYqSM8.crl (hash: d+2IsZSZxapeG+8QZrnCjBnn32eLG17eJy9UDFrsEzc=)
                          2: 72D413B290EC11F1A202C1754A11F970.roa (hash: Arcy6owVvYDgskgZwg06kTzf4YUjIwfvXCvbOmqa3OQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl
                          rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911583F, serialNumber=AD843C8DF491B6FF00E8F9F3B5192C39962A48CF
        Validity
            Not Before: Oct 11 09:29:54 2026 GMT
            Not After : Oct 18 09:29:54 2026 GMT
        Subject: CN=6acb5712-70f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:52:98:a0:86:65:75:e1:54:b9:e8:74:a1:
                    d6:42:20:b9:43:4a:37:59:c5:5a:3c:e0:d6:49:99:
                    d0:38:44:f0:e6:87:7d:e1:51:28:22:57:d4:ac:25:
                    ad:35:74:cd:46:39:b8:f0:d2:08:98:8d:5e:3c:3f:
                    38:e6:34:ca:3f:df:ba:9f:f8:c2:e2:22:36:6c:f9:
                    cc:35:f4:36:21:f4:f5:82:91:84:03:23:02:2c:4a:
                    c0:b6:c1:90:9c:30:2c:66:05:7d:3b:d1:9d:38:bc:
                    1e:ec:0f:7a:19:c4:b9:86:6d:29:4a:f0:95:42:51:
                    26:86:36:2a:22:58:bf:c5:85:bc:ff:45:97:7b:2e:
                    6e:46:57:0c:c2:e4:f6:0d:42:ca:a1:eb:6c:5c:58:
                    18:64:92:7a:c1:97:15:f8:7d:72:1a:16:ce:af:a5:
                    f4:f7:f9:f6:3f:b2:75:f2:37:6c:f0:09:9f:2a:f0:
                    b2:2d:8b:05:48:71:36:42:d2:9c:b1:6c:41:51:e0:
                    12:96:67:51:33:6d:14:6f:c0:8c:23:6d:36:71:30:
                    9f:dc:83:73:e0:67:0f:7e:28:4f:3b:77:b1:0e:c4:
                    0f:7c:d3:c1:d5:38:8a:71:43:bd:d1:eb:dc:a2:ee:
                    78:e9:10:18:f0:f7:d5:9b:18:af:45:a0:56:20:e5:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1B:FF:38:7A:32:22:0A:9E:F2:85:84:57:5C:E1:CC:C3:5E:77:1F
            X509v3 Authority Key Identifier:
                keyid:AD:84:3C:8D:F4:91:B6:FF:00:E8:F9:F3:B5:19:2C:39:96:2A:48:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rYQ8jfSRtv8A6PnztRksOZYqSM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911583F/6987730E90EB11F195245C824911F970/rYQ8jfSRtv8A6PnztRksOZYqSM8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e3:23:3b:51:64:65:5c:39:d7:0e:91:76:2d:0c:ce:18:c0:
         f1:4c:2d:3c:2f:a7:82:90:df:bc:af:f7:2d:99:48:65:cf:6f:
         c1:11:01:fc:f5:20:0b:32:1c:0b:31:ba:93:0f:62:e6:de:c2:
         be:d4:a4:a9:25:84:28:a4:73:a6:83:02:61:59:90:c7:44:a7:
         19:36:7e:30:88:0d:77:1d:97:2c:20:04:ae:a1:25:c5:cb:0d:
         ec:40:b1:2c:3c:47:73:cb:73:9b:1e:cd:de:a2:ff:f1:d8:f6:
         26:9d:ff:09:51:bf:0c:f5:4e:da:53:05:42:91:a5:02:03:c2:
         19:50:8c:63:b8:72:1f:38:2e:0e:4e:f6:ef:2e:66:d0:f3:f7:
         9f:1c:59:fe:8c:27:88:3d:0d:90:d6:60:7a:5d:49:20:ce:c8:
         fc:01:53:93:37:86:83:8b:19:52:2f:5c:b9:41:eb:85:76:61:
         b1:ee:4a:a7:30:33:ad:37:e2:76:42:69:d0:2c:49:d5:36:30:
         d8:95:0d:4a:01:12:fd:4d:6e:a0:c6:2d:07:e2:b5:c6:a8:bd:
         da:27:8b:b2:a7:1d:8e:db:38:16:43:ff:6b:99:d3:dc:62:b7:
         b9:31:30:17:8a:46:bd:9a:16:9b:39:d1:8f:22:b1:79:26:9a:
         3d:2d:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:48:51 2026 by rpki-client