Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
File:                     pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json)
Hash identifier:          eekVSeYBfs/6SMflKm9/UnKQMpJ3tW5PYNNpbqkj/Qg=
Subject key identifier:   4C:76:F7:58:0B:41:9C:81:0D:2F:C8:B8:0A:28:F0:80:05:63:5B:DD
Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF
Certificate issuer:       /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
Certificate serial:       0A2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
Manifest number:          0A0D
Signing time:             Sat 10 Oct 2026 19:50:37 +0000
Manifest this update:     Sat 10 Oct 2026 19:50:37 +0000
Manifest next update:     Sat 17 Oct 2026 19:50:37 +0000
Files and hashes:         1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: U+fMjJKcRDLedBvM8lx0Ibje2W4/w29EmflIssh3ol0=)
                          2: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: KwmNhu5rUPuchUZhsnJbF0ZKPoHrpjaspO6PL7DH0vg=)
                          3: F663B6DE3F1011F1A8E91BA6CD833773.roa (hash: x5T7NYkz+hUgY/tU53+Hwc/BUR2tGXVOEyssUILN0gU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl
                          rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 19:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602 (0xa2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF
        Validity
            Not Before: Oct 10 19:50:37 2026 GMT
            Not After : Oct 17 19:50:37 2026 GMT
        Subject: CN=6aca970d-e111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:08:5b:cc:4b:c0:65:c9:c5:dc:43:50:9f:
                    33:c9:84:e2:53:f5:28:0b:86:cd:dd:cd:d3:0c:f0:
                    57:d6:2a:d4:14:8e:5c:0e:2f:3b:5d:1e:b1:64:8e:
                    10:d7:bc:b9:2a:07:10:15:dc:61:f6:c3:ac:33:c6:
                    21:93:35:4b:a5:63:11:a8:01:ec:75:82:6d:0e:58:
                    81:f7:b0:93:23:23:fe:87:81:59:e5:c2:0c:80:45:
                    66:99:a0:36:e4:fd:8a:b8:e5:1d:03:34:ec:bf:4a:
                    94:50:ac:c9:b7:e1:25:b5:91:45:7f:66:1e:9f:72:
                    dd:cc:14:1d:50:ca:f7:71:cb:10:40:d6:16:f4:13:
                    be:41:ef:b3:b8:a6:31:12:61:c3:a9:b7:93:58:af:
                    ed:76:6c:49:f1:a6:19:da:b4:5f:88:18:64:21:c5:
                    ee:ca:38:d9:c6:44:9e:35:16:4d:ea:6a:c2:24:01:
                    71:6b:4d:21:2e:91:06:39:ea:1a:c1:9a:d1:22:9b:
                    a3:50:b4:36:5c:03:0f:51:1b:a4:ff:6f:48:35:d8:
                    d3:c0:01:05:7d:fb:f8:f6:7c:9c:a9:53:02:f3:fc:
                    28:6d:de:d7:e2:cf:24:05:c0:e8:5b:76:c5:f3:7d:
                    e1:5a:23:d0:35:9f:74:ef:99:e2:a6:02:e1:49:6f:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:76:F7:58:0B:41:9C:81:0D:2F:C8:B8:0A:28:F0:80:05:63:5B:DD
            X509v3 Authority Key Identifier:
                keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:60:e0:64:7a:bb:dd:82:19:4e:02:97:ef:55:d7:d9:3e:e9:
         a7:f3:33:59:88:48:92:aa:71:d2:82:b4:f0:e7:77:ed:32:3f:
         ec:39:92:72:7e:d9:03:a1:77:16:26:bb:97:d6:69:67:b1:b2:
         24:51:fe:3c:22:c5:f4:27:44:a8:18:2c:d4:c1:09:8c:63:99:
         e9:60:f7:c9:b9:26:d9:6c:0f:a4:f8:7e:da:d5:24:f8:cf:7e:
         ec:85:b3:12:84:b5:85:3e:87:e0:cc:da:da:12:19:7c:64:bf:
         9c:5b:36:5b:80:c6:a8:75:59:e6:1e:f5:4b:b3:f6:26:a4:96:
         85:7c:d2:69:32:fb:2f:fa:e8:3f:63:4c:2f:12:3f:02:1f:17:
         a4:5c:e0:dc:90:4f:83:d7:ce:b3:f6:6d:bf:45:f9:66:8c:96:
         cd:c8:36:ce:4d:41:f3:42:7b:2a:1f:97:d7:9a:61:eb:89:c1:
         4e:55:8a:e2:42:02:15:dc:69:9e:ad:12:94:88:cc:7e:a6:a9:
         37:ec:e0:4a:9d:a7:3b:6d:fe:8a:a4:eb:c8:1d:18:cf:2a:46:
         77:36:33:84:93:d5:b3:10:60:da:59:eb:0a:c2:e9:26:ba:dd:
         3a:8e:a5:93:8e:40:e1:ab:66:01:62:d3:a9:fc:3a:7b:06:85:
         5b:44:a1:2e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3
NTI5OEQ3RkYwHhcNMjYxMDEwMTk1MDM3WhcNMjYxMDE3MTk1MDM3WjAYMRYwFAYD
VQQDEw02YWNhOTcwZC1lMTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPUIW8xLwGXJxdxDUJ8zyYTiU/UoC4bN3c3TDPBX1irUFI5cDi87XR6xZI4Q
17y5KgcQFdxh9sOsM8YhkzVLpWMRqAHsdYJtDliB97CTIyP+h4FZ5cIMgEVmmaA2
5P2KuOUdAzTsv0qUUKzJt+EltZFFf2Yen3LdzBQdUMr3ccsQQNYW9BO+Qe+zuKYx
EmHDqbeTWK/tdmxJ8aYZ2rRfiBhkIcXuyjjZxkSeNRZN6mrCJAFxa00hLpEGOeoa
wZrRIpujULQ2XAMPURuk/29INdjTwAEFffv49nycqVMC8/wobd7X4s8kBcDoW3bF
833hWiPQNZ9075nipgLhSW//UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEx291gL
QZyBDS/IuAoo8IAFY1vdMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5
NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S
M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN2DgZHq73YIZTgKX71XX2T7pp/MzWYhIkqpx0oK08Od37TI/7DmScn7ZA6F3
Fia7l9ZpZ7GyJFH+PCLF9CdEqBgs1MEJjGOZ6WD3ybkm2WwPpPh+2tUk+M9+7IWz
EoS1hT6H4Mza2hIZfGS/nFs2W4DGqHVZ5h71S7P2JqSWhXzSaTL7L/roP2NMLxI/
Ah8XpFzg3JBPg9fOs/Ztv0X5ZoyWzcg2zk1B80J7Kh+X15ph64nBTlWK4kICFdxp
nq0SlIjMfqapN+zgSp2nO23+iqTryB0YzypGdzYzhJPVsxBg2lnrCsLpJrrdOo6l
k45A4atmAWLTqfw6ewaFW0ShLg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:44:36 2026 by rpki-client