Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
File:                     8ElXN_-ojhn_HhUqVgIex1bYUps.mft (raw, json)
Hash identifier:          3XHWIlnxEIiqwwumbA+wZwEwSxq14qTDQGqk9IRp31U=
Subject key identifier:   1B:22:BB:10:C5:B5:AD:1D:2F:1B:7E:22:F9:DB:08:C3:FB:4F:FE:D7
Authority key identifier: F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B
Certificate issuer:       /CN=A918E1C4/serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
Manifest number:          A3
Signing time:             Tue 13 Oct 2026 07:56:50 +0000
Manifest this update:     Tue 13 Oct 2026 07:56:50 +0000
Manifest next update:     Tue 20 Oct 2026 07:56:50 +0000
Files and hashes:         1: 8ElXN_-ojhn_HhUqVgIex1bYUps.crl (hash: BWqiAJrm54pgEZol54OjiWfu/wsQHNSy5Rgy3M8DLII=)
                          2: E209029ACE9311F09FB94826C4F9AE02.roa (hash: ufH3RqyZs/KCX/MEMIMIi9q3jKuJOCXeHV0hgCUZTCM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl
                          rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 07:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E1C4, serialNumber=F0495737FFA88E19FF1E152A56021EC756D8529B
        Validity
            Not Before: Oct 13 07:56:50 2026 GMT
            Not After : Oct 20 07:56:50 2026 GMT
        Subject: CN=6acde442-b8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b0:a1:99:47:e3:96:58:ab:b7:96:2d:4b:a6:
                    c7:54:05:87:06:5f:a0:d6:05:ff:60:f3:3c:3c:56:
                    e4:25:4a:56:33:03:30:e2:1f:a7:58:b9:30:fe:38:
                    82:b6:1e:93:73:da:31:43:ec:19:9c:b7:11:f5:00:
                    75:08:23:c9:a4:91:2c:f6:6f:57:fb:df:ad:e9:c1:
                    4b:4e:ce:2f:50:bf:57:71:5e:b9:8b:4b:39:5d:ba:
                    7b:45:dc:ff:1d:66:c3:bc:27:3a:9d:b9:3d:b0:fc:
                    05:5c:c1:ea:b4:0b:cd:fe:73:4c:36:5e:7b:8d:5b:
                    88:c8:1a:e6:ac:6a:8c:60:6b:af:75:ba:34:5e:78:
                    6e:06:a3:55:b8:fb:66:84:59:3f:e2:f4:ee:7d:3b:
                    12:e3:73:f0:0f:fa:d1:c7:7c:31:79:67:66:58:76:
                    85:b3:70:68:3c:4b:19:21:55:53:01:7f:c2:b1:e0:
                    17:8f:b7:15:ad:37:d2:fb:1c:57:ef:c7:43:65:50:
                    c4:4e:54:8f:d4:35:c7:20:6c:40:b3:dc:f1:73:e4:
                    d8:ad:fe:3c:a2:0d:97:4f:e6:1b:1a:0d:3e:13:7a:
                    98:d2:5c:16:62:38:90:74:2b:c6:cd:eb:e6:03:75:
                    65:a6:73:1a:8f:d5:fe:1d:0f:24:f0:0b:07:2c:68:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:22:BB:10:C5:B5:AD:1D:2F:1B:7E:22:F9:DB:08:C3:FB:4F:FE:D7
            X509v3 Authority Key Identifier:
                keyid:F0:49:57:37:FF:A8:8E:19:FF:1E:15:2A:56:02:1E:C7:56:D8:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ElXN_-ojhn_HhUqVgIex1bYUps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/15695762CE9311F0969E1524C4F9AE02/8ElXN_-ojhn_HhUqVgIex1bYUps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:05:d4:57:0d:b4:40:d1:84:b5:d2:99:3f:77:c0:47:c9:d5:
         64:e6:d5:74:71:8a:1d:b3:5d:80:2a:5c:e5:1d:29:ac:76:1e:
         c3:9f:ed:0e:c8:60:fd:ee:d9:16:31:9d:4f:c2:39:d9:e4:42:
         c7:a1:46:16:e9:4f:fc:c0:ed:61:81:2c:d0:95:43:12:de:1a:
         65:17:15:a9:d3:90:c0:06:d1:aa:85:1d:e1:00:e6:19:c5:f6:
         59:19:b0:44:62:a8:4c:8e:61:ef:58:6f:77:40:33:c9:7e:d3:
         3d:17:68:b8:ff:03:8a:d6:c2:9e:86:df:4f:9a:75:4b:1d:45:
         01:3e:a0:34:2a:bc:06:fd:69:dd:1a:13:0a:fe:6a:81:ea:17:
         ad:71:1c:55:34:15:ef:9d:2a:02:7f:a3:7b:8d:64:f0:0f:5d:
         f9:1c:8d:32:cc:9b:88:f2:b6:7e:32:79:d9:5f:37:4a:52:ed:
         de:83:26:cd:c8:96:2c:27:64:a7:51:f7:3d:16:bd:5b:a2:dc:
         87:3f:73:e0:37:c1:81:2e:ff:63:49:83:f5:c8:3c:3a:72:fa:
         2e:c2:7c:8b:62:79:82:ce:a3:60:0e:25:99:40:ea:db:45:79:
         3b:cb:e0:dd:bf:f3:f8:42:f0:49:0e:3c:c7:fc:b0:63:36:7d:
         4c:6c:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:44:36 2026 by rpki-client