Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
File:                     8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json)
Hash identifier:          wOTPfub6tkYMWZdNdv4YTzh5oJDUNVx7DJvmI0K65YM=
Subject key identifier:   F4:F9:78:EC:E9:6C:04:23:63:F2:9D:EE:FA:E9:69:D4:D4:C2:D7:47
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Certificate issuer:       /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial:       0884
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
Manifest number:          0870
Signing time:             Thu 24 Sep 2026 20:47:21 +0000
Manifest this update:     Thu 24 Sep 2026 20:47:21 +0000
Manifest next update:     Thu 01 Oct 2026 20:47:21 +0000
Files and hashes:         1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: OKB7NSXjOVBJYCEot/Yk8szwA3qb5WE+eIJwoJmYVEE=)
                          2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: bNwR09y5zMMM14ZXXZzaqooJdRynsIYvdb/mm7Q6iWE=)
                          3: 7E18ACF0C66811F084C00543C4F9AE02.roa (hash: 7XFhCYpRi5MWgMi60pgzWpPeSkzwa4nMJXrUSx4/k1M=)
                          4: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
                          rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:47:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180 (0x884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
        Validity
            Not Before: Sep 24 20:47:21 2026 GMT
            Not After : Oct  1 20:47:21 2026 GMT
        Subject: CN=6ab58c59-11bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:4d:30:dc:f0:cf:58:61:7c:49:cb:14:c2:
                    36:df:b6:5e:9d:70:ea:02:dc:43:50:d3:39:fd:33:
                    28:ca:a0:9c:83:e8:db:bc:e8:49:00:98:34:3f:8b:
                    d2:1b:c0:9c:c5:8d:ac:d5:3f:2f:79:35:e3:12:ec:
                    6f:1c:b8:87:d6:51:7a:d0:15:d7:b5:dd:7f:7d:37:
                    ff:af:0c:11:29:26:57:3a:cf:31:fb:6b:4a:66:c7:
                    74:de:5f:00:6c:e8:e2:a7:a0:37:7b:28:4b:d7:e5:
                    e7:85:4f:81:c3:12:14:c9:09:96:51:4a:9e:1c:ea:
                    9e:a2:49:ab:66:98:73:26:96:56:d2:c4:ba:15:e3:
                    c0:2c:57:de:c5:6e:0f:c4:29:3b:0f:40:52:81:eb:
                    4b:c5:54:b7:7a:0d:e8:53:a2:16:bb:8e:95:43:70:
                    6e:e0:3a:40:03:65:71:10:6c:e3:dd:88:cb:a2:ef:
                    be:6b:69:f6:93:c4:29:34:88:12:d3:47:c7:22:ad:
                    e1:33:56:00:7b:3a:93:22:42:8e:12:0d:e0:05:e2:
                    12:76:41:93:4d:76:d1:bd:4a:14:ce:e2:38:16:4b:
                    00:f7:2e:c5:27:a6:57:ce:df:5b:76:5e:16:47:ac:
                    d5:46:85:80:31:00:fc:f5:8a:34:4d:05:ca:ff:f7:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:78:EC:E9:6C:04:23:63:F2:9D:EE:FA:E9:69:D4:D4:C2:D7:47
            X509v3 Authority Key Identifier:
                keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:12:38:9b:72:2d:7f:35:56:95:2a:92:68:0a:02:43:0a:6d:
         1a:ac:a9:b8:90:46:78:4f:b4:cf:b7:99:93:a1:9c:f0:f9:ba:
         ed:9e:4a:bd:c5:91:af:f0:a8:e9:d1:ce:96:e1:50:be:93:76:
         83:41:a7:53:6f:fd:a6:0b:35:21:d4:a4:0b:05:33:75:c6:23:
         7d:4d:9e:8d:e1:dc:4e:34:f8:be:57:ae:a6:08:ef:b6:d4:24:
         0c:4d:b6:62:8a:3a:eb:7e:a0:36:cc:79:50:05:74:39:88:63:
         18:7f:f3:07:d1:28:7f:26:e1:27:37:d4:ff:ca:b3:50:e1:0f:
         36:9e:16:49:e2:1e:b5:6b:f9:88:4d:93:6e:c1:e1:91:10:2f:
         5c:b2:b4:bc:90:90:94:87:ca:56:7a:b4:82:b6:d6:02:b7:f6:
         a2:2e:6c:93:df:db:6b:d6:8e:2f:94:32:59:76:c4:09:87:43:
         c0:28:7a:02:f1:33:9c:cf:95:b3:7a:94:83:1f:28:e0:ec:b6:
         7c:b8:79:12:01:e1:1d:64:67:bc:9e:e6:fb:7d:f9:6f:b0:8f:
         33:25:11:a6:14:22:9b:70:69:db:3c:83:07:90:3d:9e:3b:21:
         e4:f5:eb:4f:dc:34:f0:bf:46:47:e8:db:1a:84:25:59:7a:1a:
         2e:f1:a9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:49:18 2026 by rpki-client