Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
File:                     jWEfLNc3lK-AHBv2nYhICROAtKU.mft (raw, json)
Hash identifier:          ZbHjsSgtSK794sOBcwfOctoZBusCB/I+euZWW5LEvYE=
Subject key identifier:   AF:66:E2:24:1F:96:02:2E:71:1F:18:E4:1C:CE:24:9B:D1:D4:48:0A
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
Manifest number:          0170
Signing time:             Thu 05 Nov 2026 05:56:18 +0000
Manifest this update:     Thu 05 Nov 2026 05:56:17 +0000
Manifest next update:     Thu 12 Nov 2026 05:56:17 +0000
Files and hashes:         1: jWEfLNc3lK-AHBv2nYhICROAtKU.crl (hash: fdR2A600ne2fNHscFFxoz0/COOQ2QtrESiOjtaZg8/w=)
                          2: 5090FDECFF2E11F099E36B6D89EE528E.roa (hash: /F1WAshHRA8ziIeFP9f2EN/qfvzetQs/IqfVIK/xJug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 05:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Nov  5 05:56:17 2026 GMT
            Not After : Nov 12 05:56:17 2026 GMT
        Subject: CN=6aec1a81-cf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:97:cd:af:7e:26:02:f7:9d:3b:f7:a7:16:36:
                    76:bd:78:85:7d:0c:af:76:ac:9b:6d:c1:35:02:2d:
                    5e:b1:76:d9:ae:17:b2:fc:69:40:e3:cc:35:74:11:
                    2c:0d:d4:da:30:3d:84:0b:40:df:bf:39:c7:d0:3d:
                    72:68:f6:17:b4:bc:ff:32:0f:98:55:2a:b7:d4:f4:
                    1f:bc:b6:0f:ec:a6:12:59:79:1c:31:a0:80:a6:6e:
                    fd:1b:73:b5:fc:53:bd:b7:3f:57:32:27:d9:7e:91:
                    82:1e:b9:19:43:11:24:9c:15:59:a1:11:c8:2d:50:
                    c8:e0:f4:36:64:ea:ec:ae:35:b1:98:ec:69:5d:be:
                    50:85:5b:0f:e8:91:de:f3:fb:bf:2d:49:0d:08:0b:
                    dd:12:b0:f1:46:36:ef:b4:e3:d3:1f:11:b4:1c:26:
                    3e:f3:5c:cb:4a:f5:38:89:23:fc:c8:62:d0:b5:6d:
                    2a:5d:e7:c5:ce:47:ca:40:bc:bd:cd:f8:5e:7d:ae:
                    39:c6:a8:95:2f:58:05:4f:fb:2f:de:74:db:65:05:
                    ed:50:d4:1b:ee:73:82:44:3c:01:c6:ae:c6:9a:c2:
                    33:ed:42:6d:59:fd:49:0c:0a:fa:30:47:74:44:24:
                    39:97:a3:2a:8d:a2:65:58:16:5d:df:47:5a:38:fa:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:66:E2:24:1F:96:02:2E:71:1F:18:E4:1C:CE:24:9B:D1:D4:48:0A
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:74:1d:ce:3e:37:56:b8:26:27:99:bd:31:68:10:d0:fe:
         4f:70:87:34:ef:39:4d:a9:be:e7:87:18:38:ad:82:41:af:10:
         6d:bf:fb:e7:c2:e8:b7:9e:32:b9:2f:bb:27:45:2c:1b:65:4a:
         85:6b:4d:ce:5a:0e:49:72:7e:5d:75:8b:2a:c5:fb:6f:1b:de:
         d2:cf:c3:ad:ac:ab:ce:22:93:28:80:db:3e:bc:71:dc:1e:d0:
         e3:bc:ba:ef:af:41:72:e6:41:11:62:37:e7:3b:c1:07:34:a3:
         87:75:6f:d1:16:f4:2f:83:26:36:08:e4:c1:df:5c:7a:76:af:
         78:d8:6c:01:f5:cb:a6:fa:3f:d3:53:f6:0f:83:c6:c3:c6:55:
         5e:4b:0e:45:78:65:8b:ef:09:bd:ee:f4:e8:dc:c9:3a:7c:9c:
         29:53:f8:70:17:ab:da:72:d7:38:ab:07:fd:b6:a8:1f:e7:11:
         d9:cf:f9:ca:f5:d1:cd:57:48:dd:1e:fa:27:85:82:76:1c:3b:
         25:fe:0e:75:a6:b2:70:2d:4e:92:e5:01:6a:cd:7d:9e:c9:31:
         c7:c5:aa:b8:79:9c:2c:bd:f2:c5:2e:16:f1:b3:34:c4:e2:85:
         27:55:42:3a:30:b7:d2:4a:31:6d:9b:aa:63:86:45:87:01:33:
         c0:df:7c:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZGMTkxMTAvBgNVBAUTKDhENjExRjJDRDczNzk0QUY4MDFDMUJGNjlEODg0ODA5
MTM4MEI0QTUwHhcNMjYxMTA1MDU1NjE3WhcNMjYxMTEyMDU1NjE3WjAYMRYwFAYD
VQQDEw02YWVjMWE4MS1jZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1pfNr34mAvedO/enFjZ2vXiFfQyvdqybbcE1Ai1esXbZrhey/GlA48w1dBEs
DdTaMD2EC0DfvznH0D1yaPYXtLz/Mg+YVSq31PQfvLYP7KYSWXkcMaCApm79G3O1
/FO9tz9XMifZfpGCHrkZQxEknBVZoRHILVDI4PQ2ZOrsrjWxmOxpXb5QhVsP6JHe
8/u/LUkNCAvdErDxRjbvtOPTHxG0HCY+81zLSvU4iSP8yGLQtW0qXefFzkfKQLy9
zfhefa45xqiVL1gFT/sv3nTbZQXtUNQb7nOCRDwBxq7GmsIz7UJtWf1JDAr6MEd0
RCQ5l6MqjaJlWBZd30daOPqHeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9m4iQf
lgIucR8Y5BzOJJvR1EgKMB8GA1UdIwQYMBaAFI1hHyzXN5SvgBwb9p2ISAkTgLSl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkYxOS9EMjNDQjBCQUMx
QUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xLLUFIQnYyblloSUNST0F0
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pXRWZMTmMzbEstQUhCdjJuWWhJQ1JPQXRLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RkYxOS9EMjNDQjBCQUMxQUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xL
LUFIQnYyblloSUNST0F0S1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ8V0Hc4+N1a4JieZvTFoEND+T3CHNO85Tam+54cYOK2CQa8Qbb/758Lot54y
uS+7J0UsG2VKhWtNzloOSXJ+XXWLKsX7bxve0s/DrayrziKTKIDbPrxx3B7Q47y6
769BcuZBEWI35zvBBzSjh3Vv0Rb0L4MmNgjkwd9cenaveNhsAfXLpvo/01P2D4PG
w8ZVXksORXhli+8Jve706NzJOnycKVP4cBer2nLXOKsH/baoH+cR2c/5yvXRzVdI
3R76J4WCdhw7Jf4OdaaycC1OkuUBas19nskxx8WquHmcLL3yxS4W8bM0xOKFJ1VC
OjC30koxbZuqY4ZFhwEzwN98Hw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:43:40 2026 by rpki-client