Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
File:                     4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft (raw, json)
Hash identifier:          U1jeMyumZd3slOKxbUhS84LlAuU7JdRGyg7vGgo+O74=
Subject key identifier:   8E:39:89:8D:55:DE:E8:CC:61:A0:11:44:88:E7:62:99:FB:6B:75:77
Authority key identifier: E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1
Certificate issuer:       /CN=A914882C/serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
Manifest number:          0CC8
Signing time:             Mon 12 Oct 2026 18:51:28 +0000
Manifest this update:     Mon 12 Oct 2026 18:51:27 +0000
Manifest next update:     Mon 19 Oct 2026 18:51:27 +0000
Files and hashes:         1: 4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl (hash: Ohb6BQVBMmodfORhk1REmQ7QWPbuXrQ0WVExSj46lj4=)
                          2: 2872362213AC11F18E65BA7479EE528E.roa (hash: yg3DGNwLO01K3NtVfA2Oj4hQOOX3hfO+/m/S6eY0LII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 18:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C, serialNumber=E2339AAB4862BF6B4755CD96A70B64DB793D3AE1
        Validity
            Not Before: Oct 12 18:51:27 2026 GMT
            Not After : Oct 19 18:51:27 2026 GMT
        Subject: CN=6acd2c30-0d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4c:a3:e4:2d:5b:73:eb:79:45:f2:47:86:ea:
                    61:b8:2c:01:cf:d1:01:cf:1c:14:c4:52:9a:c1:fd:
                    1d:f3:16:a4:91:6a:ed:16:3d:98:4a:5b:84:38:e2:
                    a3:f5:83:c9:77:7d:e8:32:43:f5:33:06:d2:47:e7:
                    4d:e5:80:48:f5:52:3c:70:3a:8b:28:1b:ca:ae:66:
                    7f:40:ea:8d:55:11:d8:2f:6b:ce:eb:5f:6f:bb:3b:
                    33:5e:ff:7e:4b:d7:0a:57:29:6e:23:97:8d:93:f2:
                    cf:1a:39:f1:7c:c5:7a:ef:51:3f:67:b8:7c:42:16:
                    01:3e:be:8e:fb:30:fa:fb:fa:99:32:59:32:4e:95:
                    53:c3:c1:43:10:2b:8c:68:fc:7d:87:c5:18:df:c6:
                    93:ce:d4:2e:7a:9b:9b:d2:3a:50:8e:c3:b0:1b:98:
                    09:84:e1:ae:f9:02:c9:a9:ad:3e:fa:16:33:e2:42:
                    4a:2b:37:5d:d0:c0:20:ed:6b:77:e8:87:96:88:8e:
                    f1:c4:6c:09:83:92:27:9c:f6:6f:d4:07:60:4e:ab:
                    a6:24:2f:65:f8:e1:ed:51:8b:97:c8:01:fd:65:3a:
                    78:5f:b8:ae:63:6c:ef:6e:a8:6a:ed:44:55:a5:5b:
                    04:77:91:c6:c4:e6:e2:05:ae:12:b1:83:bf:46:90:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:89:8D:55:DE:E8:CC:61:A0:11:44:88:E7:62:99:FB:6B:75:77
            X509v3 Authority Key Identifier:
