Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
File:                     8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json)
Hash identifier:          tbMHRcugIXgPnRI7Lz3exwYXflqwuawZfZ6maZZ+Yvg=
Subject key identifier:   12:1B:4F:FF:1F:36:0E:C5:11:2A:26:A6:9D:E7:CC:FA:C9:46:E5:7E
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Certificate issuer:       /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial:       01B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
Manifest number:          01A6
Signing time:             Sun 27 Sep 2026 04:34:24 +0000
Manifest this update:     Sun 27 Sep 2026 04:34:23 +0000
Manifest next update:     Sun 04 Oct 2026 04:34:23 +0000
Files and hashes:         1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: wK0vP8cShqvVFpBaX8ZPTdNyIiQAHAUkXQVCH0TkSec=)
                          2: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: OoFaMSSRiul6Qi62vK8HBSWETfbtSpuzZaFSM3QatEI=)
                          3: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: viM//8H5DSfhfHw8dOdgq6Dks9Sycd3bZEY4Fif7q2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
        Validity
            Not Before: Sep 27 04:34:23 2026 GMT
            Not After : Oct  4 04:34:23 2026 GMT
        Subject: CN=6ab89cd0-d7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6d:3f:ef:5b:36:93:ff:04:10:62:2a:84:92:
                    28:ee:25:e9:88:51:67:1c:35:ca:f9:14:34:11:ca:
                    24:4b:d7:0c:1f:8d:4a:8e:2d:97:16:2b:aa:26:66:
                    d8:8e:99:f3:71:d5:49:28:48:30:fc:9d:ab:71:ae:
                    9d:a6:1e:e9:62:2c:13:13:b8:fb:8b:b6:79:6f:bc:
                    fc:4d:7e:e0:c9:d5:77:fc:d7:8c:8c:b4:56:d9:b8:
                    3f:80:73:14:9f:56:19:f8:58:36:1e:1f:91:a8:9c:
                    3b:3e:fd:8e:03:a2:8f:3d:b6:2a:a7:62:29:fd:73:
                    4e:d9:7f:59:68:26:40:e5:60:a4:09:7a:a6:b0:2d:
                    83:69:51:9d:73:aa:1f:9a:81:7b:34:97:e3:3d:30:
                    cb:9d:18:2a:22:39:7a:18:53:34:be:26:26:a1:7c:
                    37:9c:00:9a:41:7e:78:1a:fc:87:90:1f:d7:4d:f1:
                    ef:cb:cd:42:92:10:d3:bf:c0:77:59:7b:55:fc:86:
                    ef:24:4d:89:7e:b9:69:33:c1:86:9c:16:0f:b3:80:
                    72:27:0c:5b:a5:6e:32:60:fc:70:b7:17:28:53:00:
                    ad:72:49:66:78:61:cf:7b:0a:34:81:77:68:a3:a6:
                    bf:34:1d:44:1c:c9:b8:2b:ff:c3:98:5d:06:39:17:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1B:4F:FF:1F:36:0E:C5:11:2A:26:A6:9D:E7:CC:FA:C9:46:E5:7E
            X509v3 Authority Key Identifier:
                keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:73:25:33:c3:1c:df:ac:05:a2:20:d8:71:b4:68:9a:f0:41:
         5e:9c:44:e2:b3:7f:90:7b:d0:b7:89:17:20:b6:9f:8f:4b:47:
         69:1c:8d:99:f4:46:f6:1d:3d:f6:1f:c3:cb:29:20:53:30:e4:
         05:eb:5a:ca:61:43:a1:ee:8d:bf:95:60:c3:59:b8:09:de:87:
         5e:df:35:89:39:15:84:b6:0f:3c:28:68:05:d7:0e:33:2e:79:
         a6:9e:bf:19:dd:2c:7f:9d:25:de:94:2b:7e:f1:a5:b5:6e:c7:
         cd:ad:e5:43:7a:b2:71:1f:c3:32:bc:a1:4b:94:47:cb:5f:f4:
         3a:e9:ab:ec:4b:cb:2a:cb:4f:98:ad:9d:e9:26:c2:bb:f9:13:
         7f:29:c0:33:83:1a:59:0d:d7:b2:6c:af:31:45:aa:81:31:e1:
         fa:c3:5e:0f:79:ac:28:0f:db:72:ed:fb:2e:b2:2e:17:3c:80:
         a9:fa:6e:72:30:a4:3e:f3:b1:b0:d3:64:31:70:56:39:fb:56:
         40:03:8e:bf:a0:d7:7a:fa:50:91:3d:79:a7:96:06:9f:9c:e9:
         06:6a:3c:6d:63:f2:e4:9b:9d:18:02:88:fc:79:54:29:5a:09:
         1b:c5:a2:21:c9:b2:8e:67:cf:2d:5c:0e:18:4d:65:18:2c:cf:
         88:c3:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:22:19 2026 by rpki-client