Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
File:                     p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json)
Hash identifier:          /Cm0ZGnfk2HYg4hzh//et3HCUPzSj8emaozHZFC5f8E=
Subject key identifier:   BB:51:46:91:7F:76:FB:74:7C:7F:53:F3:E3:16:46:F2:B4:FE:8B:22
Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
Certificate issuer:       /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Certificate serial:       0F35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
Manifest number:          0F2A
Signing time:             Wed 14 Oct 2026 17:41:44 +0000
Manifest this update:     Wed 14 Oct 2026 17:41:44 +0000
Manifest next update:     Wed 21 Oct 2026 17:41:44 +0000
Files and hashes:         1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: jOdsuTdRChI+z5BJdIUw15m8i2jzYHMDo+hQIXj7Ql4=)
                          2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: pAr8fA1QmuWGXPOAkIJK91YR32FAAgcJ10JhZIGFapc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
                          rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 17:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3893 (0xf35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
        Validity
            Not Before: Oct 14 17:41:44 2026 GMT
            Not After : Oct 21 17:41:44 2026 GMT
        Subject: CN=6acfbed8-909e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:93:60:c0:1c:b4:1a:1e:16:2f:70:43:80:
                    c8:6a:49:80:49:5e:6f:ed:a6:58:31:77:90:ba:43:
                    0e:e1:9d:a4:a8:2f:9c:2a:16:08:b4:b6:37:91:f1:
                    64:70:ac:91:47:e2:2e:bd:33:f2:ae:07:3b:0c:3e:
                    7e:26:14:8a:0c:07:5d:4c:48:c0:df:af:77:95:d2:
                    d2:ff:fe:bf:a8:0b:4c:96:d0:4a:dc:ca:9f:b3:9f:
                    bc:d2:98:19:80:44:00:6f:22:a8:f3:72:d1:bb:ed:
                    a9:c5:26:51:27:48:18:39:1a:81:f5:89:3c:22:a0:
                    c5:8c:93:cc:7b:e7:13:3f:57:05:ac:75:5e:21:59:
                    37:2d:f3:80:f1:31:30:15:55:99:99:a1:c3:cb:e1:
                    91:e9:f5:f0:14:cd:27:9a:a7:a0:e6:a5:45:14:91:
                    2e:ca:e9:6c:e5:19:de:c3:21:9c:ee:80:dd:45:f1:
                    da:0d:87:be:3d:8d:31:5a:f5:d6:95:de:39:57:9c:
                    6c:09:2f:06:b5:13:67:55:1e:de:2e:6d:eb:ec:7e:
                    e4:f1:0b:c3:56:02:dd:9c:24:bc:52:c3:88:bf:c3:
                    d3:f8:cf:47:a0:8f:e3:ed:d4:31:90:ad:e6:ad:9a:
                    8b:20:30:61:9a:02:6a:9c:ed:57:17:ad:3b:ba:b2:
                    a6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:51:46:91:7F:76:FB:74:7C:7F:53:F3:E3:16:46:F2:B4:FE:8B:22
            X509v3 Authority Key Identifier:
                keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:9f:27:57:d0:85:96:96:73:48:c6:a7:b6:5e:79:e2:cf:a5:
         05:cc:be:50:1d:1a:33:d7:e9:32:94:ee:50:72:67:82:2e:55:
         47:e8:42:7b:5d:dc:01:1b:2e:ee:37:42:15:59:d0:ef:97:23:
         6f:82:77:e8:b4:85:58:63:02:d6:70:ed:73:cf:22:5c:a5:0c:
         71:00:46:84:9e:a9:bb:ca:9e:71:c2:a6:38:d6:65:e4:36:b9:
         7f:7a:1b:c1:f2:34:00:68:7a:32:0b:bd:52:cc:0b:6d:d9:b4:
         5d:62:2d:33:7a:25:1b:16:ca:af:f0:df:63:a2:f1:b4:a7:f8:
         04:4c:da:c0:a5:18:fc:ef:e8:6e:6c:3e:71:50:af:64:67:7d:
         7f:99:94:ae:a1:25:03:a2:1c:bd:4f:85:1a:cb:c6:a0:5b:65:
         ff:f3:50:ba:34:30:c3:25:26:b5:3d:7a:7a:94:78:1d:06:9f:
         a4:78:f9:f4:a8:39:20:76:1c:8f:b9:c1:f2:85:2f:e4:13:2a:
         18:35:3b:0d:d2:9e:3f:32:cc:dd:b6:f3:cc:4c:a1:e0:a8:25:
         d2:ea:90:3d:e6:58:50:5e:99:84:ce:92:50:f8:99:a0:cb:e3:
         1f:bf:3d:e6:3a:54:08:92:79:dc:d7:80:7f:a5:08:73:24:26:
         1d:cf:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:22 2026 by rpki-client