Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
File:                     jYqA7HIK5-1T_SED6OachVWtD4Y.mft (raw, json)
Hash identifier:          KJQXNeI6lJkKLB3EBUZvtB9hcwZZ0NYXJ2CO61WmI2Y=
Subject key identifier:   04:AC:CE:8D:D7:D6:F4:8F:EA:FF:F9:C8:3E:B2:31:1A:56:B3:92:84
Authority key identifier: 8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86
Certificate issuer:       /CN=A91BECBA/serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
Manifest number:          018A
Signing time:             Fri 09 Oct 2026 05:08:02 +0000
Manifest this update:     Fri 09 Oct 2026 05:08:01 +0000
Manifest next update:     Fri 16 Oct 2026 05:08:01 +0000
Files and hashes:         1: jYqA7HIK5-1T_SED6OachVWtD4Y.crl (hash: TAgB0L90HEWvKQY7dIW/fsdLCzOlzB2T59Wx9kX38qg=)
                          2: A0142C706B6611EF88C61580C4F9AE02.roa (hash: n6rNTx4DosyE+NYmhaFLC8L4vDQdHdtdD/uLixXbDGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 05:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BECBA, serialNumber=8D8A80EC720AE7ED53FD2103E8E69C8555AD0F86
        Validity
            Not Before: Oct  9 05:08:01 2026 GMT
            Not After : Oct 16 05:08:01 2026 GMT
        Subject: CN=6ac876b2-d317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:f6:33:7a:34:bd:34:b3:f1:f0:36:d3:48:
                    de:3f:ae:e8:27:0e:3d:d7:6c:de:5f:72:1a:b2:de:
                    ab:47:7b:ee:e0:16:99:fb:3d:3d:02:b1:fc:e2:99:
                    1a:e5:68:79:72:2b:5a:1b:64:f0:8d:74:2a:99:f3:
                    36:e7:18:9e:d0:e1:e8:a6:25:1c:2b:9d:ea:4e:e9:
                    44:17:22:9f:41:af:ad:fe:5c:54:26:85:c0:05:f9:
                    22:2f:c0:5a:b8:74:5d:b3:6f:97:9a:78:00:40:78:
                    f3:72:fc:64:2a:94:3e:95:bc:2c:24:0c:cf:5d:62:
                    c3:97:ba:ac:32:b6:34:f5:1d:22:e5:4e:a1:18:e1:
                    81:51:cd:ed:a5:b3:72:01:5f:70:1a:97:1b:da:77:
                    72:d7:35:6e:34:a1:7f:56:76:6f:cd:3a:ab:73:7d:
                    f8:4b:7a:4b:30:3e:78:ab:c2:19:2f:71:d6:e6:5e:
                    49:77:6d:b2:c6:97:1e:a1:61:0a:6f:0d:ff:f8:b4:
                    7f:66:7c:32:b0:31:d5:b4:7c:e5:3e:7c:e6:08:16:
                    64:25:0f:73:64:dc:71:96:d7:13:36:69:78:7e:2f:
                    46:23:4a:88:9c:ee:a2:e3:dd:16:13:fb:56:14:40:
                    30:e0:98:60:0a:4a:01:60:d0:a6:f4:7f:10:e0:a8:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AC:CE:8D:D7:D6:F4:8F:EA:FF:F9:C8:3E:B2:31:1A:56:B3:92:84
            X509v3 Authority Key Identifier:
