Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
File:                     8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json)
Hash identifier:          57SAwXYxQkZIEfG3aQnOA5i+cduJLBWV3YwXrzOp7dI=
Subject key identifier:   62:59:9C:3A:3F:35:3C:D4:F3:55:E3:FF:A3:60:6B:53:8F:B0:B2:E3
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Certificate issuer:       /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial:       0AC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
Manifest number:          0AB8
Signing time:             Fri 02 Oct 2026 19:42:39 +0000
Manifest this update:     Fri 02 Oct 2026 19:42:39 +0000
Manifest next update:     Fri 09 Oct 2026 19:42:39 +0000
Files and hashes:         1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: 1hZO6Xo2rGOIqx3dWs5Qo/QygxnQ8bLaMU2AIixIdXQ=)
                          2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: fJPw+8jILHi38OrKB/eoJlQncOyg85Mi4es0uePIWEg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
                          rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2752 (0xac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
        Validity
            Not Before: Oct  2 19:42:39 2026 GMT
            Not After : Oct  9 19:42:39 2026 GMT
        Subject: CN=6ac0092f-e62a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:98:a0:ff:c8:67:ce:81:16:d9:57:71:a4:78:
                    35:c0:68:ca:89:a1:c0:2c:e3:76:1d:38:c8:22:bf:
                    33:29:bf:40:bf:c0:1d:d8:7e:6c:e0:62:2e:9a:fc:
                    ed:9a:f7:14:c5:15:6a:10:75:34:f9:f9:83:df:1a:
                    ed:d0:55:70:d0:4b:f5:64:b2:cf:29:d2:d9:34:2d:
                    3d:5f:c3:af:69:82:d9:0a:04:0e:56:04:c8:c4:bb:
                    47:a1:27:d1:57:df:08:96:54:b4:d4:99:5a:01:77:
                    c7:d7:08:fe:c1:26:05:91:7e:e8:d0:29:47:11:b7:
                    15:ee:72:df:82:d5:e8:3a:02:a3:6b:51:b7:28:c6:
                    80:5d:d1:0c:36:5c:9f:4c:87:ff:45:2e:44:18:8f:
                    5b:9c:5f:be:b9:2c:85:d4:dc:c9:c8:ff:c1:d9:e5:
                    31:0d:b6:62:1d:8b:71:6c:56:6c:f2:4c:3e:a6:1f:
                    cb:9e:1a:0a:d6:b8:e8:5b:3a:17:df:ae:c8:a8:99:
                    c5:0b:46:b4:d7:cd:b7:45:12:9b:41:0f:9c:26:39:
                    cf:77:40:40:22:2e:98:cf:1a:18:41:70:08:a2:5f:
                    5b:e5:dd:48:d5:d8:be:13:f0:c5:fb:5a:61:9e:d9:
                    d3:d1:73:b5:61:55:b6:ef:6e:66:75:2a:08:64:b1:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:59:9C:3A:3F:35:3C:D4:F3:55:E3:FF:A3:60:6B:53:8F:B0:B2:E3
            X509v3 Authority Key Identifier:
                keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:cf:de:53:89:1a:db:3a:9d:ab:51:a8:64:55:f9:cc:06:37:
         4a:dd:b8:cc:d3:30:2e:40:ea:39:c6:0d:ca:ef:d3:6b:bc:40:
         cc:3c:17:d4:8e:ad:75:8e:4b:1d:eb:5e:70:1a:8c:04:9e:46:
         6b:52:b1:02:52:38:59:95:29:9b:d4:33:5b:e9:9d:be:56:1d:
         f5:c1:28:18:28:1b:d5:9c:5c:7a:8d:17:36:bb:e5:4c:b8:71:
         b7:24:90:e5:c7:3e:c4:4f:f8:48:10:0a:d7:af:20:30:78:6d:
         c5:2a:f5:d5:93:ef:85:8d:f8:af:1d:57:c4:4b:62:26:12:d0:
         e3:2c:60:23:a5:04:5c:98:9c:7a:cb:d2:23:b7:7c:7c:1c:de:
         fd:a5:e6:c7:82:c4:38:99:8f:3c:76:6f:dc:8a:95:a2:87:76:
         57:b6:a6:22:6b:1f:44:81:da:ff:44:41:51:dc:d8:c7:ca:f0:
         ed:69:59:97:16:5b:5a:fa:bd:fc:b7:cf:5f:98:30:ae:9e:00:
         62:36:cd:19:2b:20:0c:46:80:fb:57:56:33:0c:ea:fd:48:21:
         f8:57:52:a6:d5:99:cb:2a:e7:b2:e8:3a:fc:f8:11:8c:bd:2c:
         48:2b:d1:67:d6:89:7b:05:2c:ce:33:59:53:ed:63:77:4e:ce:
         43:ec:40:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA2QjUxMTAvBgNVBAUTKEYzMDEyQ0VEMTc2OERFQUE2NEM0RTkzNkI4NkNCMzFF
MTZDRUZDQkEwHhcNMjYxMDAyMTk0MjM5WhcNMjYxMDA5MTk0MjM5WjAYMRYwFAYD
VQQDEw02YWMwMDkyZi1lNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8pig/8hnzoEW2VdxpHg1wGjKiaHALON2HTjIIr8zKb9Av8Ad2H5s4GIumvzt
mvcUxRVqEHU0+fmD3xrt0FVw0Ev1ZLLPKdLZNC09X8OvaYLZCgQOVgTIxLtHoSfR
V98IllS01JlaAXfH1wj+wSYFkX7o0ClHEbcV7nLfgtXoOgKja1G3KMaAXdEMNlyf
TIf/RS5EGI9bnF++uSyF1NzJyP/B2eUxDbZiHYtxbFZs8kw+ph/LnhoK1rjoWzoX
367IqJnFC0a01823RRKbQQ+cJjnPd0BAIi6YzxoYQXAIol9b5d1I1di+E/DF+1ph
ntnT0XO1YVW2725mdSoIZLG5vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJZnDo/
NTzU81Xj/6Nga1OPsLLjMB8GA1UdIwQYMBaAFPMBLO0XaN6qZMTpNrhssx4Wzvy6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDZCNS8wRjVBMDE0MDgy
RjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNxcGt4T2sydUd5ekhoYk9f
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzh3RXM3UmRvM3Fwa3hPazJ1R3l6SGhiT19Mby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDZCNS8wRjVBMDE0MDgyRjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNx
cGt4T2sydUd5ekhoYk9fTG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGc/eU4ka2zqdq1GoZFX5zAY3St24zNMwLkDqOcYNyu/Ta7xAzDwX1I6tdY5L
HetecBqMBJ5Ga1KxAlI4WZUpm9QzW+mdvlYd9cEoGCgb1Zxceo0XNrvlTLhxtySQ
5cc+xE/4SBAK168gMHhtxSr11ZPvhY34rx1XxEtiJhLQ4yxgI6UEXJicesvSI7d8
fBze/aXmx4LEOJmPPHZv3IqVood2V7amImsfRIHa/0RBUdzYx8rw7WlZlxZbWvq9
/LfPX5gwrp4AYjbNGSsgDEaA+1dWMwzq/Ugh+FdSptWZyyrnsug6/PgRjL0sSCvR
Z9aJewUszjNZU+1jd07OQ+xADQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:15:12 2026 by rpki-client