Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
File:                     iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json)
Hash identifier:          a2pXaeXMxuVIBZco9MYrvWj4DytpMJaXTqrmPFMiE4s=
Subject key identifier:   23:96:B9:7E:87:AF:D3:0A:40:5F:4E:FA:C3:9F:19:AB:1A:42:FB:20
Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93
Certificate issuer:       /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
Manifest number:          0221
Signing time:             Thu 15 Oct 2026 03:41:13 +0000
Manifest this update:     Thu 15 Oct 2026 03:41:13 +0000
Manifest next update:     Thu 22 Oct 2026 03:41:13 +0000
Files and hashes:         1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: lozAT+K5qTa7WtSt+vQEP7ZAzCNwGwhPQdKe5e7YPj4=)
                          2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: Kopjf9ZoJzRg8VCg2Qj9EUxQF2CjA+68cqIxaYzasxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl
                          rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 03:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993
        Validity
            Not Before: Oct 15 03:41:13 2026 GMT
            Not After : Oct 22 03:41:13 2026 GMT
        Subject: CN=6ad04b59-7996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c4:2d:fa:09:fb:83:2f:ed:e5:26:5b:19:ad:
                    ef:b2:76:91:f7:45:9e:80:ce:b5:3f:6c:ae:46:9f:
                    cf:43:f5:2d:35:5c:b3:1f:48:9d:c0:0c:f8:80:c8:
                    86:ed:f0:86:e7:40:2f:22:d5:46:b6:e4:5d:13:04:
                    ea:b4:1c:68:9c:68:ce:88:77:ca:93:01:90:29:09:
                    15:cb:46:df:fc:11:d8:a2:5d:51:f5:71:2b:31:47:
                    e0:1c:85:c0:ff:e4:7b:2b:d2:4b:39:a2:17:62:4e:
                    59:99:96:c9:03:27:b6:3f:bd:23:45:fc:8b:4d:79:
                    75:fe:2b:3d:e1:2c:73:f1:8b:26:ce:f8:57:3a:ad:
                    68:45:0b:ce:3f:63:85:22:40:c6:ba:6b:20:75:9d:
                    db:18:7a:b9:34:21:d1:58:34:ae:2c:fb:b4:2a:00:
                    4f:9c:88:63:88:c8:af:5a:5e:66:8f:56:4a:5c:5a:
                    e3:6e:9a:15:13:4a:1b:91:08:93:8a:30:1b:ad:ae:
                    45:4a:6a:22:05:a4:cb:1b:c1:3b:d1:82:f8:d7:be:
                    0a:97:17:9c:7f:54:04:f1:ef:11:bd:d9:48:43:58:
                    f3:2d:f4:57:08:b5:7d:52:5f:33:20:f6:b4:cb:76:
                    d6:27:a1:6b:35:42:4b:48:57:79:b0:57:fa:cb:46:
                    56:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:96:B9:7E:87:AF:D3:0A:40:5F:4E:FA:C3:9F:19:AB:1A:42:FB:20
            X509v3 Authority Key Identifier:
                keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:23:ed:a6:34:3a:36:81:31:53:fd:69:f9:f2:6b:e0:06:3e:
         12:a0:5a:b9:2d:23:35:43:ca:84:f8:04:44:c3:91:39:e1:90:
         65:22:f0:eb:8a:a5:31:d9:db:6d:49:bd:9c:3f:7a:13:f0:e9:
         c9:24:c8:28:be:0d:b6:a5:4b:1d:9e:25:52:be:81:68:2a:76:
         13:aa:05:59:ff:8a:ab:27:65:5d:11:49:fa:d6:21:2b:e3:f3:
         6b:64:90:1a:be:c3:b8:d9:a9:47:f5:e9:92:ba:f9:f4:f8:a0:
         44:50:46:50:91:63:ad:74:28:d7:26:0b:8d:b3:3e:45:5b:8b:
         36:4f:a6:47:87:9b:01:b6:77:08:2b:a1:3f:26:2e:fa:78:25:
         ed:9f:d8:67:4b:39:93:97:95:88:97:7f:f7:cd:88:87:4b:a1:
         74:83:8f:de:81:44:70:b9:d5:34:42:9b:d8:f4:5c:29:8c:72:
         9b:b5:c4:d2:1f:ec:07:d8:b8:3e:f8:9a:d9:64:48:51:8c:bc:
         cd:9c:6d:95:80:7f:3b:0b:be:5a:76:70:a4:b3:14:e4:e0:29:
         c8:79:a7:0c:45:41:76:fc:74:ce:3b:ac:c4:6c:d9:3e:04:d8:
         f3:41:11:f2:0a:25:ce:8d:b3:1e:35:be:3d:88:09:30:d3:4c:
         61:67:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:02 2026 by rpki-client