Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
File:                     5qAfnnpf4L1tom3Ak9swMffqvPU.mft (raw, json)
Hash identifier:          maziBOTxuZEU5iQF0n0dYgC/q26T6f+xFbuZismOUiw=
Subject key identifier:   B2:FE:5E:2F:F5:76:A0:23:BA:D9:E2:81:1C:F3:BE:9E:7C:EC:A6:2B
Authority key identifier: E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5
Certificate issuer:       /CN=A915A6E1/serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
Manifest number:          86
Signing time:             Tue 13 Oct 2026 08:22:34 +0000
Manifest this update:     Tue 13 Oct 2026 08:22:33 +0000
Manifest next update:     Tue 20 Oct 2026 08:22:33 +0000
Files and hashes:         1: 5qAfnnpf4L1tom3Ak9swMffqvPU.crl (hash: JXRFW8XWl/WLOmedypVYal38DKG3PVDLjYklGj2+CAI=)
                          2: 5A1CA5FE001511F1B173DED1406F56BC.roa (hash: Q9xRalMlZSgL2EIEYXzUsDgkkdzjYwQVHna8NWAirhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl
                          rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 08:22:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A6E1, serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
        Validity
            Not Before: Oct 13 08:22:33 2026 GMT
            Not After : Oct 20 08:22:33 2026 GMT
        Subject: CN=6acdea49-7d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:78:89:9c:a0:fb:57:9e:73:d5:99:f5:e4:
                    f4:c2:70:3e:49:f0:47:09:c0:87:71:45:15:d9:cc:
                    05:fd:f0:c6:76:70:e9:8f:36:47:b6:b4:e0:b5:41:
                    bb:55:a6:33:27:a7:f3:e1:57:e7:a9:99:3f:31:c8:
                    ad:aa:82:a7:f8:55:0d:a5:5c:26:c7:a9:fe:ea:42:
                    43:da:c8:b3:57:6d:9d:c2:2e:80:f2:21:a5:ce:44:
                    db:7b:08:35:e5:a2:d6:46:ae:79:2f:98:d9:82:28:
                    45:06:db:11:8c:4f:b3:7e:56:a4:4d:e8:25:c9:7c:
                    34:87:c5:88:a0:5e:17:10:a2:d2:53:5e:92:8c:03:
                    65:03:c5:cc:55:94:38:4f:3b:06:e1:e1:36:79:98:
                    f4:17:e3:a9:9b:f6:c2:93:0e:5c:9b:bf:d8:5b:1a:
                    11:92:7e:54:cc:68:76:f5:64:2a:75:33:3a:b1:5f:
                    a9:fe:a4:e9:e4:52:b5:00:b1:a7:c4:93:f8:bc:78:
                    a8:ed:5a:02:35:33:04:2c:27:c8:99:91:7b:11:c6:
                    3c:ed:01:65:8b:f5:89:89:c1:51:04:2a:33:96:7c:
                    df:ba:22:ac:c0:88:be:71:84:4c:84:60:4d:2d:98:
                    d5:bf:f6:15:d3:cb:cb:f9:52:29:bd:e3:29:8d:d5:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FE:5E:2F:F5:76:A0:23:BA:D9:E2:81:1C:F3:BE:9E:7C:EC:A6:2B
            X509v3 Authority Key Identifier:
                keyid:E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:da:5f:a5:8a:45:1a:9d:8c:d8:9b:dc:12:8f:72:c2:47:cd:
         c8:36:a1:d5:9a:78:76:31:db:83:1a:21:66:df:9b:f1:41:02:
         df:3e:73:f2:fb:58:01:8c:81:cd:19:16:02:31:b8:6a:b6:8b:
         c2:53:b8:31:a7:3a:dc:77:98:80:ca:cb:2d:74:95:12:ae:2b:
         23:84:dd:37:e5:c9:7f:a3:a1:eb:b9:7a:49:5c:1e:a1:7e:34:
         c8:2e:a5:a4:c6:aa:a9:a9:a8:46:d9:fc:4c:a4:6f:0d:05:be:
         e0:80:b1:7f:f0:58:90:06:fa:28:c8:41:38:88:d7:13:10:76:
         35:4e:c7:b5:da:2d:6a:5e:d3:d4:df:47:a4:c9:d3:b7:5e:c2:
         80:23:be:73:16:6d:8b:e8:07:66:6f:76:95:98:e1:8d:df:2b:
         26:0d:bd:b9:68:8b:ac:8c:71:97:03:08:bd:fb:7e:bc:85:b2:
         0f:54:eb:94:38:78:c4:de:76:51:d7:aa:c1:d0:ad:bf:83:a1:
         3c:69:58:d2:e9:26:95:d3:75:01:d4:0e:ba:a0:d8:ab:ff:f2:
         21:da:71:13:65:2c:90:c8:e5:82:33:fe:8c:4d:32:19:ba:ea:
         7e:bd:ea:bb:73:09:ed:2e:35:29:49:78:81:97:69:9b:3c:f2:
         68:d7:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:48:44 2026 by rpki-client