Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File:                     EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier:          aLjfl+D6De/XGLf8dodpk25g3XOF+B35opoUjn6FNNg=
Subject key identifier:   6F:FB:72:AA:7C:6D:2D:83:26:D9:D6:55:4F:39:81:E9:18:24:34:B4
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer:       /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial:       020F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number:          085C
Signing time:             Mon 12 Oct 2026 22:47:35 +0000
Manifest this update:     Mon 12 Oct 2026 22:47:34 +0000
Manifest next update:     Mon 19 Oct 2026 22:47:34 +0000
Files and hashes:         1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: /U0Uj8Gv89pqtHWcx7uLNWCH+2O8idoPXHzbHI+dpq4=)
                          2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: 5GjTNJmRyuym9Vk2w+VFTLpCECbH6Iwjcf4wp0xQSoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 22:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
        Validity
            Not Before: Oct 12 22:47:34 2026 GMT
            Not After : Oct 19 22:47:34 2026 GMT
        Subject: CN=6acd6387-d542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:09:50:a9:4b:42:48:59:e4:96:88:62:07:
                    7a:5d:e5:5d:fe:5f:d2:64:8f:da:78:8a:d4:a6:fd:
                    af:3f:38:4f:a8:21:3b:5f:12:92:81:77:70:b8:9c:
                    24:d5:23:b7:5d:13:fc:ad:1f:c0:76:8e:cd:00:fd:
                    a3:2f:f8:23:42:ae:49:6b:07:a4:56:d4:94:be:72:
                    ff:05:c9:0f:45:71:bf:23:d1:18:eb:15:87:b2:c6:
                    84:bf:5c:08:48:85:43:cb:8f:6d:47:64:9f:ca:5a:
                    2a:f8:60:6a:85:b7:a7:87:dd:4f:39:e0:06:d5:a3:
                    58:88:1b:45:ce:76:98:42:da:ed:7c:06:f2:51:31:
                    1b:8f:09:6d:0f:c6:48:ff:b0:7a:8e:56:e1:19:27:
                    dd:8a:ca:ae:a8:d6:57:f8:c9:f6:0c:5f:05:7a:a9:
                    04:a1:09:cd:c1:17:ff:d0:b4:f0:a1:5c:04:a3:72:
                    e0:50:83:5e:3f:fd:38:3a:08:96:a1:b7:58:1c:65:
                    a2:a5:33:cc:25:4e:80:5e:43:cd:ed:12:6a:84:bd:
                    fb:c0:67:a7:81:03:aa:70:59:31:5d:1e:bf:2a:67:
                    82:ce:b1:43:0c:7c:3d:12:da:f6:6e:32:ce:99:d3:
                    6a:02:8d:09:68:09:f8:fa:7f:54:67:ad:b5:a4:07:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FB:72:AA:7C:6D:2D:83:26:D9:D6:55:4F:39:81:E9:18:24:34:B4
            X509v3 Authority Key Identifier:
                keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a0:a6:63:a7:d4:3a:e0:8f:d0:12:c2:cf:4a:1b:23:47:e6:
         f3:3d:b7:19:ea:29:a6:ac:54:4c:63:6a:bf:6a:f9:66:a1:69:
         9f:12:86:c5:fe:28:cd:cc:ec:4b:ec:1e:3f:f7:32:05:59:34:
         b3:88:0d:2e:da:e6:f0:13:a6:e5:b9:b9:4e:c9:f8:58:70:8b:
         f5:ec:dc:83:52:ef:bd:fd:48:42:ab:aa:68:af:4f:fc:07:ee:
         72:43:cc:dc:70:0c:e6:de:1b:e7:8f:88:7a:e6:e9:8e:f8:09:
         03:f9:24:e4:60:77:c8:36:26:6c:9d:a3:b4:ca:de:73:ed:46:
         f6:24:75:02:9f:e8:a4:29:a9:4e:a5:e8:ef:94:60:5f:04:aa:
         d6:15:6b:1a:00:08:a0:6e:65:6a:04:88:97:1a:6c:5c:63:9c:
         ac:d2:5a:f5:fd:f2:12:32:62:d6:64:28:ec:56:15:e5:8a:ae:
         0b:71:e0:1e:46:1c:40:0d:36:e6:8c:29:a5:12:c8:8d:b3:de:
         37:34:8a:6a:72:3a:a8:6a:bd:4c:0e:10:6f:8d:b6:d6:15:ea:
         19:3f:50:d8:38:f6:3f:d5:23:e6:36:86:0f:3c:a4:b9:35:ff:
         20:8d:c5:98:af:8c:ef:65:af:2b:d2:71:37:e8:1e:aa:f3:e2:
         17:a3:05:e6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz
M0UwMkMwMTkwHhcNMjYxMDEyMjI0NzM0WhcNMjYxMDE5MjI0NzM0WjAYMRYwFAYD
VQQDEw02YWNkNjM4Ny1kNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3msJUKlLQkhZ5JaIYgd6XeVd/l/SZI/aeIrUpv2vPzhPqCE7XxKSgXdwuJwk
1SO3XRP8rR/Ado7NAP2jL/gjQq5JawekVtSUvnL/BckPRXG/I9EY6xWHssaEv1wI
SIVDy49tR2Sfyloq+GBqhbenh91POeAG1aNYiBtFznaYQtrtfAbyUTEbjwltD8ZI
/7B6jlbhGSfdisquqNZX+Mn2DF8FeqkEoQnNwRf/0LTwoVwEo3LgUINeP/04OgiW
obdYHGWipTPMJU6AXkPN7RJqhL37wGengQOqcFkxXR6/KmeCzrFDDHw9Etr2bjLO
mdNqAo0JaAn4+n9UZ621pAfJCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/7cqp8
bS2DJtnWVU85gekYJDS0MB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF
MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3
QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu
cWZJYlRFLWd5R1l6NEN3QmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAraCmY6fUOuCP0BLCz0obI0fm8z23GeoppqxUTGNqv2r5ZqFpnxKGxf4ozczs
S+weP/cyBVk0s4gNLtrm8BOm5bm5Tsn4WHCL9ezcg1Lvvf1IQquqaK9P/AfuckPM
3HAM5t4b54+IeubpjvgJA/kk5GB3yDYmbJ2jtMrec+1G9iR1Ap/opCmpTqXo75Rg
XwSq1hVrGgAIoG5lagSIlxpsXGOcrNJa9f3yEjJi1mQo7FYV5YquC3HgHkYcQA02
5owppRLIjbPeNzSKanI6qGq9TA4Qb4221hXqGT9Q2Dj2P9Uj5jaGDzykuTX/II3F
mK+M72WvK9JxN+geqvPiF6MF5g==
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:19:59 2026 by rpki-client