Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
File:                     o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json)
Hash identifier:          5rYmulnQFfNlXLAVs5v0Ae7q4k2bqA4Q6ulKdG53bVI=
Subject key identifier:   76:36:9C:76:26:80:28:C5:5A:E4:06:E4:D4:35:5A:A4:79:2E:50:8A
Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
Certificate issuer:       /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
Manifest number:          01F7
Signing time:             Mon 21 Sep 2026 03:20:07 +0000
Manifest this update:     Mon 21 Sep 2026 03:20:07 +0000
Manifest next update:     Mon 28 Sep 2026 03:20:07 +0000
Files and hashes:         1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: 0xlcN0181sC9W8cc6pvqs+TnoVsE+MXTaYmHktrQr0Y=)
                          2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: vF01duODiwTYz9/MMIZAj5OF+2YRcDoyyVIZ0SFGCBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
                          rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
        Validity
            Not Before: Sep 21 03:20:07 2026 GMT
            Not After : Sep 28 03:20:07 2026 GMT
        Subject: CN=6ab0a267-cc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:b7:6c:3c:a0:0a:50:3d:df:43:92:5f:ad:
                    4e:86:92:4e:16:a4:19:0b:c0:7a:ab:fc:17:51:db:
                    70:19:4a:59:86:58:dc:40:23:9c:d3:41:95:59:58:
                    6b:07:6f:6b:82:79:2c:84:ea:cb:9c:7f:d7:32:de:
                    59:2b:b0:f3:78:91:cb:4c:e6:da:3f:f5:c0:d9:89:
                    c7:78:1c:d1:b6:27:32:eb:e9:5e:61:66:25:80:1b:
                    7e:85:c2:a6:87:ab:b5:b6:73:63:d6:a1:05:02:84:
                    cb:40:c7:6b:c7:f1:97:a3:89:f1:a5:5f:a3:f7:64:
                    03:8c:bb:29:18:d1:96:12:73:0e:e0:39:d2:0f:46:
                    42:ef:7b:4d:6b:46:d7:5b:43:52:6b:eb:20:10:cc:
                    49:f1:d7:3f:2d:d2:02:92:29:8c:7d:4f:5e:02:b3:
                    b3:b8:9c:95:86:53:72:b4:35:81:f6:09:a4:85:be:
                    88:2e:05:0a:cb:44:74:3d:c8:ef:be:7f:43:c8:6a:
                    fc:78:61:ce:94:b0:b4:45:ee:23:58:44:62:09:19:
                    53:77:f1:d9:71:e2:89:1a:2e:14:e7:14:b8:57:d7:
                    a4:e4:3d:28:29:6d:0f:c3:09:b6:b3:90:41:2d:ca:
                    d9:63:ab:bb:84:00:bb:fa:fe:c0:1a:14:08:63:80:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:36:9C:76:26:80:28:C5:5A:E4:06:E4:D4:35:5A:A4:79:2E:50:8A
            X509v3 Authority Key Identifier:
                keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9f:e9:90:fb:cc:db:13:c7:3c:70:88:d6:ea:f8:ce:01:86:
         c0:47:70:79:92:4c:76:a0:38:f7:58:99:d1:9f:c2:ea:b9:37:
         b7:09:f5:cc:55:92:76:43:9c:10:cf:fd:94:23:3f:f6:d4:6d:
         15:8b:39:cd:ea:7e:3c:82:f2:ff:cc:32:e1:c6:28:da:ad:73:
         e1:15:b6:53:d5:2c:79:c4:be:e6:d9:0f:0e:23:a9:88:ea:7f:
         90:fc:fd:ec:68:6b:ff:15:91:7c:30:c0:f7:8e:5f:ab:da:23:
         51:cb:f9:10:6e:af:e7:09:b0:ae:2b:93:22:e4:6d:a4:ac:dd:
         e1:a1:ce:ce:a1:e2:12:9f:96:1f:89:b0:f4:af:e5:c6:e3:a3:
         ed:6d:b4:63:18:6f:50:5c:95:8d:5c:21:81:77:2a:5a:4c:34:
         7f:39:2c:d1:46:42:45:2d:80:f0:60:9f:6e:77:e3:e7:c3:a9:
         41:c7:31:40:fd:54:11:7f:bf:44:0f:4b:fe:5b:fb:f5:aa:d6:
         8d:d2:bc:cd:e4:89:e5:8f:91:c6:54:8b:ad:1d:a9:13:c9:bc:
         d0:bf:fc:35:32:72:ab:25:89:67:f9:a0:e1:dd:ed:91:51:ff:
         df:dd:d2:84:14:a9:90:a8:a5:47:11:ba:04:5e:eb:6c:11:aa:
         95:86:ba:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYwNkExMTAvBgNVBAUTKEEzQ0IzOThFQzczOTUxNzQ3NjJEOTMwMzNFNzA2MDlE
NjBGNEREQjIwHhcNMjYwOTIxMDMyMDA3WhcNMjYwOTI4MDMyMDA3WjAYMRYwFAYD
VQQDEw02YWIwYTI2Ny1jYzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8+3bDygClA930OSX61OhpJOFqQZC8B6q/wXUdtwGUpZhljcQCOc00GVWVhr
B29rgnkshOrLnH/XMt5ZK7DzeJHLTObaP/XA2YnHeBzRticy6+leYWYlgBt+hcKm
h6u1tnNj1qEFAoTLQMdrx/GXo4nxpV+j92QDjLspGNGWEnMO4DnSD0ZC73tNa0bX
W0NSa+sgEMxJ8dc/LdICkimMfU9eArOzuJyVhlNytDWB9gmkhb6ILgUKy0R0Pcjv
vn9DyGr8eGHOlLC0Re4jWERiCRlTd/HZceKJGi4U5xS4V9ek5D0oKW0Pwwm2s5BB
LcrZY6u7hAC7+v7AGhQIY4Ao0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHY2nHYm
gCjFWuQG5NQ1WqR5LlCKMB8GA1UdIwQYMBaAFKPLOY7HOVF0di2TAz5wYJ1g9N2y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS80RjI1ODhFNEJC
NDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVYUjJMWk1EUG5CZ25XRDAz
YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL284czVqc2M1VVhSMkxaTURQbkJnbldEMDNiSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjA2QS80RjI1ODhFNEJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi9vOHM1anNjNVVY
UjJMWk1EUG5CZ25XRDAzYkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc5/pkPvM2xPHPHCI1ur4zgGGwEdweZJMdqA491iZ0Z/C6rk3twn1zFWSdkOc
EM/9lCM/9tRtFYs5zep+PILy/8wy4cYo2q1z4RW2U9UsecS+5tkPDiOpiOp/kPz9
7Ghr/xWRfDDA945fq9ojUcv5EG6v5wmwriuTIuRtpKzd4aHOzqHiEp+WH4mw9K/l
xuOj7W20YxhvUFyVjVwhgXcqWkw0fzks0UZCRS2A8GCfbnfj58OpQccxQP1UEX+/
RA9L/lv79arWjdK8zeSJ5Y+RxlSLrR2pE8m80L/8NTJyqyWJZ/mg4d3tkVH/393S
hBSpkKilRxG6BF7rbBGqlYa62w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:34:00 2026 by rpki-client