Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
File:                     8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json)
Hash identifier:          +O2nqhkWcAiDdCfgUzkuq+uOSWfuJjQ06VVnQ//ZPuM=
Subject key identifier:   A2:F7:D4:A7:55:EE:68:4E:96:40:88:85:17:6A:9A:7D:5D:3C:9A:F6
Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00
Certificate issuer:       /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
Certificate serial:       084A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
Manifest number:          0842
Signing time:             Thu 08 Oct 2026 21:11:44 +0000
Manifest this update:     Thu 08 Oct 2026 21:11:43 +0000
Manifest next update:     Thu 15 Oct 2026 21:11:43 +0000
Files and hashes:         1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: JXKcctEuN/QCTjSXVjzz9AjZ2tvM7hoPysrDHdlw69Y=)
                          2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: n19nALAcbxyJ3ZtZLN3SkgyLuIwERJFOSgc3xHqncQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl
                          rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 21:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D750, serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
        Validity
            Not Before: Oct  8 21:11:43 2026 GMT
            Not After : Oct 15 21:11:43 2026 GMT
        Subject: CN=6ac8070f-213b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:2d:cf:2e:46:63:9d:af:02:6f:2c:21:22:
                    59:55:4c:fc:1f:ce:82:99:7d:d8:f2:68:27:3e:27:
                    9d:9d:53:90:18:ef:83:bc:a1:39:13:8b:32:09:ac:
                    d2:47:89:b4:36:2a:86:0d:4e:b3:22:a8:62:05:f9:
                    fb:86:ca:10:d0:dc:4c:53:11:ae:6c:fd:31:e3:0d:
                    38:f7:3b:a6:c6:68:0f:30:ee:42:de:09:59:1b:3e:
                    38:b7:55:22:ea:f5:98:b2:2c:9c:aa:a3:ca:5b:4c:
                    46:d5:72:e2:d1:46:ed:fc:ae:6a:d8:1b:3c:df:4a:
                    a1:c0:a3:a7:f9:5d:eb:9c:2e:87:01:0e:8b:94:84:
                    9f:bb:d0:bf:81:9d:22:8e:06:19:33:b6:a5:00:d6:
                    63:44:d6:27:04:e4:51:20:2d:82:7f:91:2f:58:c8:
                    29:7b:0f:fc:12:68:a5:d6:22:23:55:e1:1e:c5:0d:
                    85:92:6b:b1:88:cf:57:66:eb:51:df:a5:60:42:2c:
                    61:a1:bf:eb:b2:ba:41:5a:92:44:d5:d6:ff:de:91:
                    5a:1a:40:cd:b5:09:d3:40:a5:d5:90:f2:26:38:58:
                    7a:e9:7c:29:00:ed:89:b4:d7:10:a3:4d:36:60:71:
                    c7:19:65:d5:c1:b8:ef:94:85:1d:80:03:d1:0b:89:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F7:D4:A7:55:EE:68:4E:96:40:88:85:17:6A:9A:7D:5D:3C:9A:F6
            X509v3 Authority Key Identifier:
                keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fa:a9:86:48:e1:09:ec:fb:5d:2f:a1:36:1c:a1:38:9c:9f:
         73:a6:da:8b:99:15:53:81:57:ba:99:cd:b7:9f:c1:e0:b1:e8:
         fd:f2:4a:4d:39:0f:49:a5:4b:cd:74:85:22:21:7d:55:39:75:
         d6:1c:bc:32:93:fa:49:1c:73:6e:8b:48:73:65:ce:2e:53:1f:
         4f:b5:73:60:a7:1b:06:69:18:cb:da:51:46:d0:3c:e0:d4:07:
         41:ef:15:18:35:c0:f6:57:92:4d:fc:b0:e7:71:0b:99:1e:d8:
         67:77:12:44:03:cc:fa:f0:36:15:07:87:24:ff:70:d1:55:56:
         0f:2c:ca:ac:74:91:30:bc:66:35:f7:c2:7f:2d:fe:81:50:95:
         26:56:9d:01:fa:b5:7e:6e:fa:73:b4:30:85:18:a0:f7:cf:97:
         9d:b2:30:85:fb:de:84:0c:e7:65:21:9f:34:b7:ff:71:95:76:
         de:e8:48:15:6f:e2:44:5c:b5:9f:42:d1:49:66:81:99:b7:08:
         c3:74:80:a2:d6:5c:3d:67:c1:55:76:54:c1:af:cf:a3:1f:8e:
         25:ac:86:d5:46:8a:a1:72:f9:70:79:44:1c:89:87:9f:f4:64:
         95:0c:ed:0c:bd:86:1b:5e:83:1c:5c:98:da:4d:37:4f:44:f8:
         f1:30:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:47:41 2026 by rpki-client