                keyid:E2:33:9A:AB:48:62:BF:6B:47:55:CD:96:A7:0B:64:DB:79:3D:3A:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jOaq0hiv2tHVc2Wpwtk23k9OuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/4jOaq0hiv2tHVc2Wpwtk23k9OuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8a:03:85:62:fd:63:c3:04:75:21:48:a9:62:9f:5d:68:71:
         fa:d7:73:70:22:58:a2:f4:97:68:d5:9f:25:9d:8f:37:ab:41:
         35:4a:e1:da:e2:91:15:59:07:f9:7a:a3:5e:24:ef:a0:8c:f9:
         fb:ac:13:ce:b5:54:11:b1:6d:36:89:7b:76:50:01:66:e1:63:
         ec:4e:16:43:44:f7:83:54:16:10:9f:92:39:9e:a1:10:81:b1:
         e5:9f:33:bf:01:0b:c4:ae:ea:92:60:8a:91:a7:d1:89:f6:9a:
         73:8c:9c:fb:73:4c:21:f0:36:93:8e:21:0e:dd:39:02:51:77:
         96:4a:d5:b0:df:52:54:74:4d:0a:50:a7:84:87:44:4d:2e:76:
         df:24:f4:c0:b0:04:f8:f2:d3:f6:70:9e:85:f6:5f:a9:1a:13:
         f2:e9:10:86:4d:e1:23:43:b9:4f:b0:07:96:01:84:a0:ce:d7:
         46:38:b1:6b:d7:05:a3:e6:4a:07:10:2b:61:29:af:93:8c:04:
         7f:7d:6b:3d:ea:d6:f1:3d:8e:33:ea:a7:1d:e4:c4:52:f4:54:
         61:55:37:9b:d9:13:c4:4f:c4:39:c0:f0:cb:2d:52:70:53:53:
         db:f3:18:9d:2b:73:1d:51:19:27:95:7b:bc:b3:ec:ef:6f:38:
         08:e3:91:22
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
ODgyQzExMC8GA1UEBRMoRTIzMzlBQUI0ODYyQkY2QjQ3NTVDRDk2QTcwQjY0REI3
OTNEM0FFMTAeFw0yNjEwMTIxODUxMjdaFw0yNjEwMTkxODUxMjdaMBgxFjAUBgNV
BAMTDTZhY2QyYzMwLTBkMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCPTKPkLVtz63lF8keG6mG4LAHP0QHPHBTEUprB/R3zFqSRau0WPZhKW4Q44qP1
g8l3fegyQ/UzBtJH503lgEj1UjxwOosoG8quZn9A6o1VEdgva87rX2+7OzNe/35L
1wpXKW4jl42T8s8aOfF8xXrvUT9nuHxCFgE+vo77MPr7+pkyWTJOlVPDwUMQK4xo
/H2HxRjfxpPO1C56m5vSOlCOw7AbmAmE4a75AsmprT76FjPiQkorN13QwCDta3fo
h5aIjvHEbAmDkiec9m/UB2BOq6YkL2X44e1Ri5fIAf1lOnhfuK5jbO9uqGrtRFWl
WwR3kcbE5uIFrhKxg79GkCHfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjjmJjVXe
6MxhoBFEiOdimftrdXcwHwYDVR0jBBgwFoAU4jOaq0hiv2tHVc2Wpwtk23k9OuEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4ODJDL0M2NUQwNUM4MzZE
QzExRUE4NjE5OEM3M0M0RjlBRTAyLzRqT2FxMGhpdjJ0SFZjMldwd3RrMjNrOU91
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNGpPYXEwaGl2MnRIVmMyV3B3dGsyM2s5T3VFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ4
ODJDL0M2NUQwNUM4MzZEQzExRUE4NjE5OEM3M0M0RjlBRTAyLzRqT2FxMGhpdjJ0
SFZjMldwd3RrMjNrOU91RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCGigOFYv1jwwR1IUipYp9daHH613NwIlii9Jdo1Z8lnY83q0E1SuHa4pEVWQf5
eqNeJO+gjPn7rBPOtVQRsW02iXt2UAFm4WPsThZDRPeDVBYQn5I5nqEQgbHlnzO/
AQvEruqSYIqRp9GJ9ppzjJz7c0wh8DaTjiEO3TkCUXeWStWw31JUdE0KUKeEh0RN
LnbfJPTAsAT48tP2cJ6F9l+pGhPy6RCGTeEjQ7lPsAeWAYSgztdGOLFr1wWj5koH
ECthKa+TjAR/fWs96tbxPY4z6qcd5MRS9FRhVTeb2RPET8Q5wPDLLVJwU1Pb8xid
K3MdURknlXu8s+zvbzgI45Ei
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:21:30 2026 by rpki-client