Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
File:                     fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json)
Hash identifier:          p4zswy7OXszKMIv1cKWZEu7jzraCEBrAlqG2VmWDPhI=
Subject key identifier:   8D:B7:5F:32:C9:10:F4:84:09:E3:18:AA:77:35:3A:67:4D:28:0B:87
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Certificate issuer:       /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial:       09B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
Manifest number:          099F
Signing time:             Sat 10 Oct 2026 20:02:45 +0000
Manifest this update:     Sat 10 Oct 2026 20:02:44 +0000
Manifest next update:     Sat 17 Oct 2026 20:02:44 +0000
Files and hashes:         1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: JX+h7VQ0DzFkEsrC0EKKY4SIwypjj1T98gjeHtKxkMo=)
                          2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: +2GMR/V9mZr0Ife9tGdydPkVcoSqLY2zhQZIUiI3Hq0=)
                          3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: bPFO6I2wWIPENqB/X87e5uIatc/LQckX7tfxgiWc7ts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
                          rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 20:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2480 (0x9b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
        Validity
            Not Before: Oct 10 20:02:44 2026 GMT
            Not After : Oct 17 20:02:44 2026 GMT
        Subject: CN=6aca99e5-5d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:83:1b:d8:82:7c:45:05:e3:d9:2b:9d:46:
                    58:7a:dd:d5:ee:ba:a1:b9:2d:c2:4b:e6:7d:20:45:
                    79:1f:2a:da:e1:6d:72:2e:14:cd:59:49:ef:26:d5:
                    2c:af:e9:24:81:ec:bc:22:09:81:94:07:3e:44:9c:
                    67:83:41:9f:76:0c:78:50:3f:8f:48:ed:f6:d0:ca:
                    6a:c9:6f:26:8f:69:01:c2:3a:2b:7b:bc:40:04:01:
                    37:79:10:86:aa:de:5b:3f:e5:f4:c1:33:2f:af:a8:
                    6c:7d:c6:d0:dc:32:89:89:52:29:fd:1d:5a:d3:d1:
                    b9:b5:9e:40:f0:33:6e:69:5e:5f:37:79:7e:d8:c0:
                    39:ba:55:e5:4f:86:35:85:c2:4a:13:24:61:22:a6:
                    88:1e:db:9a:50:e9:66:43:33:8b:9f:7f:5b:be:79:
                    90:02:32:47:09:07:52:b8:1f:d6:c6:d0:83:40:b3:
                    7c:34:4d:b6:b7:af:1e:53:28:f8:00:a4:c6:49:12:
                    74:10:be:6f:9c:f0:da:60:cd:1c:76:11:b7:f7:92:
                    27:64:53:be:24:99:4e:67:5f:ae:dc:7a:46:3d:6d:
                    60:c7:b6:f3:aa:d2:64:66:0d:8c:4e:39:ff:2b:5d:
                    de:29:5f:29:13:e3:3c:5d:30:37:96:0b:d9:75:35:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B7:5F:32:C9:10:F4:84:09:E3:18:AA:77:35:3A:67:4D:28:0B:87
            X509v3 Authority Key Identifier:
                keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ea:c1:af:38:ec:ae:59:50:de:16:b0:cd:af:1b:e6:74:dd:
         a6:fd:4e:fa:e2:22:4d:2c:ae:a3:9d:77:f0:aa:77:e2:89:8b:
         92:6e:00:28:19:0a:fc:48:b9:ac:39:d0:0a:b7:06:ac:7b:60:
         f4:e3:73:33:87:85:b0:88:21:48:f1:2c:b1:2f:1c:36:ea:fc:
         4c:f1:3b:76:8b:a8:aa:f2:0b:cd:4a:2f:18:99:37:f0:94:0f:
         0a:fe:f6:e3:8d:02:f1:04:5f:8a:78:98:a0:15:8f:e0:8b:cc:
         ef:0a:c5:24:f1:b6:02:f5:a7:42:9d:ad:2d:9d:08:a1:87:8b:
         2d:b2:aa:bc:d9:2e:53:32:9b:4f:cb:cb:30:f4:c2:f0:f4:dd:
         df:ec:50:af:af:ef:56:39:13:20:dd:98:cb:ff:32:d6:89:51:
         7e:fb:be:1a:69:9a:b7:f3:63:30:b8:b7:43:b6:41:e0:a1:3a:
         fe:aa:b3:e1:84:58:39:aa:3c:d7:f2:88:40:0d:c1:dc:c4:ad:
         de:e0:4d:e9:05:54:cb:3a:64:a8:c3:37:4e:90:f5:3c:f1:b8:
         d1:a8:a8:5d:33:b9:d9:3f:6e:3f:5a:17:1d:2d:0e:c4:ce:8a:
         d3:60:1f:b8:2a:97:55:3d:cf:76:e1:87:82:74:1c:d8:7e:59:
         f1:48:b0:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc1M0YxMTAvBgNVBAUTKDdFNzJEODAxQjM4QTcyQUI0QjAzNzZFMTJDOTU0MTI0
QUFFNDNDNkQwHhcNMjYxMDEwMjAwMjQ0WhcNMjYxMDE3MjAwMjQ0WjAYMRYwFAYD
VQQDEw02YWNhOTllNS01ZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtNeDG9iCfEUF49krnUZYet3V7rqhuS3CS+Z9IEV5Hyra4W1yLhTNWUnvJtUs
r+kkgey8IgmBlAc+RJxng0Gfdgx4UD+PSO320MpqyW8mj2kBwjore7xABAE3eRCG
qt5bP+X0wTMvr6hsfcbQ3DKJiVIp/R1a09G5tZ5A8DNuaV5fN3l+2MA5ulXlT4Y1
hcJKEyRhIqaIHtuaUOlmQzOLn39bvnmQAjJHCQdSuB/WxtCDQLN8NE22t68eUyj4
AKTGSRJ0EL5vnPDaYM0cdhG395InZFO+JJlOZ1+u3HpGPW1gx7bzqtJkZg2MTjn/
K13eKV8pE+M8XTA3lgvZdTXpJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI23XzLJ
EPSECeMYqnc1OmdNKAuHMB8GA1UdIwQYMBaAFH5y2AGzinKrSwN24SyVQSSq5Dxt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzUzRi9CREE1N0ZGRUJD
MTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2NxdExBM2JoTEpWQkpLcmtQ
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuTFlBYk9LY3F0TEEzYmhMSlZCSktya1BHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzUzRi9CREE1N0ZGRUJDMTYxMUVBOUYyQjc0MTJDNEY5QUUwMi9mbkxZQWJPS2Nx
dExBM2JoTEpWQkpLcmtQRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlOrBrzjsrllQ3hawza8b5nTdpv1O+uIiTSyuo5138Kp34omLkm4AKBkK/Ei5
rDnQCrcGrHtg9ONzM4eFsIghSPEssS8cNur8TPE7douoqvILzUovGJk38JQPCv72
440C8QRfiniYoBWP4IvM7wrFJPG2AvWnQp2tLZ0IoYeLLbKqvNkuUzKbT8vLMPTC
8PTd3+xQr6/vVjkTIN2Yy/8y1olRfvu+Gmmat/NjMLi3Q7ZB4KE6/qqz4YRYOao8
1/KIQA3B3MSt3uBN6QVUyzpkqMM3TpD1PPG40aioXTO52T9uP1oXHS0OxM6K02Af
uCqXVT3PduGHgnQc2H5Z8Uiwxg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:48:34 2026 by rpki-client