Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
File:                     2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json)
Hash identifier:          dJDqYs7gi+7PsZ5hEBeuMXgVhnXTelxHsdNzvrOW5z0=
Subject key identifier:   FA:F6:19:3F:49:D4:82:3F:4F:7B:76:F7:77:E4:8F:FE:7B:B2:73:80
Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59
Certificate issuer:       /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
Certificate serial:       04BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
Manifest number:          04B7
Signing time:             Sat 10 Oct 2026 23:56:09 +0000
Manifest this update:     Sat 10 Oct 2026 23:56:08 +0000
Manifest next update:     Sat 17 Oct 2026 23:56:08 +0000
Files and hashes:         1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: az1vKmk7RiGjajf8Gf0rvF9ZM5oQf5RjpGlfWIvh22g=)
                          2: 97D35382924311EC927C972FC4F9AE02.roa (hash: aAWOfNb/dnXkGDMyjT0RYtdEn0OfU/UmCUamSuOloZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl
                          rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 23:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1215 (0x4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59
        Validity
            Not Before: Oct 10 23:56:08 2026 GMT
            Not After : Oct 17 23:56:08 2026 GMT
        Subject: CN=6acad098-4bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:40:9f:8c:0e:0e:5a:84:42:8e:e0:5f:57:42:
                    ef:13:79:07:56:f2:94:82:62:24:39:22:a7:fa:eb:
                    2f:9f:4a:4b:65:dc:81:95:7a:26:6f:71:65:e1:32:
                    fb:ba:6f:0e:74:f3:f9:48:ba:a4:96:80:4f:b0:b6:
                    22:d6:ea:f9:71:7f:d7:b0:6d:b8:ad:ae:77:f7:e8:
                    ff:ec:e8:29:d4:50:16:6c:4a:55:29:9f:fe:23:dc:
                    6e:d1:55:f4:47:10:f2:7f:70:30:76:5c:3e:d1:b2:
                    da:2e:9f:1a:0f:53:d4:bf:12:4a:0a:0b:29:cb:d2:
                    5e:16:19:ec:22:2b:ed:68:30:ac:22:9d:10:43:ad:
                    9b:d6:81:97:e8:a7:2d:de:7c:2d:87:04:67:b5:e8:
                    30:94:56:70:d5:7d:ac:4c:ab:83:6b:e6:42:e6:57:
                    0c:f6:4a:0b:eb:26:af:53:fa:a4:56:d3:cb:51:c0:
                    b2:6c:4b:86:48:88:a6:01:48:f4:f6:43:83:8e:93:
                    6e:1e:f9:c8:72:95:e1:b7:48:7d:eb:d2:9d:7b:de:
                    da:1b:67:63:2b:d3:71:53:c3:b3:cb:91:63:f1:e4:
                    3a:49:37:96:2d:2e:c8:80:5c:d7:a7:73:72:ed:2e:
                    46:de:86:7d:80:89:32:11:f0:98:c3:1a:81:84:d3:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F6:19:3F:49:D4:82:3F:4F:7B:76:F7:77:E4:8F:FE:7B:B2:73:80
            X509v3 Authority Key Identifier:
                keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:88:17:f1:ff:e4:88:29:d8:9d:e4:6a:68:db:ac:d3:12:b5:
         2a:d7:be:b1:1a:8e:60:5c:70:5d:85:42:8e:07:ef:3b:56:ff:
         2a:b1:98:11:42:4d:88:fd:75:7a:80:f0:a6:62:96:ab:bf:39:
         af:42:91:13:5b:af:16:fb:01:09:36:4b:8d:c9:29:d1:16:e2:
         01:17:37:da:51:d3:6d:8c:16:a1:97:24:6f:50:6b:2c:11:f7:
         d7:ed:fe:4e:92:79:6a:e2:07:0e:0a:45:38:5a:c8:31:85:e2:
         01:07:29:30:9b:f8:40:2d:65:84:08:a7:10:f9:85:0a:3b:75:
         c8:8f:e0:d3:1c:21:c2:ce:4c:34:78:cd:cd:1d:1c:eb:ce:9c:
         fa:40:c2:9b:b0:fd:ae:c3:3b:3f:7b:cc:22:49:c7:af:b5:98:
         5f:54:f2:0a:df:09:0b:6b:00:f4:fb:3b:6a:61:f2:7e:1b:f1:
         71:8c:38:c3:fa:8c:f7:62:95:33:c4:ad:67:db:96:c4:d3:38:
         a1:40:32:ef:0d:18:61:cf:0d:ac:13:ab:91:2d:fc:a9:cb:01:
         9c:11:48:d3:24:97:24:1a:86:81:6a:c5:20:13:24:ca:cd:ea:
         db:ee:8c:62:8b:4b:bd:e8:36:f5:77:c9:a9:ba:df:ed:f9:25:
         a9:ba:fa:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew
NjlEMDRENTkwHhcNMjYxMDEwMjM1NjA4WhcNMjYxMDE3MjM1NjA4WjAYMRYwFAYD
VQQDEw02YWNhZDA5OC00YmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi0CfjA4OWoRCjuBfV0LvE3kHVvKUgmIkOSKn+usvn0pLZdyBlXomb3Fl4TL7
um8OdPP5SLqkloBPsLYi1ur5cX/XsG24ra539+j/7Ogp1FAWbEpVKZ/+I9xu0VX0
RxDyf3Awdlw+0bLaLp8aD1PUvxJKCgspy9JeFhnsIivtaDCsIp0QQ62b1oGX6Kct
3nwthwRntegwlFZw1X2sTKuDa+ZC5lcM9koL6yavU/qkVtPLUcCybEuGSIimAUj0
9kODjpNuHvnIcpXht0h969Kde97aG2djK9NxU8Ozy5Fj8eQ6STeWLS7IgFzXp3Ny
7S5G3oZ9gIkyEfCYwxqBhNPlIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPr2GT9J
1II/T3t293fkj/57snOAMB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky
NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RkFDQi9GNTU5OEQwODkyNDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQ
ZksxWHlPZW5SOG9HblFUVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf4gX8f/kiCnYneRqaNus0xK1Kte+sRqOYFxwXYVCjgfvO1b/KrGYEUJNiP11
eoDwpmKWq785r0KRE1uvFvsBCTZLjckp0RbiARc32lHTbYwWoZckb1BrLBH31+3+
TpJ5auIHDgpFOFrIMYXiAQcpMJv4QC1lhAinEPmFCjt1yI/g0xwhws5MNHjNzR0c
686c+kDCm7D9rsM7P3vMIknHr7WYX1TyCt8JC2sA9Ps7amHyfhvxcYw4w/qM92KV
M8StZ9uWxNM4oUAy7w0YYc8NrBOrkS38qcsBnBFI0ySXJBqGgWrFIBMkys3q2+6M
YotLveg29XfJqbrf7fklqbr6cQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 14:30:49 2026 by rpki-client