Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
File:                     8kxEMhD3QcvlnQFOum7pcrXN2uc.mft (raw, json)
Hash identifier:          meChxz+u+p7bTXjKaDpZ2HEAq5ornWXmbeqpmsazxU4=
Subject key identifier:   08:2F:94:AE:ED:7A:53:70:1C:AC:FA:AE:C1:F8:D8:A4:E4:42:48:45
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Certificate issuer:       /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
Manifest number:          01AE
Signing time:             Tue 13 Oct 2026 04:38:04 +0000
Manifest this update:     Tue 13 Oct 2026 04:38:04 +0000
Manifest next update:     Tue 20 Oct 2026 04:38:04 +0000
Files and hashes:         1: 8kxEMhD3QcvlnQFOum7pcrXN2uc.crl (hash: Lg+Nq5fXpA2rirj8UQaTUbMVy/MqyRw/r/0wlTerhlA=)
                          2: 20A6C35C37AF11EF844EC638C4F9AE02.roa (hash: viM//8H5DSfhfHw8dOdgq6Dks9Sycd3bZEY4Fif7q2Q=)
                          3: 2117AE6E37AF11EF844EC638C4F9AE02.roa (hash: OoFaMSSRiul6Qi62vK8HBSWETfbtSpuzZaFSM3QatEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 04:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
        Validity
            Not Before: Oct 13 04:38:04 2026 GMT
            Not After : Oct 20 04:38:04 2026 GMT
        Subject: CN=6acdb5ac-a6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:47:7a:a9:47:4b:0d:b6:69:cc:a5:84:ed:22:
                    ea:4b:ad:9e:bc:cf:d0:84:e4:73:7e:df:1b:dc:25:
                    eb:30:d0:dc:97:b7:20:0c:67:71:ef:b3:67:f4:13:
                    ca:54:63:dc:31:ce:15:dd:7c:fe:3d:27:95:87:69:
                    8c:a6:29:d5:76:d3:48:d9:5f:6e:20:0a:89:db:7a:
                    74:fd:de:47:ed:50:47:38:33:19:91:28:6e:32:98:
                    75:89:66:eb:7b:8c:3f:70:a1:53:f4:f6:b2:96:a8:
                    38:9f:99:c9:91:4c:13:94:ba:5f:11:f1:ee:62:7b:
                    72:7f:d1:16:62:2a:20:7b:b7:2b:3e:2c:77:b7:7d:
                    b8:c7:63:f3:82:3f:c6:6d:51:d7:f4:71:fc:37:34:
                    20:42:7f:05:28:f7:0e:b6:61:55:ff:ab:51:49:6b:
                    ff:d5:c8:ce:d3:04:05:78:bd:c1:35:61:dd:04:4d:
                    7e:36:ed:84:cd:f4:1a:7a:99:73:78:4e:0c:13:f3:
                    ab:38:01:df:6c:5e:3d:4d:7e:a7:c3:56:33:b8:88:
                    9e:a1:c6:0b:87:4f:4f:1c:92:54:38:92:bb:30:ce:
                    03:38:04:23:75:20:43:71:91:d0:d9:e3:59:66:28:
                    4e:f7:04:3d:0e:0a:f5:dc:e5:12:cb:c2:71:0c:c5:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2F:94:AE:ED:7A:53:70:1C:AC:FA:AE:C1:F8:D8:A4:E4:42:48:45
            X509v3 Authority Key Identifier:
                keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:db:d0:e6:c8:c6:d7:b2:63:db:79:1c:43:ac:34:00:42:
         47:d5:9a:b2:0a:8e:28:24:38:c8:df:2a:f6:6b:88:bf:d4:7e:
         b1:5f:19:16:f0:bf:73:96:44:16:0f:fb:86:f2:d2:2b:97:3f:
         e2:9e:0b:79:a9:85:8a:16:64:2f:08:b4:f1:40:3d:22:bd:0e:
         e4:a4:f1:e5:49:85:c4:4b:68:45:05:f7:34:42:e0:a5:40:ed:
         f1:34:3e:8f:c3:a8:f2:2d:85:be:d6:a2:e1:b6:92:4d:95:78:
         26:47:45:50:85:fb:67:d2:c4:ef:8e:57:e1:1d:7b:35:73:c5:
         73:5d:a8:9a:c9:f3:e4:7c:23:4d:a4:b0:1d:ea:6b:a2:03:a4:
         55:b4:c5:c0:95:97:2a:5b:9b:53:96:53:6a:65:95:7b:38:3a:
         b0:dc:55:1b:77:30:46:13:4c:96:7b:d3:14:37:68:cd:ab:eb:
         3b:04:41:91:f2:68:74:12:cd:b1:aa:ef:8d:b2:c3:6b:57:5b:
         88:0c:0f:61:2c:db:d7:c5:63:ea:2b:ac:da:0b:db:e1:38:9e:
         e9:f4:bd:be:80:12:b9:00:cf:db:cc:8d:20:da:7f:94:0d:b5:
         5f:fd:22:3a:43:81:ad:61:92:15:54:1b:95:55:ee:5b:fd:8b:
         f9:6b:1e:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy
QjVDRERBRTcwHhcNMjYxMDEzMDQzODA0WhcNMjYxMDIwMDQzODA0WjAYMRYwFAYD
VQQDEw02YWNkYjVhYy1hNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1kd6qUdLDbZpzKWE7SLqS62evM/QhORzft8b3CXrMNDcl7cgDGdx77Nn9BPK
VGPcMc4V3Xz+PSeVh2mMpinVdtNI2V9uIAqJ23p0/d5H7VBHODMZkShuMph1iWbr
e4w/cKFT9Paylqg4n5nJkUwTlLpfEfHuYntyf9EWYioge7crPix3t324x2Pzgj/G
bVHX9HH8NzQgQn8FKPcOtmFV/6tRSWv/1cjO0wQFeL3BNWHdBE1+Nu2EzfQaeplz
eE4ME/OrOAHfbF49TX6nw1YzuIieocYLh09PHJJUOJK7MM4DOAQjdSBDcZHQ2eNZ
ZihO9wQ9Dgr13OUSy8JxDMWE1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgvlK7t
elNwHKz6rsH42KTkQkhFMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3
QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1Fj
dmxuUUZPdW03cGNyWE4ydWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASE/b0ObIxteyY9t5HEOsNABCR9WasgqOKCQ4yN8q9muIv9R+sV8ZFvC/c5ZE
Fg/7hvLSK5c/4p4LeamFihZkLwi08UA9Ir0O5KTx5UmFxEtoRQX3NELgpUDt8TQ+
j8Oo8i2Fvtai4baSTZV4JkdFUIX7Z9LE745X4R17NXPFc12omsnz5HwjTaSwHepr
ogOkVbTFwJWXKlubU5ZTamWVezg6sNxVG3cwRhNMlnvTFDdozavrOwRBkfJodBLN
sarvjbLDa1dbiAwPYSzb18Vj6ius2gvb4Tie6fS9voASuQDP28yNINp/lA21X/0i
OkOBrWGSFVQblVXuW/2L+WsetQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 14:25:02 2026 by rpki-client