Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
File:                     86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json)
Hash identifier:          d8jEyIvVSBlBaUd1UGxoyDCBK/qjk4nMoINQE6pesIU=
Subject key identifier:   07:84:74:BE:E9:A7:29:60:46:C5:CF:6F:20:04:B4:F1:86:BF:A3:17
Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
Certificate issuer:       /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Certificate serial:       02E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
Manifest number:          02DC
Signing time:             Tue 13 Oct 2026 01:32:58 +0000
Manifest this update:     Tue 13 Oct 2026 01:32:57 +0000
Manifest next update:     Tue 20 Oct 2026 01:32:57 +0000
Files and hashes:         1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: Il3sWjkrjSU+iWHe03g1ADPPA0o7b9huw/ssbxq/6Mk=)
                          2: 5F0ACC76962011F09F73D036C4F9AE02.roa (hash: zxI7VE3eg0TasmD62sh1djQSdFuNkWLF/C/+dkz7utI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
                          rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 01:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
        Validity
            Not Before: Oct 13 01:32:57 2026 GMT
            Not After : Oct 20 01:32:57 2026 GMT
        Subject: CN=6acd8a4a-230a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:03:cf:14:a4:14:52:40:18:24:df:f9:b8:
                    a5:ba:59:fb:fa:89:79:02:b7:60:4b:29:ab:e7:35:
                    de:ed:ef:b2:19:27:5f:73:ce:76:7e:f0:72:ab:e7:
                    90:5a:be:29:40:43:c3:12:05:1e:32:ed:46:3a:b6:
                    fe:82:54:c9:51:83:e2:b3:de:a2:08:57:d8:d0:62:
                    54:1f:e0:b7:76:7d:83:97:5f:7c:de:7c:8b:4a:bb:
                    c5:7e:ac:ee:8c:a0:bc:96:d3:64:d6:aa:99:4c:fe:
                    35:d2:3b:89:45:7a:0c:95:23:57:9d:82:13:7b:7b:
                    e2:94:d0:12:a3:e9:19:b9:13:46:e2:d8:03:64:67:
                    5c:29:96:1f:27:a2:c0:bc:2b:92:2c:34:7d:08:df:
                    b6:d9:85:4e:4d:c9:f3:f2:53:69:f3:4c:f0:c5:fe:
                    a4:82:9d:56:c8:7d:11:1a:56:31:39:19:a6:7a:9d:
                    93:4c:1f:20:45:81:4f:37:c0:8f:ed:b6:76:c6:44:
                    af:82:ff:bc:da:da:96:6c:a9:8b:dd:83:55:c7:e5:
                    8a:bf:12:f1:85:14:d2:04:6a:b0:c5:61:95:a6:c4:
                    ab:ca:6f:9a:fc:4c:44:4b:5f:62:2b:23:58:02:df:
                    f8:54:fb:e4:e7:b0:c6:9f:80:41:c5:f9:e0:a0:45:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:84:74:BE:E9:A7:29:60:46:C5:CF:6F:20:04:B4:F1:86:BF:A3:17
            X509v3 Authority Key Identifier:
                keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:21:1a:74:77:d2:bb:e4:50:ed:ea:61:3e:c1:2e:65:83:6d:
         a2:70:be:f7:88:cd:a4:e5:0c:c9:7c:39:a3:6d:99:34:92:76:
         ba:cd:34:64:d3:b7:0f:31:a7:80:78:b7:90:9b:f2:96:04:1c:
         17:19:db:61:3e:94:32:af:6c:76:12:29:d5:03:51:02:c0:80:
         8a:b1:3a:93:81:21:7b:68:3c:ec:c9:a2:84:3e:26:77:90:11:
         5f:01:4f:cd:fb:d9:09:7d:c1:17:e6:18:f4:dd:3a:14:84:5e:
         46:4c:cf:33:77:99:6e:fe:98:28:21:22:f8:5f:73:cf:f4:76:
         72:62:08:21:0b:41:07:c6:36:44:71:48:20:fa:64:df:46:40:
         07:3a:41:2d:91:45:72:cd:fe:ee:e2:56:38:f1:0a:a9:4a:8a:
         0a:00:bc:75:55:dc:13:66:02:4d:99:58:5e:6a:95:12:d1:ab:
         68:f4:6c:b4:69:1e:96:5b:c5:ff:94:e8:22:2d:ac:7d:c6:5d:
         97:81:90:fb:98:ec:0c:a9:02:7f:89:81:4e:bd:81:84:85:97:
         cd:0c:a1:46:36:34:84:57:66:59:ef:13:7d:47:39:4c:ee:90:
         65:fd:b6:a4:44:cc:fc:dc:71:7b:29:66:10:c7:f1:42:45:d5:
         0e:20:56:5d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5
RkM5M0JDOEMwHhcNMjYxMDEzMDEzMjU3WhcNMjYxMDIwMDEzMjU3WjAYMRYwFAYD
VQQDEw02YWNkOGE0YS0yMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoYgDzxSkFFJAGCTf+biluln7+ol5ArdgSymr5zXe7e+yGSdfc852fvByq+eQ
Wr4pQEPDEgUeMu1GOrb+glTJUYPis96iCFfY0GJUH+C3dn2Dl1983nyLSrvFfqzu
jKC8ltNk1qqZTP410juJRXoMlSNXnYITe3vilNASo+kZuRNG4tgDZGdcKZYfJ6LA
vCuSLDR9CN+22YVOTcnz8lNp80zwxf6kgp1WyH0RGlYxORmmep2TTB8gRYFPN8CP
7bZ2xkSvgv+82tqWbKmL3YNVx+WKvxLxhRTSBGqwxWGVpsSrym+a/ExES19iKyNY
At/4VPvk57DGn4BBxfngoEV4VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeEdL7p
pylgRsXPbyAEtPGGv6MXMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB
RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2
SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5
RldvQTJmUnVxd3lmeVR2SXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgyEadHfSu+RQ7ephPsEuZYNtonC+94jNpOUMyXw5o22ZNJJ2us00ZNO3DzGn
gHi3kJvylgQcFxnbYT6UMq9sdhIp1QNRAsCAirE6k4Ehe2g87MmihD4md5ARXwFP
zfvZCX3BF+YY9N06FIReRkzPM3eZbv6YKCEi+F9zz/R2cmIIIQtBB8Y2RHFIIPpk
30ZABzpBLZFFcs3+7uJWOPEKqUqKCgC8dVXcE2YCTZlYXmqVEtGraPRstGkellvF
/5ToIi2sfcZdl4GQ+5jsDKkCf4mBTr2BhIWXzQyhRjY0hFdmWe8TfUc5TO6QZf22
pETM/NxxeylmEMfxQkXVDiBWXQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:37:47 2026 by rpki-client