                keyid:8D:8A:80:EC:72:0A:E7:ED:53:FD:21:03:E8:E6:9C:85:55:AD:0F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jYqA7HIK5-1T_SED6OachVWtD4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BECBA/583E2B9A6B6511EFA857E80CC4F9AE02/jYqA7HIK5-1T_SED6OachVWtD4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:70:54:9f:5a:db:62:d3:79:08:1f:67:e4:57:7a:1a:5e:a4:
         29:bb:fc:c5:a2:72:b8:87:83:02:2e:d6:99:06:94:ec:e2:d5:
         4f:72:dd:e7:21:cf:1e:54:4b:77:6d:ac:6f:fa:86:38:6b:89:
         ce:7c:dd:5a:9f:32:06:22:66:5c:2b:29:a8:a8:ae:25:b3:7b:
         82:89:50:13:7d:96:27:7f:3e:39:b0:db:aa:64:d2:af:11:5d:
         c2:cb:f5:70:7d:d8:51:6c:65:30:79:9b:15:f1:72:79:27:11:
         fc:6d:f6:bb:79:a7:71:c8:a8:bf:b4:fd:06:3b:f3:65:6c:b5:
         c1:1c:99:2f:44:70:da:31:dc:37:31:02:a1:78:93:76:8a:0f:
         1d:aa:17:00:c8:22:20:a8:78:0e:79:30:44:d6:29:f4:ac:a2:
         b4:fc:30:25:50:72:58:83:a8:15:68:c7:9a:90:38:97:e1:e8:
         da:bc:4e:5d:36:ca:a4:e1:11:43:64:df:9b:71:26:0e:c5:d0:
         93:06:f9:88:4c:04:0c:8c:d4:b5:c6:40:ca:a2:70:31:6e:29:
         6a:95:3f:e9:1f:55:ff:d6:63:20:48:17:a3:0a:1e:70:fc:21:
         3f:30:bf:c0:33:46:69:8c:20:e1:6f:4b:fc:5e:48:96:f1:ae:
         46:78:92:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVDQkExMTAvBgNVBAUTKDhEOEE4MEVDNzIwQUU3RUQ1M0ZEMjEwM0U4RTY5Qzg1
NTVBRDBGODYwHhcNMjYxMDA5MDUwODAxWhcNMjYxMDE2MDUwODAxWjAYMRYwFAYD
VQQDEw02YWM4NzZiMi1kMzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeL2M3o0vTSz8fA200jeP67oJw4912zeX3Iast6rR3vu4BaZ+z09ArH84pka
5Wh5citaG2TwjXQqmfM25xie0OHopiUcK53qTulEFyKfQa+t/lxUJoXABfkiL8Ba
uHRds2+XmngAQHjzcvxkKpQ+lbwsJAzPXWLDl7qsMrY09R0i5U6hGOGBUc3tpbNy
AV9wGpcb2ndy1zVuNKF/VnZvzTqrc334S3pLMD54q8IZL3HW5l5Jd22yxpceoWEK
bw3/+LR/ZnwysDHVtHzlPnzmCBZkJQ9zZNxxltcTNml4fi9GI0qInO6i490WE/tW
FEAw4JhgCkoBYNCm9H8Q4KgsNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASszo3X
1vSP6v/5yD6yMRpWs5KEMB8GA1UdIwQYMBaAFI2KgOxyCuftU/0hA+jmnIVVrQ+G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUNCQS81ODNFMkI5QTZC
NjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUtMVRfU0VENk9hY2hWV3RE
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pZcUE3SElLNS0xVF9TRUQ2T2FjaFZXdEQ0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUNCQS81ODNFMkI5QTZCNjUxMUVGQTg1N0U4MENDNEY5QUUwMi9qWXFBN0hJSzUt
MVRfU0VENk9hY2hWV3RENFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAD3BUn1rbYtN5CB9n5Fd6Gl6kKbv8xaJyuIeDAi7WmQaU7OLVT3Ld5yHPHlRL
d22sb/qGOGuJznzdWp8yBiJmXCspqKiuJbN7golQE32WJ38+ObDbqmTSrxFdwsv1
cH3YUWxlMHmbFfFyeScR/G32u3mncciov7T9BjvzZWy1wRyZL0Rw2jHcNzECoXiT
dooPHaoXAMgiIKh4DnkwRNYp9KyitPwwJVByWIOoFWjHmpA4l+Ho2rxOXTbKpOER
Q2Tfm3EmDsXQkwb5iEwEDIzUtcZAyqJwMW4papU/6R9V/9ZjIEgXowoecPwhPzC/
wDNGaYwg4W9L/F5IlvGuRniSgQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:58:49 2026 by rpki-client