Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
File:                     AflcxfCmuelnxvjzbH9k1CRLrHI.mft (raw, json)
Hash identifier:          KlS/0sBV/RAQdDD9dMkfVWiHViXOr9gCAF7CO2L24ys=
Subject key identifier:   80:6F:D9:4F:17:4C:9F:03:01:E7:C8:3F:74:8D:FA:0D:D5:1D:35:B9
Authority key identifier: 01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72
Certificate issuer:       /CN=A9169451/serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
Certificate serial:       030F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
Manifest number:          0308
Signing time:             Sun 11 Oct 2026 01:12:48 +0000
Manifest this update:     Sun 11 Oct 2026 01:12:47 +0000
Manifest next update:     Sun 18 Oct 2026 01:12:47 +0000
Files and hashes:         1: AflcxfCmuelnxvjzbH9k1CRLrHI.crl (hash: vR7XM5gWx4S/9HiJap7C3eaANJW4X0Ws67wrT3iFQZM=)
                          2: 0C1EB10A3A5011ED8B4A2570C4F9AE02.roa (hash: WSIfxgjwZNOHCZ6QPzrFG9htwBMGx9uCmGnFB+96CFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl
                          rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 01:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169451, serialNumber=01F95CC5F0A6B9E967C6F8F36C7F64D4244BAC72
        Validity
            Not Before: Oct 11 01:12:47 2026 GMT
            Not After : Oct 18 01:12:47 2026 GMT
        Subject: CN=6acae290-ee24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c8:1d:90:8c:85:2d:fe:56:b2:94:3a:35:a1:
                    68:2c:d6:1d:ce:04:e4:95:26:06:78:3c:c7:6f:c6:
                    5e:ee:35:09:7c:2f:ef:30:8b:9e:3b:54:30:6d:a2:
                    64:e5:49:fa:7b:8c:42:dc:5f:ea:c7:61:28:e4:8c:
                    92:96:58:70:23:b8:e8:4c:7e:8a:0c:a9:9f:b5:35:
                    6b:ab:64:c5:6e:0d:06:ad:c8:bb:30:c6:7d:9a:ae:
                    1b:59:1c:15:bf:93:bd:e0:bc:8a:2c:4f:26:7f:76:
                    7d:93:c4:f4:61:2b:1d:eb:4d:62:ea:a3:4b:16:95:
                    d5:5e:20:6f:b1:c1:d2:81:fa:39:cc:86:05:4d:c9:
                    e4:cb:09:df:4a:5c:cd:3a:1f:ba:c4:f6:c1:42:eb:
                    39:38:c7:c9:c9:c9:d9:95:72:12:d7:dd:0f:0d:20:
                    f9:59:e5:a1:91:eb:19:30:e0:ac:6e:0e:76:4d:44:
                    26:82:af:6b:70:6e:cb:cb:89:fe:64:a2:19:71:31:
                    9e:f3:9d:30:ad:b9:0e:06:23:20:47:53:43:d1:3b:
                    51:cc:72:05:ac:07:ec:e5:59:76:10:02:fb:78:4c:
                    76:08:6e:12:93:bb:ae:ee:62:6f:3c:35:31:35:cf:
                    35:79:62:01:54:05:38:76:04:76:14:30:9a:e8:6f:
                    ee:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6F:D9:4F:17:4C:9F:03:01:E7:C8:3F:74:8D:FA:0D:D5:1D:35:B9
            X509v3 Authority Key Identifier:
