Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
File:                     kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json)
Hash identifier:          qB78mitlbHbxTuV5Eafxgt/vFZ2GfAc8vwkd2ToA4+c=
Subject key identifier:   CE:13:44:B5:3F:81:EC:74:D8:EF:5F:9D:E4:79:3F:BB:33:83:AB:FC
Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA
Certificate issuer:       /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
Certificate serial:       04E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
Manifest number:          04C7
Signing time:             Sat 10 Oct 2026 23:54:39 +0000
Manifest this update:     Sat 10 Oct 2026 23:54:38 +0000
Manifest next update:     Sat 17 Oct 2026 23:54:38 +0000
Files and hashes:         1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: 9IADWvXDkJw/4OGP98ipOKMzkCqOZRUG6DSfSoQbCtw=)
                          2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl
                          rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 23:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1248 (0x4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA
        Validity
            Not Before: Oct 10 23:54:38 2026 GMT
            Not After : Oct 17 23:54:38 2026 GMT
        Subject: CN=6acad03f-31dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:01:e3:8f:ad:ae:a1:33:2c:1f:53:b3:da:
                    13:c8:94:f6:ba:66:8d:01:a3:dc:fa:6f:4f:18:27:
                    77:35:3a:70:5b:1b:a7:8b:55:91:e1:78:cb:51:43:
                    8d:d8:f6:2c:7b:17:03:a2:68:c4:21:00:49:22:6d:
                    ce:0c:8f:ec:8c:f7:8e:00:77:f5:14:35:ed:86:16:
                    18:80:d9:15:2f:65:e3:ca:38:bd:ec:e7:c8:ec:df:
                    a9:bb:8b:74:d8:10:ce:76:5f:22:6d:11:4c:5c:48:
                    ad:33:2f:5b:da:30:84:90:7a:cd:3d:35:9c:ca:5f:
                    06:c9:48:0a:94:1d:fd:56:92:c4:b5:67:c3:32:82:
                    49:5f:f1:35:68:1b:e1:f3:b8:32:1f:97:f0:12:ea:
                    8a:2f:62:11:42:0b:56:96:9e:d8:02:d9:a0:4e:00:
                    97:a5:67:65:51:fe:6d:33:6e:2b:39:6f:ac:e0:76:
                    98:94:c7:4c:ca:58:01:93:1b:0d:6a:81:5c:57:9d:
                    81:60:70:d2:25:da:d6:a5:4b:60:a5:f9:f1:bd:64:
                    c3:ea:cd:ee:d4:aa:d8:f5:95:87:fe:5b:db:a7:7a:
                    9c:c2:d8:4a:57:a3:b9:86:01:f0:97:63:ba:c5:dc:
                    55:49:4d:85:90:e8:aa:6b:9f:ba:59:2b:0e:af:b1:
                    ed:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:13:44:B5:3F:81:EC:74:D8:EF:5F:9D:E4:79:3F:BB:33:83:AB:FC
            X509v3 Authority Key Identifier:
                keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:a7:8f:cf:68:8b:04:9e:7b:2c:fe:d4:6f:61:7d:f8:eb:
         ff:5f:72:41:ff:46:4c:30:f0:1c:58:00:e7:cb:ce:73:3c:c1:
         43:24:be:9d:db:4d:3d:2e:9d:0f:85:ad:9d:eb:5c:a1:b4:2e:
         07:64:a4:57:f1:13:b1:33:be:9e:a9:31:7e:8b:ab:47:9f:de:
         57:d0:47:d3:91:e0:fc:ad:b8:cc:04:c9:15:fa:8a:d2:45:46:
         68:69:dc:85:80:4b:a0:53:39:66:13:61:ee:b4:0c:f7:1b:54:
         ef:a2:46:b2:62:d2:97:aa:4c:72:b9:ca:b4:08:9e:87:02:1c:
         b1:8b:77:75:63:70:9c:86:ee:c4:54:8e:20:8f:40:0d:c7:ae:
         d2:54:27:1e:89:4b:c5:09:ca:78:6f:1f:f1:8d:72:1c:ec:0f:
         66:45:d7:f1:21:1f:e2:d9:5a:41:b0:b9:46:d5:45:cb:d5:0f:
         d7:45:86:fc:9f:03:07:11:07:94:9e:99:d3:3d:a5:dd:be:f2:
         97:af:a3:17:05:4b:a1:74:1c:0e:cc:92:c6:da:b5:7b:10:e0:
         fe:0f:7a:a4:6f:1b:b4:9b:4f:c0:55:30:50:6e:df:c6:1a:62:
         e1:ef:a9:1d:98:79:e0:53:cc:d7:86:d8:53:44:ad:b4:14:80:
         13:45:07:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD
NDY3NEVCQUEwHhcNMjYxMDEwMjM1NDM4WhcNMjYxMDE3MjM1NDM4WjAYMRYwFAYD
VQQDEw02YWNhZDAzZi0zMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJMB44+trqEzLB9Ts9oTyJT2umaNAaPc+m9PGCd3NTpwWxuni1WR4XjLUUON
2PYsexcDomjEIQBJIm3ODI/sjPeOAHf1FDXthhYYgNkVL2Xjyji97OfI7N+pu4t0
2BDOdl8ibRFMXEitMy9b2jCEkHrNPTWcyl8GyUgKlB39VpLEtWfDMoJJX/E1aBvh
87gyH5fwEuqKL2IRQgtWlp7YAtmgTgCXpWdlUf5tM24rOW+s4HaYlMdMylgBkxsN
aoFcV52BYHDSJdrWpUtgpfnxvWTD6s3u1KrY9ZWH/lvbp3qcwthKV6O5hgHwl2O6
xdxVSU2FkOiqa5+6WSsOr7HtRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4TRLU/
gex02O9fneR5P7szg6v8MB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG
MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn
aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm7Cnj89oiwSeeyz+1G9hffjr/19yQf9GTDDwHFgA58vOczzBQyS+ndtNPS6d
D4WtnetcobQuB2SkV/ETsTO+nqkxfourR5/eV9BH05Hg/K24zATJFfqK0kVGaGnc
hYBLoFM5ZhNh7rQM9xtU76JGsmLSl6pMcrnKtAiehwIcsYt3dWNwnIbuxFSOII9A
Dceu0lQnHolLxQnKeG8f8Y1yHOwPZkXX8SEf4tlaQbC5RtVFy9UP10WG/J8DBxEH
lJ6Z0z2l3b7yl6+jFwVLoXQcDsySxtq1exDg/g96pG8btJtPwFUwUG7fxhpi4e+p
HZh54FPM14bYU0SttBSAE0UHUw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:39:17 2026 by rpki-client