Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
File:                     8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json)
Hash identifier:          YMlf7UbnZS7Yhk/dUA1UVjUCjNlts3siVGTZJ5OLVds=
Subject key identifier:   D4:4B:E2:E4:A4:3C:F2:64:EA:F3:73:26:18:E8:26:85:80:CE:17:1B
Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82
Certificate issuer:       /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
Certificate serial:       0218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
Manifest number:          0212
Signing time:             Sun 11 Oct 2026 03:33:24 +0000
Manifest this update:     Sun 11 Oct 2026 03:33:23 +0000
Manifest next update:     Sun 18 Oct 2026 03:33:23 +0000
Files and hashes:         1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: 5OxsQfXMkiLwz85MMNGMfz9kJUXnw8rLFy4hzp2f2+k=)
                          2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: PdTF8JZAzZqkYsv5aYjwZSB0/7MTqhPMOhGlyT03h9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl
                          rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 03:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282
        Validity
            Not Before: Oct 11 03:33:23 2026 GMT
            Not After : Oct 18 03:33:23 2026 GMT
        Subject: CN=6acb0384-da9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:db:10:ae:0e:e1:c8:a5:ac:7b:28:2c:69:
                    ad:cd:73:29:b7:f4:9a:2b:5f:97:17:5f:68:1f:6c:
                    c0:54:6a:6f:34:99:d0:45:c3:7e:a5:be:5f:d7:60:
                    2b:6c:4c:19:a9:49:6c:d7:46:d4:e9:46:43:a2:e2:
                    88:35:9b:e7:c2:d3:6b:d7:d3:6d:d6:5d:6c:c9:6e:
                    dc:bd:34:f2:ff:12:13:18:e3:6e:f0:15:e8:99:96:
                    4d:0a:95:24:76:96:0b:e6:2a:e5:df:1a:db:f4:9f:
                    9e:7b:0e:c6:e0:5f:70:b0:83:57:fb:c9:12:c0:ea:
                    ff:20:89:bb:dd:6c:a7:ce:b3:fd:ba:d6:37:2a:5d:
                    17:69:72:b8:5f:0e:5f:9e:1e:3e:32:db:9d:2a:bb:
                    35:c6:87:2d:f9:89:e3:46:f3:c7:d8:14:f8:f1:86:
                    8a:78:fc:d1:b6:1c:94:13:c3:c3:e7:e2:4a:2c:f6:
                    12:ad:3e:2d:a4:da:6f:1f:12:00:54:ca:42:7e:dd:
                    08:22:e7:4b:1b:a6:b7:9a:2b:89:8e:5b:1c:84:cf:
                    e3:81:4e:4e:60:01:ce:47:89:dc:ab:8d:47:0d:be:
                    8d:0f:a6:ad:a1:c5:cd:7e:1b:3e:96:e5:10:a0:82:
                    ae:79:21:f5:dc:5f:3b:13:35:52:73:e8:e6:91:c7:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:E2:E4:A4:3C:F2:64:EA:F3:73:26:18:E8:26:85:80:CE:17:1B
            X509v3 Authority Key Identifier:
                keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cf:2f:98:a5:62:b2:89:fc:d7:10:a3:6b:7b:00:32:af:c4:
         e3:66:3a:54:96:f0:9e:dd:91:fa:c2:94:b2:2e:23:90:f2:26:
         e7:d5:66:06:5e:fd:21:44:6e:b3:08:81:f2:3e:ac:0e:80:44:
         dc:93:64:2d:e5:d1:cd:89:86:13:03:01:55:ab:14:6c:bc:3e:
         ce:02:b2:f6:d7:9e:91:ef:01:f2:d1:51:af:9a:3e:36:a9:db:
         7c:85:2c:83:3c:fa:8d:8b:3d:02:8f:84:1a:12:01:b3:3e:6e:
         5f:5c:87:ce:58:56:87:84:76:06:c6:63:f8:7a:50:0f:64:a3:
         55:08:8a:ea:97:eb:38:2f:bb:f1:6c:35:5d:03:51:2b:d8:e2:
         3b:1a:22:b8:70:e1:5e:40:8d:36:3b:eb:f4:60:22:23:71:b1:
         df:c7:30:d7:e4:98:00:45:e7:b9:e4:44:ad:94:2a:35:10:17:
         0d:33:b2:1e:53:ae:1e:44:9b:69:c2:e3:f5:26:74:1f:48:68:
         1d:6b:b1:6d:da:b4:03:50:21:d9:8b:87:5b:32:5d:4f:e8:59:
         d4:e6:d1:bb:a8:5b:ec:e7:6f:2c:3f:c5:81:05:c9:8a:e0:c6:
         29:d8:73:b1:ab:e1:29:88:d8:5a:f8:ad:c9:68:be:55:47:9e:
         9e:d2:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:54:11 2026 by rpki-client