Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
File:                     8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json)
Hash identifier:          X9vt32TlZFhPPwYzB390QULWLD9s1TfljL1vorzbgGU=
Subject key identifier:   98:72:3D:A8:1E:34:05:39:77:35:D5:FB:86:D4:CF:62:E8:64:4C:26
Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00
Certificate issuer:       /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
Certificate serial:       084B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
Manifest number:          0843
Signing time:             Sat 10 Oct 2026 21:07:04 +0000
Manifest this update:     Sat 10 Oct 2026 21:07:03 +0000
Manifest next update:     Sat 17 Oct 2026 21:07:03 +0000
Files and hashes:         1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: pXScItsz58rKfWSf4LNNHvFFxXPQ5eew5tnjOroDbCs=)
                          2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: n19nALAcbxyJ3ZtZLN3SkgyLuIwERJFOSgc3xHqncQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl
                          rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 21:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2123 (0x84b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D750, serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
        Validity
            Not Before: Oct 10 21:07:03 2026 GMT
            Not After : Oct 17 21:07:03 2026 GMT
        Subject: CN=6acaa8f8-7abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:18:a1:aa:92:28:0a:0c:7d:36:b1:23:b4:
                    0b:ae:21:91:75:83:ae:1f:f5:84:a0:6a:49:28:34:
                    3c:78:a8:b5:1e:ce:e6:14:a9:f1:53:9a:b3:77:b9:
                    64:b8:41:03:d1:e5:2a:fd:5a:94:bf:e0:cb:15:46:
                    ed:75:fa:ae:fb:b3:74:0f:65:33:26:c0:00:ef:d6:
                    7e:e3:50:69:0b:b5:1b:28:bc:07:d1:c8:c4:44:02:
                    c4:b0:45:8a:17:bc:c6:66:a6:43:81:4a:e4:f2:b0:
                    d2:76:cb:84:d9:c3:0e:84:c2:ed:a7:a5:65:31:d7:
                    25:af:2d:9e:59:9d:ef:e2:14:9d:28:cf:32:85:54:
                    82:28:08:37:2c:77:dd:cb:f3:97:85:06:67:cc:c6:
                    ad:42:e0:40:2a:db:47:22:f5:38:e8:c2:0b:07:fe:
                    35:6f:12:eb:d2:d8:38:15:b0:60:38:70:6b:51:72:
                    c0:20:62:c6:2d:d8:36:2c:ce:8a:6e:56:89:4e:d6:
                    69:c1:92:8f:29:60:58:16:b9:1c:58:c2:67:83:06:
                    e2:45:bb:04:7e:8d:51:aa:2b:47:76:ba:9a:1f:fd:
                    d0:9a:f5:95:e4:65:d4:82:eb:a7:fc:c6:d0:5f:b7:
                    35:81:c5:da:e0:48:5e:b8:28:a6:b4:b8:ac:34:59:
                    d6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:72:3D:A8:1E:34:05:39:77:35:D5:FB:86:D4:CF:62:E8:64:4C:26
            X509v3 Authority Key Identifier:
                keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:a9:91:dd:c5:8c:23:fe:9d:c3:46:bd:ed:d9:5e:74:28:
         70:05:30:ba:01:77:93:57:f1:87:e6:03:43:58:ae:17:0c:90:
         fa:e6:10:32:c9:7f:2b:ed:82:e5:b6:9c:df:16:95:63:b5:68:
         1a:ff:10:37:7b:3e:34:14:1c:d3:ae:7c:4c:9e:01:b3:7c:58:
         65:ec:23:4d:dc:68:65:45:17:15:fc:99:fe:87:27:b7:48:2a:
         c0:83:82:79:f2:68:d4:44:a9:d7:da:c4:67:d6:8d:63:f3:d6:
         4b:8b:91:59:0a:f1:4c:26:88:fc:2b:2c:21:fa:4f:38:73:7e:
         4a:c0:26:9e:49:33:60:0d:4d:01:38:4c:32:06:14:09:a1:9b:
         cc:02:94:da:e9:9a:cb:bf:8f:5c:bb:2f:3a:bb:d0:f2:bc:c2:
         76:51:0f:d3:14:a1:54:a0:e6:a5:94:9f:16:ae:38:40:af:ca:
         7a:a4:f7:1c:dc:03:05:d1:c8:02:9c:09:cf:75:97:20:55:fb:
         ce:1a:e5:c3:e5:8f:ed:34:99:54:c9:8e:b2:ae:11:3e:22:ad:
         98:1a:86:7c:9f:48:69:d1:e1:c9:8e:14:f7:44:3d:d3:46:64:
         16:26:d9:96:e4:73:1e:d1:cb:54:e2:31:47:70:f6:cf:7a:bf:
         57:29:d1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:33:37 2026 by rpki-client