                keyid:01:F9:5C:C5:F0:A6:B9:E9:67:C6:F8:F3:6C:7F:64:D4:24:4B:AC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AflcxfCmuelnxvjzbH9k1CRLrHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169451/71DB67D43A4D11ED900DE26EC4F9AE02/AflcxfCmuelnxvjzbH9k1CRLrHI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:51:d2:6b:e6:d6:b5:5f:03:08:d6:23:a0:44:9a:79:ab:b8:
         3a:ee:07:c8:9f:eb:7c:e0:7c:5d:a4:10:99:76:fa:f5:67:4e:
         55:38:f5:6f:80:f2:a6:df:f3:9c:2e:2c:6f:71:69:c7:2f:03:
         69:8a:26:0e:77:99:dc:5c:71:29:0c:23:96:e7:80:bb:66:77:
         a7:a3:0d:26:53:e2:90:63:19:9e:e5:b1:37:63:f3:8c:b3:f5:
         19:3e:26:f5:1d:4f:f3:8e:59:6d:a4:22:d1:77:13:64:0a:34:
         2c:5a:17:27:45:f1:76:fa:9a:7f:67:3b:0a:5e:5f:a8:ca:d5:
         8d:d2:57:d1:67:33:54:7e:e4:4d:97:3f:9a:38:f2:13:47:51:
         2f:5b:99:c4:b4:e7:2d:c2:c1:a8:85:f8:37:ef:fe:49:b3:75:
         61:2b:48:78:7e:2d:a7:94:cf:8e:c4:61:9e:fa:23:77:6f:74:
         b5:5b:fb:80:ed:76:64:2f:d5:da:bb:00:82:b0:e9:f4:40:a0:
         ec:d4:93:6e:bb:2a:28:67:70:19:a3:69:08:ad:9c:74:4b:e2:
         94:3a:b8:eb:2f:3d:39:07:0f:bf:90:5b:be:b4:cf:61:6d:0b:
         7d:6a:9c:20:58:b1:4a:00:75:f1:89:98:27:f9:ad:3c:b2:40:
         5d:62:9d:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk0NTExMTAvBgNVBAUTKDAxRjk1Q0M1RjBBNkI5RTk2N0M2RjhGMzZDN0Y2NEQ0
MjQ0QkFDNzIwHhcNMjYxMDExMDExMjQ3WhcNMjYxMDE4MDExMjQ3WjAYMRYwFAYD
VQQDEw02YWNhZTI5MC1lZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4cgdkIyFLf5WspQ6NaFoLNYdzgTklSYGeDzHb8Ze7jUJfC/vMIueO1QwbaJk
5Un6e4xC3F/qx2Eo5IySllhwI7joTH6KDKmftTVrq2TFbg0Grci7MMZ9mq4bWRwV
v5O94LyKLE8mf3Z9k8T0YSsd601i6qNLFpXVXiBvscHSgfo5zIYFTcnkywnfSlzN
Oh+6xPbBQus5OMfJycnZlXIS190PDSD5WeWhkesZMOCsbg52TUQmgq9rcG7Ly4n+
ZKIZcTGe850wrbkOBiMgR1ND0TtRzHIFrAfs5Vl2EAL7eEx2CG4Sk7uu7mJvPDUx
Nc81eWIBVAU4dgR2FDCa6G/ueQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIBv2U8X
TJ8DAefIP3SN+g3VHTW5MB8GA1UdIwQYMBaAFAH5XMXwprnpZ8b482x/ZNQkS6xy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQ1MS83MURCNjdENDNB
NEQxMUVEOTAwREUyNkVDNEY5QUUwMi9BZmxjeGZDbXVlbG54dmp6Ykg5azFDUkxy
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FmbGN4ZkNtdWVsbnh2anpiSDlrMUNSTHJISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OTQ1MS83MURCNjdENDNBNEQxMUVEOTAwREUyNkVDNEY5QUUwMi9BZmxjeGZDbXVl
bG54dmp6Ykg5azFDUkxySEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAglHSa+bWtV8DCNYjoESaeau4Ou4HyJ/rfOB8XaQQmXb69WdOVTj1b4Dypt/z
nC4sb3Fpxy8DaYomDneZ3FxxKQwjlueAu2Z3p6MNJlPikGMZnuWxN2PzjLP1GT4m
9R1P845ZbaQi0XcTZAo0LFoXJ0Xxdvqaf2c7Cl5fqMrVjdJX0WczVH7kTZc/mjjy
E0dRL1uZxLTnLcLBqIX4N+/+SbN1YStIeH4tp5TPjsRhnvojd290tVv7gO12ZC/V
2rsAgrDp9ECg7NSTbrsqKGdwGaNpCK2cdEvilDq46y89OQcPv5BbvrTPYW0LfWqc
IFixSgB18YmYJ/mtPLJAXWKdOw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 08:25:53 2026 by rpki-client