Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
File:                     1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json)
Hash identifier:          upbGTxnueuJLVGoa4x2Nd2RWyM5SMBQg6weUwcCqncg=
Subject key identifier:   4A:E4:B0:82:8E:BB:59:58:F4:1C:DE:E1:90:E5:77:09:A6:36:C5:DB
Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37
Certificate issuer:       /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
Certificate serial:       0BC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
Manifest number:          0BBB
Signing time:             Thu 24 Sep 2026 18:59:20 +0000
Manifest this update:     Thu 24 Sep 2026 18:59:20 +0000
Manifest next update:     Thu 01 Oct 2026 18:59:20 +0000
Files and hashes:         1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: Z5JkAT2Xe27hCxcAv35prtA340q2tKnR32EQ1fJsa3c=)
                          2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: HwZqMM9CCAKrNJ/ljMcsv3VZ0uDCep1MPwtiH6UgXOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl
                          rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3013 (0xbc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37
        Validity
            Not Before: Sep 24 18:59:20 2026 GMT
            Not After : Oct  1 18:59:20 2026 GMT
        Subject: CN=6ab57308-b4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:9f:5a:47:4b:46:06:19:c5:bc:d0:7b:51:
                    eb:89:ad:3b:5f:0b:6a:e0:d7:ea:4e:a6:bd:2b:96:
                    3f:a0:67:1b:87:ed:eb:02:9f:74:7d:ed:fb:63:ed:
                    5c:96:3f:03:2c:3e:c2:2f:44:a1:7e:d6:d8:22:32:
                    b1:29:34:fe:1c:32:6e:1d:6b:4d:33:d6:60:b2:d3:
                    54:9a:71:bb:5e:20:f0:47:b1:36:d5:02:5a:c4:08:
                    56:79:84:00:b6:d1:d2:41:93:79:a7:1f:a7:76:c3:
                    06:c1:5c:af:e8:de:05:96:7c:97:90:9e:4a:0a:a4:
                    43:5d:75:42:2f:28:2a:0a:b9:86:1e:ac:98:27:c4:
                    12:14:6c:eb:70:9e:67:01:9e:a5:06:b2:1a:cc:c5:
                    f2:68:00:55:ae:1d:16:b3:b2:11:f2:ff:41:5d:76:
                    6b:72:d5:ff:0c:09:cb:07:ed:be:ea:00:53:98:64:
                    8a:63:bf:c2:8f:85:92:b5:b0:0c:df:54:29:67:e3:
                    1b:7f:89:0c:9b:2a:e0:cb:4a:b0:bc:8c:58:18:f5:
                    0d:a7:22:73:ef:14:e0:43:dc:7c:64:4a:21:39:a9:
                    98:1e:d2:1a:96:4d:92:2c:97:ca:b9:a3:8f:e0:98:
                    81:c2:c4:6e:19:d5:6d:c7:af:ce:1a:1e:4e:65:1b:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E4:B0:82:8E:BB:59:58:F4:1C:DE:E1:90:E5:77:09:A6:36:C5:DB
            X509v3 Authority Key Identifier:
                keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:39:81:a7:61:e2:21:af:73:32:b2:7a:65:cf:ff:81:2a:b5:
         15:a7:54:0b:70:5e:f6:d9:ed:c0:96:b3:22:c3:78:89:1e:b1:
         80:1e:76:06:3c:e4:2b:61:c5:ae:ae:0b:0e:75:f6:e4:ff:1e:
         84:9d:13:6a:d0:ae:61:a6:8f:42:f7:49:d4:36:73:e7:d0:52:
         75:3a:dc:e7:74:9e:ce:a3:56:55:24:2b:c8:c3:d9:98:0c:97:
         8f:14:8d:fb:16:11:89:d4:f2:be:1a:9b:39:ca:ed:90:36:37:
         9f:7b:d4:85:50:b8:78:6e:89:ea:80:7a:2f:09:16:6e:c8:ea:
         5b:36:3c:cc:4a:9b:96:c0:a6:d4:09:e8:97:d6:20:6e:00:64:
         dc:9a:cb:84:57:b1:c1:6c:79:67:70:f8:29:c5:4e:7d:c1:57:
         75:25:c1:96:8d:f6:1c:7e:ab:3f:54:f8:11:90:35:35:56:95:
         c0:68:ab:d0:78:e0:aa:b7:02:22:10:a9:8d:df:20:ba:26:1e:
         84:c0:68:16:d3:ca:73:3c:e4:55:41:c3:f4:ab:a9:93:a3:cf:
         e8:2a:4b:73:92:1a:b2:3f:88:b4:ce:cf:df:0d:f6:ed:02:39:
         25:c3:b7:f9:59:9c:58:07:81:82:d4:2f:8c:a5:c1:47:75:fd:
         7b:7c:ce:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM0M0IxMTAvBgNVBAUTKEQ2NjAxQTgyMDA4MEM3OTBGMEE1MUE2QzM3NjVGNUI0
QjBEMDFCMzcwHhcNMjYwOTI0MTg1OTIwWhcNMjYxMDAxMTg1OTIwWjAYMRYwFAYD
VQQDEw02YWI1NzMwOC1iNGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsW6fWkdLRgYZxbzQe1Hria07Xwtq4NfqTqa9K5Y/oGcbh+3rAp90fe37Y+1c
lj8DLD7CL0ShftbYIjKxKTT+HDJuHWtNM9ZgstNUmnG7XiDwR7E21QJaxAhWeYQA
ttHSQZN5px+ndsMGwVyv6N4FlnyXkJ5KCqRDXXVCLygqCrmGHqyYJ8QSFGzrcJ5n
AZ6lBrIazMXyaABVrh0Ws7IR8v9BXXZrctX/DAnLB+2+6gBTmGSKY7/Cj4WStbAM
31QpZ+Mbf4kMmyrgy0qwvIxYGPUNpyJz7xTgQ9x8ZEohOamYHtIalk2SLJfKuaOP
4JiBwsRuGdVtx6/OGh5OZRvXDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFErksIKO
u1lY9Bze4ZDldwmmNsXbMB8GA1UdIwQYMBaAFNZgGoIAgMeQ8KUabDdl9bSw0Bs3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQzQi82QTAzODNFNjUw
QTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1RHdwUnBzTjJYMXRMRFFH
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFtQWFnZ0NBeDVEd3BScHNOMlgxdExEUUd6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzQzQi82QTAzODNFNjUwQTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1
RHdwUnBzTjJYMXRMRFFHemMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADTmBp2HiIa9zMrJ6Zc//gSq1FadUC3Be9tntwJazIsN4iR6xgB52BjzkK2HF
rq4LDnX25P8ehJ0TatCuYaaPQvdJ1DZz59BSdTrc53SezqNWVSQryMPZmAyXjxSN
+xYRidTyvhqbOcrtkDY3n3vUhVC4eG6J6oB6LwkWbsjqWzY8zEqblsCm1Anol9Yg
bgBk3JrLhFexwWx5Z3D4KcVOfcFXdSXBlo32HH6rP1T4EZA1NVaVwGir0HjgqrcC
IhCpjd8guiYehMBoFtPKczzkVUHD9Kupk6PP6CpLc5Iasj+ItM7P3w327QI5JcO3
+VmcWAeBgtQvjKXBR3X9e3zOnQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:43:20 2026 by rpki-client