Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
File:                     99M_RV7avj1Mtj-5LkygdhGcNKY.mft (raw, json)
Hash identifier:          52Q0LpER/ojpFTH+zi2Q6LzgaHhKs553yeuKAT76yx4=
Subject key identifier:   33:23:74:DB:B8:07:8C:56:B4:8E:2A:A4:93:FB:1F:36:B0:6E:06:52
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Certificate issuer:       /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial:       1609
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
Manifest number:          15D2
Signing time:             Mon 12 Oct 2026 16:48:01 +0000
Manifest this update:     Mon 12 Oct 2026 16:48:00 +0000
Manifest next update:     Mon 19 Oct 2026 16:48:00 +0000
Files and hashes:         1: 99M_RV7avj1Mtj-5LkygdhGcNKY.crl (hash: hjd5Ted1z+L4QDSp6Kjerzcewz4LmDgA2ZK7FbDjmqA=)
                          2: 74D88B52FF6511EB95D39078C4F9AE02.roa (hash: hY+hfH2to8w2+rBKpzglwyJBvhoTK5E5rDv6Eyzqmto=)
                          3: A2DA1898656911E889701022C4F9AE02.roa (hash: 0ZKNIv6r+JcKqzjXGBvHUDmKD/rrsqHtKhBJCcXrcu8=)
                          4: 026DBC9A4A2711E9A05D2324C4F9AE02.roa (hash: 41jM3oI8HmqkUU7U0TXx3cqvf03cMl5oRBiU0uGu/xg=)
                          5: 2A3E123A5A5711E8B29BFE6AC4F9AE02.roa (hash: IB5M2B78izwkb2/G4273KZY/mf8AXpCS0Hp75Vkk3Fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
                          rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5641 (0x1609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150845, serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
        Validity
            Not Before: Oct 12 16:48:00 2026 GMT
            Not After : Oct 19 16:48:00 2026 GMT
        Subject: CN=6acd0f41-a230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:5b:e3:45:0b:fb:73:a3:5f:84:67:2a:ea:
                    61:b9:01:c3:ae:5f:9b:ba:26:57:96:a4:d5:6c:2a:
                    97:6b:9a:77:a0:26:8a:50:4a:22:ac:c3:b2:af:8f:
                    ce:70:80:f4:17:ea:19:66:aa:41:3f:7d:ab:90:83:
                    73:ea:10:e4:a5:92:9b:db:4b:9b:9b:5e:b7:5b:17:
                    07:38:14:df:de:23:73:c5:d0:87:2d:24:64:b7:b5:
                    7a:59:82:de:91:e6:51:1b:16:f2:62:9b:dd:61:c0:
                    2c:e4:69:38:ff:95:fe:62:55:2b:d4:17:79:b4:30:
                    e0:cc:09:61:1b:87:48:be:c5:e5:df:86:e7:57:13:
                    08:07:63:17:2b:bc:8f:25:8e:05:5a:1c:11:39:15:
                    7f:95:15:b5:9b:67:6f:93:b1:e3:51:52:e8:ef:d7:
                    a4:6e:99:a6:37:17:37:b7:a6:40:bb:92:ff:38:96:
                    fe:fb:0c:2b:fa:58:61:c7:1e:5a:c1:4f:9c:bb:f7:
                    6b:e9:4a:e8:dd:60:44:11:a7:01:4c:30:9d:34:2c:
                    70:94:fd:35:ac:0e:9a:d0:66:31:53:09:5d:8f:2b:
                    c2:d9:42:82:0a:b9:fe:4d:9a:45:54:21:80:e1:7f:
                    42:f8:9c:8d:65:48:67:ab:96:9c:44:35:80:ab:47:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:23:74:DB:B8:07:8C:56:B4:8E:2A:A4:93:FB:1F:36:B0:6E:06:52
            X509v3 Authority Key Identifier:
                keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:93:c2:cb:91:f5:89:86:1d:42:6a:5d:25:d5:a0:6e:f5:5c:
         27:dd:37:41:44:7b:4d:0f:a8:40:c1:19:73:de:04:75:98:a8:
         85:dc:3f:3f:34:e4:04:7e:83:2e:d1:09:16:07:f9:e1:2e:e0:
         a3:19:e9:13:4e:c0:97:5f:b1:91:2d:ba:63:6b:4f:f5:eb:5e:
         c4:5e:6d:a0:47:56:3f:65:17:86:be:f7:85:49:e9:47:98:44:
         27:f2:b9:15:99:b2:57:11:b3:34:47:8e:a5:f8:ba:0c:34:86:
         8e:23:86:2b:fd:bc:e6:1d:dd:c2:7a:fe:54:98:50:51:72:22:
         aa:10:32:56:1b:d7:85:87:df:00:9b:3c:d8:b8:3a:5a:17:b1:
         e5:cb:1a:50:cb:6e:b9:34:53:20:21:71:3a:da:f6:70:48:a0:
         72:51:35:81:dd:09:99:92:35:bb:6b:d5:0d:5f:ff:0b:be:77:
         ba:ff:de:13:51:0d:c9:4e:97:72:77:97:41:ac:0b:d3:8b:2f:
         40:30:af:ee:af:c9:8e:59:3e:77:89:28:4a:de:a8:c8:37:bc:
         51:66:8e:17:6a:fe:0c:9d:45:c3:d2:18:ae:8f:c0:90:48:1e:
         92:23:1e:ee:59:25:b2:de:97:40:34:63:25:d3:16:80:af:ea:
         7a:32:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:15:52 2026 by rpki-client